$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer File: CC0E0C41CCA9566894D1D35FDE2D6425849503B5.cer (raw, json) Hash identifier: 1ihYuOL3ZvdDggIeJmu+Ab72Tm5l21npYJRYKb7obQQ= Subject key identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 212F90898A3F970F07F83DF1B70F0BA70786646F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft caRepository: rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 18 Jul 2023 05:01:58 +0000 Certificate not after: Tue 16 Jul 2024 05:06:58 +0000 Subordinate resources: IP: 103.4.174.0/23 IP: 103.23.234.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:2f:90:89:8a:3f:97:0f:07:f8:3d:f1:b7:0f:0b:a7:07:86:64:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 18 05:01:58 2023 GMT Not After : Jul 16 05:06:58 2024 GMT Subject: CN=CC0E0C41CCA9566894D1D35FDE2D6425849503B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cd:a1:e5:50:c1:db:62:5a:4f:b0:70:08:79: d6:f4:1a:1f:ef:c7:9d:04:e2:e6:5c:ee:22:85:5a: bb:17:7a:a0:dd:1c:e7:d6:22:71:40:da:4e:cf:05: 5c:7c:2d:64:7f:92:9f:54:b1:97:6b:79:ce:e6:8d: 11:e1:f1:81:fe:0f:60:c1:55:c1:9b:3a:d9:cb:49: 51:38:05:f7:a7:ee:9d:dd:ff:e4:3d:16:50:a4:75: 98:c5:13:dd:1c:13:aa:41:a0:42:ea:b8:14:6c:9e: 41:f2:e0:56:aa:55:4e:e4:59:8b:53:52:b1:a3:1f: 28:a0:e3:4e:ed:f6:ab:30:d6:5c:bd:5f:1c:29:e3: cb:54:ab:07:ac:d7:8d:09:8b:f3:da:26:64:e5:cc: 2a:3e:00:d7:37:24:ee:61:3c:8d:7b:73:bb:81:49: 9f:a6:d3:0a:bb:f0:77:3b:0d:80:7d:26:29:01:fd: 4c:6a:5d:a3:b6:76:52:88:5f:6b:9b:1d:ab:1f:f7: 13:fa:b5:d5:a0:d6:08:dc:9c:d4:b3:fe:e2:ac:8d: b2:b6:d7:32:e2:4f:6e:74:a2:5c:be:6a:ab:2f:2e: 59:17:1e:88:16:c0:1c:d4:6b:6d:7c:37:56:de:ba: 21:78:b9:e4:0d:d3:b2:7e:e4:b1:5a:61:e6:d7:c7: 5d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CC:0E:0C:41:CC:A9:56:68:94:D1:D3:5F:DE:2D:64:25:84:95:03:B5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a05f768b-4218-4c5d-893a-0ff696526639/0/CC0E0C41CCA9566894D1D35FDE2D6425849503B5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.174.0/23 103.23.234.0/23 Signature Algorithm: sha256WithRSAEncryption 04:05:5e:6b:ba:b0:d8:65:83:ae:6a:cb:5b:06:a6:74:4c:85: 0b:3e:fa:ef:b1:ae:19:80:c2:c5:29:91:ef:ea:0e:45:25:1e: 73:87:19:5a:7d:fd:d7:7b:e0:66:0f:43:d0:3b:ac:fd:03:7a: 07:5a:f3:49:59:c2:04:c6:d1:a1:46:de:bd:a8:a7:50:af:d3: 8a:98:c5:12:65:2a:53:57:52:34:6e:49:7d:cb:b1:cb:1f:09: 72:55:2d:1a:5f:b9:9c:7a:f7:2b:10:85:61:71:63:56:11:b4: 0f:e2:77:2c:83:13:76:fe:a7:38:86:e2:c2:5e:3a:e5:bd:f1: 95:d8:ff:fc:a1:e9:ba:de:b4:33:c4:0b:ed:3b:4a:78:5f:d3: 07:8e:fb:4d:6b:62:e8:3f:bb:47:34:9d:58:2b:9a:39:e0:f5: 0f:d0:0f:99:1c:d8:26:2b:1f:04:48:02:5c:3b:3a:2c:e6:0b: 76:ef:a8:60:6c:e1:aa:78:c1:a7:7c:89:3b:0f:b3:5a:41:0c: e2:95:6e:8e:e4:53:9d:f0:1c:70:29:04:bb:be:b1:a1:36:77: 47:a8:b6:84:2e:77:e8:99:3f:37:8c:f5:c9:8f:24:a1:52:8a: e4:6c:cd:18:76:45:a6:f7:55:b4:a7:fa:3f:33:1b:eb:bc:3b: b8:7e:cf:20 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUIS+QiYo/lw8H+D3xtw8LpweGZG8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcxODA1MDE1OFoX DTI0MDcxNjA1MDY1OFowMzExMC8GA1UEAxMoQ0MwRTBDNDFDQ0E5NTY2ODk0RDFE MzVGREUyRDY0MjU4NDk1MDNCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzNoeVQwdtiWk+wcAh51vQaH+/HnQTi5lzuIoVauxd6oN0c59YicUDaTs8F XHwtZH+Sn1Sxl2t5zuaNEeHxgf4PYMFVwZs62ctJUTgF96fund3/5D0WUKR1mMUT 3RwTqkGgQuq4FGyeQfLgVqpVTuRZi1NSsaMfKKDjTu32qzDWXL1fHCnjy1SrB6zX jQmL89omZOXMKj4A1zck7mE8jXtzu4FJn6bTCrvwdzsNgH0mKQH9TGpdo7Z2Uohf a5sdqx/3E/q11aDWCNyc1LP+4qyNsrbXMuJPbnSiXL5qqy8uWRceiBbAHNRrbXw3 Vt66IXi55A3Tsn7ksVph5tfHXXcCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMwODEHMqVZolNHTX94tZCWElQO1MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMDVmNzY4Yi00MjE4LTRjNWQtODkzYS0wZmY2OTY1MjY2MzkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwNWY3Njhi LTQyMTgtNGM1ZC04OTNhLTBmZjY5NjUyNjYzOS8wL0NDMEUwQzQxQ0NBOTU2Njg5 NEQxRDM1RkRFMkQ2NDI1ODQ5NTAzQjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAFnBK4DBAFnF+owDQYJKoZIhvcNAQELBQADggEBAAQFXmu6sNhlg65qy1sGpnRM hQs++u+xrhmAwsUpke/qDkUlHnOHGVp9/dd74GYPQ9A7rP0Degda80lZwgTG0aFG 3r2op1Cv04qYxRJlKlNXUjRuSX3LscsfCXJVLRpfuZx69ysQhWFxY1YRtA/idyyD E3b+pziG4sJeOuW98ZXY//yh6bretDPEC+07Snhf0weO+01rYug/u0c0nVgrmjng 9Q/QD5kc2CYrHwRIAlw7OizmC3bvqGBs4ap4wad8iTsPs1pBDOKVbo7kU53wHHAp BLu+saE2d0eotoQud+iZPzeM9cmPJKFSiuRszRh2Rab3VbSn+j8zG+u8O7h+zyA= -----END CERTIFICATE-----Generated at Wed May 8 18:12:21 2024 by rpki-client on console-fra.rpki-client.org