$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D4DD8244BC2EB2B187B4181226714505DF8F4452.cer File: D4DD8244BC2EB2B187B4181226714505DF8F4452.cer (raw, json) Hash identifier: JrsrjFIImmq2YZy4MY/TVOFbkJbybRPmE8z/nobf6bs= Subject key identifier: D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 33CFAE8C0B253D20524959631403F73F8A34223E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft caRepository: rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 24 Jul 2023 14:50:21 +0000 Certificate not after: Mon 22 Jul 2024 14:55:21 +0000 Subordinate resources: IP: 103.170.186.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:cf:ae:8c:0b:25:3d:20:52:49:59:63:14:03:f7:3f:8a:34:22:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 24 14:50:21 2023 GMT Not After : Jul 22 14:55:21 2024 GMT Subject: CN=D4DD8244BC2EB2B187B4181226714505DF8F4452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:18:d9:5f:00:c4:7d:d1:d8:b4:88:ca:75:a1: 3e:92:84:32:1d:21:4a:bf:83:1d:10:72:31:69:41: 57:3c:ae:d1:ba:1d:df:60:e5:29:90:77:90:05:9c: 30:f1:58:c0:b4:9f:aa:f5:d8:cd:c3:f4:17:77:81: 7b:d6:c7:e0:7a:76:c0:7d:b4:a9:ad:b8:7a:98:73: 4d:f5:bd:e8:99:25:8f:00:d6:85:1d:fe:61:dd:68: 0e:de:97:35:40:a5:ce:e9:96:c1:ec:9d:a1:ed:8f: 7d:62:84:49:47:30:f5:74:c8:bd:04:67:c4:27:ac: d8:4b:37:3f:b6:c3:f0:07:9c:09:a3:66:12:c5:4e: f3:84:d9:1e:e3:1c:02:13:3f:3c:0a:bf:58:e2:f4: bc:90:8d:49:72:28:87:91:6f:53:28:7e:24:19:fa: 97:e0:45:eb:b4:81:17:65:83:39:58:a1:8a:79:9c: 63:c0:ff:e4:f8:86:6c:68:20:e3:a6:ce:90:ed:59: 51:58:53:2d:14:5d:fa:9b:17:2d:1c:ec:b4:92:3b: 5c:2b:e4:00:a1:6d:16:3b:62:f9:f7:21:ff:82:e5: a1:bd:29:88:96:c3:2c:13:ae:4a:ea:4d:40:cb:4f: 40:0a:44:13:08:aa:e4:72:0b:d5:0a:67:a2:e0:92: 06:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:DD:82:44:BC:2E:B2:B1:87:B4:18:12:26:71:45:05:DF:8F:44:52 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/eaf0f423-3bed-4938-9f89-15e6269bddca/0/D4DD8244BC2EB2B187B4181226714505DF8F4452.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.186.0/23 Signature Algorithm: sha256WithRSAEncryption 41:2e:3e:8f:81:8f:c1:31:92:67:ca:7a:37:b7:c5:b5:d3:3b: cb:f8:18:24:bd:12:6c:26:1c:1c:51:8f:4f:b5:3b:15:14:c6: fc:15:01:2b:de:c7:95:c7:8b:82:e9:6f:ad:ea:9b:15:3d:ad: 6d:bf:36:c7:84:39:eb:a7:2c:cd:0d:48:26:82:9c:17:61:51: 4f:19:c3:92:73:d0:9b:b0:66:e7:bd:09:63:01:af:25:83:8f: 8c:ae:5f:9a:2e:b3:5d:a7:f2:6a:17:3e:8a:11:d4:eb:9b:47: 35:e5:73:df:89:00:cc:38:58:94:9f:02:ec:f8:e9:73:5f:4e: 27:05:12:78:7e:e8:00:65:f2:55:b5:50:dd:1a:53:38:5c:f9: 41:0e:a3:ae:63:1e:8b:4a:f9:17:df:76:5f:e3:a2:92:4f:07: 97:14:26:31:ec:41:a5:f2:0b:d3:fa:fa:ea:03:98:86:88:b7: d6:06:07:92:fb:1b:47:cd:0a:49:2b:00:5c:52:6b:1f:63:03: d2:9b:84:19:e7:83:d1:b3:53:df:80:23:4a:59:0c:5b:e7:37: c7:0f:16:e6:1b:4d:98:69:61:0e:d6:e7:f1:6b:4a:d7:25:e2: 01:e3:bb:06:7c:68:76:4e:a5:77:8a:bf:29:10:60:04:8e:49: a0:26:d8:c6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUM8+ujAslPSBSSVljFAP3P4o0Ij4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcyNDE0NTAyMVoX DTI0MDcyMjE0NTUyMVowMzExMC8GA1UEAxMoRDRERDgyNDRCQzJFQjJCMTg3QjQx ODEyMjY3MTQ1MDVERjhGNDQ1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN0Y2V8AxH3R2LSIynWhPpKEMh0hSr+DHRByMWlBVzyu0bod32DlKZB3kAWc MPFYwLSfqvXYzcP0F3eBe9bH4Hp2wH20qa24ephzTfW96JkljwDWhR3+Yd1oDt6X NUClzumWweydoe2PfWKESUcw9XTIvQRnxCes2Es3P7bD8AecCaNmEsVO84TZHuMc AhM/PAq/WOL0vJCNSXIoh5FvUyh+JBn6l+BF67SBF2WDOVihinmcY8D/5PiGbGgg 46bOkO1ZUVhTLRRd+psXLRzstJI7XCvkAKFtFjti+fch/4Llob0piJbDLBOuSupN QMtPQApEEwiq5HIL1QpnouCSBo0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNTdgkS8LrKxh7QYEiZxRQXfj0RSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYWYwZjQyMy0zYmVkLTQ5MzgtOWY4OS0xNWU2MjY5YmRkY2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhZjBmNDIz LTNiZWQtNDkzOC05Zjg5LTE1ZTYyNjliZGRjYS8wL0Q0REQ4MjQ0QkMyRUIyQjE4 N0I0MTgxMjI2NzE0NTA1REY4RjQ0NTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqrowDQYJKoZIhvcNAQELBQADggEBAEEuPo+Bj8ExkmfKeje3xbXTO8v4GCS9 EmwmHBxRj0+1OxUUxvwVASvex5XHi4Lpb63qmxU9rW2/NseEOeunLM0NSCaCnBdh UU8Zw5Jz0JuwZue9CWMBryWDj4yuX5ous12n8moXPooR1OubRzXlc9+JAMw4WJSf Auz46XNfTicFEnh+6ABl8lW1UN0aUzhc+UEOo65jHotK+Rffdl/jopJPB5cUJjHs QaXyC9P6+uoDmIaIt9YGB5L7G0fNCkkrAFxSax9jA9KbhBnng9GzU9+AI0pZDFvn N8cPFuYbTZhpYQ7W5/FrStcl4gHjuwZ8aHZOpXeKvykQYASOSaAm2MY= -----END CERTIFICATE-----Generated at Wed May 8 22:46:45 2024 by rpki-client on console-ams.rpki-client.org