$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/579618DB6FFA608F5998FCD968B270AE61BDB97C.cer File: 579618DB6FFA608F5998FCD968B270AE61BDB97C.cer (raw, json) Hash identifier: 8ETHBGIK+vsJPMvNb7cgC0NjHyvGZ8CqqKs1hQ38m6E= Subject key identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 719F748622E126D857CE9519694BFB5F77DF5CA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft caRepository: rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 26 Aug 2023 10:13:54 +0000 Certificate not after: Sat 24 Aug 2024 10:18:54 +0000 Subordinate resources: IP: 103.123.120.0/22 IP: 2403:a1c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:9f:74:86:22:e1:26:d8:57:ce:95:19:69:4b:fb:5f:77:df:5c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 26 10:13:54 2023 GMT Not After : Aug 24 10:18:54 2024 GMT Subject: CN=579618DB6FFA608F5998FCD968B270AE61BDB97C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:09:f2:90:02:ea:89:7a:f2:ed:4a:22:02:ff: 6c:66:c3:06:a4:2a:05:f4:c0:d5:e7:78:3a:80:f3: 6a:f7:2a:64:91:39:ad:2b:1f:15:ad:52:f6:bd:39: a3:c4:60:16:e0:db:b3:a5:56:fa:6d:7d:7b:fa:59: 54:03:f7:29:8f:70:ec:55:ad:5d:37:61:bc:d8:7b: 78:47:fc:00:ad:e6:5d:5a:44:a3:d2:79:3f:40:9c: 8f:4a:51:68:2c:72:10:53:94:f9:dd:2e:57:a2:da: ac:f0:b9:cb:78:da:06:f2:7f:fb:0e:1c:2a:62:f1: aa:90:0e:98:d6:d0:51:29:24:ad:4c:6c:39:41:4a: dd:14:7d:80:b4:54:fb:28:7b:5b:4b:dc:5c:be:ef: a9:dc:8a:72:75:71:bc:e8:ce:9e:b7:63:3d:f5:91: 4c:e2:e3:b8:0c:b1:30:5a:19:94:f1:82:17:fe:cd: 37:38:c7:14:f4:25:06:32:43:cb:37:e4:fe:be:ec: 45:6d:83:46:30:fc:3f:13:cc:69:3d:76:ef:b5:a5: 10:eb:f2:88:e0:0a:51:2d:84:6d:0f:39:97:63:d3: 1e:f5:f5:c8:da:cf:01:57:72:d0:46:81:20:19:2b: 6b:85:74:33:8e:65:4a:09:88:d7:99:72:7e:91:26: e7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 57:96:18:DB:6F:FA:60:8F:59:98:FC:D9:68:B2:70:AE:61:BD:B9:7C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2626639a-9a1c-4c0e-ba17-f679f0506cbc/0/579618DB6FFA608F5998FCD968B270AE61BDB97C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.120.0/22 IPv6: 2403:a1c0::/32 Signature Algorithm: sha256WithRSAEncryption 49:27:fe:e3:28:ec:9b:0a:a8:bf:94:ba:37:f6:82:9c:40:b7: cd:a0:d2:d8:9b:db:dd:45:5d:61:2e:6b:be:be:4b:5d:37:15: e7:36:2a:63:6a:00:89:92:e2:ad:bc:30:e7:40:44:3a:24:93: 53:e3:25:98:c2:fc:d6:71:bf:34:94:16:64:44:10:4a:23:ef: 27:b6:e4:bf:20:fa:6e:ed:8d:e8:4d:7f:65:61:01:0f:a6:3a: 60:a5:b7:e2:18:b9:c2:46:8f:37:79:63:65:f5:28:77:d8:03: 7d:5f:82:2e:43:fb:c3:15:ac:11:4f:6f:b8:b6:86:ac:51:9e: 12:3c:20:bc:39:36:b9:b6:db:ee:04:a2:94:56:69:2f:f6:69: c0:bc:ca:31:87:ca:fe:2a:53:32:1f:8b:68:9c:1e:88:45:35: 3f:9d:b1:75:76:1c:1c:ff:82:9b:b8:a0:74:c6:0c:ac:46:e5: 73:9e:97:a8:33:ae:0e:23:d1:6a:6b:4c:a9:92:93:64:16:1a: 00:9a:b1:4d:02:ca:d8:74:48:31:83:4d:8e:43:00:bd:da:c4: e7:f2:87:08:1c:85:73:00:43:31:8d:f4:14:f8:f7:b3:41:04: c5:65:53:f5:db:fe:0d:1a:5f:6e:8b:33:24:24:e0:b9:cd:fd: 7b:8f:55:bc -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUcZ90hiLhJthXzpUZaUv7X3ffXKQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgyNjEwMTM1NFoX DTI0MDgyNDEwMTg1NFowMzExMC8GA1UEAxMoNTc5NjE4REI2RkZBNjA4RjU5OThG Q0Q5NjhCMjcwQUU2MUJEQjk3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN8J8pAC6ol68u1KIgL/bGbDBqQqBfTA1ed4OoDzavcqZJE5rSsfFa1S9r05 o8RgFuDbs6VW+m19e/pZVAP3KY9w7FWtXTdhvNh7eEf8AK3mXVpEo9J5P0Ccj0pR aCxyEFOU+d0uV6LarPC5y3jaBvJ/+w4cKmLxqpAOmNbQUSkkrUxsOUFK3RR9gLRU +yh7W0vcXL7vqdyKcnVxvOjOnrdjPfWRTOLjuAyxMFoZlPGCF/7NNzjHFPQlBjJD yzfk/r7sRW2DRjD8PxPMaT1277WlEOvyiOAKUS2EbQ85l2PTHvX1yNrPAVdy0EaB IBkra4V0M45lSgmI15lyfpEm58kCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFeWGNtv+mCPWZj82WiycK5hvbl8MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNjI2NjM5YS05YTFjLTRjMGUtYmExNy1mNjc5ZjA1MDZjYmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2MjY2Mzlh LTlhMWMtNGMwZS1iYTE3LWY2NzlmMDUwNmNiYy8wLzU3OTYxOERCNkZGQTYwOEY1 OTk4RkNEOTY4QjI3MEFFNjFCREI5N0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJne3gwDQQCAAIwBwMFACQDocAwDQYJKoZIhvcNAQELBQADggEBAEkn/uMo7JsK qL+Uujf2gpxAt82g0tib291FXWEua76+S103Fec2KmNqAImS4q28MOdARDokk1Pj JZjC/NZxvzSUFmREEEoj7ye25L8g+m7tjehNf2VhAQ+mOmClt+IYucJGjzd5Y2X1 KHfYA31fgi5D+8MVrBFPb7i2hqxRnhI8ILw5Nrm22+4EopRWaS/2acC8yjGHyv4q UzIfi2icHohFNT+dsXV2HBz/gpu4oHTGDKxG5XOel6gzrg4j0WprTKmSk2QWGgCa sU0Cyth0SDGDTY5DAL3axOfyhwgchXMAQzGN9BT497NBBMVlU/Xb/g0aX26LMyQk 4LnN/XuPVbw= -----END CERTIFICATE-----Generated at Wed May 8 14:59:52 2024 by rpki-client on console-ams.rpki-client.org