$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer File: 722D23AD0F959CE5CBFF927C152517F07060D195.cer (raw, json) Hash identifier: G1YQGQQJBP5HPtNlUwvxstjrFpwJkoKPG38D4bdUJJQ= Subject key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 44BA3D19944A1C46CB214845498B9C1FE1F3A2CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft caRepository: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 16 Oct 2024 11:42:11 +0000 Certificate not after: Wed 15 Oct 2025 11:47:11 +0000 Subordinate resources: IP: 103.49.50.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ba:3d:19:94:4a:1c:46:cb:21:48:45:49:8b:9c:1f:e1:f3:a2:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 16 11:42:11 2024 GMT Not After : Oct 15 11:47:11 2025 GMT Subject: CN=722D23AD0F959CE5CBFF927C152517F07060D195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:d7:da:bf:04:17:4c:38:7f:ca:17:cb:9a: a1:4a:24:73:a5:3f:fb:bd:ca:c4:85:95:79:52:65: 02:d5:a1:85:6d:2a:fb:45:de:27:c6:42:dc:6f:00: e2:83:63:ce:8d:7c:25:a2:30:25:58:3c:10:9d:ab: 2c:21:92:33:4c:7a:92:13:7e:c7:bc:d5:88:e3:b6: 10:7e:32:14:07:e7:bf:85:2b:7a:0a:6a:52:0b:5e: bd:01:d9:4c:c6:3e:db:ad:0e:64:1f:b1:9b:7c:b6: 7b:55:3a:1a:7e:fb:79:4e:8a:33:b5:a8:94:0a:2b: f3:2d:cc:0e:4e:0c:5f:1e:59:8b:71:14:9c:77:f8: f9:87:1b:69:0d:48:92:de:96:b3:06:b2:1a:31:43: 24:30:d2:f9:71:0f:2e:70:70:54:ad:0a:5f:8f:6a: 62:0d:fe:0a:78:13:b8:6e:de:48:0c:fa:40:49:67: ec:41:99:79:81:2e:68:45:1a:70:e5:db:76:11:7a: 40:e6:3c:ed:45:19:b3:9a:86:c1:06:2b:6e:ee:2c: ad:54:5a:7a:95:ec:4f:0c:0c:87:27:ba:fd:f7:44: 0a:0d:44:71:7c:15:10:4f:42:45:ab:67:5b:63:4f: f5:29:2e:ee:f0:3b:e7:6e:9e:39:96:fa:e8:3e:41: f0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.49.50.0/23 Signature Algorithm: sha256WithRSAEncryption 14:79:4c:22:ed:05:9a:3a:d3:ff:38:22:26:1e:65:03:ef:58: 73:2e:39:43:f1:03:d4:62:4b:e1:9c:a8:08:c7:77:ff:e2:0b: fb:d7:33:a6:c4:c7:88:90:2c:e0:1b:4f:d6:ff:9f:59:00:93: 39:19:a2:71:b1:7c:3c:d0:56:dc:f5:8b:cd:e9:59:7e:25:d2: 2d:77:15:d1:71:41:86:4f:a0:e2:c9:52:fb:4b:91:c4:46:a5: 01:bd:32:dd:34:42:7e:14:25:4b:64:b3:0d:63:7b:6c:42:4d: 95:7e:98:4b:3a:1c:99:fe:48:14:6e:4a:3d:44:cd:e2:74:d0: 74:5a:b9:6c:ba:e8:92:11:6d:b0:ca:e1:f7:8b:f9:ac:69:3d: 01:7d:19:01:7a:e2:f2:84:b7:a8:bc:57:20:f1:23:d3:95:e1: e9:51:4b:6f:0b:86:e8:a7:39:11:1b:45:78:16:c2:d2:9c:cb: bd:28:29:24:4a:69:04:c3:0a:d6:c3:9a:85:82:ec:88:8b:03: 7d:99:14:d4:81:f0:65:78:87:27:06:7c:3f:18:d7:c7:43:27: 7a:5d:c9:16:4b:b4:e8:13:a5:cd:d1:bf:60:38:f6:50:09:2c: be:d2:f1:5d:60:7e:48:e4:1d:7d:0b:06:ea:d4:f6:3e:67:db: 0b:22:c4:c7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURLo9GZRKHEbLIUhFSYucH+HzosswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAxNjExNDIxMVoX DTI1MTAxNTExNDcxMVowMzExMC8GA1UEAxMoNzIyRDIzQUQwRjk1OUNFNUNCRkY5 MjdDMTUyNTE3RjA3MDYwRDE5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4819q/BBdMOH/KF8uaoUokc6U/+73KxIWVeVJlAtWhhW0q+0XeJ8ZC3G8A 4oNjzo18JaIwJVg8EJ2rLCGSM0x6khN+x7zViOO2EH4yFAfnv4UregpqUgtevQHZ TMY+260OZB+xm3y2e1U6Gn77eU6KM7WolAor8y3MDk4MXx5Zi3EUnHf4+YcbaQ1I kt6WswayGjFDJDDS+XEPLnBwVK0KX49qYg3+CngTuG7eSAz6QEln7EGZeYEuaEUa cOXbdhF6QOY87UUZs5qGwQYrbu4srVRaepXsTwwMhye6/fdECg1EcXwVEE9CRatn W2NP9Sku7vA7526eOZb66D5B8B0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHItI60PlZzly/+SfBUlF/BwYNGVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xY2U4ZGE5Yy1iZGJkLTQ5MDgtYmE5Mi1kOTBmZWE5YzhmMDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFjZThkYTlj LWJkYmQtNDkwOC1iYTkyLWQ5MGZlYTljOGYwNS8wLzcyMkQyM0FEMEY5NTlDRTVD QkZGOTI3QzE1MjUxN0YwNzA2MEQxOTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnMTIwDQYJKoZIhvcNAQELBQADggEBABR5TCLtBZo60/84IiYeZQPvWHMuOUPx A9RiS+GcqAjHd//iC/vXM6bEx4iQLOAbT9b/n1kAkzkZonGxfDzQVtz1i83pWX4l 0i13FdFxQYZPoOLJUvtLkcRGpQG9Mt00Qn4UJUtksw1je2xCTZV+mEs6HJn+SBRu Sj1EzeJ00HRauWy66JIRbbDK4feL+axpPQF9GQF64vKEt6i8VyDxI9OV4elRS28L huinOREbRXgWwtKcy70oKSRKaQTDCtbDmoWC7IiLA32ZFNSB8GV4hycGfD8Y18dD J3pdyRZLtOgTpc3Rv2A49lAJLL7S8V1gfkjkHX0LBurU9j5n2wsixMc= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:19 2024 by rpki-client on console-fra.rpki-client.org