$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer File: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer (raw, json) Hash identifier: olW8z2t8oR1lwU7BZQgqSL3W27e7kH3Yr0x/GzJG4aI= Subject key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 41B029DE8F057735CF8607150375B23358F0266A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft caRepository: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 13 Jul 2023 16:14:01 +0000 Certificate not after: Thu 11 Jul 2024 16:19:01 +0000 Subordinate resources: IP: 103.43.164.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b0:29:de:8f:05:77:35:cf:86:07:15:03:75:b2:33:58:f0:26:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 13 16:14:01 2023 GMT Not After : Jul 11 16:19:01 2024 GMT Subject: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:94:9c:6c:b7:98:7e:12:c3:b1:ea:90:6d: 03:97:f2:1d:61:53:11:28:62:83:d8:2e:ea:b1:12: 83:0a:a6:4f:a2:70:3e:e3:01:b5:6b:2c:db:88:6f: a7:5a:ec:2c:25:9b:35:be:65:b0:71:b6:ab:88:13: 07:8b:dc:c8:e0:a2:2a:d2:a4:70:bb:ee:3b:e7:92: cf:1a:ff:95:bc:76:87:25:5e:4d:8f:59:2a:1e:ea: af:61:bc:e2:2f:71:04:ba:91:0c:1b:b9:60:56:40: d0:9b:b6:37:3d:8b:61:6c:cb:33:91:06:66:8d:f1: 2c:a0:62:98:4e:d8:22:e9:c3:28:60:d2:1b:8a:f9: 6e:fe:e4:38:f2:a6:45:75:52:05:c9:29:74:6b:a4: 16:ed:09:e2:77:b1:b2:9e:04:0d:0b:5c:c4:e0:84: b0:89:19:52:c7:00:ff:3a:96:77:d7:27:b6:89:00: 8a:fe:74:1e:18:68:0f:0c:0b:58:03:30:00:06:53: 54:c6:81:a4:7a:ed:7a:5e:42:d7:0c:64:95:3f:a1: ca:25:c8:bf:49:f0:f4:7c:9f:55:64:df:ac:04:4a: 0c:79:87:22:a5:be:bc:49:06:c3:47:7a:2e:c0:74: 96:7e:8b:c1:c6:cc:c2:24:e0:17:f9:b4:73:64:57: bc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.43.164.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:26:fc:2f:8d:d9:ff:c3:34:31:b8:6a:f6:32:be:b9:ac:5a: e4:d6:05:2d:65:73:ab:28:77:16:56:12:8a:ed:70:84:39:3b: 04:71:40:d5:7f:78:e0:24:e2:60:3d:b9:97:3a:0d:42:3a:7c: 1f:f1:50:e5:2f:1b:ab:90:86:cc:c7:68:44:ef:c0:f2:55:5a: d6:d0:3a:7e:c1:82:5d:2a:ca:06:a5:1a:2f:8c:78:b2:63:1b: 12:14:9b:05:fa:fa:1b:76:56:19:95:bb:da:04:ac:75:59:95: 22:c9:a0:76:fa:b4:59:b3:05:76:12:cc:d0:15:c6:f0:04:95: c8:ed:31:e2:93:bd:57:61:4f:d9:e0:cd:72:c7:0d:75:d8:9b: d6:be:ba:d6:6f:b5:5b:70:97:2c:46:2c:88:12:70:e0:9f:55: 42:0f:1b:0a:58:76:0c:2f:15:80:4e:98:a3:d5:28:93:75:45: e4:cc:c1:73:63:6b:10:d4:d5:71:bb:4e:9a:3d:4a:8c:af:94: a1:32:9b:53:0e:16:d8:52:2b:15:16:36:2a:2f:0d:9a:be:cc: f7:ba:8b:ec:59:f3:13:fc:f0:dc:28:60:95:80:88:fd:f6:a7: 98:a6:87:60:02:cc:9e:0e:55:77:8b:95:75:8b:4e:b1:c3:15: e9:c9:47:81 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQbAp3o8FdzXPhgcVA3WyM1jwJmowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcxMzE2MTQwMVoX DTI0MDcxMTE2MTkwMVowMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3 QzUyMzM1M0NCNjdBMEI4RDNCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALx3lJxst5h+EsOx6pBtA5fyHWFTEShig9gu6rESgwqmT6JwPuMBtWss24hv p1rsLCWbNb5lsHG2q4gTB4vcyOCiKtKkcLvuO+eSzxr/lbx2hyVeTY9ZKh7qr2G8 4i9xBLqRDBu5YFZA0Ju2Nz2LYWzLM5EGZo3xLKBimE7YIunDKGDSG4r5bv7kOPKm RXVSBckpdGukFu0J4nexsp4EDQtcxOCEsIkZUscA/zqWd9cntokAiv50HhhoDwwL WAMwAAZTVMaBpHrtel5C1wxklT+hyiXIv0nw9HyfVWTfrARKDHmHIqW+vEkGw0d6 LsB0ln6LwcbMwiTgF/m0c2RXvPcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEQiGz0UX8wXc098UjNTy2eguNOzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zNjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM2MmJhY2M5 LWQyNWQtNDYxMC1hZWU0LTY1NWExNGVhMmZkNi8wLzQ0MjIxQjNEMTQ1RkNDMTc3 MzRGN0M1MjMzNTNDQjY3QTBCOEQzQjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnK6QwDQYJKoZIhvcNAQELBQADggEBAC8m/C+N2f/DNDG4avYyvrmsWuTWBS1l c6sodxZWEortcIQ5OwRxQNV/eOAk4mA9uZc6DUI6fB/xUOUvG6uQhszHaETvwPJV WtbQOn7Bgl0qygalGi+MeLJjGxIUmwX6+ht2VhmVu9oErHVZlSLJoHb6tFmzBXYS zNAVxvAElcjtMeKTvVdhT9ngzXLHDXXYm9a+utZvtVtwlyxGLIgScOCfVUIPGwpY dgwvFYBOmKPVKJN1ReTMwXNjaxDU1XG7Tpo9SoyvlKEym1MOFthSKxUWNiovDZq+ zPe6i+xZ8xP88NwoYJWAiP32p5imh2ACzJ4OVXeLlXWLTrHDFenJR4E= -----END CERTIFICATE-----Generated at Wed May 8 14:59:51 2024 by rpki-client on console-ams.rpki-client.org