$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer File: 26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer (raw, json) Hash identifier: IVou4S0kZfwkQcVp5BEsdRQD8sJf73HiB0Dr6Smd/+g= Subject key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 58443BE0ADDF75400BF7C988B9BCCD545E0210BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft caRepository: rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 26 Apr 2024 10:28:25 +0000 Certificate not after: Fri 25 Apr 2025 10:33:25 +0000 Subordinate resources: IP: 103.189.0.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:44:3b:e0:ad:df:75:40:0b:f7:c9:88:b9:bc:cd:54:5e:02:10:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 26 10:28:25 2024 GMT Not After : Apr 25 10:33:25 2025 GMT Subject: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0f:a8:ed:55:cd:62:74:e5:b2:92:b9:56:55: 41:b4:b5:9d:9e:61:58:ac:95:06:4e:c7:91:cd:47: a9:ca:2c:eb:12:73:83:17:25:26:c1:df:af:ec:18: c3:8a:32:43:b3:af:76:74:ca:05:28:d6:51:85:ac: 41:72:1f:5e:cd:27:2a:35:73:6d:1a:2c:49:52:82: 1c:be:b1:5c:02:38:aa:fe:be:30:21:71:e9:c9:0c: 54:09:46:87:e4:ed:99:e4:1a:4c:88:3e:bc:f3:3e: 9f:d6:fc:fe:0d:20:12:21:49:d8:c0:44:0b:e8:25: b2:ff:90:b2:c6:7b:ef:5d:cd:cb:fc:3b:d3:36:4c: ab:a7:ae:6d:73:d6:95:5d:de:46:db:80:0e:d9:4a: cc:ff:d1:b5:78:1d:9e:93:d9:bd:7a:21:a8:af:44: e7:29:21:af:50:95:ae:61:a0:fd:9b:5a:cc:d4:77: df:da:b8:d1:a0:cb:8d:7d:94:96:ba:2c:a9:5d:4c: 1f:27:bd:a6:8a:5e:98:a5:00:05:5a:d1:af:af:b0: 15:6b:b8:06:50:08:ac:54:27:4c:c5:d1:51:9d:6e: 74:83:15:5e:1d:41:34:af:6b:2b:6b:41:5b:e4:21: 1a:72:f7:e7:39:3d:a7:16:4f:8a:13:1f:d5:ae:54: de:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.0.0/23 Signature Algorithm: sha256WithRSAEncryption 75:0f:dc:26:83:03:3a:12:a6:fc:c1:8d:39:ae:79:f9:bd:e8: ef:3a:fc:60:d3:57:87:9a:a7:12:d2:fa:36:cb:87:fa:44:f1: af:49:8b:4b:69:96:df:b3:c5:31:04:bb:19:61:8a:52:13:1c: a2:8c:98:02:5a:72:c9:e1:15:60:43:fe:42:62:4d:93:21:6d: 1b:0e:b4:a7:ca:a3:4e:a5:1b:5a:7b:1b:d3:04:dc:17:39:de: e4:57:6e:89:0c:ea:b1:16:16:f5:d7:5a:1e:75:af:28:da:08: c2:20:28:cc:18:91:1f:5f:e1:4d:e5:d4:13:b3:78:55:9b:f7: 37:8f:a3:43:f2:49:e3:7c:4f:1a:54:3a:80:36:11:04:06:38: 86:d8:0c:2d:f3:b7:7d:46:97:2a:23:74:a5:92:96:e4:67:d9: e2:86:2f:20:d8:3e:37:54:f2:7c:a3:b8:8e:cb:76:4d:d1:e1: d6:96:f1:bc:87:98:d3:cd:8b:03:cf:9a:d9:5f:93:a9:fd:68: 63:71:34:80:00:8c:f8:df:90:10:8a:5d:94:2a:c1:f5:60:17: 47:c9:b1:dd:d4:1e:0e:0f:ad:93:42:bc:88:8a:3a:84:05:e3: 57:9a:0f:78:51:75:2a:b4:89:1a:df:ae:d4:ae:d2:0a:86:25: db:c1:14:5e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUWEQ74K3fdUAL98mIubzNVF4CELowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQyNjEwMjgyNVoX DTI1MDQyNTEwMzMyNVowMzExMC8GA1UEAxMoMjZENUMwNjNCRUI1ODBCMzhGMjhG M0NDMTZCOTU4NjM0RkY3QTQ4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANoPqO1VzWJ05bKSuVZVQbS1nZ5hWKyVBk7Hkc1Hqcos6xJzgxclJsHfr+wY w4oyQ7OvdnTKBSjWUYWsQXIfXs0nKjVzbRosSVKCHL6xXAI4qv6+MCFx6ckMVAlG h+TtmeQaTIg+vPM+n9b8/g0gEiFJ2MBEC+glsv+QssZ7713Ny/w70zZMq6eubXPW lV3eRtuADtlKzP/RtXgdnpPZvXohqK9E5ykhr1CVrmGg/ZtazNR339q40aDLjX2U lrosqV1MHye9popemKUABVrRr6+wFWu4BlAIrFQnTMXRUZ1udIMVXh1BNK9rK2tB W+QhGnL35zk9pxZPihMf1a5U3vMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCbVwGO+tYCzjyjzzBa5WGNP96SLMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81OWE3NGFjOS04ZmE1LTQzOWItOGYyMS0wOGYyODQ2NzdhYTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5YTc0YWM5 LThmYTUtNDM5Yi04ZjIxLTA4ZjI4NDY3N2FhMy8wLzI2RDVDMDYzQkVCNTgwQjM4 RjI4RjNDQzE2Qjk1ODYzNEZGN0E0OEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvQAwDQYJKoZIhvcNAQELBQADggEBAHUP3CaDAzoSpvzBjTmuefm96O86/GDT V4eapxLS+jbLh/pE8a9Ji0tplt+zxTEEuxlhilITHKKMmAJacsnhFWBD/kJiTZMh bRsOtKfKo06lG1p7G9ME3Bc53uRXbokM6rEWFvXXWh51ryjaCMIgKMwYkR9f4U3l 1BOzeFWb9zePo0PySeN8TxpUOoA2EQQGOIbYDC3zt31GlyojdKWSluRn2eKGLyDY PjdU8nyjuI7Ldk3R4daW8byHmNPNiwPPmtlfk6n9aGNxNIAAjPjfkBCKXZQqwfVg F0fJsd3UHg4PrZNCvIiKOoQF41eaD3hRdSq0iRrfrtSu0gqGJdvBFF4= -----END CERTIFICATE-----Generated at Wed May 8 17:45:16 2024 by rpki-client on console-ams.rpki-client.org