$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer File: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer (raw, json) Hash identifier: BpbFKyBE6DJvwoeicey+l4SyAzSPoU3YYihknHXKwoE= Subject key identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1836AE87596E6BC4D0CCDCC5D597CA449E5E41D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft caRepository: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 19 Jun 2024 08:50:53 +0000 Certificate not after: Wed 18 Jun 2025 08:55:53 +0000 Subordinate resources: IP: 103.60.90.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:36:ae:87:59:6e:6b:c4:d0:cc:dc:c5:d5:97:ca:44:9e:5e:41:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 19 08:50:53 2024 GMT Not After : Jun 18 08:55:53 2025 GMT Subject: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:65:3c:d6:d1:5b:18:cb:2f:61:dc:70:ff:08: 73:2b:f3:04:58:af:6f:3f:d3:ec:73:26:b9:74:18: ab:f2:7a:e6:d2:65:d3:f2:ae:f3:3b:c5:97:b1:e0: 53:89:1d:e7:0b:bd:17:ac:5b:bb:c3:73:72:d7:7e: b0:d9:a2:b9:28:63:83:e2:98:f2:1f:90:a3:21:42: 68:83:97:29:30:96:30:87:af:44:32:63:5c:ad:c2: d7:3a:c7:eb:70:5c:5c:f0:04:e3:cf:8c:02:21:dd: 26:3d:17:66:fd:72:d3:09:8e:70:81:e9:5d:27:8f: 08:26:53:94:ca:8f:27:78:13:39:4e:b8:55:a6:af: 46:d7:da:cb:e0:b6:8b:36:2d:d5:ef:5b:66:ba:59: d7:a5:5b:d9:94:3b:3b:3d:ec:ea:13:c1:14:16:68: 9d:94:cb:14:25:b8:c2:f1:11:2b:14:d7:9f:0f:c7: 66:26:7f:39:e9:03:3c:11:5d:6e:59:35:97:20:0a: b5:c3:8b:54:cc:7d:a4:57:a7:a0:aa:35:3b:78:02: 1f:c7:88:c9:c5:e3:04:9a:85:37:86:50:d3:5b:f8: 50:8c:a9:5f:17:57:a4:12:8a:55:75:3d:dc:4b:94: c8:c3:92:c6:2c:42:d4:fd:91:7b:70:7c:5f:d3:11: 88:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.60.90.0/24 Signature Algorithm: sha256WithRSAEncryption 82:c9:5d:6c:fb:21:f6:f3:32:c2:5b:0b:c3:94:7a:38:17:cd: 56:27:37:3d:37:69:5a:27:8e:18:3e:ca:f4:0c:60:e7:26:87: 12:ba:b7:81:8d:77:28:85:c1:3c:de:19:33:ca:62:21:d4:45: a7:9e:ca:f9:e5:8e:a3:c9:10:84:78:9c:0c:11:3b:fa:d4:d5: ac:3c:4f:b5:07:4b:cf:0b:d4:72:29:47:9d:7a:40:17:ee:96: ad:e3:24:ee:4c:d4:4a:39:f4:20:b7:aa:ec:7e:0e:93:7e:ab: d8:2a:6f:b4:a0:34:45:5c:ca:4b:b9:6f:9f:d4:cb:8a:31:e6: 5c:80:52:f1:7e:7c:9a:3e:b6:c3:f1:a5:ef:63:5a:9e:24:27: df:2f:03:d4:fc:39:a2:1b:ae:90:9b:f6:4c:2c:b3:82:0c:33: fb:04:e1:41:dc:dd:a8:cd:33:f4:bc:f8:11:7b:fe:e3:a2:e6: a2:ca:53:db:aa:ac:9c:db:cf:25:16:65:06:71:0a:79:fb:de: a6:b1:c2:0a:fa:4c:b3:af:77:be:eb:d4:29:69:c4:ca:7a:c0: 9b:eb:e9:26:ad:2b:06:f6:ac:2d:ab:2b:eb:46:9e:ac:57:70: f1:54:d0:8d:48:c9:18:b4:46:e6:6b:49:37:61:6f:9e:89:f3: 87:72:30:9d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGDauh1lua8TQzNzF1ZfKRJ5eQdAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYxOTA4NTA1M1oX DTI1MDYxODA4NTU1M1owMzExMC8GA1UEAxMoMjU5NkFEOURBOTAzMzFGQjMzNkRD NTJDNUI3MkY5OTJEN0Q0OUQzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOllPNbRWxjLL2HccP8IcyvzBFivbz/T7HMmuXQYq/J65tJl0/Ku8zvFl7Hg U4kd5wu9F6xbu8Nzctd+sNmiuShjg+KY8h+QoyFCaIOXKTCWMIevRDJjXK3C1zrH 63BcXPAE48+MAiHdJj0XZv1y0wmOcIHpXSePCCZTlMqPJ3gTOU64VaavRtfay+C2 izYt1e9bZrpZ16Vb2ZQ7Oz3s6hPBFBZonZTLFCW4wvERKxTXnw/HZiZ/OekDPBFd blk1lyAKtcOLVMx9pFenoKo1O3gCH8eIycXjBJqFN4ZQ01v4UIypXxdXpBKKVXU9 3EuUyMOSxixC1P2Re3B8X9MRiKcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCWWrZ2pAzH7M23FLFty+ZLX1J03MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZjAzNmI3NC04YTVkLTQwYWEtOTYwYy05MjFlNjNhNzBhNGMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmMDM2Yjc0 LThhNWQtNDBhYS05NjBjLTkyMWU2M2E3MGE0Yy8wLzI1OTZBRDlEQTkwMzMxRkIz MzZEQzUyQzVCNzJGOTkyRDdENDlEMzcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnPFowDQYJKoZIhvcNAQELBQADggEBAILJXWz7IfbzMsJbC8OUejgXzVYnNz03 aVonjhg+yvQMYOcmhxK6t4GNdyiFwTzeGTPKYiHURaeeyvnljqPJEIR4nAwRO/rU 1aw8T7UHS88L1HIpR516QBfulq3jJO5M1Eo59CC3qux+DpN+q9gqb7SgNEVcyku5 b5/Uy4ox5lyAUvF+fJo+tsPxpe9jWp4kJ98vA9T8OaIbrpCb9kwss4IMM/sE4UHc 3ajNM/S8+BF7/uOi5qLKU9uqrJzbzyUWZQZxCnn73qaxwgr6TLOvd77r1ClpxMp6 wJvr6SatKwb2rC2rK+tGnqxXcPFU0I1IyRi0RuZrSTdhb56J84dyMJ0= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:14 2024 by rpki-client on console-fra.rpki-client.org