$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer File: 4C44F6F543BDBB858D3656D41A36660407672BDE.cer (raw, json) Hash identifier: af2ESZ3ggmSEub3AY2SfDN1YMrOfR+ogBP3hnwatT5E= Subject key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4898129576F1794D62CC8700E1A75DC3D865535C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft caRepository: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 27 Nov 2024 02:24:22 +0000 Certificate not after: Wed 26 Nov 2025 02:29:22 +0000 Subordinate resources: IP: 103.11.106.0/23 IP: 103.29.184.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:98:12:95:76:f1:79:4d:62:cc:87:00:e1:a7:5d:c3:d8:65:53:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Nov 27 02:24:22 2024 GMT Not After : Nov 26 02:29:22 2025 GMT Subject: CN=4C44F6F543BDBB858D3656D41A36660407672BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:64:4b:c4:f5:a0:3c:6a:d1:c4:cc:1d:81: 6a:6b:9e:80:a7:57:01:bb:42:e1:38:a4:40:a0:e7: 8c:00:b2:0d:b3:c3:ff:12:12:f8:53:78:94:16:36: 87:4e:44:a5:3d:ad:4d:5f:88:19:cf:9e:c9:6a:c0: 80:11:0c:0f:72:fc:38:bd:05:24:4c:f2:a0:6a:9a: b4:c7:1b:f8:ac:9a:d9:0f:bf:bc:6d:c8:f2:a7:6f: 3f:44:96:ee:2e:f3:05:54:df:b0:86:63:3b:37:cb: c7:0f:c9:9f:3b:ca:98:73:db:e6:4d:ca:08:80:83: 56:60:4c:ce:1e:8e:c5:b0:6b:d1:dc:24:62:af:14: 50:0b:c1:76:ac:dc:65:4c:6d:72:ac:9b:f6:1e:09: 56:c8:33:01:c3:06:81:55:d2:2d:fb:df:4a:18:44: ad:c6:a4:27:6a:72:e1:79:fb:d3:b8:d7:02:40:b6: ea:cf:48:bc:81:49:14:b3:f2:b6:5f:e5:99:a9:a7: 60:cf:01:9b:c2:cd:48:df:9e:f6:e9:7b:c8:fd:75: 2a:ef:29:72:19:13:d4:67:31:cd:7d:a3:27:f5:16: 48:23:70:d3:7d:5f:a4:bf:b3:ac:74:08:6e:43:5a: e8:06:c8:68:d8:13:ec:34:68:cf:84:35:dd:1a:e9: 1e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.106.0/23 103.29.184.0/23 Signature Algorithm: sha256WithRSAEncryption 77:c6:08:f7:cb:d0:f6:72:8a:da:ce:48:9f:46:1a:8f:73:43: e7:3c:44:f0:97:a7:b4:de:c2:a3:0a:6b:fc:b1:3b:d4:25:6b: 64:3b:e0:0b:ac:a5:48:8d:b6:0a:91:dd:51:0e:e0:eb:c5:cf: f6:ca:b5:3b:e4:60:94:52:ff:8e:c0:4c:44:59:52:c5:e8:a2: de:c9:80:b3:ad:49:6c:3e:86:3b:e0:61:b0:62:71:a9:4f:e6: 83:81:7c:5f:f3:42:c6:40:5b:49:ba:37:8b:75:4a:b0:3d:62: fd:f7:e2:da:e5:29:af:5a:3d:a3:ec:12:ae:8e:fa:c9:c5:e1: 12:83:83:51:ad:13:1b:76:86:e7:6d:c0:89:23:4a:3c:10:03: e4:e0:da:d8:0c:60:fc:84:6d:26:3c:07:93:e2:5b:40:91:21: 9c:ab:ea:12:7b:2d:c0:9e:70:ee:e1:c9:da:1e:57:dc:fb:a5: b9:20:d8:28:05:19:83:29:c4:08:73:3e:3b:f4:e4:93:7c:aa: 82:62:5a:c7:d1:64:5a:a1:0a:ab:41:43:1d:d9:d6:f7:d4:e0: 36:49:e3:ea:7b:f9:77:81:25:cc:f9:33:6a:c5:6b:1a:a3:bc: 9c:6b:68:ef:21:88:79:b4:01:9f:31:91:15:67:e4:cd:23:79: 7e:1a:00:7f -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUSJgSlXbxeU1izIcA4addw9hlU1wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEyNzAyMjQyMloX DTI1MTEyNjAyMjkyMlowMzExMC8GA1UEAxMoNEM0NEY2RjU0M0JEQkI4NThEMzY1 NkQ0MUEzNjY2MDQwNzY3MkJERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0OZEvE9aA8atHEzB2BamuegKdXAbtC4TikQKDnjACyDbPD/xIS+FN4lBY2 h05EpT2tTV+IGc+eyWrAgBEMD3L8OL0FJEzyoGqatMcb+Kya2Q+/vG3I8qdvP0SW 7i7zBVTfsIZjOzfLxw/JnzvKmHPb5k3KCICDVmBMzh6OxbBr0dwkYq8UUAvBdqzc ZUxtcqyb9h4JVsgzAcMGgVXSLfvfShhErcakJ2py4Xn707jXAkC26s9IvIFJFLPy tl/lmamnYM8Bm8LNSN+e9ul7yP11Ku8pchkT1GcxzX2jJ/UWSCNw031fpL+zrHQI bkNa6AbIaNgT7DRoz4Q13RrpHkkCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFExE9vVDvbuFjTZW1Bo2ZgQHZyveMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NWYyYzY2Yy0xZjg3LTRkOTgtYTQ2Ny0zMjE4YjY0NWIzYWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZjJjNjZj LTFmODctNGQ5OC1hNDY3LTMyMThiNjQ1YjNhYy8wLzRDNDRGNkY1NDNCREJCODU4 RDM2NTZENDFBMzY2NjA0MDc2NzJCREUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAFnC2oDBAFnHbgwDQYJKoZIhvcNAQELBQADggEBAHfGCPfL0PZyitrOSJ9GGo9z Q+c8RPCXp7TewqMKa/yxO9Qla2Q74AuspUiNtgqR3VEO4OvFz/bKtTvkYJRS/47A TERZUsXoot7JgLOtSWw+hjvgYbBicalP5oOBfF/zQsZAW0m6N4t1SrA9Yv334trl Ka9aPaPsEq6O+snF4RKDg1GtExt2hudtwIkjSjwQA+Tg2tgMYPyEbSY8B5PiW0CR IZyr6hJ7LcCecO7hydoeV9z7pbkg2CgFGYMpxAhzPjv05JN8qoJiWsfRZFqhCqtB Qx3Z1vfU4DZJ4+p7+XeBJcz5M2rFaxqjvJxraO8hiHm0AZ8xkRVn5M0jeX4aAH8= -----END CERTIFICATE-----Generated at Sat Apr 5 10:05:29 2025 by rpki-client