$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer File: 604C441ACDF554F380D7FED8F68B2EC7FB780413.cer (raw, json) Hash identifier: cGx47EWWD1zjQckpns4oDe0hecAgHcnCD2uEOy/Gq/k= Subject key identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3220FB70FA817306DEFF279811ED307925A3A13F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft caRepository: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 23 Oct 2023 08:44:21 +0000 Certificate not after: Mon 21 Oct 2024 08:49:21 +0000 Subordinate resources: IP: 103.191.196.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:20:fb:70:fa:81:73:06:de:ff:27:98:11:ed:30:79:25:a3:a1:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 23 08:44:21 2023 GMT Not After : Oct 21 08:49:21 2024 GMT Subject: CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7b:85:ef:ea:60:a3:da:23:ef:3c:09:86:d5: e4:75:11:22:73:4a:e2:6b:44:74:50:4c:46:29:38: 35:9e:ea:40:d2:ec:ff:0a:85:84:44:08:80:97:d6: da:91:b0:a2:59:64:ad:36:de:e0:83:b1:2c:fd:4b: 31:00:70:15:e9:b4:76:34:8f:7d:e8:8d:ed:a5:40: 6b:ec:a1:75:cf:d5:8f:40:ba:a2:9a:c9:df:25:87: 62:09:71:67:4d:11:4b:bc:ec:3e:bb:00:d3:21:f8: e3:39:d0:65:b7:93:d8:07:8e:a0:db:7c:e9:e5:c7: 8a:56:60:98:d2:26:52:57:4a:86:8d:aa:4b:d9:9f: 92:56:63:34:80:b3:6f:9d:96:ef:63:20:47:b4:a9: aa:0b:c3:29:d3:5c:28:c7:1e:4e:d5:6e:fd:88:45: 27:2e:ac:0a:7e:c2:85:29:95:7b:e7:74:1e:04:88: a8:de:c9:56:62:e1:88:0f:c6:5d:00:e0:4f:7a:cd: cb:ca:26:9f:bf:b6:2e:69:f4:10:b4:bf:e8:8a:ff: a1:ac:80:15:c1:ae:56:31:3e:90:83:95:d2:5c:2f: f7:89:49:64:01:0c:16:ce:0e:2e:2a:82:d4:08:c0: 8d:bb:3d:91:28:9b:24:4f:6d:82:13:f6:35:66:8e: 95:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.196.0/23 Signature Algorithm: sha256WithRSAEncryption 74:d5:53:c9:d7:c7:ec:d5:a7:1f:22:0f:b9:56:25:50:30:a7: 47:6c:4f:96:fd:04:a1:c2:0d:c5:88:6b:8f:b4:fa:4b:95:a2: 71:c0:6f:3b:76:89:f7:f9:39:e9:dd:69:51:68:f4:d7:25:7c: 99:2c:e0:d7:1e:cf:79:16:8d:1f:b5:6a:60:a4:66:99:74:58: 6c:79:bf:16:65:e8:b0:fc:15:11:97:0d:a0:56:fc:b2:db:51: dd:85:df:a5:13:6e:8c:a9:43:a4:0f:1f:5a:12:52:99:9e:81: c1:c0:37:1a:da:72:ec:ff:ad:67:dc:d9:af:c6:c4:62:a2:d0: 02:c8:be:d8:ff:11:90:90:c1:66:1f:eb:c5:3b:64:7e:2f:47: 79:63:a1:64:3f:d3:6d:8a:9e:dc:fd:f1:28:d2:35:fe:0a:c6: 9e:63:90:80:b0:89:81:6b:1f:58:6f:10:6f:50:48:4f:d8:26: ad:15:af:18:ce:40:ab:e5:af:8d:2e:01:0c:66:d2:54:97:a9: 47:9c:a4:bf:71:81:f6:b9:34:63:89:a1:3e:6d:56:68:15:13: 26:65:64:c2:2a:e7:81:e4:c7:7a:60:17:2d:7b:5f:50:f2:20: 8a:c3:ef:a6:59:63:72:03:b2:24:c8:71:a0:09:31:b7:af:53: 4c:a6:26:b7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMiD7cPqBcwbe/yeYEe0weSWjoT8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAyMzA4NDQyMVoX DTI0MTAyMTA4NDkyMVowMzExMC8GA1UEAxMoNjA0QzQ0MUFDREY1NTRGMzgwRDdG RUQ4RjY4QjJFQzdGQjc4MDQxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMR7he/qYKPaI+88CYbV5HURInNK4mtEdFBMRik4NZ7qQNLs/wqFhEQIgJfW 2pGwollkrTbe4IOxLP1LMQBwFem0djSPfeiN7aVAa+yhdc/Vj0C6oprJ3yWHYglx Z00RS7zsPrsA0yH44znQZbeT2AeOoNt86eXHilZgmNImUldKho2qS9mfklZjNICz b52W72MgR7SpqgvDKdNcKMceTtVu/YhFJy6sCn7ChSmVe+d0HgSIqN7JVmLhiA/G XQDgT3rNy8omn7+2Lmn0ELS/6Ir/oayAFcGuVjE+kIOV0lwv94lJZAEMFs4OLiqC 1AjAjbs9kSibJE9tghP2NWaOlZcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGBMRBrN9VTzgNf+2PaLLsf7eAQTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NWQ2ZWZmZi04NWIyLTRhZjQtODlhYi02ZDk4Yzk1MjdkYTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc1ZDZlZmZm LTg1YjItNGFmNC04OWFiLTZkOThjOTUyN2RhNC8wLzYwNEM0NDFBQ0RGNTU0RjM4 MEQ3RkVEOEY2OEIyRUM3RkI3ODA0MTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnv8QwDQYJKoZIhvcNAQELBQADggEBAHTVU8nXx+zVpx8iD7lWJVAwp0dsT5b9 BKHCDcWIa4+0+kuVonHAbzt2iff5OendaVFo9NclfJks4Ncez3kWjR+1amCkZpl0 WGx5vxZl6LD8FRGXDaBW/LLbUd2F36UTboypQ6QPH1oSUpmegcHANxracuz/rWfc 2a/GxGKi0ALIvtj/EZCQwWYf68U7ZH4vR3ljoWQ/022Kntz98SjSNf4Kxp5jkICw iYFrH1hvEG9QSE/YJq0VrxjOQKvlr40uAQxm0lSXqUecpL9xgfa5NGOJoT5tVmgV EyZlZMIq54Hkx3pgFy17X1DyIIrD76ZZY3IDsiTIcaAJMbevU0ymJrc= -----END CERTIFICATE-----Generated at Tue May 7 18:07:10 2024 by rpki-client on console-fra.rpki-client.org