$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer File: 59B19DD1D646793F5F17D89C42AC2F6399FB1854.cer (raw, json) Hash identifier: AcJylRPCBIW+WjuDzDqcPrS6bpcyfGUqXM47pQxV87k= Subject key identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 524D24A19F12BA02420B51BE801106355E4FC1AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft caRepository: rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 19 Feb 2025 21:00:46 +0000 Certificate not after: Wed 18 Feb 2026 21:05:46 +0000 Subordinate resources: IP: 103.71.190.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:4d:24:a1:9f:12:ba:02:42:0b:51:be:80:11:06:35:5e:4f:c1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 19 21:00:46 2025 GMT Not After : Feb 18 21:05:46 2026 GMT Subject: CN=59B19DD1D646793F5F17D89C42AC2F6399FB1854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1c:62:f1:57:24:81:5d:90:ac:23:cb:ac:ad: 6b:c3:a8:72:2f:29:1b:3e:94:52:d8:b8:ad:18:d9: 8c:a9:5c:4c:de:7b:bd:e6:ec:8c:10:17:df:4e:38: 08:a4:8d:2b:fc:36:cc:b5:db:4e:f6:fb:49:fe:59: 8b:51:e8:a8:6c:e4:b7:91:3f:6e:fe:4b:1e:7c:d5: 81:f3:1f:1b:f9:d5:35:fe:31:4d:b7:ce:3e:12:2a: 27:7f:79:12:60:34:a7:55:23:03:20:c0:1c:9e:5d: 43:b7:ca:33:7a:8c:98:a0:d9:25:f9:b5:14:09:1e: 78:b0:0e:8b:96:e5:b9:c9:91:e5:66:3c:74:c8:c7: ef:1f:c3:6c:8a:01:59:01:fd:f4:0c:7b:41:0c:89: 35:2d:e0:3e:48:43:d0:eb:37:8c:48:6b:0d:91:b2: 06:58:31:d3:c6:f5:fa:30:8e:7e:25:b8:aa:7b:fe: 74:e5:c0:ca:bb:52:31:9e:40:ff:00:1b:70:8f:c6: d3:ec:54:e8:26:89:16:bc:ee:cb:2e:d2:88:99:d1: 2c:9b:8f:c3:32:c9:98:81:9e:72:26:e6:c2:6f:43: fa:e7:48:b1:9a:e4:16:17:2b:d7:fb:57:e4:25:3a: 9b:f5:62:3f:79:2a:2d:41:b9:f7:ed:d9:fb:0a:f2: 0e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:B1:9D:D1:D6:46:79:3F:5F:17:D8:9C:42:AC:2F:63:99:FB:18:54 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4b048064-87de-4de7-b0bd-12fa0deb8e32/0/59B19DD1D646793F5F17D89C42AC2F6399FB1854.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.190.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:82:17:8d:16:70:52:2e:2b:22:1e:74:4a:2b:ef:5d:71:ff: 0f:29:48:3f:6b:3e:c6:44:35:cd:e0:fc:84:23:91:ca:ec:94: e6:a7:20:30:d9:e2:45:e0:58:d8:7c:4f:85:97:4e:19:0c:93: 0d:49:48:c3:79:05:e5:06:3b:ee:30:bc:39:de:91:f0:f7:cd: 3d:82:36:b6:9d:81:58:2b:a0:f5:b3:25:ee:70:11:d4:c6:66: 8a:c1:49:a2:1c:a2:32:77:cb:81:df:84:67:32:f8:96:77:48: 6f:bc:47:3b:44:ae:a4:f0:0a:d1:18:f7:eb:bd:72:ba:88:cc: 4b:e0:ad:e8:60:ce:67:6d:50:f3:02:d2:11:be:e8:51:b0:02: ba:62:10:1e:64:a1:66:73:71:e6:20:87:95:30:eb:b4:02:69: d9:c3:35:95:0b:df:0a:9c:f7:85:96:d2:26:78:fa:00:61:dd: 75:0e:3f:52:d2:f1:ea:00:85:32:6d:a1:30:d4:b9:cb:34:2c: 52:80:2a:24:77:2b:21:bc:6b:2c:0d:e2:aa:89:b5:bf:d4:b8: cb:a9:1f:00:8e:83:b6:e1:a4:fc:78:43:12:58:91:eb:bf:3c: 01:43:57:af:3f:c0:aa:dc:c8:ca:9e:64:b8:fa:21:6e:ff:d9: c9:ff:c5:7e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUk0koZ8SugJCC1G+gBEGNV5PwaswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxOTIxMDA0NloX DTI2MDIxODIxMDU0NlowMzExMC8GA1UEAxMoNTlCMTlERDFENjQ2NzkzRjVGMTdE ODlDNDJBQzJGNjM5OUZCMTg1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANwcYvFXJIFdkKwjy6yta8Ooci8pGz6UUti4rRjZjKlcTN57vebsjBAX3044 CKSNK/w2zLXbTvb7Sf5Zi1HoqGzkt5E/bv5LHnzVgfMfG/nVNf4xTbfOPhIqJ395 EmA0p1UjAyDAHJ5dQ7fKM3qMmKDZJfm1FAkeeLAOi5blucmR5WY8dMjH7x/DbIoB WQH99Ax7QQyJNS3gPkhD0Os3jEhrDZGyBlgx08b1+jCOfiW4qnv+dOXAyrtSMZ5A /wAbcI/G0+xU6CaJFrzuyy7SiJnRLJuPwzLJmIGecibmwm9D+udIsZrkFhcr1/tX 5CU6m/ViP3kqLUG59+3Z+wryDpUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFmxndHWRnk/XxfYnEKsL2OZ+xhUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80YjA0ODA2NC04N2RlLTRkZTctYjBiZC0xMmZhMGRlYjhlMzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiMDQ4MDY0 LTg3ZGUtNGRlNy1iMGJkLTEyZmEwZGViOGUzMi8wLzU5QjE5REQxRDY0Njc5M0Y1 RjE3RDg5QzQyQUMyRjYzOTlGQjE4NTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnR74wDQYJKoZIhvcNAQELBQADggEBAC+CF40WcFIuKyIedEor711x/w8pSD9r PsZENc3g/IQjkcrslOanIDDZ4kXgWNh8T4WXThkMkw1JSMN5BeUGO+4wvDnekfD3 zT2CNradgVgroPWzJe5wEdTGZorBSaIcojJ3y4HfhGcy+JZ3SG+8RztErqTwCtEY 9+u9crqIzEvgrehgzmdtUPMC0hG+6FGwArpiEB5koWZzceYgh5Uw67QCadnDNZUL 3wqc94WW0iZ4+gBh3XUOP1LS8eoAhTJtoTDUucs0LFKAKiR3KyG8aywN4qqJtb/U uMupHwCOg7bhpPx4QxJYkeu/PAFDV68/wKrcyMqeZLj6IW7/2cn/xX4= -----END CERTIFICATE-----Generated at Sat Apr 5 10:28:06 2025 by rpki-client