$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer File: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer (raw, json) Hash identifier: 7K+4o+LEAmCkI33Al8yuLIxJd6HK6v67zCfGwcZpKfc= Subject key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0A2998801EEC78449AE3E2818F50A78E53AEB7FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft caRepository: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 31 Aug 2023 13:02:37 +0000 Certificate not after: Thu 29 Aug 2024 13:07:37 +0000 Subordinate resources: IP: 103.13.6.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:29:98:80:1e:ec:78:44:9a:e3:e2:81:8f:50:a7:8e:53:ae:b7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 31 13:02:37 2023 GMT Not After : Aug 29 13:07:37 2024 GMT Subject: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:32:ef:20:cb:4f:5d:f8:25:ab:1f:4c:d4: 54:e8:19:a2:05:81:f7:6e:88:27:dc:05:4d:fd:ba: a7:2c:6f:94:7f:ca:59:56:3b:22:5a:04:ec:cd:99: da:5f:43:d2:c0:23:e6:47:c9:79:27:ce:fc:c2:41: 18:f5:e8:f2:5f:81:ed:74:ca:19:0d:b1:e0:75:4e: c1:25:12:a3:d2:44:47:f5:51:1a:48:3d:74:9d:d5: d4:32:61:c3:7a:e4:2d:6b:84:cd:8c:62:49:6b:3c: 6c:32:a1:92:79:8d:6e:2d:e3:52:ab:65:ce:a8:3f: 1e:5c:82:2b:0f:c6:d9:86:78:9d:88:da:a9:cb:ca: 6f:c7:17:41:66:20:9f:36:51:08:cb:ea:7d:18:9e: ed:54:f1:cf:6c:45:d8:3f:80:51:65:c2:c4:66:24: 16:ef:00:b7:cc:31:e6:a7:75:8d:39:3f:f8:b4:fd: 48:0d:fe:07:33:3b:71:79:27:15:d5:26:14:16:b5: 2b:35:23:ca:cb:41:5b:47:e2:9f:16:bd:6c:68:75: 07:29:c6:ac:bd:93:d0:5b:62:5d:9f:c6:bf:9e:88: e0:5e:79:1f:fb:fa:ef:88:23:05:84:53:0c:d7:cf: b5:dc:ac:08:58:5b:66:46:74:92:89:f9:c9:a5:b0: e3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.6.0/23 Signature Algorithm: sha256WithRSAEncryption 70:f1:94:db:c8:aa:ba:46:ca:6a:a3:0b:f0:d7:03:65:b1:01: c0:16:f3:c1:b3:af:7f:06:80:f5:0f:8d:5a:55:08:26:b9:f5: 01:8b:52:b9:d3:27:ba:26:1d:2b:d7:43:9a:a1:09:f3:37:0f: 9a:06:48:3e:39:e4:c3:4e:03:ae:0f:2d:d1:d9:48:1c:ec:ef: ae:e0:0e:e2:6a:d7:b5:00:ab:b2:69:83:d5:7b:da:0f:5d:c7: c1:40:82:1c:19:28:84:06:d1:96:f6:9d:68:43:95:19:c6:f6: 54:b0:a7:1b:79:c8:18:3b:9b:5a:8d:b1:13:d6:01:d7:7a:66: 62:32:bc:dd:50:08:75:f7:a9:19:f5:0f:b5:cc:97:65:cf:c1: ef:3d:7f:85:31:de:49:e9:71:92:ba:4c:32:05:66:1a:52:f2: de:4d:32:8d:d2:b9:a4:c8:49:8a:04:e1:54:df:dc:6b:0c:eb: df:ad:8a:53:81:07:f0:9b:db:17:c6:8d:a1:20:de:ad:50:f7: 97:d1:7e:ac:64:26:34:8f:45:8c:3d:76:9e:d7:82:fe:f9:de: 19:62:12:2d:d7:99:d6:3c:86:ba:25:88:e8:97:b8:c9:39:c0: 3c:b8:40:2e:f3:74:bc:c2:23:b8:dd:ad:45:94:e8:71:d5:a9: 26:a4:82:53 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUCimYgB7seESa4+KBj1CnjlOut/0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgzMTEzMDIzN1oX DTI0MDgyOTEzMDczN1owMzExMC8GA1UEAxMoMENENDQ0RTBDMDhEOTJFMzJCMDU0 QkY3RjQ3ODNBMjdFMEIwQURDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXLMu8gy09d+CWrH0zUVOgZogWB926IJ9wFTf26pyxvlH/KWVY7IloE7M2Z 2l9D0sAj5kfJeSfO/MJBGPXo8l+B7XTKGQ2x4HVOwSUSo9JER/VRGkg9dJ3V1DJh w3rkLWuEzYxiSWs8bDKhknmNbi3jUqtlzqg/HlyCKw/G2YZ4nYjaqcvKb8cXQWYg nzZRCMvqfRie7VTxz2xF2D+AUWXCxGYkFu8At8wx5qd1jTk/+LT9SA3+BzM7cXkn FdUmFBa1KzUjystBW0finxa9bGh1BynGrL2T0FtiXZ/Gv56I4F55H/v674gjBYRT DNfPtdysCFhbZkZ0kon5yaWw4wsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAzURODAjZLjKwVL9/R4OifgsK3LMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NjUwNmU3Mi04Yjg3LTQ3MDEtYTM2MC1hZWJlMjU4NDhmNzEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ2NTA2ZTcy LThiODctNDcwMS1hMzYwLWFlYmUyNTg0OGY3MS8wLzBDRDQ0NEUwQzA4RDkyRTMy QjA1NEJGN0Y0NzgzQTI3RTBCMEFEQ0IubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnDQYwDQYJKoZIhvcNAQELBQADggEBAHDxlNvIqrpGymqjC/DXA2WxAcAW88Gz r38GgPUPjVpVCCa59QGLUrnTJ7omHSvXQ5qhCfM3D5oGSD455MNOA64PLdHZSBzs 767gDuJq17UAq7Jpg9V72g9dx8FAghwZKIQG0Zb2nWhDlRnG9lSwpxt5yBg7m1qN sRPWAdd6ZmIyvN1QCHX3qRn1D7XMl2XPwe89f4Ux3knpcZK6TDIFZhpS8t5NMo3S uaTISYoE4VTf3GsM69+tilOBB/Cb2xfGjaEg3q1Q95fRfqxkJjSPRYw9dp7Xgv75 3hliEi3XmdY8hroliOiXuMk5wDy4QC7zdLzCI7jdrUWU6HHVqSakglM= -----END CERTIFICATE-----Generated at Wed May 8 21:02:09 2024 by rpki-client on console-fra.rpki-client.org