$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer File: 4412C369832E86CF255C7255EB1ECA7938910246.cer (raw, json) Hash identifier: wD/YtI6NRpEnPEr1NYG+G+wGh3Y7AE++wIxkwbnDumY= Subject key identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1B3D75681082EBC0D19BB92CFDA0B6F3DA4A9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft caRepository: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 15 Oct 2023 12:51:49 +0000 Certificate not after: Sun 13 Oct 2024 12:56:49 +0000 Subordinate resources: IP: 103.158.121.0/24 IP: 2001:df5:5280::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3d:75:68:10:82:eb:c0:d1:9b:b9:2c:fd:a0:b6:f3:da:4a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 15 12:51:49 2023 GMT Not After : Oct 13 12:56:49 2024 GMT Subject: CN=4412C369832E86CF255C7255EB1ECA7938910246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:47:4f:1b:19:72:1f:59:ca:76:84:6e:72: 4d:87:97:10:16:83:b0:9e:d1:93:8a:d6:4d:c9:1a: ba:93:d7:4f:77:11:4a:b0:90:28:db:16:82:85:89: a4:ad:e7:f7:1b:ad:11:0f:c4:b2:73:74:3c:ed:c4: 53:3a:99:a8:1d:b1:59:f8:9a:cc:a6:34:90:01:a0: 7d:7b:0b:cb:d5:35:f3:47:e4:51:98:51:42:f5:a7: d2:68:db:1d:20:00:0d:d8:7d:b6:2d:d1:c9:1e:ec: e8:84:0c:4c:e6:5d:9b:f9:08:97:4a:9a:6c:25:9f: ee:96:6d:bc:d9:48:aa:37:e5:5f:df:fc:c3:aa:16: c6:dc:cc:bd:41:06:36:6b:01:19:e5:a9:ea:b5:39: 7c:87:17:2c:3b:b3:37:52:f2:1f:79:ff:0f:40:56: 8b:e3:71:f9:31:a4:eb:0f:f1:1b:5a:78:24:db:8c: 66:35:63:1a:14:17:81:45:21:cc:d5:bb:62:96:54: 4e:84:44:3d:e4:0f:69:3a:b5:bd:c8:97:00:67:0d: 55:99:a0:26:73:63:3b:19:5f:b0:74:42:d9:11:2f: 38:60:5b:4a:6e:6a:49:de:05:2d:ae:7c:d8:de:be: d3:12:0e:55:52:7a:e7:57:fa:a0:e8:d1:9b:4d:08: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.121.0/24 IPv6: 2001:df5:5280::/48 Signature Algorithm: sha256WithRSAEncryption 19:a3:bc:41:e0:86:df:e7:bb:32:95:63:ee:24:af:ae:f1:fa: f1:97:dc:b0:13:e6:7a:32:b8:26:9f:27:7a:47:78:19:7c:81: ea:53:a1:08:5c:ee:eb:b9:ee:3a:14:75:b8:2c:f3:e1:11:38: 2e:46:e1:0a:1e:08:fa:e2:40:91:c6:fa:d6:e2:32:94:97:f9: d9:5e:88:9c:63:e5:fe:59:d2:a4:c0:a6:2e:ba:a9:aa:dc:63: 65:65:00:d0:45:ed:3d:1b:c0:35:7d:eb:80:dd:bd:e8:fc:3d: fb:eb:32:80:1f:2f:26:4b:c8:a4:9e:d2:a1:99:87:d7:8f:3d: c6:60:c2:6e:5e:90:3c:0a:55:3a:05:0f:e8:d7:61:f2:52:6d: cb:4a:7b:41:8e:7b:8b:51:a1:e7:3b:a5:86:bd:53:1f:01:df: 4d:d4:9e:20:6d:ea:af:b7:9a:cd:4a:b6:a8:54:b9:ec:69:a5: ad:93:be:87:83:36:7a:4c:07:b3:c6:aa:63:3e:fd:ad:e8:9c: 11:56:e9:27:60:6e:85:90:6e:8b:1c:f0:d4:be:97:dc:ee:ac: 14:be:d7:f2:e4:9f:cb:75:53:b1:58:3f:4f:d6:c5:94:94:e9: 05:a8:8a:d2:64:09:70:cd:fd:e8:90:a9:ac:e9:52:68:8c:7b: 6a:22:20:d1 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgITGz11aBCC68DRm7ks/aC289pKnjANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjMxMDE1MTI1MTQ5WhcN MjQxMDEzMTI1NjQ5WjAzMTEwLwYDVQQDEyg0NDEyQzM2OTgzMkU4NkNGMjU1Qzcy NTVFQjFFQ0E3OTM4OTEwMjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BJHTxsZch9ZynaEbnJNh5cQFoOwntGTitZNyRq6k9dPdxFKsJAo2xaChYmk ref3G60RD8Syc3Q87cRTOpmoHbFZ+JrMpjSQAaB9ewvL1TXzR+RRmFFC9afSaNsd IAAN2H22LdHJHuzohAxM5l2b+QiXSppsJZ/ulm282UiqN+Vf3/zDqhbG3My9QQY2 awEZ5anqtTl8hxcsO7M3UvIfef8PQFaL43H5MaTrD/EbWngk24xmNWMaFBeBRSHM 1btillROhEQ95A9pOrW9yJcAZw1VmaAmc2M7GV+wdELZES84YFtKbmpJ3gUtrnzY 3r7TEg5VUnrnV/qg6NGbTQjv9wIDAQABo4ICyTCCAsUwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQURBLDaYMuhs8lXHJV6x7KeTiRAkYwHwYDVR0jBBgwFoAUuo93 0h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIv QkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgzMzc2Qi5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvdW85 MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv LzEyYzUxMWJlLTY3YTItNDRjOS1iMTgyLWE5MTFiYTk1YmUwMC8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJjNTExYmUt NjdhMi00NGM5LWIxODItYTkxMWJhOTViZTAwLzAvNDQxMkMzNjk4MzJFODZDRjI1 NUM3MjU1RUIxRUNBNzkzODkxMDI0Ni5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgME AGeeeTAPBAIAAjAJAwcAIAEN9VKAMA0GCSqGSIb3DQEBCwUAA4IBAQAZo7xB4Ibf 57sylWPuJK+u8frxl9ywE+Z6Mrgmnyd6R3gZfIHqU6EIXO7rue46FHW4LPPhETgu RuEKHgj64kCRxvrW4jKUl/nZXoicY+X+WdKkwKYuuqmq3GNlZQDQRe09G8A1feuA 3b3o/D376zKAHy8mS8ikntKhmYfXjz3GYMJuXpA8ClU6BQ/o12HyUm3LSntBjnuL UaHnO6WGvVMfAd9N1J4gbeqvt5rNSraoVLnsaaWtk76HgzZ6TAezxqpjPv2t6JwR VuknYG6FkG6LHPDUvpfc7qwUvtfy5J/LdVOxWD9P1sWUlOkFqIrSZAlwzf3okKms 6VJojHtqIiDR -----END CERTIFICATE-----Generated at Wed May 8 15:17:35 2024 by rpki-client on console-fra.rpki-client.org