$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer File: 26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer (raw, json) Hash identifier: NboOVUwj+wp57Ate/b/sGYAsBVyMguREHfNnJtuYKm4= Subject key identifier: 26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7283E0936B1008DEB8A28B19F0F52099DDDD041D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft caRepository: rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Dec 2024 16:48:58 +0000 Certificate not after: Thu 04 Dec 2025 16:53:58 +0000 Subordinate resources: IP: 103.180.0.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:83:e0:93:6b:10:08:de:b8:a2:8b:19:f0:f5:20:99:dd:dd:04:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 5 16:48:58 2024 GMT Not After : Dec 4 16:53:58 2025 GMT Subject: CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b0:ee:38:d2:6b:cf:73:71:cf:9b:87:c6:fe: 4c:95:75:18:45:3b:f3:bd:0a:57:9a:0e:9e:77:23: 65:96:23:b5:60:0b:81:03:51:58:65:02:5a:2a:74: 0c:f7:a9:19:87:b1:03:46:92:36:e2:95:3e:e8:08: 2a:c8:ee:94:e8:1f:e6:c0:b3:54:da:3b:5e:2c:4c: cb:4c:d3:31:68:1f:51:79:c9:2f:96:a6:c5:b6:b0: ca:b9:07:ef:fb:1c:e5:48:c5:b9:ad:78:7b:a1:55: 7a:6e:74:68:30:2d:f6:00:65:11:51:5b:bb:99:d3: 1a:0a:cc:3c:a0:25:7a:49:3a:a9:eb:fa:56:6a:fc: f1:3f:0b:84:1f:6b:14:5c:11:a3:d4:5f:14:19:1b: 02:39:45:95:c5:7a:e2:a8:c6:2e:e3:2f:44:25:aa: 1c:a7:71:36:94:13:e4:f8:88:c5:10:7c:0a:e5:c4: e1:eb:8f:24:ae:18:43:b1:e6:26:44:c7:e7:91:05: 3d:47:04:b2:36:f3:b6:f0:d6:74:fc:ec:d8:23:bc: b6:66:b2:97:e1:ae:59:28:ea:fc:fa:95:1a:d2:d5: f2:fe:40:85:78:43:1d:70:03:27:80:f1:6b:d3:f6: 87:62:91:73:09:7e:a2:64:69:bc:6f:bd:cf:e9:80: 94:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.0.0/23 Signature Algorithm: sha256WithRSAEncryption 06:a6:fd:95:3e:91:e1:78:84:36:23:ee:43:6b:b7:6c:b4:39: 01:74:4d:46:31:ab:95:0c:39:8c:48:94:6c:68:32:ec:6a:8d: ae:a5:ad:57:d3:55:b4:e5:df:8c:ed:c7:04:2a:94:ca:35:34: 96:8b:1c:fb:5e:e9:72:a3:5d:3e:31:6b:9e:ff:30:eb:dc:77: fc:70:48:86:3a:f9:bc:df:64:ee:d8:68:fd:0f:72:bf:85:89: ce:0d:66:97:91:af:a5:37:7f:ef:ff:29:e0:38:4b:b2:2f:ea: 8c:d2:ea:c7:15:42:5a:95:77:0a:aa:c3:ec:29:60:62:98:6a: 75:ca:c4:be:57:90:c6:f7:71:bf:86:8c:53:0e:f1:43:4d:bd: 96:33:b3:c6:4b:6d:30:73:4e:76:89:36:d0:9b:3d:dc:64:0c: e7:a7:3a:84:28:01:96:0c:1a:b5:8e:ea:f6:a3:d4:f7:25:6a: 07:5c:02:45:1b:fc:ff:97:6f:c4:72:07:ae:af:14:83:ff:23: 14:ff:cb:c2:fe:cf:82:7e:34:1c:ff:f0:ce:be:89:d2:18:04: 1f:3e:9c:bd:61:76:01:c1:d0:3f:d6:87:84:01:54:6c:93:19: 55:c1:0e:c8:c8:83:23:96:10:b0:97:8a:76:19:db:24:a3:dc: d9:2d:99:1a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcoPgk2sQCN64oosZ8PUgmd3dBB0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIwNTE2NDg1OFoX DTI1MTIwNDE2NTM1OFowMzExMC8GA1UEAxMoMjZCMDQzMzFGM0RCQTcwQjY5NEYy RkZGMzcxQzg1RUUwMjNGQjcwRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqw7jjSa89zcc+bh8b+TJV1GEU7870KV5oOnncjZZYjtWALgQNRWGUCWip0 DPepGYexA0aSNuKVPugIKsjulOgf5sCzVNo7XixMy0zTMWgfUXnJL5amxbawyrkH 7/sc5UjFua14e6FVem50aDAt9gBlEVFbu5nTGgrMPKAlekk6qev6Vmr88T8LhB9r FFwRo9RfFBkbAjlFlcV64qjGLuMvRCWqHKdxNpQT5PiIxRB8CuXE4euPJK4YQ7Hm JkTH55EFPUcEsjbztvDWdPzs2CO8tmayl+GuWSjq/PqVGtLV8v5AhXhDHXADJ4Dx a9P2h2KRcwl+omRpvG+9z+mAlM0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCawQzHz26cLaU8v/zcche4CP7cPMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zYThhOWE4MS0wYTUyLTRhNTAtYjdmNi1hMzZmODZmM2QyYzcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhOGE5YTgx LTBhNTItNGE1MC1iN2Y2LWEzNmY4NmYzZDJjNy8wLzI2QjA0MzMxRjNEQkE3MEI2 OTRGMkZGRjM3MUM4NUVFMDIzRkI3MEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFntAAwDQYJKoZIhvcNAQELBQADggEBAAam/ZU+keF4hDYj7kNrt2y0OQF0TUYx q5UMOYxIlGxoMuxqja6lrVfTVbTl34ztxwQqlMo1NJaLHPte6XKjXT4xa57/MOvc d/xwSIY6+bzfZO7YaP0Pcr+Fic4NZpeRr6U3f+//KeA4S7Iv6ozS6scVQlqVdwqq w+wpYGKYanXKxL5XkMb3cb+GjFMO8UNNvZYzs8ZLbTBzTnaJNtCbPdxkDOenOoQo AZYMGrWO6vaj1PclagdcAkUb/P+Xb8RyB66vFIP/IxT/y8L+z4J+NBz/8M6+idIY BB8+nL1hdgHB0D/Wh4QBVGyTGVXBDsjIgyOWELCXinYZ2ySj3NktmRo= -----END CERTIFICATE-----Generated at Sat Apr 5 06:50:46 2025 by rpki-client