$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer File: 26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer (raw, json) Hash identifier: Gcyq/EfmuGog0FdssKoZ5kfx9Vb5ToLikT9Qe9Pu0K0= Subject key identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2DDEB5131335FD5EF3A007E197367C09AC3F4165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft caRepository: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 08 Dec 2023 11:03:50 +0000 Certificate not after: Fri 06 Dec 2024 11:08:50 +0000 Subordinate resources: IP: 103.164.150.0/23 IP: 2001:df7:7d80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:de:b5:13:13:35:fd:5e:f3:a0:07:e1:97:36:7c:09:ac:3f:41:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 8 11:03:50 2023 GMT Not After : Dec 6 11:08:50 2024 GMT Subject: CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:50:0e:29:a6:e1:94:f0:34:73:b9:66:62:cc: 3d:e4:69:0f:0c:fc:a5:01:48:2a:b2:63:2c:75:06: fa:8d:12:c2:fb:9d:4d:f7:d2:1b:03:7b:8b:c6:50: 53:a9:5c:94:45:7f:d5:2e:f0:68:ff:10:19:f5:8d: 1c:40:92:1a:f5:79:c0:0b:d9:18:5f:37:6b:94:7b: ad:96:38:08:29:6f:66:6b:94:dc:ee:9e:72:85:f2: c8:bc:64:95:83:64:b2:de:29:d9:8a:c5:94:6c:14: d6:66:f2:f8:ea:99:7c:49:6d:5f:f9:5f:56:cd:78: 34:93:c2:dd:9b:1d:84:54:94:d9:f0:89:c6:9b:90: 8b:e6:be:3f:65:6b:43:0e:41:b4:d3:e2:44:7a:b1: 3c:5a:3b:e7:4e:60:0c:63:3d:e5:b9:19:9e:f3:ab: ae:5e:fe:44:37:e4:20:fa:dc:82:4e:9a:a2:e6:43: 46:77:42:90:cf:15:be:40:80:26:50:54:e3:be:35: b2:43:c7:ca:ad:95:72:92:4f:06:1b:ec:50:93:a6: f8:44:f5:07:9a:b7:eb:f9:d7:6f:0c:01:c9:79:11: 65:bc:5f:5d:99:5d:e7:b4:59:14:6d:cc:f8:ad:3c: dd:33:98:58:49:32:8a:4c:43:6c:e2:70:b0:db:96: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.150.0/23 IPv6: 2001:df7:7d80::/48 Signature Algorithm: sha256WithRSAEncryption 08:6e:a3:02:1c:ff:20:64:43:1a:4e:1f:6b:f4:9a:4b:cb:3f: bc:35:e2:a3:0c:e2:ae:92:dc:c1:d4:55:27:b1:40:fd:d6:fe: bf:eb:f4:34:1c:18:e7:f1:bf:de:4b:46:b7:53:3e:5a:87:2d: 1a:ec:b3:7f:fa:2b:2d:bb:85:35:49:2a:f8:95:d8:c3:db:ab: 1f:38:b4:f4:db:5d:06:d1:53:ad:5c:f4:7e:19:be:6e:8b:52: 84:ea:f6:74:c1:b9:50:97:5b:07:69:83:10:f9:e8:a1:53:75: 35:0e:52:18:00:19:c0:76:79:7e:1a:f1:e8:99:b2:b7:bd:1b: 5f:fe:d0:3b:d8:2d:99:27:c5:ae:2f:21:8f:1a:79:b1:02:57: e9:c4:cc:75:ae:98:72:28:18:a0:f3:7a:1c:f9:4a:64:1b:69: b7:72:38:0e:f2:3f:62:8a:c8:5d:f2:7d:31:e4:85:f8:1d:a7: 05:6f:a5:b2:73:58:88:8d:d0:06:74:d1:35:1c:aa:3d:f2:c2: 9a:6f:de:1c:12:82:c2:22:9c:f7:26:cf:9c:7b:45:19:62:75: 42:40:35:d4:c4:2f:c7:38:09:f0:85:8e:34:94:1b:6a:f7:12: bb:87:90:e9:08:56:97:c3:ac:6f:29:2c:6a:a0:44:37:e5:15: 0e:b5:1c:0b -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIULd61ExM1/V7zoAfhlzZ8Caw/QWUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIwODExMDM1MFoX DTI0MTIwNjExMDg1MFowMzExMC8GA1UEAxMoMjZDMDEyNDc2OTNGNjhDRkRBMUY4 Q0I2Qjg4RjdBMzcwMEQzMDAwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPlQDimm4ZTwNHO5ZmLMPeRpDwz8pQFIKrJjLHUG+o0SwvudTffSGwN7i8ZQ U6lclEV/1S7waP8QGfWNHECSGvV5wAvZGF83a5R7rZY4CClvZmuU3O6ecoXyyLxk lYNkst4p2YrFlGwU1mby+OqZfEltX/lfVs14NJPC3ZsdhFSU2fCJxpuQi+a+P2Vr Qw5BtNPiRHqxPFo7505gDGM95bkZnvOrrl7+RDfkIPrcgk6aouZDRndCkM8VvkCA JlBU4741skPHyq2VcpJPBhvsUJOm+ET1B5q36/nXbwwByXkRZbxfXZld57RZFG3M +K083TOYWEkyikxDbOJwsNuWk80CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCbAEkdpP2jP2h+MtriPejcA0wABMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80MDFjNGQ2MS1kY2VmLTRhMjAtYmQ0Yy1hMjgyYTM3YWE2OWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMWM0ZDYx LWRjZWYtNGEyMC1iZDRjLWEyODJhMzdhYTY5ZS8wLzI2QzAxMjQ3NjkzRjY4Q0ZE QTFGOENCNkI4OEY3QTM3MDBEMzAwMDEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnpJYwDwQCAAIwCQMHACABDfd9gDANBgkqhkiG9w0BAQsFAAOCAQEACG6jAhz/ IGRDGk4fa/SaS8s/vDXiowzirpLcwdRVJ7FA/db+v+v0NBwY5/G/3ktGt1M+Woct Guyzf/orLbuFNUkq+JXYw9urHzi09NtdBtFTrVz0fhm+botShOr2dMG5UJdbB2mD EPnooVN1NQ5SGAAZwHZ5fhrx6Jmyt70bX/7QO9gtmSfFri8hjxp5sQJX6cTMda6Y cigYoPN6HPlKZBtpt3I4DvI/YorIXfJ9MeSF+B2nBW+lsnNYiI3QBnTRNRyqPfLC mm/eHBKCwiKc9ybPnHtFGWJ1QkA11MQvxzgJ8IWONJQbavcSu4eQ6QhWl8Osbyks aqBEN+UVDrUcCw== -----END CERTIFICATE-----Generated at Wed May 8 17:45:16 2024 by rpki-client on console-ams.rpki-client.org