$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer File: 58D7A2E054D4F6B835578031386896062B0B0CED.cer (raw, json) Hash identifier: gcU3Tp86giXIKKrHDhujFNNqTT406jrvkUjguKIydQY= Subject key identifier: 58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 28CC439732F3A415504B4CBF95F90C3A3122E826 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft caRepository: rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 Sep 2023 16:43:10 +0000 Certificate not after: Sun 01 Sep 2024 16:48:10 +0000 Subordinate resources: IP: 103.98.121.0/24 IP: 103.103.175.0/24 IP: 103.103.192.0/23 IP: 2001:df2:2500::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:cc:43:97:32:f3:a4:15:50:4b:4c:bf:95:f9:0c:3a:31:22:e8:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 3 16:43:10 2023 GMT Not After : Sep 1 16:48:10 2024 GMT Subject: CN=58D7A2E054D4F6B835578031386896062B0B0CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:c2:09:9c:d3:d2:c7:34:19:65:84:d7:02: bf:be:40:c5:c2:8f:67:1e:16:39:fa:c4:37:84:8c: 31:92:7c:0c:3b:3f:70:7b:4d:6e:bc:f6:82:ff:f0: 23:e0:d2:67:13:0a:da:d8:c4:6e:c6:a4:93:6b:0d: cb:eb:d8:30:9c:4e:70:ce:ae:cf:cd:3e:38:ed:aa: f9:10:02:af:22:50:d9:a3:25:f0:df:0c:e4:47:c4: a4:05:cf:9c:26:2c:bc:b0:3f:a9:dd:ab:a1:eb:3e: 2b:d6:dd:33:d3:05:1e:60:7c:38:41:d2:89:8c:e2: 2e:53:8a:13:28:b8:a2:4f:51:97:73:68:65:16:f0: d7:09:f5:cb:2d:05:73:10:f9:7f:e0:09:fa:e1:b0: 1d:7b:94:9b:51:1f:bb:c5:c3:e8:f8:9e:68:a3:62: e1:5e:bf:0c:8a:53:7a:cc:21:6d:da:9d:9c:1a:8a: 58:44:20:ac:2b:8c:0c:db:ed:5d:a2:f8:0f:57:72: f3:ad:e8:99:8f:9e:0b:87:ee:13:f7:00:a3:83:b9: f2:d0:18:e5:78:01:38:96:bb:5a:7b:14:a1:24:7a: 91:73:50:b2:e0:c5:7e:13:99:49:e3:69:5d:ca:e3: 39:78:62:0a:75:24:17:51:59:74:97:c1:02:b4:db: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.121.0/24 103.103.175.0/24 103.103.192.0/23 IPv6: 2001:df2:2500::/48 Signature Algorithm: sha256WithRSAEncryption 38:88:04:36:9d:00:d6:05:3d:22:dc:cd:67:65:40:33:01:17: ef:53:95:db:7f:50:69:6a:30:e4:61:02:1f:a2:d7:6a:23:43: 37:14:3b:42:d8:6a:83:7f:78:30:c8:7d:91:df:d8:ac:30:c2: 26:da:24:3a:d9:f8:fb:e8:c9:fe:4e:7e:81:0b:04:2d:9b:10: ec:4c:85:9c:13:3c:6f:fa:08:33:1b:1a:0d:39:f6:34:d1:b4: f8:fa:0b:47:15:e2:90:0a:79:1a:1a:16:59:f6:84:a1:23:27: d7:ec:03:0e:0c:f6:f6:a4:fb:29:fa:9f:25:6f:5d:db:68:19: 69:d4:e9:3f:82:76:35:7d:34:b1:07:8f:ca:2a:bb:14:ca:90: c9:e3:ee:0f:92:41:b1:bc:87:29:89:10:05:53:5a:1a:72:43: 75:8a:97:8f:7d:52:8d:07:13:be:83:6a:a7:a7:ed:fe:8c:7d: 6c:fa:17:85:0a:e7:76:64:65:6b:fa:dd:b5:a6:f5:4a:2c:f3: ef:d7:c0:3c:20:0a:7c:9a:66:53:5c:fd:4e:65:db:9f:c0:7f: 47:e5:28:31:bf:17:01:89:f0:d0:79:b5:59:b8:44:02:d9:d7: dd:d5:be:a6:f3:4d:36:9f:f2:2e:d1:2f:21:0a:6b:f0:7a:43: 0f:2b:c0:6b -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUKMxDlzLzpBVQS0y/lfkMOjEi6CYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkwMzE2NDMxMFoX DTI0MDkwMTE2NDgxMFowMzExMC8GA1UEAxMoNThEN0EyRTA1NEQ0RjZCODM1NTc4 MDMxMzg2ODk2MDYyQjBCMENFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqhwgmc09LHNBllhNcCv75AxcKPZx4WOfrEN4SMMZJ8DDs/cHtNbrz2gv/w I+DSZxMK2tjEbsakk2sNy+vYMJxOcM6uz80+OO2q+RACryJQ2aMl8N8M5EfEpAXP nCYsvLA/qd2roes+K9bdM9MFHmB8OEHSiYziLlOKEyi4ok9Rl3NoZRbw1wn1yy0F cxD5f+AJ+uGwHXuUm1Efu8XD6PieaKNi4V6/DIpTeswhbdqdnBqKWEQgrCuMDNvt XaL4D1dy863omY+eC4fuE/cAo4O58tAY5XgBOJa7WnsUoSR6kXNQsuDFfhOZSeNp XcrjOXhiCnUkF1FZdJfBArTbcYUCAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFjXouBU1Pa4NVeAMTholgYrCwztMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZWJiYWRiMy05YWM4LTQ2ZGYtYWI5MS1iZjM5ZGZlZTFiZDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlYmJhZGIz LTlhYzgtNDZkZi1hYjkxLWJmMzlkZmVlMWJkMC8wLzU4RDdBMkUwNTRENEY2Qjgz NTU3ODAzMTM4Njg5NjA2MkIwQjBDRUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID BABnYnkDBABnZ68DBAFnZ8AwDwQCAAIwCQMHACABDfIlADANBgkqhkiG9w0BAQsF AAOCAQEAOIgENp0A1gU9ItzNZ2VAMwEX71OV239QaWow5GECH6LXaiNDNxQ7Qthq g394MMh9kd/YrDDCJtokOtn4++jJ/k5+gQsELZsQ7EyFnBM8b/oIMxsaDTn2NNG0 +PoLRxXikAp5GhoWWfaEoSMn1+wDDgz29qT7KfqfJW9d22gZadTpP4J2NX00sQeP yiq7FMqQyePuD5JBsbyHKYkQBVNaGnJDdYqXj31SjQcTvoNqp6ft/ox9bPoXhQrn dmRla/rdtab1Sizz79fAPCAKfJpmU1z9TmXbn8B/R+UoMb8XAYnw0Hm1WbhEAtnX 3dW+pvNNNp/yLtEvIQpr8HpDDyvAaw== -----END CERTIFICATE-----Generated at Wed May 8 05:33:17 2024 by rpki-client on console-ams.rpki-client.org