$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer File: 44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer (raw, json) Hash identifier: Cbdkd92IHHFbkDIIgMxTwI+0SdD1Uhw+KM1Rc7SOvIw= Subject key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 76603285207EA101D2D57F047FCDADAFEF4F348B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft caRepository: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 10:00:14 +0000 Certificate not after: Mon 29 Jul 2024 10:05:14 +0000 Subordinate resources: IP: 36.37.64.0/18 IP: 61.8.64.0/20 IP: 123.231.128.0/17 IP: 125.213.128.0/19 IP: 182.23.0.0/17 IP: 183.91.64.0/19 IP: 202.152.0.0/18 IP: 2400:8000::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 May 2024 16:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:60:32:85:20:7e:a1:01:d2:d5:7f:04:7f:cd:ad:af:ef:4f:34:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 10:00:14 2023 GMT Not After : Jul 29 10:05:14 2024 GMT Subject: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:52:7b:53:08:d5:c4:47:9a:c3:96:0c:06:cf: 64:e3:99:4b:29:92:b6:3a:09:d3:a4:e5:a0:a7:9f: da:26:35:3a:f4:61:4d:7e:5f:3b:ab:ef:b0:83:90: 2b:bd:20:bd:fd:f6:9f:dd:64:31:19:6d:69:53:f6: d9:27:90:24:bb:b4:be:fe:b6:f2:07:f4:93:d7:c8: da:1c:7a:b6:18:df:a0:a8:2f:af:24:58:53:d2:8e: 4f:51:d2:5f:72:d2:8c:af:3c:30:b0:5a:1c:61:3d: c3:64:b4:1e:c7:fc:f7:9c:42:7f:55:8b:1d:b1:75: e6:99:2e:54:1e:5a:29:bd:9b:76:c8:11:a3:7b:7a: f6:9b:d6:91:b6:3b:2d:68:79:ba:0e:48:ae:20:1c: ef:34:7f:ff:0b:fd:78:75:b3:19:41:e3:bf:d9:d9: b2:7c:ce:98:36:3c:e2:8a:31:7d:b8:56:aa:c3:79: 86:e5:d3:1d:6b:09:3f:68:66:f6:d7:14:8a:d5:b1: 95:1e:53:da:8a:17:44:f3:0c:a8:b6:70:e0:93:96: f0:fb:2d:0e:e0:64:36:b1:72:bc:50:49:b2:da:a9: 29:dd:f9:91:3d:03:77:c8:dd:c3:1d:9b:cd:97:bc: 01:73:0c:d3:fd:98:af:cd:b1:66:0d:aa:bd:00:35: 3f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.37.64.0/18 61.8.64.0/20 123.231.128.0/17 125.213.128.0/19 182.23.0.0/17 183.91.64.0/19 202.152.0.0/18 IPv6: 2400:8000::/32 Signature Algorithm: sha256WithRSAEncryption 2b:71:de:ad:e1:56:7c:9e:b9:9e:60:09:2d:dc:d3:33:13:27: ff:88:7c:2a:0c:7d:16:6a:be:5f:3e:1e:29:bd:c3:b9:43:a9: b0:3a:d4:9c:f7:2c:85:f1:93:65:82:4c:f3:12:5c:1c:d9:36: 71:34:2e:74:09:4f:55:59:4d:0a:ff:df:3f:1e:28:83:0e:77: 91:81:4f:f0:66:8f:de:d3:f2:48:33:21:7e:e8:65:88:d9:08: f7:0d:05:7f:59:ce:07:4e:d7:e4:06:a7:57:cd:d2:ae:1f:a5: 34:39:ae:d0:0f:84:e3:31:72:a5:d9:d5:db:fc:51:43:21:e1: 8a:9c:2e:e4:d4:03:4c:47:f5:03:29:6c:6a:9d:00:50:e2:36: e2:db:fe:39:9f:48:e6:8c:18:11:ba:28:4f:9f:c4:65:fd:75: 15:91:21:1f:bf:81:86:ea:13:2c:14:e2:bf:fa:4e:a5:b1:30: 75:fc:c0:e1:15:6d:38:58:f4:3a:66:d6:66:27:c9:fd:0a:9c: 81:ec:6c:43:ee:ec:b6:f5:41:2b:5d:25:e7:0b:67:12:99:c9: 46:6f:4d:1f:8e:a1:41:64:73:44:6b:6f:d1:d0:dc:ef:c3:d5: ba:ca:6a:0b:6b:f1:f7:40:4f:bb:ba:1a:c8:e5:f4:68:ee:59: 01:de:95:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdmAyhSB+oQHS1X8Ef82tr+9PNIswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTEwMDAxNFoX DTI0MDcyOTEwMDUxNFowMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYx ODY0QTBERUE0N0VDRjY2NzUyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZSe1MI1cRHmsOWDAbPZOOZSymStjoJ06TloKef2iY1OvRhTX5fO6vvsIOQ K70gvf32n91kMRltaVP22SeQJLu0vv628gf0k9fI2hx6thjfoKgvryRYU9KOT1HS X3LSjK88MLBaHGE9w2S0Hsf895xCf1WLHbF15pkuVB5aKb2bdsgRo3t69pvWkbY7 LWh5ug5IriAc7zR//wv9eHWzGUHjv9nZsnzOmDY84ooxfbhWqsN5huXTHWsJP2hm 9tcUitWxlR5T2ooXRPMMqLZw4JOW8PstDuBkNrFyvFBJstqpKd35kT0Dd8jdwx2b zZe8AXMM0/2Yr82xZg2qvQA1P3kCAwEAAaOCAuswggLnMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFES/ZoK2tJMEjG8YZKDepH7PZnUrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRl LWY5MjEtNDI3NC04NDk3LTI5ODdkOTA5NTQzZS8wLzQ0QkY2NjgyQjZCNDkzMDQ4 QzZGMTg2NEEwREVBNDdFQ0Y2Njc1MkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwUgYIKwYBBQUHAQcBAf8EQzBBMDAEAgABMCoD BAYkJUADBAQ9CEADBAd754ADBAV91YADBAe2FwADBAW3W0ADBAbKmAAwDQQCAAIw BwMFACQAgAAwDQYJKoZIhvcNAQELBQADggEBACtx3q3hVnyeuZ5gCS3c0zMTJ/+I fCoMfRZqvl8+Him9w7lDqbA61Jz3LIXxk2WCTPMSXBzZNnE0LnQJT1VZTQr/3z8e KIMOd5GBT/Bmj97T8kgzIX7oZYjZCPcNBX9ZzgdO1+QGp1fN0q4fpTQ5rtAPhOMx cqXZ1dv8UUMh4YqcLuTUA0xH9QMpbGqdAFDiNuLb/jmfSOaMGBG6KE+fxGX9dRWR IR+/gYbqEywU4r/6TqWxMHX8wOEVbThY9Dpm1mYnyf0KnIHsbEPu7Lb1QStdJecL ZxKZyUZvTR+OoUFkc0Rrb9HQ3O/D1brKagtr8fdAT7u6Gsjl9GjuWQHelSs= -----END CERTIFICATE-----Generated at Tue Apr 30 12:55:44 2024 by rpki-client on console-fra.rpki-client.org