$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer File: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer (raw, json) Hash identifier: A4Qocao8bAcM+VpbQFY9I3QqH7QiWs2gB/TJzJMsoc4= Subject key identifier: B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4F499C2043B4894401443F9F53330BFCFBADB108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft caRepository: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 14:41:13 +0000 Certificate not after: Mon 30 Jun 2025 14:46:13 +0000 Subordinate resources: IP: 103.153.34.0/23 IP: 2001:df4:2d80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:49:9c:20:43:b4:89:44:01:44:3f:9f:53:33:0b:fc:fb:ad:b1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 14:41:13 2024 GMT Not After : Jun 30 14:46:13 2025 GMT Subject: CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:9e:a4:ae:3e:5e:d9:72:61:8d:47:87:f5: be:c4:39:e9:8d:01:13:f4:65:48:b4:27:10:b8:f5: f3:00:b2:63:64:55:b1:d3:8b:0f:83:69:23:97:0c: 84:ac:ba:54:bc:8d:1e:ae:84:32:8c:d2:10:43:f2: ed:2b:bb:5f:d7:24:d9:99:69:99:db:ea:e3:54:48: 1a:84:01:7a:34:47:27:e6:ae:28:a0:29:ee:35:8d: 76:30:3a:c1:53:18:32:a2:b8:29:2a:94:93:e5:32: 22:6b:63:60:c9:22:54:c9:73:87:20:f1:94:62:a6: 80:2c:d4:50:82:3d:66:81:8d:d9:83:76:40:a0:8c: 18:8d:bd:e7:8a:f3:3d:a9:8b:8e:bd:ae:4e:a9:41: 0c:c0:ab:ea:4b:dc:2f:74:22:28:ad:d1:7e:0d:65: 79:64:f0:28:be:65:cc:10:2c:87:69:a9:cb:5d:78: aa:9e:46:f9:6d:ca:5c:ba:25:ca:da:27:d0:07:62: cd:e3:c6:46:ea:c6:fc:b8:7a:65:1f:85:cc:60:c1: 30:73:06:47:26:ac:68:19:c9:cc:77:c0:87:b7:43: 94:28:4a:0a:d4:e6:c2:1f:e3:a1:45:50:2a:50:95: bc:e8:18:f6:22:f2:1d:64:92:0e:c7:b8:8d:dc:25: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.34.0/23 IPv6: 2001:df4:2d80::/48 Signature Algorithm: sha256WithRSAEncryption 8e:77:4a:c2:ae:e8:23:8d:b7:a8:0d:e3:02:4d:19:95:5e:8c: 21:19:b6:51:fa:dd:df:58:39:4f:81:35:e3:99:5d:63:7d:5e: c9:02:1a:0c:bb:3f:d5:08:c4:93:be:9d:a0:a4:4f:e2:2e:95: 9a:c1:4a:0a:27:5a:38:32:89:68:6c:77:44:bb:3d:47:b3:91: 31:09:68:f4:d1:82:9f:26:c4:c1:63:23:92:6a:2a:32:80:8a: d4:3d:0a:b1:b9:cd:0e:06:24:b7:92:0f:52:23:43:86:6b:6e: c1:59:c3:ff:14:23:07:60:fb:41:1d:be:f6:58:2c:a3:4e:6a: 72:64:0a:bb:33:dd:ac:4c:94:3d:64:2d:a9:3a:58:3d:f1:03: 58:1c:b7:8b:27:ba:6f:34:54:36:97:df:32:47:2f:8f:d5:8c: 59:d0:bb:8c:40:22:c8:d2:d6:86:97:17:4e:ee:07:12:1b:a2: cb:83:64:88:79:9c:a9:66:06:c7:2f:8b:cb:15:0e:ad:51:8d: ce:77:e0:b8:02:c0:24:2d:95:7a:f7:e4:f9:13:6b:dc:a7:e8: 49:d0:b9:6b:2e:27:07:1f:bd:ff:9f:3a:3c:67:e8:e9:a1:2f: 10:22:42:2f:2a:33:11:67:c0:08:e3:d1:03:be:78:f9:d1:cb: c0:5a:4b:e5 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUT0mcIEO0iUQBRD+fUzML/PutsQgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE0NDExM1oX DTI1MDYzMDE0NDYxM1owMzExMC8GA1UEAxMoQjU5MTA1OUI2QUYyRjVENjZFQkJE MTQwMzFEQTIzRTVBQUZDNjRGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPEnqSuPl7ZcmGNR4f1vsQ56Y0BE/RlSLQnELj18wCyY2RVsdOLD4NpI5cM hKy6VLyNHq6EMozSEEPy7Su7X9ck2Zlpmdvq41RIGoQBejRHJ+auKKAp7jWNdjA6 wVMYMqK4KSqUk+UyImtjYMkiVMlzhyDxlGKmgCzUUII9ZoGN2YN2QKCMGI2954rz PamLjr2uTqlBDMCr6kvcL3QiKK3Rfg1leWTwKL5lzBAsh2mpy114qp5G+W3KXLol yton0AdizePGRurG/Lh6ZR+FzGDBMHMGRyasaBnJzHfAh7dDlChKCtTmwh/joUVQ KlCVvOgY9iLyHWSSDse4jdwllF8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLWRBZtq8vXWbrvRQDHaI+Wq/GT3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZGM0MWMxYS1lMDg4LTRlZjYtOWQyOC04MTRjNjE0NTZkMzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkYzQxYzFh LWUwODgtNGVmNi05ZDI4LTgxNGM2MTQ1NmQzMC8wL0I1OTEwNTlCNkFGMkY1RDY2 RUJCRDE0MDMxREEyM0U1QUFGQzY0RjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnmSIwDwQCAAIwCQMHACABDfQtgDANBgkqhkiG9w0BAQsFAAOCAQEAjndKwq7o I423qA3jAk0ZlV6MIRm2Ufrd31g5T4E145ldY31eyQIaDLs/1QjEk76doKRP4i6V msFKCidaODKJaGx3RLs9R7ORMQlo9NGCnybEwWMjkmoqMoCK1D0KsbnNDgYkt5IP UiNDhmtuwVnD/xQjB2D7QR2+9lgso05qcmQKuzPdrEyUPWQtqTpYPfEDWBy3iye6 bzRUNpffMkcvj9WMWdC7jEAiyNLWhpcXTu4HEhuiy4NkiHmcqWYGxy+LyxUOrVGN znfguALAJC2Vevfk+RNr3KfoSdC5ay4nBx+9/586PGfo6aEvECJCLyozEWfACOPR A754+dHLwFpL5Q== -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:28 2024 by rpki-client on console-fra.rpki-client.org