$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer File: B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.cer (raw, json) Hash identifier: hRZzKRoiIksmOz164aJ+0LX/1TW112YoADhivsCUi6s= Subject key identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1E70B8D09F68F21986ACA0AC3B1CF93BF237E3BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft caRepository: rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 03:10:24 +0000 Certificate not after: Mon 29 Jul 2024 03:15:24 +0000 Subordinate resources: IP: 43.242.132.0/23 IP: 103.28.106.0/23 IP: 103.72.110.0/23 IP: 2001:df0:26f::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 16:34:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:70:b8:d0:9f:68:f2:19:86:ac:a0:ac:3b:1c:f9:3b:f2:37:e3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 03:10:24 2023 GMT Not After : Jul 29 03:15:24 2024 GMT Subject: CN=B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5e:da:f5:e7:66:b6:8f:84:b4:8e:8d:8e:4e: dd:8a:12:4c:c7:a4:2c:af:24:da:ce:b6:8c:cb:7f: af:92:b7:87:e9:b1:07:ab:d6:01:00:59:2d:7e:b7: e0:ce:4a:1b:d1:49:0c:42:b7:28:4c:2f:dd:3d:0f: 77:82:d7:4e:14:45:f9:9b:fd:17:c9:29:80:79:29: 28:da:18:4d:46:3e:39:3d:26:08:02:6f:cf:ff:87: a2:7a:4b:b5:69:6b:05:5a:b5:ed:4e:07:39:39:35: 3b:9a:17:a9:3e:3b:1f:a2:17:43:9b:ed:b3:e2:35: f7:a9:5a:ff:40:04:83:48:aa:ae:ed:54:60:58:24: 88:67:f0:98:27:0a:b6:d5:0f:4a:32:9e:97:bf:2b: 07:a9:35:91:18:b1:70:40:3e:e6:d6:84:3f:9d:25: ad:29:1c:60:3f:cd:fb:72:7a:92:1a:a5:80:2c:cd: c5:75:9a:7d:30:10:09:20:c9:d0:1d:fd:46:d8:82: b5:35:8b:67:80:3f:24:34:5e:b9:35:64:4c:43:d1: ff:fe:89:bc:4f:4d:b0:00:17:0c:48:7e:88:7d:18: 7f:0e:4a:41:55:11:51:c3:3d:fa:07:86:9d:6a:33: 62:2f:b1:5b:2e:17:b8:1e:7c:bd:d3:5f:7a:60:05: 41:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:44:E4:EB:28:F6:9D:9B:76:C0:C2:49:9B:FD:7B:3E:C5:03:EF:3E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f7f49068-c0ca-4a21-9a8a-eed26fcdd1aa/0/B144E4EB28F69D9B76C0C2499BFD7B3EC503EF3E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.132.0/23 103.28.106.0/23 103.72.110.0/23 IPv6: 2001:df0:26f::/48 Signature Algorithm: sha256WithRSAEncryption 5d:85:6c:76:7c:5a:88:76:f5:7f:0d:08:05:e6:a6:e7:b4:8f: a1:b5:40:8a:70:bf:01:6e:50:a9:ea:8e:60:eb:eb:de:1b:d2: 32:5d:90:57:fa:14:a8:9c:70:6a:cd:98:b8:17:20:0f:71:62: ef:98:33:2a:9e:73:24:ad:78:f9:7f:28:8f:37:8a:19:26:af: 74:ee:bb:1d:4e:b6:4c:7f:b2:01:a5:90:9c:8e:b9:77:3a:45: ec:49:05:0c:b2:ac:0e:1e:e2:0e:45:6a:cd:cc:2d:55:07:04: b8:8a:bc:b2:90:3e:2c:33:64:dc:c9:73:7f:57:0a:ec:d8:0d: 26:58:3e:c5:7a:55:85:d6:07:23:fa:a8:d4:60:f9:2c:d3:7a: 8c:11:80:cd:a1:a6:53:4f:ef:1e:c3:c7:22:33:9f:ee:a5:c3: 58:9e:06:9e:16:b7:c1:e9:b5:8f:67:62:b7:40:d5:a0:b4:72: 4c:62:6c:e1:7c:6e:13:1b:d5:8c:71:5f:78:0c:c7:f8:47:f3: a0:ee:6d:a9:35:86:09:ff:05:8f:a2:27:0a:9e:bc:de:1c:60: 05:7e:67:57:60:0c:cc:d0:ad:f8:bc:12:30:66:7b:40:a9:ec: 18:8b:55:cb:bf:ab:c7:c5:45:38:0d:8a:2f:b6:26:a9:cc:d1: a0:00:43:94 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUHnC40J9o8hmGrKCsOxz5O/I3474wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTAzMTAyNFoX DTI0MDcyOTAzMTUyNFowMzExMC8GA1UEAxMoQjE0NEU0RUIyOEY2OUQ5Qjc2QzBD MjQ5OUJGRDdCM0VDNTAzRUYzRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKle2vXnZraPhLSOjY5O3YoSTMekLK8k2s62jMt/r5K3h+mxB6vWAQBZLX63 4M5KG9FJDEK3KEwv3T0Pd4LXThRF+Zv9F8kpgHkpKNoYTUY+OT0mCAJvz/+HonpL tWlrBVq17U4HOTk1O5oXqT47H6IXQ5vts+I196la/0AEg0iqru1UYFgkiGfwmCcK ttUPSjKel78rB6k1kRixcEA+5taEP50lrSkcYD/N+3J6khqlgCzNxXWafTAQCSDJ 0B39RtiCtTWLZ4A/JDReuTVkTEPR//6JvE9NsAAXDEh+iH0Yfw5KQVURUcM9+geG nWozYi+xWy4XuB58vdNfemAFQbsCAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLFE5Oso9p2bdsDCSZv9ez7FA+8+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mN2Y0OTA2OC1jMGNhLTRhMjEtOWE4YS1lZWQyNmZjZGQxYWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3ZjQ5MDY4 LWMwY2EtNGEyMS05YThhLWVlZDI2ZmNkZDFhYS8wL0IxNDRFNEVCMjhGNjlEOUI3 NkMwQzI0OTlCRkQ3QjNFQzUwM0VGM0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID BAEr8oQDBAFnHGoDBAFnSG4wDwQCAAIwCQMHACABDfACbzANBgkqhkiG9w0BAQsF AAOCAQEAXYVsdnxaiHb1fw0IBeam57SPobVAinC/AW5QqeqOYOvr3hvSMl2QV/oU qJxwas2YuBcgD3Fi75gzKp5zJK14+X8ojzeKGSavdO67HU62TH+yAaWQnI65dzpF 7EkFDLKsDh7iDkVqzcwtVQcEuIq8spA+LDNk3Mlzf1cK7NgNJlg+xXpVhdYHI/qo 1GD5LNN6jBGAzaGmU0/vHsPHIjOf7qXDWJ4Gnha3wem1j2dit0DVoLRyTGJs4Xxu ExvVjHFfeAzH+EfzoO5tqTWGCf8Fj6InCp683hxgBX5nV2AMzNCt+LwSMGZ7QKns GItVy7+rx8VFOA2KL7YmqczRoABDlA== -----END CERTIFICATE-----Generated at Wed May 8 07:45:29 2024 by rpki-client on console-ams.rpki-client.org