$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer File: 58D7A2E054D4F6B835578031386896062B0B0CED.cer (raw, json) Hash identifier: B3gbwzZXcYdoC1jhnGM/NaZgc9kS6yz/EsXAcgYvDxs= Subject key identifier: 58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1882DECA364EB7BA1CB1DEE380EDCD9F5A93B45A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft caRepository: rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 04 Aug 2024 19:30:11 +0000 Certificate not after: Sun 03 Aug 2025 19:35:11 +0000 Subordinate resources: IP: 103.98.121.0/24 IP: 103.103.175.0/24 IP: 103.103.192.0/23 IP: 2001:df2:2500::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:82:de:ca:36:4e:b7:ba:1c:b1:de:e3:80:ed:cd:9f:5a:93:b4:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 4 19:30:11 2024 GMT Not After : Aug 3 19:35:11 2025 GMT Subject: CN=58D7A2E054D4F6B835578031386896062B0B0CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:c2:09:9c:d3:d2:c7:34:19:65:84:d7:02: bf:be:40:c5:c2:8f:67:1e:16:39:fa:c4:37:84:8c: 31:92:7c:0c:3b:3f:70:7b:4d:6e:bc:f6:82:ff:f0: 23:e0:d2:67:13:0a:da:d8:c4:6e:c6:a4:93:6b:0d: cb:eb:d8:30:9c:4e:70:ce:ae:cf:cd:3e:38:ed:aa: f9:10:02:af:22:50:d9:a3:25:f0:df:0c:e4:47:c4: a4:05:cf:9c:26:2c:bc:b0:3f:a9:dd:ab:a1:eb:3e: 2b:d6:dd:33:d3:05:1e:60:7c:38:41:d2:89:8c:e2: 2e:53:8a:13:28:b8:a2:4f:51:97:73:68:65:16:f0: d7:09:f5:cb:2d:05:73:10:f9:7f:e0:09:fa:e1:b0: 1d:7b:94:9b:51:1f:bb:c5:c3:e8:f8:9e:68:a3:62: e1:5e:bf:0c:8a:53:7a:cc:21:6d:da:9d:9c:1a:8a: 58:44:20:ac:2b:8c:0c:db:ed:5d:a2:f8:0f:57:72: f3:ad:e8:99:8f:9e:0b:87:ee:13:f7:00:a3:83:b9: f2:d0:18:e5:78:01:38:96:bb:5a:7b:14:a1:24:7a: 91:73:50:b2:e0:c5:7e:13:99:49:e3:69:5d:ca:e3: 39:78:62:0a:75:24:17:51:59:74:97:c1:02:b4:db: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.121.0/24 103.103.175.0/24 103.103.192.0/23 IPv6: 2001:df2:2500::/48 Signature Algorithm: sha256WithRSAEncryption 74:66:9a:c1:27:95:70:e8:49:20:5e:8b:db:05:de:60:7e:bc: f6:f0:38:df:73:a1:19:94:e8:71:a9:02:f0:f9:19:48:a6:a2: f1:4b:be:63:8d:04:3d:ef:82:36:06:c4:9e:cb:93:5e:1e:d5: b9:30:38:0e:ee:1c:81:ed:4a:3f:24:0d:55:e3:c9:35:1c:83: 1d:41:f1:e3:79:92:1c:10:fb:a9:08:df:ef:32:11:1e:6f:c5: 67:2e:43:a6:2c:8d:ea:7a:43:71:5e:e4:9d:a6:4f:67:09:d0: b5:ec:6d:8f:49:5f:33:46:a3:24:ac:4e:1f:96:7b:9d:54:00: f9:fd:56:76:79:ac:80:f1:52:30:b0:55:08:03:39:50:c8:58: 50:79:37:7f:0e:a5:b7:5b:35:38:d4:b5:c8:3c:d6:aa:86:a5: 68:8b:4d:92:4d:8a:45:08:49:76:8e:56:69:47:f6:44:ba:30: b7:a8:94:17:29:47:3e:50:9d:dc:61:34:d4:a2:46:66:34:e4: 9d:d9:66:0f:cd:a8:63:0a:e4:c6:6b:0f:69:cd:6d:ab:68:01: 9f:2e:8b:df:cb:9d:21:2a:c1:a2:2f:e9:fa:b8:05:3c:be:3d: 6a:17:cc:1c:e0:0d:36:bd:0f:16:77:8a:0b:ae:1c:2d:90:3a: 65:d4:d7:e8 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUGILeyjZOt7ocsd7jgO3Nn1qTtFowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgwNDE5MzAxMVoX DTI1MDgwMzE5MzUxMVowMzExMC8GA1UEAxMoNThEN0EyRTA1NEQ0RjZCODM1NTc4 MDMxMzg2ODk2MDYyQjBCMENFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqhwgmc09LHNBllhNcCv75AxcKPZx4WOfrEN4SMMZJ8DDs/cHtNbrz2gv/w I+DSZxMK2tjEbsakk2sNy+vYMJxOcM6uz80+OO2q+RACryJQ2aMl8N8M5EfEpAXP nCYsvLA/qd2roes+K9bdM9MFHmB8OEHSiYziLlOKEyi4ok9Rl3NoZRbw1wn1yy0F cxD5f+AJ+uGwHXuUm1Efu8XD6PieaKNi4V6/DIpTeswhbdqdnBqKWEQgrCuMDNvt XaL4D1dy863omY+eC4fuE/cAo4O58tAY5XgBOJa7WnsUoSR6kXNQsuDFfhOZSeNp XcrjOXhiCnUkF1FZdJfBArTbcYUCAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFjXouBU1Pa4NVeAMTholgYrCwztMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZWJiYWRiMy05YWM4LTQ2ZGYtYWI5MS1iZjM5ZGZlZTFiZDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlYmJhZGIz LTlhYzgtNDZkZi1hYjkxLWJmMzlkZmVlMWJkMC8wLzU4RDdBMkUwNTRENEY2Qjgz NTU3ODAzMTM4Njg5NjA2MkIwQjBDRUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID BABnYnkDBABnZ68DBAFnZ8AwDwQCAAIwCQMHACABDfIlADANBgkqhkiG9w0BAQsF AAOCAQEAdGaawSeVcOhJIF6L2wXeYH689vA433OhGZTocakC8PkZSKai8Uu+Y40E Pe+CNgbEnsuTXh7VuTA4Du4cge1KPyQNVePJNRyDHUHx43mSHBD7qQjf7zIRHm/F Zy5DpiyN6npDcV7knaZPZwnQtextj0lfM0ajJKxOH5Z7nVQA+f1WdnmsgPFSMLBV CAM5UMhYUHk3fw6lt1s1ONS1yDzWqoalaItNkk2KRQhJdo5WaUf2RLowt6iUFylH PlCd3GE01KJGZjTkndlmD82oYwrkxmsPac1tq2gBny6L38udISrBoi/p+rgFPL49 ahfMHOANNr0PFneKC64cLZA6ZdTX6A== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:18 2024 by rpki-client on console-fra.rpki-client.org