$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DD29F5E4CE561760A0212F0448987AFBE75263D7.cer File: DD29F5E4CE561760A0212F0448987AFBE75263D7.cer (raw, json) Hash identifier: /duoVVTCfkI2Q+uEONHf3fjj3Pa8IXItICLiTnxJFUg= Subject key identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4EF1DA1BDB792E9F54A4824B8037679BFEED722A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft caRepository: rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 19 Aug 2023 09:37:00 +0000 Certificate not after: Sat 17 Aug 2024 09:42:00 +0000 Subordinate resources: IP: 58.147.184.0/21 IP: 103.42.120.0/22 IP: 2404:9580::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f1:da:1b:db:79:2e:9f:54:a4:82:4b:80:37:67:9b:fe:ed:72:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 19 09:37:00 2023 GMT Not After : Aug 17 09:42:00 2024 GMT Subject: CN=DD29F5E4CE561760A0212F0448987AFBE75263D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:41:4b:10:8b:47:d4:a5:f2:7e:2e:5c:28:5a: fa:c0:7d:6d:d9:30:2b:ca:24:9b:41:2d:94:c1:4b: 36:58:b9:e5:ea:f3:47:d1:a5:d7:d4:cc:4e:b2:68: d2:b0:20:e3:31:ad:d7:0a:e6:ca:ac:aa:be:b1:7b: cc:08:4f:9c:07:ce:f1:41:61:13:03:77:80:21:fb: 15:de:cc:86:ac:e6:43:aa:68:2e:17:1d:48:72:71: be:01:a5:88:89:0a:57:e3:31:45:c2:97:98:d4:e6: bb:81:fb:44:77:da:d5:06:63:01:d1:69:76:03:01: eb:67:8e:3d:28:89:65:48:47:70:a8:5c:89:a7:06: 4e:b6:da:06:d9:69:ab:10:fe:97:02:4f:6f:bd:ed: 02:4f:94:e5:96:cb:c9:14:27:da:1d:39:fc:18:ac: 00:7b:0f:32:a0:f9:af:2a:b8:f8:9b:1e:79:33:59: 80:a2:72:7d:48:aa:ae:31:ac:4e:58:de:3b:28:10: 94:e8:be:14:cc:a5:7a:52:53:9c:10:a4:61:a1:fa: 42:33:b1:28:9c:52:93:06:2c:2b:bd:f8:d0:08:66: 76:5c:7b:6c:81:91:a1:d4:b8:83:21:7c:ee:e1:11: bd:f3:61:82:26:06:1b:75:cf:6a:7c:16:76:f8:9d: 43:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DD:29:F5:E4:CE:56:17:60:A0:21:2F:04:48:98:7A:FB:E7:52:63:D7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0624052e-2205-48f3-a3cb-ce8b326b8f71/0/DD29F5E4CE561760A0212F0448987AFBE75263D7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.147.184.0/21 103.42.120.0/22 IPv6: 2404:9580::/32 Signature Algorithm: sha256WithRSAEncryption 2c:da:4e:a0:d2:2c:b2:30:17:f6:c3:f6:8f:36:1a:67:b8:21: f1:c0:3b:a1:73:0b:b9:c3:b9:4d:ad:02:2b:d9:6f:5b:f5:8b: 31:f3:60:1c:03:05:8e:82:a1:d6:bd:59:8d:a0:e2:22:e6:d2: ae:1a:4a:93:3c:30:ec:55:d1:62:33:a8:b2:3d:cc:40:39:91: 8e:41:e3:82:86:4c:a8:6f:9e:e3:e4:5e:5d:9d:e3:31:3d:49: 23:7d:46:be:77:5d:2d:e7:9f:71:27:24:b2:c3:9f:f1:e4:68: 25:b9:e4:6c:5c:48:f1:ea:15:fb:a5:d3:9c:91:53:6b:a8:e2: df:45:22:d0:a9:aa:ee:30:e0:20:5e:1f:98:1c:04:fa:33:44: 24:05:75:06:6f:db:51:a2:8e:9f:f7:47:7d:6f:aa:fd:54:cb: 64:6a:29:6d:3b:97:a0:8a:e3:8a:b2:d5:f9:62:9a:32:22:a0: 42:c6:6e:33:e6:b9:03:77:dc:59:23:ae:2e:8f:c4:8a:19:58: 73:24:a2:19:f5:8c:39:75:c7:10:8f:ab:fb:c2:af:ea:f6:9f: 01:7d:d1:39:50:1a:e1:6c:4b:17:83:cc:86:1a:c6:e7:b5:ea: 50:35:bd:5f:dd:f8:04:4c:84:3f:b2:21:53:0c:8d:3e:5b:c2: 5d:b6:15:bb -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUTvHaG9t5Lp9UpIJLgDdnm/7tciowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgxOTA5MzcwMFoX DTI0MDgxNzA5NDIwMFowMzExMC8GA1UEAxMoREQyOUY1RTRDRTU2MTc2MEEwMjEy RjA0NDg5ODdBRkJFNzUyNjNENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJpBSxCLR9Sl8n4uXCha+sB9bdkwK8okm0EtlMFLNli55erzR9Gl19TMTrJo 0rAg4zGt1wrmyqyqvrF7zAhPnAfO8UFhEwN3gCH7Fd7MhqzmQ6poLhcdSHJxvgGl iIkKV+MxRcKXmNTmu4H7RHfa1QZjAdFpdgMB62eOPSiJZUhHcKhciacGTrbaBtlp qxD+lwJPb73tAk+U5ZbLyRQn2h05/BisAHsPMqD5ryq4+JseeTNZgKJyfUiqrjGs TljeOygQlOi+FMylelJTnBCkYaH6QjOxKJxSkwYsK7340Ahmdlx7bIGRodS4gyF8 7uERvfNhgiYGG3XPanwWdvidQzsCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN0p9eTOVhdgoCEvBEiYevvnUmPXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNjI0MDUyZS0yMjA1LTQ4ZjMtYTNjYi1jZThiMzI2YjhmNzEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2MjQwNTJl LTIyMDUtNDhmMy1hM2NiLWNlOGIzMjZiOGY3MS8wL0REMjlGNUU0Q0U1NjE3NjBB MDIxMkYwNDQ4OTg3QUZCRTc1MjYzRDcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAM6k7gDBAJnKngwDQQCAAIwBwMFACQElYAwDQYJKoZIhvcNAQELBQADggEBACza TqDSLLIwF/bD9o82Gme4IfHAO6FzC7nDuU2tAivZb1v1izHzYBwDBY6Coda9WY2g 4iLm0q4aSpM8MOxV0WIzqLI9zEA5kY5B44KGTKhvnuPkXl2d4zE9SSN9Rr53XS3n n3EnJLLDn/HkaCW55GxcSPHqFful05yRU2uo4t9FItCpqu4w4CBeH5gcBPozRCQF dQZv21Gijp/3R31vqv1Uy2RqKW07l6CK44qy1flimjIioELGbjPmuQN33Fkjri6P xIoZWHMkohn1jDl1xxCPq/vCr+r2nwF90TlQGuFsSxeDzIYaxue16lA1vV/d+ARM hD+yIVMMjT5bwl22Fbs= -----END CERTIFICATE-----Generated at Wed May 8 09:50:44 2024 by rpki-client on console-fra.rpki-client.org