$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer File: C94D41BEAEF4A56979753B500D992FE3CAE43727.cer (raw, json) Hash identifier: JANRbFovVXncbPT9DUqoqF8IV0bxAtRFn/BBvUorGug= Subject key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 022CAA3B0BBC4CB43352C7CCC51B334CE65612CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft caRepository: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 10 Jul 2024 06:58:34 +0000 Certificate not after: Wed 09 Jul 2025 07:03:34 +0000 Subordinate resources: IP: 103.46.8.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:2c:aa:3b:0b:bc:4c:b4:33:52:c7:cc:c5:1b:33:4c:e6:56:12:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 10 06:58:34 2024 GMT Not After : Jul 9 07:03:34 2025 GMT Subject: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:94:3e:18:71:45:92:e4:07:09:46:b3:2e:e2: f1:a6:9c:66:45:72:91:98:65:6f:00:70:10:4f:31: 36:cd:48:04:c3:36:d6:33:c4:ce:ed:c0:4e:58:16: 39:77:13:d2:cb:17:cf:28:4c:e6:18:84:5d:b4:a2: a4:ed:cc:cd:7f:bc:40:48:ad:71:8b:1f:21:45:6e: 79:e7:b9:62:52:56:44:64:c9:43:a2:71:18:13:4f: 6a:d1:9f:c0:c4:d1:7e:be:70:3f:62:a9:57:23:61: 92:c6:7e:15:4c:5f:9b:6a:b8:72:b8:4e:3e:3b:77: fa:ca:b1:3e:4a:01:4b:5d:c1:d6:ab:f6:6c:12:5e: 87:32:9a:db:d2:51:1a:36:83:83:19:a2:ac:85:3e: 66:e1:14:3c:3d:d0:ff:2a:a4:29:31:7d:0c:42:a8: 7d:63:5c:2f:ba:4b:31:7b:18:6b:e3:76:86:fb:e0: 6f:b7:ea:86:bb:c5:a8:63:ae:49:e9:6a:fc:6e:4b: e0:ea:7f:85:96:ae:07:ac:bf:50:84:6d:49:6f:20: e9:fb:a5:63:27:e3:9d:fb:f8:dd:66:d6:72:52:9c: eb:de:74:3f:3a:67:0f:f7:4e:b9:82:8b:16:bf:e5: 94:b8:1c:23:5b:5e:cd:2c:73:b2:28:a9:d0:f6:fe: 09:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.46.8.0/23 Signature Algorithm: sha256WithRSAEncryption 68:2e:5c:ce:7a:c7:58:df:b0:ea:2b:6e:7a:08:9d:f4:22:af: 46:89:78:67:55:a7:84:eb:99:59:c5:d6:80:37:3c:ad:10:a0: 37:aa:23:23:87:9d:f4:52:4e:7e:01:aa:c6:e6:b3:09:5f:7f: b8:66:4d:75:13:14:f6:e9:8c:ec:56:4c:bb:28:25:7c:88:b8: 09:83:5c:d5:a6:83:79:c4:ba:cf:b1:5d:77:29:89:1c:c4:28: ea:b1:f0:96:b9:48:d7:a9:22:57:14:82:da:f9:4f:d3:29:c2: dd:4e:23:ed:c0:72:40:5b:1e:8f:e4:08:7d:93:04:8b:09:e1: 49:80:dc:53:de:74:d7:2c:74:47:62:b1:d5:7c:6f:bd:53:66: 96:4f:5f:91:db:27:70:0c:9e:a5:9f:c5:1c:31:4f:88:4a:d6: ff:1b:e4:c2:a4:06:4e:89:91:85:83:1a:fc:2f:15:85:46:ea: fa:0f:35:aa:b2:ec:ab:46:bf:bb:06:24:ae:82:ce:cd:d9:4d: dd:5c:ee:79:79:7c:03:81:e9:16:b1:06:4d:84:a5:c4:d3:f6: 8b:97:35:2e:fa:d1:4d:0b:e9:43:13:d0:65:92:62:44:ef:fd: 1f:72:e4:cc:2e:31:b3:09:33:6b:29:f2:71:0d:80:3c:07:77: cd:ca:8a:dd -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAiyqOwu8TLQzUsfMxRszTOZWEsowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcxMDA2NTgzNFoX DTI1MDcwOTA3MDMzNFowMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUz QjUwMEQ5OTJGRTNDQUU0MzcyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOUPhhxRZLkBwlGsy7i8aacZkVykZhlbwBwEE8xNs1IBMM21jPEzu3ATlgW OXcT0ssXzyhM5hiEXbSipO3MzX+8QEitcYsfIUVueee5YlJWRGTJQ6JxGBNPatGf wMTRfr5wP2KpVyNhksZ+FUxfm2q4crhOPjt3+sqxPkoBS13B1qv2bBJehzKa29JR GjaDgxmirIU+ZuEUPD3Q/yqkKTF9DEKofWNcL7pLMXsYa+N2hvvgb7fqhrvFqGOu Selq/G5L4Op/hZauB6y/UIRtSW8g6fulYyfjnfv43WbWclKc6950PzpnD/dOuYKL Fr/llLgcI1tezSxzsiip0Pb+CYECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMlNQb6u9KVpeXU7UA2ZL+PK5DcnMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2ZDhhMGZh LTVkNGEtNDgzYi1hZjg5LTBlZjQwZGViMDVmMy8wL0M5NEQ0MUJFQUVGNEE1Njk3 OTc1M0I1MDBEOTkyRkUzQ0FFNDM3MjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnLggwDQYJKoZIhvcNAQELBQADggEBAGguXM56x1jfsOorbnoInfQir0aJeGdV p4TrmVnF1oA3PK0QoDeqIyOHnfRSTn4Bqsbmswlff7hmTXUTFPbpjOxWTLsoJXyI uAmDXNWmg3nEus+xXXcpiRzEKOqx8Ja5SNepIlcUgtr5T9Mpwt1OI+3AckBbHo/k CH2TBIsJ4UmA3FPedNcsdEdisdV8b71TZpZPX5HbJ3AMnqWfxRwxT4hK1v8b5MKk Bk6JkYWDGvwvFYVG6voPNaqy7KtGv7sGJK6Czs3ZTd1c7nl5fAOB6RaxBk2EpcTT 9ouXNS760U0L6UMT0GWSYkTv/R9y5MwuMbMJM2sp8nENgDwHd83Kit0= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:30 2024 by rpki-client on console-fra.rpki-client.org