$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer File: 4412C369832E86CF255C7255EB1ECA7938910246.cer (raw, json) Hash identifier: MDFYa/vv3ypFJNv7ZwWSh6q4VlpWYbC6E/aIDCyyliQ= Subject key identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 17C50EA67BD2DA76CC8698B768D8DAE537A08564 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft caRepository: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 15 Sep 2024 21:19:56 +0000 Certificate not after: Sun 14 Sep 2025 21:24:56 +0000 Subordinate resources: IP: 103.158.121.0/24 IP: 2001:df5:5280::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c5:0e:a6:7b:d2:da:76:cc:86:98:b7:68:d8:da:e5:37:a0:85:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 15 21:19:56 2024 GMT Not After : Sep 14 21:24:56 2025 GMT Subject: CN=4412C369832E86CF255C7255EB1ECA7938910246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:47:4f:1b:19:72:1f:59:ca:76:84:6e:72: 4d:87:97:10:16:83:b0:9e:d1:93:8a:d6:4d:c9:1a: ba:93:d7:4f:77:11:4a:b0:90:28:db:16:82:85:89: a4:ad:e7:f7:1b:ad:11:0f:c4:b2:73:74:3c:ed:c4: 53:3a:99:a8:1d:b1:59:f8:9a:cc:a6:34:90:01:a0: 7d:7b:0b:cb:d5:35:f3:47:e4:51:98:51:42:f5:a7: d2:68:db:1d:20:00:0d:d8:7d:b6:2d:d1:c9:1e:ec: e8:84:0c:4c:e6:5d:9b:f9:08:97:4a:9a:6c:25:9f: ee:96:6d:bc:d9:48:aa:37:e5:5f:df:fc:c3:aa:16: c6:dc:cc:bd:41:06:36:6b:01:19:e5:a9:ea:b5:39: 7c:87:17:2c:3b:b3:37:52:f2:1f:79:ff:0f:40:56: 8b:e3:71:f9:31:a4:eb:0f:f1:1b:5a:78:24:db:8c: 66:35:63:1a:14:17:81:45:21:cc:d5:bb:62:96:54: 4e:84:44:3d:e4:0f:69:3a:b5:bd:c8:97:00:67:0d: 55:99:a0:26:73:63:3b:19:5f:b0:74:42:d9:11:2f: 38:60:5b:4a:6e:6a:49:de:05:2d:ae:7c:d8:de:be: d3:12:0e:55:52:7a:e7:57:fa:a0:e8:d1:9b:4d:08: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.121.0/24 IPv6: 2001:df5:5280::/48 Signature Algorithm: sha256WithRSAEncryption 86:cb:b4:02:88:01:a7:fd:9d:0a:7c:2e:7b:2c:c4:32:9b:32: 88:15:50:79:c2:9e:2f:9b:69:3d:c3:82:53:1c:5c:d1:bf:58: a5:d3:5e:b0:12:8d:30:2e:7d:f4:0f:e7:87:5b:b5:b8:25:ad: 8d:52:58:ad:e7:1a:d3:d5:54:64:71:23:b1:59:76:77:72:b1: cf:58:1f:4c:21:9a:e2:ff:d5:6b:6c:d3:d7:0c:7f:a7:00:88: c9:37:bb:cb:6c:30:8d:a8:23:7d:74:3a:00:fe:23:90:d6:ee: 05:d4:44:1f:4d:fe:21:21:53:3e:23:97:50:83:e5:e9:38:93: e2:d3:37:93:97:24:2a:a0:e4:9c:66:ce:6c:71:55:05:e9:a9: a4:ee:55:a2:3e:f9:09:5c:63:48:be:b9:f6:c4:a5:a5:30:ab: a2:fc:21:ff:74:bf:ad:d1:a2:68:f8:4c:0d:16:0d:d3:42:a7: 1d:3a:2c:44:36:78:5e:0b:bb:6d:f3:04:3e:32:b7:c0:e4:6c: 3d:19:20:6a:4b:b0:59:20:5c:71:f3:7b:27:f0:28:96:4c:fd: 70:65:1a:4c:7a:45:5d:a5:f8:0e:4d:18:d0:24:9b:c3:04:6c: cc:9c:c2:29:d1:77:3c:2c:b0:62:0d:bc:7d:d1:69:3b:1b:e5: 57:7a:64:f1 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUF8UOpnvS2nbMhpi3aNja5TeghWQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxNTIxMTk1NloX DTI1MDkxNDIxMjQ1NlowMzExMC8GA1UEAxMoNDQxMkMzNjk4MzJFODZDRjI1NUM3 MjU1RUIxRUNBNzkzODkxMDI0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQSR08bGXIfWcp2hG5yTYeXEBaDsJ7Rk4rWTckaupPXT3cRSrCQKNsWgoWJ pK3n9xutEQ/EsnN0PO3EUzqZqB2xWfiazKY0kAGgfXsLy9U180fkUZhRQvWn0mjb HSAADdh9ti3RyR7s6IQMTOZdm/kIl0qabCWf7pZtvNlIqjflX9/8w6oWxtzMvUEG NmsBGeWp6rU5fIcXLDuzN1LyH3n/D0BWi+Nx+TGk6w/xG1p4JNuMZjVjGhQXgUUh zNW7YpZUToREPeQPaTq1vciXAGcNVZmgJnNjOxlfsHRC2REvOGBbSm5qSd4FLa58 2N6+0xIOVVJ651f6oOjRm00I7/cCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEQSw2mDLobPJVxyVeseynk4kQJGMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMmM1MTFiZS02N2EyLTQ0YzktYjE4Mi1hOTExYmE5NWJlMDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyYzUxMWJl LTY3YTItNDRjOS1iMTgyLWE5MTFiYTk1YmUwMC8wLzQ0MTJDMzY5ODMyRTg2Q0Yy NTVDNzI1NUVCMUVDQTc5Mzg5MTAyNDYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnnnkwDwQCAAIwCQMHACABDfVSgDANBgkqhkiG9w0BAQsFAAOCAQEAhsu0AogB p/2dCnwueyzEMpsyiBVQecKeL5tpPcOCUxxc0b9YpdNesBKNMC599A/nh1u1uCWt jVJYreca09VUZHEjsVl2d3Kxz1gfTCGa4v/Va2zT1wx/pwCIyTe7y2wwjagjfXQ6 AP4jkNbuBdREH03+ISFTPiOXUIPl6TiT4tM3k5ckKqDknGbObHFVBemppO5Voj75 CVxjSL659sSlpTCrovwh/3S/rdGiaPhMDRYN00KnHTosRDZ4Xgu7bfMEPjK3wORs PRkgakuwWSBccfN7J/Aolkz9cGUaTHpFXaX4Dk0Y0CSbwwRszJzCKdF3PCywYg28 fdFpOxvlV3pk8Q== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:41 2024 by rpki-client on console-ams.rpki-client.org