$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer File: 4C44F6F543BDBB858D3656D41A36660407672BDE.cer (raw, json) Hash identifier: 5aH8L4IJkz2oFIuElPdjH4pQUP1W5PwE2/oRz1Kbr1Q= Subject key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 11CDF3A5B9C292570BFB7DEDB1A03406038AF91A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft caRepository: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 26 Dec 2023 18:36:29 +0000 Certificate not after: Tue 24 Dec 2024 18:41:29 +0000 Subordinate resources: IP: 103.11.106.0/23 IP: 103.29.184.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:cd:f3:a5:b9:c2:92:57:0b:fb:7d:ed:b1:a0:34:06:03:8a:f9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 26 18:36:29 2023 GMT Not After : Dec 24 18:41:29 2024 GMT Subject: CN=4C44F6F543BDBB858D3656D41A36660407672BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:64:4b:c4:f5:a0:3c:6a:d1:c4:cc:1d:81: 6a:6b:9e:80:a7:57:01:bb:42:e1:38:a4:40:a0:e7: 8c:00:b2:0d:b3:c3:ff:12:12:f8:53:78:94:16:36: 87:4e:44:a5:3d:ad:4d:5f:88:19:cf:9e:c9:6a:c0: 80:11:0c:0f:72:fc:38:bd:05:24:4c:f2:a0:6a:9a: b4:c7:1b:f8:ac:9a:d9:0f:bf:bc:6d:c8:f2:a7:6f: 3f:44:96:ee:2e:f3:05:54:df:b0:86:63:3b:37:cb: c7:0f:c9:9f:3b:ca:98:73:db:e6:4d:ca:08:80:83: 56:60:4c:ce:1e:8e:c5:b0:6b:d1:dc:24:62:af:14: 50:0b:c1:76:ac:dc:65:4c:6d:72:ac:9b:f6:1e:09: 56:c8:33:01:c3:06:81:55:d2:2d:fb:df:4a:18:44: ad:c6:a4:27:6a:72:e1:79:fb:d3:b8:d7:02:40:b6: ea:cf:48:bc:81:49:14:b3:f2:b6:5f:e5:99:a9:a7: 60:cf:01:9b:c2:cd:48:df:9e:f6:e9:7b:c8:fd:75: 2a:ef:29:72:19:13:d4:67:31:cd:7d:a3:27:f5:16: 48:23:70:d3:7d:5f:a4:bf:b3:ac:74:08:6e:43:5a: e8:06:c8:68:d8:13:ec:34:68:cf:84:35:dd:1a:e9: 1e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.106.0/23 103.29.184.0/23 Signature Algorithm: sha256WithRSAEncryption 95:32:d5:8b:33:6a:b5:ae:74:dd:21:74:93:2d:09:7d:a2:fd: dd:dd:6f:f6:77:b2:46:ce:eb:de:a0:36:b1:65:b7:c9:3a:a5: 77:f0:8f:73:c4:9c:15:8a:6b:9c:05:f5:e2:66:11:ef:9b:eb: 22:ba:4f:47:16:ad:a1:6c:36:70:98:b4:f6:d1:9e:b7:6b:f5: 83:93:58:91:e2:a4:89:4e:b6:5e:2c:90:b3:ba:05:18:eb:16: d0:ff:e9:f7:98:e1:6a:2c:33:5e:b1:af:50:c8:99:f4:cf:52: b2:2e:42:68:3e:98:38:6b:c1:c8:a3:d0:28:6a:ad:52:e0:b4: c9:f9:c0:60:7e:c9:9c:69:bf:ed:86:7d:ad:1b:3e:8b:86:2f: cf:b3:17:f2:4f:c7:8d:cf:43:eb:43:2a:12:8b:68:cc:d9:85: b2:3d:cc:2a:d4:21:da:ee:3b:3a:e1:73:bf:57:65:1b:5d:2a: f8:df:40:b6:02:95:f6:af:ae:b8:89:e9:66:19:a7:71:b9:4f: c6:4b:9a:38:d0:fb:cc:c3:f0:d1:0d:42:ee:72:a9:f4:6a:77: f2:4e:b7:ee:53:f3:34:dd:bd:ff:84:00:83:41:b7:64:98:62: a9:47:db:cd:44:71:d0:c2:76:fa:65:4f:9f:41:9b:84:6a:5a: e0:46:de:27 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUEc3zpbnCklcL+33tsaA0BgOK+RowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIyNjE4MzYyOVoX DTI0MTIyNDE4NDEyOVowMzExMC8GA1UEAxMoNEM0NEY2RjU0M0JEQkI4NThEMzY1 NkQ0MUEzNjY2MDQwNzY3MkJERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0OZEvE9aA8atHEzB2BamuegKdXAbtC4TikQKDnjACyDbPD/xIS+FN4lBY2 h05EpT2tTV+IGc+eyWrAgBEMD3L8OL0FJEzyoGqatMcb+Kya2Q+/vG3I8qdvP0SW 7i7zBVTfsIZjOzfLxw/JnzvKmHPb5k3KCICDVmBMzh6OxbBr0dwkYq8UUAvBdqzc ZUxtcqyb9h4JVsgzAcMGgVXSLfvfShhErcakJ2py4Xn707jXAkC26s9IvIFJFLPy tl/lmamnYM8Bm8LNSN+e9ul7yP11Ku8pchkT1GcxzX2jJ/UWSCNw031fpL+zrHQI bkNa6AbIaNgT7DRoz4Q13RrpHkkCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFExE9vVDvbuFjTZW1Bo2ZgQHZyveMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NWYyYzY2Yy0xZjg3LTRkOTgtYTQ2Ny0zMjE4YjY0NWIzYWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZjJjNjZj LTFmODctNGQ5OC1hNDY3LTMyMThiNjQ1YjNhYy8wLzRDNDRGNkY1NDNCREJCODU4 RDM2NTZENDFBMzY2NjA0MDc2NzJCREUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAFnC2oDBAFnHbgwDQYJKoZIhvcNAQELBQADggEBAJUy1YszarWudN0hdJMtCX2i /d3db/Z3skbO696gNrFlt8k6pXfwj3PEnBWKa5wF9eJmEe+b6yK6T0cWraFsNnCY tPbRnrdr9YOTWJHipIlOtl4skLO6BRjrFtD/6feY4WosM16xr1DImfTPUrIuQmg+ mDhrwcij0ChqrVLgtMn5wGB+yZxpv+2Gfa0bPouGL8+zF/JPx43PQ+tDKhKLaMzZ hbI9zCrUIdruOzrhc79XZRtdKvjfQLYClfavrriJ6WYZp3G5T8ZLmjjQ+8zD8NEN Qu5yqfRqd/JOt+5T8zTdvf+EAINBt2SYYqlH281EcdDCdvplT59Bm4RqWuBG3ic= -----END CERTIFICATE-----Generated at Wed May 8 22:46:39 2024 by rpki-client on console-ams.rpki-client.org