$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer File: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer (raw, json) Hash identifier: sENEMrKLPQ3jKidv3vJeGiFVPbk3aBgv0zsJBv++dic= Subject key identifier: 58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 28949BDA4595AB439322353C33F3819BBCFF1FF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft caRepository: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 08 Sep 2023 12:49:45 +0000 Certificate not after: Fri 06 Sep 2024 12:54:45 +0000 Subordinate resources: IP: 103.138.127.0/24 IP: 2001:df0:3e80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:94:9b:da:45:95:ab:43:93:22:35:3c:33:f3:81:9b:bc:ff:1f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 8 12:49:45 2023 GMT Not After : Sep 6 12:54:45 2024 GMT Subject: CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:39:6f:41:83:75:98:df:74:f8:b8:c3:18: 92:12:78:7b:34:5c:39:78:f3:ae:50:0e:19:f2:5b: fc:10:9b:e8:7b:91:77:24:96:db:1d:c1:57:36:48: 06:d4:67:7b:10:44:f2:55:4c:64:9e:70:f7:36:aa: d5:64:ff:c7:b3:d1:6a:0a:35:0f:b1:e4:66:a2:80: dd:f7:b5:8f:ba:05:e5:61:f0:da:a3:e1:43:8b:f0: 7f:94:82:1a:ff:6e:b1:22:47:20:b9:5c:1b:82:d5: a1:5e:00:84:b8:96:c1:5e:69:13:eb:4e:05:9d:f7: ce:ed:89:cd:c6:d5:68:2d:bb:08:44:05:ae:48:17: e0:88:91:4b:4a:ed:1c:f0:36:35:4d:02:b4:e2:43: 0d:9f:51:3e:fa:49:e7:0a:1c:0a:95:97:81:a8:b8: 96:9d:69:7a:ad:45:e0:2d:99:7c:da:38:1c:ae:bb: 52:1c:bf:70:3c:5d:24:48:0c:7e:2f:d1:5e:1b:8f: 11:ae:fc:97:56:a4:2f:d9:fa:07:6a:1e:d7:da:a5: 3b:78:82:3e:c5:4c:6d:9b:b5:22:87:aa:5a:79:6a: eb:c7:b6:61:0a:87:9e:e8:ec:95:74:ed:b7:b5:b5: 35:af:e4:3c:c6:19:3d:00:8c:fa:4a:5a:61:7b:4d: 7e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.127.0/24 IPv6: 2001:df0:3e80::/48 Signature Algorithm: sha256WithRSAEncryption 6b:76:bb:3d:ac:ad:62:4b:8f:a4:ce:78:d3:00:6e:38:28:92: 7f:b9:a6:57:cb:11:3b:b7:63:c0:64:fc:a6:fe:82:c8:c5:59: 36:b7:5b:25:bc:a9:1e:40:ee:7b:65:05:0d:c2:3e:39:f8:61: 83:74:5d:83:cc:14:ed:75:15:f3:b4:93:45:b5:f2:d7:75:a3: ed:1b:59:c1:2a:be:62:51:3b:ac:69:e9:42:01:f9:c7:ee:15: 34:96:ac:df:ff:98:b1:50:72:cb:04:e0:78:2f:ab:4f:4e:35: a2:8a:ee:11:07:42:ec:38:98:7e:86:18:3b:16:3d:32:0c:a1: 4b:77:53:59:4a:20:b2:df:ed:27:22:15:03:2e:a4:0d:6e:a9: 71:70:0e:3e:f8:d9:70:72:5a:65:c1:27:13:8b:78:90:e5:ff: 0d:e2:6b:e6:5e:b8:d7:1f:96:0f:fa:07:62:d8:b0:05:0b:45: a6:5f:f9:ab:e5:8a:6f:60:48:63:71:af:39:1a:cd:9c:ca:d4: ad:32:63:e3:a2:d3:25:f0:15:d3:a3:03:65:45:7b:cd:d6:16: d9:30:e9:44:81:7e:79:5d:50:60:d4:6a:73:fb:ed:74:aa:54: f3:26:c1:94:9e:f1:2e:f3:ab:d2:59:2b:ed:3b:f7:d3:f5:b9: 37:6e:86:e5 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUKJSb2kWVq0OTIjU8M/OBm7z/H/UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkwODEyNDk0NVoX DTI0MDkwNjEyNTQ0NVowMzExMC8GA1UEAxMoNTg2RkU4RDI3RkY0RDZCRDRGQTgz OUZDNTg4NDRBNEIwM0Q1MzVERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKiBOW9Bg3WY33T4uMMYkhJ4ezRcOXjzrlAOGfJb/BCb6HuRdySW2x3BVzZI BtRnexBE8lVMZJ5w9zaq1WT/x7PRago1D7HkZqKA3fe1j7oF5WHw2qPhQ4vwf5SC Gv9usSJHILlcG4LVoV4AhLiWwV5pE+tOBZ33zu2JzcbVaC27CEQFrkgX4IiRS0rt HPA2NU0CtOJDDZ9RPvpJ5wocCpWXgai4lp1peq1F4C2ZfNo4HK67Uhy/cDxdJEgM fi/RXhuPEa78l1akL9n6B2oe19qlO3iCPsVMbZu1IoeqWnlq68e2YQqHnujslXTt t7W1Na/kPMYZPQCM+kpaYXtNfj8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFhv6NJ/9Na9T6g5/FiESksD1TXfMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iYzA3MmRiNy0wMTI3LTQ1NjQtOGQyMC1iY2VkNTI1YTE0YjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JjMDcyZGI3 LTAxMjctNDU2NC04ZDIwLWJjZWQ1MjVhMTRiOC8wLzU4NkZFOEQyN0ZGNEQ2QkQ0 RkE4MzlGQzU4ODQ0QTRCMDNENTM1REYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnin8wDwQCAAIwCQMHACABDfA+gDANBgkqhkiG9w0BAQsFAAOCAQEAa3a7Payt YkuPpM540wBuOCiSf7mmV8sRO7djwGT8pv6CyMVZNrdbJbypHkDue2UFDcI+Ofhh g3Rdg8wU7XUV87STRbXy13Wj7RtZwSq+YlE7rGnpQgH5x+4VNJas3/+YsVByywTg eC+rT041ooruEQdC7DiYfoYYOxY9MgyhS3dTWUogst/tJyIVAy6kDW6pcXAOPvjZ cHJaZcEnE4t4kOX/DeJr5l641x+WD/oHYtiwBQtFpl/5q+WKb2BIY3GvORrNnMrU rTJj46LTJfAV06MDZUV7zdYW2TDpRIF+eV1QYNRqc/vtdKpU8ybBlJ7xLvOr0lkr 7Tv30/W5N26G5Q== -----END CERTIFICATE-----Generated at Wed May 8 18:12:08 2024 by rpki-client on console-fra.rpki-client.org