$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer File: 26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer (raw, json) Hash identifier: jMIAZP267RbDr+kJlv08Hpo9gel8hVQm0WbUHVnjw3c= Subject key identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 10CD38A07F2D57492806098D0671A7600BC9D7F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft caRepository: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 08 Nov 2024 13:52:25 +0000 Certificate not after: Fri 07 Nov 2025 13:57:25 +0000 Subordinate resources: IP: 103.164.150.0/23 IP: 2001:df7:7d80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:cd:38:a0:7f:2d:57:49:28:06:09:8d:06:71:a7:60:0b:c9:d7:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 8 13:52:25 2024 GMT Not After : Nov 7 13:57:25 2025 GMT Subject: CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:50:0e:29:a6:e1:94:f0:34:73:b9:66:62:cc: 3d:e4:69:0f:0c:fc:a5:01:48:2a:b2:63:2c:75:06: fa:8d:12:c2:fb:9d:4d:f7:d2:1b:03:7b:8b:c6:50: 53:a9:5c:94:45:7f:d5:2e:f0:68:ff:10:19:f5:8d: 1c:40:92:1a:f5:79:c0:0b:d9:18:5f:37:6b:94:7b: ad:96:38:08:29:6f:66:6b:94:dc:ee:9e:72:85:f2: c8:bc:64:95:83:64:b2:de:29:d9:8a:c5:94:6c:14: d6:66:f2:f8:ea:99:7c:49:6d:5f:f9:5f:56:cd:78: 34:93:c2:dd:9b:1d:84:54:94:d9:f0:89:c6:9b:90: 8b:e6:be:3f:65:6b:43:0e:41:b4:d3:e2:44:7a:b1: 3c:5a:3b:e7:4e:60:0c:63:3d:e5:b9:19:9e:f3:ab: ae:5e:fe:44:37:e4:20:fa:dc:82:4e:9a:a2:e6:43: 46:77:42:90:cf:15:be:40:80:26:50:54:e3:be:35: b2:43:c7:ca:ad:95:72:92:4f:06:1b:ec:50:93:a6: f8:44:f5:07:9a:b7:eb:f9:d7:6f:0c:01:c9:79:11: 65:bc:5f:5d:99:5d:e7:b4:59:14:6d:cc:f8:ad:3c: dd:33:98:58:49:32:8a:4c:43:6c:e2:70:b0:db:96: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.150.0/23 IPv6: 2001:df7:7d80::/48 Signature Algorithm: sha256WithRSAEncryption 90:ce:e9:aa:bb:43:25:a7:87:02:d7:9d:95:a2:44:93:b0:c4: 83:c0:22:ba:bd:63:af:a0:24:02:f4:bf:b8:87:4d:6f:eb:bf: bd:44:83:a1:94:03:13:ba:3f:df:67:e3:9e:8e:bc:3e:99:c8: c4:f5:4d:aa:15:a5:10:b5:6b:6b:ed:ef:58:d8:4a:9b:19:67: cc:8f:00:1c:15:5d:c4:99:4d:87:e6:23:38:a6:1f:d3:6c:f6: 15:7a:4a:ae:2c:6f:79:a9:4c:9e:6b:6e:90:cd:ca:82:66:3d: b2:9f:91:7c:78:0d:52:e0:0e:d0:f7:dc:d8:7c:96:0e:60:97: 87:3e:95:ba:dc:19:ec:cb:e6:cb:05:1c:74:e2:8b:04:bf:c3: e1:4b:24:98:1a:6e:f3:b6:73:0e:9c:5f:34:d6:fb:24:62:01: 58:cc:05:8f:68:7d:6a:b4:d4:29:a4:5f:af:45:2f:03:9e:e9: af:87:1c:f5:f9:a3:20:7a:6a:a8:36:d8:cd:bb:80:31:e9:18: bb:ac:5e:52:2e:4b:dc:79:43:bb:56:87:97:d1:0f:a5:82:0e: f0:46:60:0e:52:ff:4a:8d:96:b2:f3:01:99:8e:49:97:2b:50: c9:ba:73:a3:11:b5:3e:76:2d:f4:89:15:32:09:44:60:af:69: 95:ec:ee:0b -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUEM04oH8tV0koBgmNBnGnYAvJ1/YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEwODEzNTIyNVoX DTI1MTEwNzEzNTcyNVowMzExMC8GA1UEAxMoMjZDMDEyNDc2OTNGNjhDRkRBMUY4 Q0I2Qjg4RjdBMzcwMEQzMDAwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPlQDimm4ZTwNHO5ZmLMPeRpDwz8pQFIKrJjLHUG+o0SwvudTffSGwN7i8ZQ U6lclEV/1S7waP8QGfWNHECSGvV5wAvZGF83a5R7rZY4CClvZmuU3O6ecoXyyLxk lYNkst4p2YrFlGwU1mby+OqZfEltX/lfVs14NJPC3ZsdhFSU2fCJxpuQi+a+P2Vr Qw5BtNPiRHqxPFo7505gDGM95bkZnvOrrl7+RDfkIPrcgk6aouZDRndCkM8VvkCA JlBU4741skPHyq2VcpJPBhvsUJOm+ET1B5q36/nXbwwByXkRZbxfXZld57RZFG3M +K083TOYWEkyikxDbOJwsNuWk80CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCbAEkdpP2jP2h+MtriPejcA0wABMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80MDFjNGQ2MS1kY2VmLTRhMjAtYmQ0Yy1hMjgyYTM3YWE2OWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwMWM0ZDYx LWRjZWYtNGEyMC1iZDRjLWEyODJhMzdhYTY5ZS8wLzI2QzAxMjQ3NjkzRjY4Q0ZE QTFGOENCNkI4OEY3QTM3MDBEMzAwMDEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnpJYwDwQCAAIwCQMHACABDfd9gDANBgkqhkiG9w0BAQsFAAOCAQEAkM7pqrtD JaeHAtedlaJEk7DEg8Aiur1jr6AkAvS/uIdNb+u/vUSDoZQDE7o/32fjno68PpnI xPVNqhWlELVra+3vWNhKmxlnzI8AHBVdxJlNh+YjOKYf02z2FXpKrixvealMnmtu kM3KgmY9sp+RfHgNUuAO0Pfc2HyWDmCXhz6VutwZ7MvmywUcdOKLBL/D4UskmBpu 87ZzDpxfNNb7JGIBWMwFj2h9arTUKaRfr0UvA57pr4cc9fmjIHpqqDbYzbuAMekY u6xeUi5L3HlDu1aHl9EPpYIO8EZgDlL/So2WsvMBmY5JlytQybpzoxG1PnYt9IkV MglEYK9plezuCw== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:14 2024 by rpki-client on console-fra.rpki-client.org