$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer File: 99F644C407D1C8C133A923CC84619FC228E767AC.cer (raw, json) Hash identifier: sWOh98cokM+8wmyxOOgxS8E0vmRjKwYwtZzBpDlMXo4= Subject key identifier: 99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 286CE9E8156A60A8D5E457110CD99EAACF6C49B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft caRepository: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 21 Nov 2023 10:12:17 +0000 Certificate not after: Tue 19 Nov 2024 10:17:17 +0000 Subordinate resources: IP: 103.169.44.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:6c:e9:e8:15:6a:60:a8:d5:e4:57:11:0c:d9:9e:aa:cf:6c:49:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 21 10:12:17 2023 GMT Not After : Nov 19 10:17:17 2024 GMT Subject: CN=99F644C407D1C8C133A923CC84619FC228E767AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:55:f3:7f:66:4c:07:29:43:ee:08:46:f5:7d: ec:b5:51:df:18:15:08:ac:03:de:69:92:3c:9f:20: e8:90:15:3d:91:b4:4e:b4:83:37:fa:80:84:69:ed: ba:3f:ef:44:ac:1a:0d:25:e8:4f:b9:ba:d2:1b:a7: 26:86:f2:cb:b1:97:d8:07:e6:35:cb:51:e6:77:67: 41:c5:6b:e4:aa:3d:af:85:71:5e:bf:8f:bd:69:25: a3:11:22:d9:16:a0:94:b0:51:d1:aa:9b:0b:8c:62: 3e:51:5e:25:9f:da:70:95:05:5b:80:db:63:25:a6: 38:75:60:de:8d:e0:48:07:9c:75:b7:44:2d:7e:3b: 1d:1a:6c:cb:55:eb:d5:a2:dd:e4:12:29:61:61:59: e4:0d:dd:7a:6e:af:cd:62:1d:7c:23:80:4a:b5:3a: 3e:d1:f6:9e:c4:30:dd:ed:dc:3d:a2:c8:69:9d:37: 9c:ac:0a:d2:91:98:79:0a:f6:0c:9a:11:6c:d3:5b: d6:c3:f9:7d:0f:c3:21:48:3f:9b:91:51:21:10:c5: db:2a:4e:61:61:43:4f:48:c4:0d:f9:d8:a0:ef:08: d7:c5:b1:b1:bf:bc:18:da:3e:9a:4e:21:e6:f8:a6: 06:f0:5f:2c:bd:c8:4e:3c:21:2b:99:79:af:59:96: 6b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.44.0/23 Signature Algorithm: sha256WithRSAEncryption 43:75:41:ef:29:de:7f:b9:ac:67:ee:bf:8d:f9:04:bf:2a:ee: fa:2e:f4:10:f7:89:ae:bb:c9:bd:df:06:0f:b7:0f:d4:c6:9e: 3a:33:35:79:b9:d0:a4:d9:cf:e2:ca:87:63:97:d1:43:1a:64: 8a:1b:3c:3a:94:57:0b:45:6a:f1:1e:9e:67:c8:6c:5d:e9:5b: f4:82:81:f5:67:68:4d:b4:d8:6f:3e:c8:5b:26:91:de:53:50: eb:84:77:74:bc:57:22:32:bc:24:a6:57:cd:e4:70:0b:ae:74: 76:65:d3:68:25:4b:d5:6d:a7:61:ee:62:64:8e:e4:ae:cf:45: ef:d7:2b:49:79:99:14:bb:c9:04:0d:4b:26:3e:c7:bf:d2:8d: 3c:58:29:e9:6c:4b:93:be:19:4a:1c:07:2b:96:5b:28:57:e2: e2:da:6a:3a:16:3e:59:1a:11:28:9a:38:d3:b0:5c:a6:31:aa: 38:3e:4f:e3:a9:be:12:d3:e8:d9:00:93:03:20:79:ca:95:c2: d0:73:c1:75:e0:b1:24:5f:f9:16:f8:74:2f:32:66:a2:d7:78: a6:23:62:26:14:15:94:0f:07:3a:d4:92:d8:03:55:da:54:f0: 6b:8e:70:56:9e:0b:e5:04:6a:c5:56:26:58:c6:46:92:b2:37: a3:23:1c:c2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKGzp6BVqYKjV5FcRDNmeqs9sSbgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEyMTEwMTIxN1oX DTI0MTExOTEwMTcxN1owMzExMC8GA1UEAxMoOTlGNjQ0QzQwN0QxQzhDMTMzQTky M0NDODQ2MTlGQzIyOEU3NjdBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPxV839mTAcpQ+4IRvV97LVR3xgVCKwD3mmSPJ8g6JAVPZG0TrSDN/qAhGnt uj/vRKwaDSXoT7m60hunJobyy7GX2AfmNctR5ndnQcVr5Ko9r4VxXr+PvWkloxEi 2RaglLBR0aqbC4xiPlFeJZ/acJUFW4DbYyWmOHVg3o3gSAecdbdELX47HRpsy1Xr 1aLd5BIpYWFZ5A3dem6vzWIdfCOASrU6PtH2nsQw3e3cPaLIaZ03nKwK0pGYeQr2 DJoRbNNb1sP5fQ/DIUg/m5FRIRDF2ypOYWFDT0jEDfnYoO8I18Wxsb+8GNo+mk4h 5vimBvBfLL3ITjwhK5l5r1mWa1cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJn2RMQH0cjBM6kjzIRhn8Io52esMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NDZiNTI0OC1jZTMzLTRlOTctODgyZi1mNjE0NWYzMTkwMjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0NmI1MjQ4 LWNlMzMtNGU5Ny04ODJmLWY2MTQ1ZjMxOTAyNi8wLzk5RjY0NEM0MDdEMUM4QzEz M0E5MjNDQzg0NjE5RkMyMjhFNzY3QUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqSwwDQYJKoZIhvcNAQELBQADggEBAEN1Qe8p3n+5rGfuv435BL8q7vou9BD3 ia67yb3fBg+3D9TGnjozNXm50KTZz+LKh2OX0UMaZIobPDqUVwtFavEenmfIbF3p W/SCgfVnaE202G8+yFsmkd5TUOuEd3S8VyIyvCSmV83kcAuudHZl02glS9Vtp2Hu YmSO5K7PRe/XK0l5mRS7yQQNSyY+x7/SjTxYKelsS5O+GUocByuWWyhX4uLaajoW PlkaESiaONOwXKYxqjg+T+OpvhLT6NkAkwMgecqVwtBzwXXgsSRf+Rb4dC8yZqLX eKYjYiYUFZQPBzrUktgDVdpU8GuOcFaeC+UEasVWJljGRpKyN6MjHMI= -----END CERTIFICATE-----Generated at Wed May 8 14:59:54 2024 by rpki-client on console-ams.rpki-client.org