$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer File: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer (raw, json) Hash identifier: FFnpjGD8/z9lgzl5x5Tmea+ZdzuMk8j/ElYh36TxMj0= Subject key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0A9157A0D10CA722007A1D4329C41C219821C72C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft caRepository: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 01 Aug 2024 13:08:08 +0000 Certificate not after: Thu 31 Jul 2025 13:13:08 +0000 Subordinate resources: IP: 103.13.6.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:91:57:a0:d1:0c:a7:22:00:7a:1d:43:29:c4:1c:21:98:21:c7:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 1 13:08:08 2024 GMT Not After : Jul 31 13:13:08 2025 GMT Subject: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:32:ef:20:cb:4f:5d:f8:25:ab:1f:4c:d4: 54:e8:19:a2:05:81:f7:6e:88:27:dc:05:4d:fd:ba: a7:2c:6f:94:7f:ca:59:56:3b:22:5a:04:ec:cd:99: da:5f:43:d2:c0:23:e6:47:c9:79:27:ce:fc:c2:41: 18:f5:e8:f2:5f:81:ed:74:ca:19:0d:b1:e0:75:4e: c1:25:12:a3:d2:44:47:f5:51:1a:48:3d:74:9d:d5: d4:32:61:c3:7a:e4:2d:6b:84:cd:8c:62:49:6b:3c: 6c:32:a1:92:79:8d:6e:2d:e3:52:ab:65:ce:a8:3f: 1e:5c:82:2b:0f:c6:d9:86:78:9d:88:da:a9:cb:ca: 6f:c7:17:41:66:20:9f:36:51:08:cb:ea:7d:18:9e: ed:54:f1:cf:6c:45:d8:3f:80:51:65:c2:c4:66:24: 16:ef:00:b7:cc:31:e6:a7:75:8d:39:3f:f8:b4:fd: 48:0d:fe:07:33:3b:71:79:27:15:d5:26:14:16:b5: 2b:35:23:ca:cb:41:5b:47:e2:9f:16:bd:6c:68:75: 07:29:c6:ac:bd:93:d0:5b:62:5d:9f:c6:bf:9e:88: e0:5e:79:1f:fb:fa:ef:88:23:05:84:53:0c:d7:cf: b5:dc:ac:08:58:5b:66:46:74:92:89:f9:c9:a5:b0: e3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.6.0/23 Signature Algorithm: sha256WithRSAEncryption 64:ba:49:82:41:f7:9f:8c:af:20:53:c5:20:32:ec:53:48:fd: c4:ac:25:8e:9a:b3:9f:b8:ab:14:a0:f7:1e:98:9f:cb:e1:38: 1e:a1:06:63:cb:24:d7:ed:17:3a:87:ba:a1:c2:84:4d:cd:20: b3:e5:a6:2e:b1:87:30:5a:43:fb:47:6d:65:63:8b:57:99:2d: 0e:0f:24:bd:e3:2c:b9:41:21:62:1e:da:d1:fb:95:0d:e9:5a: 64:ec:38:32:2d:e1:00:78:92:90:0c:2d:2e:18:8e:80:ce:ad: 62:a8:87:c6:44:77:79:51:b1:4b:b7:23:38:2a:36:d7:5c:1b: fa:84:5e:a0:9f:b8:77:b7:88:2e:1c:9d:b5:f1:fc:75:f5:d9: d4:31:cb:1e:10:2b:f5:80:8a:65:7a:ce:b0:88:f7:71:70:5f: 1f:d4:d1:08:71:f4:fa:0d:fb:a6:09:5d:01:31:89:08:a8:88: 13:b6:05:37:c8:25:e2:1f:6f:b6:13:e6:f1:31:bf:e1:2b:b7: 3f:5b:b9:8e:f9:49:a9:93:f1:af:96:8a:b7:44:dc:55:24:cf: ae:9a:ab:db:8e:0c:35:96:81:a1:cf:3b:ba:37:84:f5:2f:90: 68:38:17:a5:8c:6a:18:23:50:bb:0c:77:8a:cb:4c:84:39:fb: 55:03:c4:b6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUCpFXoNEMpyIAeh1DKcQcIZghxywwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgwMTEzMDgwOFoX DTI1MDczMTEzMTMwOFowMzExMC8GA1UEAxMoMENENDQ0RTBDMDhEOTJFMzJCMDU0 QkY3RjQ3ODNBMjdFMEIwQURDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXLMu8gy09d+CWrH0zUVOgZogWB926IJ9wFTf26pyxvlH/KWVY7IloE7M2Z 2l9D0sAj5kfJeSfO/MJBGPXo8l+B7XTKGQ2x4HVOwSUSo9JER/VRGkg9dJ3V1DJh w3rkLWuEzYxiSWs8bDKhknmNbi3jUqtlzqg/HlyCKw/G2YZ4nYjaqcvKb8cXQWYg nzZRCMvqfRie7VTxz2xF2D+AUWXCxGYkFu8At8wx5qd1jTk/+LT9SA3+BzM7cXkn FdUmFBa1KzUjystBW0finxa9bGh1BynGrL2T0FtiXZ/Gv56I4F55H/v674gjBYRT DNfPtdysCFhbZkZ0kon5yaWw4wsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAzURODAjZLjKwVL9/R4OifgsK3LMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NjUwNmU3Mi04Yjg3LTQ3MDEtYTM2MC1hZWJlMjU4NDhmNzEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ2NTA2ZTcy LThiODctNDcwMS1hMzYwLWFlYmUyNTg0OGY3MS8wLzBDRDQ0NEUwQzA4RDkyRTMy QjA1NEJGN0Y0NzgzQTI3RTBCMEFEQ0IubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnDQYwDQYJKoZIhvcNAQELBQADggEBAGS6SYJB95+MryBTxSAy7FNI/cSsJY6a s5+4qxSg9x6Yn8vhOB6hBmPLJNftFzqHuqHChE3NILPlpi6xhzBaQ/tHbWVji1eZ LQ4PJL3jLLlBIWIe2tH7lQ3pWmTsODIt4QB4kpAMLS4YjoDOrWKoh8ZEd3lRsUu3 IzgqNtdcG/qEXqCfuHe3iC4cnbXx/HX12dQxyx4QK/WAimV6zrCI93FwXx/U0Qhx 9PoN+6YJXQExiQioiBO2BTfIJeIfb7YT5vExv+Ertz9buY75SamT8a+WirdE3FUk z66aq9uODDWWgaHPO7o3hPUvkGg4F6WMahgjULsMd4rLTIQ5+1UDxLY= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:13 2024 by rpki-client on console-fra.rpki-client.org