$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer File: 44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer (raw, json) Hash identifier: w/h8G3j4iPbikcmCcAPmIc0O+2IZwDNKYj7AnR1mLkk= Subject key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5ED5CD73484CAE4FDC0B1B2D03A42B9E9C4FA8A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft caRepository: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Jul 2024 03:48:50 +0000 Certificate not after: Tue 01 Jul 2025 03:53:50 +0000 Subordinate resources: IP: 36.37.64.0/18 IP: 61.8.64.0/20 IP: 123.231.128.0/17 IP: 125.213.128.0/19 IP: 182.23.0.0/17 IP: 183.91.64.0/19 IP: 202.152.0.0/18 IP: 2400:8000::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d5:cd:73:48:4c:ae:4f:dc:0b:1b:2d:03:a4:2b:9e:9c:4f:a8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 03:48:50 2024 GMT Not After : Jul 1 03:53:50 2025 GMT Subject: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:52:7b:53:08:d5:c4:47:9a:c3:96:0c:06:cf: 64:e3:99:4b:29:92:b6:3a:09:d3:a4:e5:a0:a7:9f: da:26:35:3a:f4:61:4d:7e:5f:3b:ab:ef:b0:83:90: 2b:bd:20:bd:fd:f6:9f:dd:64:31:19:6d:69:53:f6: d9:27:90:24:bb:b4:be:fe:b6:f2:07:f4:93:d7:c8: da:1c:7a:b6:18:df:a0:a8:2f:af:24:58:53:d2:8e: 4f:51:d2:5f:72:d2:8c:af:3c:30:b0:5a:1c:61:3d: c3:64:b4:1e:c7:fc:f7:9c:42:7f:55:8b:1d:b1:75: e6:99:2e:54:1e:5a:29:bd:9b:76:c8:11:a3:7b:7a: f6:9b:d6:91:b6:3b:2d:68:79:ba:0e:48:ae:20:1c: ef:34:7f:ff:0b:fd:78:75:b3:19:41:e3:bf:d9:d9: b2:7c:ce:98:36:3c:e2:8a:31:7d:b8:56:aa:c3:79: 86:e5:d3:1d:6b:09:3f:68:66:f6:d7:14:8a:d5:b1: 95:1e:53:da:8a:17:44:f3:0c:a8:b6:70:e0:93:96: f0:fb:2d:0e:e0:64:36:b1:72:bc:50:49:b2:da:a9: 29:dd:f9:91:3d:03:77:c8:dd:c3:1d:9b:cd:97:bc: 01:73:0c:d3:fd:98:af:cd:b1:66:0d:aa:bd:00:35: 3f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.37.64.0/18 61.8.64.0/20 123.231.128.0/17 125.213.128.0/19 182.23.0.0/17 183.91.64.0/19 202.152.0.0/18 IPv6: 2400:8000::/32 Signature Algorithm: sha256WithRSAEncryption 98:c8:4e:8e:fd:b9:ea:6f:6e:b6:ac:2a:70:52:96:94:39:1b: 49:a9:32:3b:42:09:83:43:bb:ff:56:bd:2d:6d:28:2f:81:15: 9e:ab:ac:b1:0b:4e:68:bb:8b:ce:29:c6:76:21:c9:a1:55:0a: 29:cb:37:50:da:68:f6:1b:aa:d4:d3:2e:d4:ac:e1:b0:11:d2: b9:ae:8d:67:f0:4c:2b:3b:4f:f3:9a:9b:e7:b5:c8:94:14:ac: 7d:a0:e1:46:16:36:02:f5:49:66:f2:93:78:e2:3f:c5:b0:00: 52:a0:b6:17:4f:6a:6c:87:19:6c:f9:74:23:05:cd:3a:5c:39: 0a:94:6a:14:0c:24:4d:5b:06:c7:28:bc:1f:66:36:42:13:59: 74:c8:13:b2:df:41:90:e5:53:fe:73:7b:de:e7:c8:4c:01:88: 27:57:42:e2:ea:c7:43:43:5e:97:ec:ff:ac:04:47:f9:1c:80: 56:64:76:f6:11:77:ea:68:11:50:8a:41:2d:49:ed:8e:35:dc: d3:5c:8b:fc:8d:7a:52:b5:d2:a6:91:fe:95:44:e6:07:69:c5: 71:7f:10:63:19:49:7d:0b:e5:ce:3e:df:57:d3:af:94:42:77: a0:92:11:30:3c:dd:0e:5d:67:ae:75:41:d6:68:11:c9:bb:7c: 1e:dd:e7:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXtXNc0hMrk/cCxstA6QrnpxPqKkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMjAzNDg1MFoX DTI1MDcwMTAzNTM1MFowMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYx ODY0QTBERUE0N0VDRjY2NzUyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZSe1MI1cRHmsOWDAbPZOOZSymStjoJ06TloKef2iY1OvRhTX5fO6vvsIOQ K70gvf32n91kMRltaVP22SeQJLu0vv628gf0k9fI2hx6thjfoKgvryRYU9KOT1HS X3LSjK88MLBaHGE9w2S0Hsf895xCf1WLHbF15pkuVB5aKb2bdsgRo3t69pvWkbY7 LWh5ug5IriAc7zR//wv9eHWzGUHjv9nZsnzOmDY84ooxfbhWqsN5huXTHWsJP2hm 9tcUitWxlR5T2ooXRPMMqLZw4JOW8PstDuBkNrFyvFBJstqpKd35kT0Dd8jdwx2b zZe8AXMM0/2Yr82xZg2qvQA1P3kCAwEAAaOCAuswggLnMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFES/ZoK2tJMEjG8YZKDepH7PZnUrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRl LWY5MjEtNDI3NC04NDk3LTI5ODdkOTA5NTQzZS8wLzQ0QkY2NjgyQjZCNDkzMDQ4 QzZGMTg2NEEwREVBNDdFQ0Y2Njc1MkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwUgYIKwYBBQUHAQcBAf8EQzBBMDAEAgABMCoD BAYkJUADBAQ9CEADBAd754ADBAV91YADBAe2FwADBAW3W0ADBAbKmAAwDQQCAAIw BwMFACQAgAAwDQYJKoZIhvcNAQELBQADggEBAJjITo79uepvbrasKnBSlpQ5G0mp MjtCCYNDu/9WvS1tKC+BFZ6rrLELTmi7i84pxnYhyaFVCinLN1DaaPYbqtTTLtSs 4bAR0rmujWfwTCs7T/Oam+e1yJQUrH2g4UYWNgL1SWbyk3jiP8WwAFKgthdPamyH GWz5dCMFzTpcOQqUahQMJE1bBscovB9mNkITWXTIE7LfQZDlU/5ze97nyEwBiCdX QuLqx0NDXpfs/6wER/kcgFZkdvYRd+poEVCKQS1J7Y413NNci/yNelK10qaR/pVE 5gdpxXF/EGMZSX0L5c4+31fTr5RCd6CSETA83Q5dZ651QdZoEcm7fB7d50o= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:16 2024 by rpki-client on console-fra.rpki-client.org