$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer File: 604C441ACDF554F380D7FED8F68B2EC7FB780413.cer (raw, json) Hash identifier: jXHM5zs2Q261I1H0cb5mVyOtPA1IYcCFSpH0kIgCREo= Subject key identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 612871A66B2A95B4C762A81B81517B87AF858028 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft caRepository: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 23 Sep 2024 10:24:28 +0000 Certificate not after: Mon 22 Sep 2025 10:29:28 +0000 Subordinate resources: IP: 103.191.196.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:28:71:a6:6b:2a:95:b4:c7:62:a8:1b:81:51:7b:87:af:85:80:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Sep 23 10:24:28 2024 GMT Not After : Sep 22 10:29:28 2025 GMT Subject: CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7b:85:ef:ea:60:a3:da:23:ef:3c:09:86:d5: e4:75:11:22:73:4a:e2:6b:44:74:50:4c:46:29:38: 35:9e:ea:40:d2:ec:ff:0a:85:84:44:08:80:97:d6: da:91:b0:a2:59:64:ad:36:de:e0:83:b1:2c:fd:4b: 31:00:70:15:e9:b4:76:34:8f:7d:e8:8d:ed:a5:40: 6b:ec:a1:75:cf:d5:8f:40:ba:a2:9a:c9:df:25:87: 62:09:71:67:4d:11:4b:bc:ec:3e:bb:00:d3:21:f8: e3:39:d0:65:b7:93:d8:07:8e:a0:db:7c:e9:e5:c7: 8a:56:60:98:d2:26:52:57:4a:86:8d:aa:4b:d9:9f: 92:56:63:34:80:b3:6f:9d:96:ef:63:20:47:b4:a9: aa:0b:c3:29:d3:5c:28:c7:1e:4e:d5:6e:fd:88:45: 27:2e:ac:0a:7e:c2:85:29:95:7b:e7:74:1e:04:88: a8:de:c9:56:62:e1:88:0f:c6:5d:00:e0:4f:7a:cd: cb:ca:26:9f:bf:b6:2e:69:f4:10:b4:bf:e8:8a:ff: a1:ac:80:15:c1:ae:56:31:3e:90:83:95:d2:5c:2f: f7:89:49:64:01:0c:16:ce:0e:2e:2a:82:d4:08:c0: 8d:bb:3d:91:28:9b:24:4f:6d:82:13:f6:35:66:8e: 95:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.196.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:44:b5:30:78:93:1a:b6:1e:46:f6:27:75:7b:48:76:3a:8c: f2:53:cd:22:53:74:76:3a:a9:e3:82:01:11:75:95:53:9b:7a: 2c:c8:9a:e4:66:a3:38:07:3c:48:ea:85:54:75:ca:b5:f0:78: a4:6b:d7:15:9f:41:c8:61:93:c2:a9:1f:ed:0a:b5:56:6f:72: f5:2c:d9:c8:c7:a4:a4:1d:4f:85:86:6b:95:94:77:9c:90:d9: 42:08:f7:d9:6b:5a:ca:2f:d9:1d:75:7f:66:d5:59:9d:97:9a: 32:89:0c:5a:6f:c7:76:61:3c:1d:1a:75:37:6e:eb:dc:e9:c2: 64:50:1f:b0:f7:f5:e5:70:2e:62:b6:fa:2e:68:8f:57:25:f2: 41:c7:71:c8:03:1b:8b:77:b6:03:09:90:ff:52:1b:d1:67:ed: 20:18:17:0f:49:c3:95:0b:66:3c:91:d9:96:17:00:fb:78:7b: d3:62:6e:cb:a7:97:70:cf:d7:7f:3b:5b:7d:2d:d4:15:92:46: e7:06:d6:2f:0a:fe:bd:74:82:c7:bd:5b:c5:ea:7e:ea:44:d9: f0:8a:94:ee:9d:73:c8:fb:fc:44:18:2e:dc:b0:ca:13:fb:ab: af:03:3a:1d:06:72:73:2e:53:95:66:84:39:a5:78:2f:7d:00: 37:eb:90:c8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYShxpmsqlbTHYqgbgVF7h6+FgCgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkyMzEwMjQyOFoX DTI1MDkyMjEwMjkyOFowMzExMC8GA1UEAxMoNjA0QzQ0MUFDREY1NTRGMzgwRDdG RUQ4RjY4QjJFQzdGQjc4MDQxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMR7he/qYKPaI+88CYbV5HURInNK4mtEdFBMRik4NZ7qQNLs/wqFhEQIgJfW 2pGwollkrTbe4IOxLP1LMQBwFem0djSPfeiN7aVAa+yhdc/Vj0C6oprJ3yWHYglx Z00RS7zsPrsA0yH44znQZbeT2AeOoNt86eXHilZgmNImUldKho2qS9mfklZjNICz b52W72MgR7SpqgvDKdNcKMceTtVu/YhFJy6sCn7ChSmVe+d0HgSIqN7JVmLhiA/G XQDgT3rNy8omn7+2Lmn0ELS/6Ir/oayAFcGuVjE+kIOV0lwv94lJZAEMFs4OLiqC 1AjAjbs9kSibJE9tghP2NWaOlZcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGBMRBrN9VTzgNf+2PaLLsf7eAQTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NWQ2ZWZmZi04NWIyLTRhZjQtODlhYi02ZDk4Yzk1MjdkYTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc1ZDZlZmZm LTg1YjItNGFmNC04OWFiLTZkOThjOTUyN2RhNC8wLzYwNEM0NDFBQ0RGNTU0RjM4 MEQ3RkVEOEY2OEIyRUM3RkI3ODA0MTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnv8QwDQYJKoZIhvcNAQELBQADggEBACpEtTB4kxq2Hkb2J3V7SHY6jPJTzSJT dHY6qeOCARF1lVObeizImuRmozgHPEjqhVR1yrXweKRr1xWfQchhk8KpH+0KtVZv cvUs2cjHpKQdT4WGa5WUd5yQ2UII99lrWsov2R11f2bVWZ2XmjKJDFpvx3ZhPB0a dTdu69zpwmRQH7D39eVwLmK2+i5oj1cl8kHHccgDG4t3tgMJkP9SG9Fn7SAYFw9J w5ULZjyR2ZYXAPt4e9Nibsunl3DP1387W30t1BWSRucG1i8K/r10gse9W8XqfupE 2fCKlO6dc8j7/EQYLtywyhP7q68DOh0GcnMuU5VmhDmleC99ADfrkMg= -----END CERTIFICATE-----Generated at Sun Feb 16 20:47:25 2025 by rpki-client