$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer (raw, json) Hash identifier: vTpY/eFGzq74P3AJJzjOcMPkQvHMVSlO3lm8zS5m4k0= Subject key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6A40D3A03D41CD2842C586207E514EC838683123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft caRepository: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 01 Nov 2023 09:20:46 +0000 Certificate not after: Wed 30 Oct 2024 09:25:46 +0000 Subordinate resources: IP: 103.140.74.0/23 IP: 2404:f9c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:40:d3:a0:3d:41:cd:28:42:c5:86:20:7e:51:4e:c8:38:68:31:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 1 09:20:46 2023 GMT Not After : Oct 30 09:25:46 2024 GMT Subject: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:e5:77:aa:d0:a8:84:a9:d0:37:bf:12:5f: ee:ee:fe:9b:15:16:f0:a9:c7:81:2a:79:69:35:ea: cb:d1:26:ed:9f:f5:ff:af:ee:66:b2:53:42:6a:b7: 50:c1:43:e5:09:dd:90:8e:44:53:fc:86:10:c9:b3: 94:7c:7b:14:f0:ae:d3:6a:94:69:1a:04:de:dd:58: 88:fb:ab:6d:05:a2:30:7c:e1:3c:cb:3f:fc:74:5c: bf:35:f3:90:d2:05:bc:65:4c:b3:f8:7d:d4:6a:2c: 7b:1a:5e:c8:21:1a:5e:6f:42:18:2f:33:cf:54:28: 77:04:bb:1c:fc:02:7e:44:56:c4:de:43:55:e4:6e: 74:ce:be:92:bd:3a:b8:d3:a1:54:a1:d4:16:40:85: 9d:84:2a:a9:c6:48:66:83:fd:eb:15:2c:66:7d:3d: 91:b9:e0:48:d5:ec:78:9f:46:b2:30:16:4f:4c:ff: dc:dc:82:30:f1:27:09:f9:76:c2:7d:95:9c:ca:3b: 68:37:06:92:60:c4:9a:ef:7f:1f:3f:8b:8f:fe:98: 13:62:31:9c:70:dc:17:67:33:94:06:6c:74:47:82: 48:95:55:d6:e8:77:23:f1:e5:c3:6a:bc:7c:ff:ad: 3b:b5:07:0a:31:fe:93:54:42:c7:39:f7:42:9a:1b: 15:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.74.0/23 IPv6: 2404:f9c0::/32 Signature Algorithm: sha256WithRSAEncryption 67:b0:0a:b1:4d:87:c8:7e:e9:a3:66:51:2c:86:fa:52:9d:23: a7:3b:29:52:2d:2c:f8:96:60:90:7b:77:38:cf:e0:67:e8:0f: 9d:69:4e:4c:84:b0:ad:b3:22:0a:9d:f5:75:b5:d1:dd:8b:5e: 5a:3d:d2:a6:cd:fa:de:9f:c5:87:06:5d:2f:ad:39:9c:93:71: b1:56:7f:92:53:da:f3:22:2b:ed:bd:94:38:a5:a5:0a:96:be: a2:2d:5e:3e:d5:10:98:31:8f:01:7c:d2:7b:f1:d3:0e:ba:0e: ad:2b:73:a5:33:59:ac:cf:7c:4b:59:77:40:34:cf:94:bb:a1: 5c:b2:58:c4:54:99:bf:e7:d8:9f:e0:9b:65:4b:76:ab:6e:7f: 24:60:42:a4:ad:4b:10:8b:74:90:eb:09:d9:93:ea:0c:66:b5: 0c:a5:75:67:c5:ae:4b:10:64:30:55:4d:c2:33:f5:7a:77:ef: e0:42:25:14:53:02:96:2d:cf:b0:df:89:7f:ce:41:b4:c9:e8: 33:79:5a:cb:1c:e9:7f:b5:a0:7d:88:ef:18:dd:8d:a3:18:6f: 2f:d2:ee:bc:22:43:1c:75:de:5d:0d:c0:40:3e:f3:e0:c2:da: b2:b2:31:78:12:09:a4:b7:9f:2a:3c:ba:92:71:b1:61:23:06: e5:5a:a6:8b -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUakDToD1BzShCxYYgflFOyDhoMSMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEwMTA5MjA0NloX DTI0MTAzMDA5MjU0NlowMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMx MUEzQkI2MjRBNUMzMEIzNDVGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMES5Xeq0KiEqdA3vxJf7u7+mxUW8KnHgSp5aTXqy9Em7Z/1/6/uZrJTQmq3 UMFD5QndkI5EU/yGEMmzlHx7FPCu02qUaRoE3t1YiPurbQWiMHzhPMs//HRcvzXz kNIFvGVMs/h91GosexpeyCEaXm9CGC8zz1QodwS7HPwCfkRWxN5DVeRudM6+kr06 uNOhVKHUFkCFnYQqqcZIZoP96xUsZn09kbngSNXseJ9GsjAWT0z/3NyCMPEnCfl2 wn2VnMo7aDcGkmDEmu9/Hz+Lj/6YE2IxnHDcF2czlAZsdEeCSJVV1uh3I/Hlw2q8 fP+tO7UHCjH+k1RCxzn3QpobFd8CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMz8SWx7F18ZyfMRo7tiSlwws0X0MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzODdlODVk LWIxODUtNDMzNC04MDFiLTQ5YzhjOGI5MTg0NC8wL0NDRkM0OTZDN0IxNzVGMTlD OUYzMTFBM0JCNjI0QTVDMzBCMzQ1RjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnjEowDQQCAAIwBwMFACQE+cAwDQYJKoZIhvcNAQELBQADggEBAGewCrFNh8h+ 6aNmUSyG+lKdI6c7KVItLPiWYJB7dzjP4GfoD51pTkyEsK2zIgqd9XW10d2LXlo9 0qbN+t6fxYcGXS+tOZyTcbFWf5JT2vMiK+29lDilpQqWvqItXj7VEJgxjwF80nvx 0w66Dq0rc6UzWazPfEtZd0A0z5S7oVyyWMRUmb/n2J/gm2VLdqtufyRgQqStSxCL dJDrCdmT6gxmtQyldWfFrksQZDBVTcIz9Xp37+BCJRRTApYtz7DfiX/OQbTJ6DN5 Wssc6X+1oH2I7xjdjaMYby/S7rwiQxx13l0NwEA+8+DC2rKyMXgSCaS3nyo8upJx sWEjBuVapos= -----END CERTIFICATE-----Generated at Wed May 8 10:06:56 2024 by rpki-client on console-ams.rpki-client.org