$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer File: B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.cer (raw, json) Hash identifier: oFYhcpWexEUZ23gXCW87WD9+n+kvAEZwVmfOlxGK9kA= Subject key identifier: B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 050F675FEF999D5C4EB92F35F57B25333D93E6D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft caRepository: rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 01:36:42 +0000 Certificate not after: Mon 29 Jul 2024 01:41:42 +0000 Subordinate resources: IP: 103.153.34.0/23 IP: 2001:df4:2d80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:0f:67:5f:ef:99:9d:5c:4e:b9:2f:35:f5:7b:25:33:3d:93:e6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 01:36:42 2023 GMT Not After : Jul 29 01:41:42 2024 GMT Subject: CN=B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:9e:a4:ae:3e:5e:d9:72:61:8d:47:87:f5: be:c4:39:e9:8d:01:13:f4:65:48:b4:27:10:b8:f5: f3:00:b2:63:64:55:b1:d3:8b:0f:83:69:23:97:0c: 84:ac:ba:54:bc:8d:1e:ae:84:32:8c:d2:10:43:f2: ed:2b:bb:5f:d7:24:d9:99:69:99:db:ea:e3:54:48: 1a:84:01:7a:34:47:27:e6:ae:28:a0:29:ee:35:8d: 76:30:3a:c1:53:18:32:a2:b8:29:2a:94:93:e5:32: 22:6b:63:60:c9:22:54:c9:73:87:20:f1:94:62:a6: 80:2c:d4:50:82:3d:66:81:8d:d9:83:76:40:a0:8c: 18:8d:bd:e7:8a:f3:3d:a9:8b:8e:bd:ae:4e:a9:41: 0c:c0:ab:ea:4b:dc:2f:74:22:28:ad:d1:7e:0d:65: 79:64:f0:28:be:65:cc:10:2c:87:69:a9:cb:5d:78: aa:9e:46:f9:6d:ca:5c:ba:25:ca:da:27:d0:07:62: cd:e3:c6:46:ea:c6:fc:b8:7a:65:1f:85:cc:60:c1: 30:73:06:47:26:ac:68:19:c9:cc:77:c0:87:b7:43: 94:28:4a:0a:d4:e6:c2:1f:e3:a1:45:50:2a:50:95: bc:e8:18:f6:22:f2:1d:64:92:0e:c7:b8:8d:dc:25: 94:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:91:05:9B:6A:F2:F5:D6:6E:BB:D1:40:31:DA:23:E5:AA:FC:64:F7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bdc41c1a-e088-4ef6-9d28-814c61456d30/0/B591059B6AF2F5D66EBBD14031DA23E5AAFC64F7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.34.0/23 IPv6: 2001:df4:2d80::/48 Signature Algorithm: sha256WithRSAEncryption 53:6f:8e:5b:d7:1c:fa:fd:3f:92:cd:dd:78:87:6b:30:62:a1: 28:98:dc:a6:05:c8:91:17:6c:d5:f8:cf:64:51:19:91:a9:67: b1:5e:ae:1f:7c:78:09:0b:4c:ee:5a:1d:5c:bb:03:d4:9b:21: 12:60:20:a4:35:9d:62:9b:4f:23:d4:d3:db:d2:b3:94:c5:a8: dd:5e:96:fb:4f:5a:ea:d9:c1:bb:13:8b:77:b9:bd:b8:ad:99: fe:43:74:72:1e:fc:a4:e0:7b:68:ed:84:3f:ac:71:cf:7a:69: dc:f5:14:39:9c:1c:8f:21:64:ce:58:7b:03:63:7f:62:9c:9f: d3:17:d0:38:5d:d3:6c:7a:0d:fa:a1:34:5c:47:26:eb:fe:58: e8:d3:fb:34:bf:3d:e5:c4:b2:04:dc:94:f2:d1:29:32:77:d5: 13:f2:29:cc:9b:b0:3f:d1:34:31:f4:c2:7d:cb:03:1e:8d:8a: 4e:3f:9d:ce:61:03:31:27:5b:ab:c5:c7:72:33:50:fc:4b:9f: 06:31:d2:f9:d0:29:14:c8:1a:06:49:44:5d:fe:88:1e:23:25: 1d:54:86:70:18:8a:d0:03:b0:34:81:c6:26:55:94:04:2a:fb: 5a:c0:2c:9c:95:9f:e4:3a:e2:1e:9e:03:75:6f:99:bd:b0:e1: 68:b8:3f:5d -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUBQ9nX++ZnVxOuS819XslMz2T5tMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAxMzY0MloX DTI0MDcyOTAxNDE0MlowMzExMC8GA1UEAxMoQjU5MTA1OUI2QUYyRjVENjZFQkJE MTQwMzFEQTIzRTVBQUZDNjRGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPEnqSuPl7ZcmGNR4f1vsQ56Y0BE/RlSLQnELj18wCyY2RVsdOLD4NpI5cM hKy6VLyNHq6EMozSEEPy7Su7X9ck2Zlpmdvq41RIGoQBejRHJ+auKKAp7jWNdjA6 wVMYMqK4KSqUk+UyImtjYMkiVMlzhyDxlGKmgCzUUII9ZoGN2YN2QKCMGI2954rz PamLjr2uTqlBDMCr6kvcL3QiKK3Rfg1leWTwKL5lzBAsh2mpy114qp5G+W3KXLol yton0AdizePGRurG/Lh6ZR+FzGDBMHMGRyasaBnJzHfAh7dDlChKCtTmwh/joUVQ KlCVvOgY9iLyHWSSDse4jdwllF8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLWRBZtq8vXWbrvRQDHaI+Wq/GT3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZGM0MWMxYS1lMDg4LTRlZjYtOWQyOC04MTRjNjE0NTZkMzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkYzQxYzFh LWUwODgtNGVmNi05ZDI4LTgxNGM2MTQ1NmQzMC8wL0I1OTEwNTlCNkFGMkY1RDY2 RUJCRDE0MDMxREEyM0U1QUFGQzY0RjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnmSIwDwQCAAIwCQMHACABDfQtgDANBgkqhkiG9w0BAQsFAAOCAQEAU2+OW9cc +v0/ks3deIdrMGKhKJjcpgXIkRds1fjPZFEZkalnsV6uH3x4CQtM7lodXLsD1Jsh EmAgpDWdYptPI9TT29KzlMWo3V6W+09a6tnBuxOLd7m9uK2Z/kN0ch78pOB7aO2E P6xxz3pp3PUUOZwcjyFkzlh7A2N/Ypyf0xfQOF3TbHoN+qE0XEcm6/5Y6NP7NL89 5cSyBNyU8tEpMnfVE/IpzJuwP9E0MfTCfcsDHo2KTj+dzmEDMSdbq8XHcjNQ/Euf BjHS+dApFMgaBklEXf6IHiMlHVSGcBiK0AOwNIHGJlWUBCr7WsAsnJWf5DriHp4D dW+ZvbDhaLg/XQ== -----END CERTIFICATE-----Generated at Wed May 8 04:38:00 2024 by rpki-client on console-fra.rpki-client.org