$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer File: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer (raw, json) Hash identifier: EABOu1n3+eJ5EVIbz/6fqt92dV3WM2K5F6toKEQzMLE= Subject key identifier: 58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 673BFF72528684C32C0C199C212B40FB7B925D94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft caRepository: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 10 Aug 2024 00:40:50 +0000 Certificate not after: Sat 09 Aug 2025 00:45:50 +0000 Subordinate resources: IP: 103.138.127.0/24 IP: 2001:df0:3e80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:3b:ff:72:52:86:84:c3:2c:0c:19:9c:21:2b:40:fb:7b:92:5d:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 10 00:40:50 2024 GMT Not After : Aug 9 00:45:50 2025 GMT Subject: CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:39:6f:41:83:75:98:df:74:f8:b8:c3:18: 92:12:78:7b:34:5c:39:78:f3:ae:50:0e:19:f2:5b: fc:10:9b:e8:7b:91:77:24:96:db:1d:c1:57:36:48: 06:d4:67:7b:10:44:f2:55:4c:64:9e:70:f7:36:aa: d5:64:ff:c7:b3:d1:6a:0a:35:0f:b1:e4:66:a2:80: dd:f7:b5:8f:ba:05:e5:61:f0:da:a3:e1:43:8b:f0: 7f:94:82:1a:ff:6e:b1:22:47:20:b9:5c:1b:82:d5: a1:5e:00:84:b8:96:c1:5e:69:13:eb:4e:05:9d:f7: ce:ed:89:cd:c6:d5:68:2d:bb:08:44:05:ae:48:17: e0:88:91:4b:4a:ed:1c:f0:36:35:4d:02:b4:e2:43: 0d:9f:51:3e:fa:49:e7:0a:1c:0a:95:97:81:a8:b8: 96:9d:69:7a:ad:45:e0:2d:99:7c:da:38:1c:ae:bb: 52:1c:bf:70:3c:5d:24:48:0c:7e:2f:d1:5e:1b:8f: 11:ae:fc:97:56:a4:2f:d9:fa:07:6a:1e:d7:da:a5: 3b:78:82:3e:c5:4c:6d:9b:b5:22:87:aa:5a:79:6a: eb:c7:b6:61:0a:87:9e:e8:ec:95:74:ed:b7:b5:b5: 35:af:e4:3c:c6:19:3d:00:8c:fa:4a:5a:61:7b:4d: 7e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.127.0/24 IPv6: 2001:df0:3e80::/48 Signature Algorithm: sha256WithRSAEncryption 36:2a:8b:76:92:3e:a5:f5:75:cc:b4:d7:e3:23:9c:ad:b3:9f: ac:55:57:6c:62:88:c7:fa:d6:ae:7e:73:40:60:4a:be:c7:c8: 0a:12:5c:26:02:f0:a0:51:76:16:dd:97:56:f1:49:4c:73:0c: d9:d3:69:b6:6a:25:c0:1d:c2:18:37:c8:e2:8d:43:0c:37:df: 97:4c:5b:72:44:ea:76:6f:eb:ed:36:23:1f:b7:01:f6:ca:10: 3f:5f:03:d4:9b:6d:5f:c7:92:5f:8e:8f:ac:6a:ec:cd:e5:a4: 15:16:7e:52:78:30:6d:24:ce:6c:3c:87:96:e8:32:14:48:f8: ad:05:15:16:5a:41:51:66:9e:cd:0f:69:7d:f9:da:38:b3:d1: 24:c4:d5:20:45:b3:02:f6:5f:f3:f0:36:c4:65:a1:b8:91:b6: ab:6a:5b:5f:9b:6d:e0:dd:dc:83:17:c7:b0:ee:85:2d:81:38: 60:e3:87:79:96:2e:b4:c6:80:3b:7a:d4:0e:75:3c:ba:52:a6: 18:67:96:1e:3a:73:a8:1e:ec:b9:3e:32:e9:0c:2c:dc:7e:92: b6:d0:d5:e0:ea:a0:ea:d3:dc:f3:26:46:67:9d:8e:64:83:1b: 57:f8:a2:cd:92:10:15:71:9e:36:8c:7c:98:0d:f6:d0:2f:db: 5a:8e:55:1a -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUZzv/clKGhMMsDBmcIStA+3uSXZQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgxMDAwNDA1MFoX DTI1MDgwOTAwNDU1MFowMzExMC8GA1UEAxMoNTg2RkU4RDI3RkY0RDZCRDRGQTgz OUZDNTg4NDRBNEIwM0Q1MzVERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKiBOW9Bg3WY33T4uMMYkhJ4ezRcOXjzrlAOGfJb/BCb6HuRdySW2x3BVzZI BtRnexBE8lVMZJ5w9zaq1WT/x7PRago1D7HkZqKA3fe1j7oF5WHw2qPhQ4vwf5SC Gv9usSJHILlcG4LVoV4AhLiWwV5pE+tOBZ33zu2JzcbVaC27CEQFrkgX4IiRS0rt HPA2NU0CtOJDDZ9RPvpJ5wocCpWXgai4lp1peq1F4C2ZfNo4HK67Uhy/cDxdJEgM fi/RXhuPEa78l1akL9n6B2oe19qlO3iCPsVMbZu1IoeqWnlq68e2YQqHnujslXTt t7W1Na/kPMYZPQCM+kpaYXtNfj8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFhv6NJ/9Na9T6g5/FiESksD1TXfMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iYzA3MmRiNy0wMTI3LTQ1NjQtOGQyMC1iY2VkNTI1YTE0YjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JjMDcyZGI3 LTAxMjctNDU2NC04ZDIwLWJjZWQ1MjVhMTRiOC8wLzU4NkZFOEQyN0ZGNEQ2QkQ0 RkE4MzlGQzU4ODQ0QTRCMDNENTM1REYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnin8wDwQCAAIwCQMHACABDfA+gDANBgkqhkiG9w0BAQsFAAOCAQEANiqLdpI+ pfV1zLTX4yOcrbOfrFVXbGKIx/rWrn5zQGBKvsfIChJcJgLwoFF2Ft2XVvFJTHMM 2dNptmolwB3CGDfI4o1DDDffl0xbckTqdm/r7TYjH7cB9soQP18D1JttX8eSX46P rGrszeWkFRZ+UngwbSTObDyHlugyFEj4rQUVFlpBUWaezQ9pffnaOLPRJMTVIEWz AvZf8/A2xGWhuJG2q2pbX5tt4N3cgxfHsO6FLYE4YOOHeZYutMaAO3rUDnU8ulKm GGeWHjpzqB7suT4y6Qws3H6SttDV4Oqg6tPc8yZGZ52OZIMbV/iizZIQFXGeNox8 mA320C/bWo5VGg== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:18 2024 by rpki-client on console-fra.rpki-client.org