$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer File: 44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer (raw, json) Hash identifier: W5HhzOtRdcqayCDKxM5eRQ+91AwZQBrSZqz37JUlKAU= Subject key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0257DA25B9763B64BFBEDC9198CCD7BB4967B38C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft caRepository: rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 15 May 2025 19:17:28 +0000 Certificate not after: Thu 14 May 2026 19:22:28 +0000 Subordinate resources: IP: 103.43.164.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 01:55:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:57:da:25:b9:76:3b:64:bf:be:dc:91:98:cc:d7:bb:49:67:b3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 15 19:17:28 2025 GMT Not After : May 14 19:22:28 2026 GMT Subject: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:94:9c:6c:b7:98:7e:12:c3:b1:ea:90:6d: 03:97:f2:1d:61:53:11:28:62:83:d8:2e:ea:b1:12: 83:0a:a6:4f:a2:70:3e:e3:01:b5:6b:2c:db:88:6f: a7:5a:ec:2c:25:9b:35:be:65:b0:71:b6:ab:88:13: 07:8b:dc:c8:e0:a2:2a:d2:a4:70:bb:ee:3b:e7:92: cf:1a:ff:95:bc:76:87:25:5e:4d:8f:59:2a:1e:ea: af:61:bc:e2:2f:71:04:ba:91:0c:1b:b9:60:56:40: d0:9b:b6:37:3d:8b:61:6c:cb:33:91:06:66:8d:f1: 2c:a0:62:98:4e:d8:22:e9:c3:28:60:d2:1b:8a:f9: 6e:fe:e4:38:f2:a6:45:75:52:05:c9:29:74:6b:a4: 16:ed:09:e2:77:b1:b2:9e:04:0d:0b:5c:c4:e0:84: b0:89:19:52:c7:00:ff:3a:96:77:d7:27:b6:89:00: 8a:fe:74:1e:18:68:0f:0c:0b:58:03:30:00:06:53: 54:c6:81:a4:7a:ed:7a:5e:42:d7:0c:64:95:3f:a1: ca:25:c8:bf:49:f0:f4:7c:9f:55:64:df:ac:04:4a: 0c:79:87:22:a5:be:bc:49:06:c3:47:7a:2e:c0:74: 96:7e:8b:c1:c6:cc:c2:24:e0:17:f9:b4:73:64:57: bc:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.43.164.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:91:e1:dc:34:a4:f8:3d:a4:c5:e0:25:20:81:ae:91:74:3b: 0b:20:ba:04:8c:f5:34:7a:f0:92:09:b1:a5:00:63:fa:c4:a8: ea:b7:85:ad:6a:cf:2d:84:eb:43:4a:c5:be:0c:14:bd:3e:a9: 94:66:77:10:94:01:cd:28:e2:fe:d3:cb:86:d4:4e:e2:04:57: ee:f9:d1:9f:3c:ce:77:45:7a:a1:7a:b8:e6:1b:3c:10:85:2b: c5:47:3c:34:7d:74:10:fc:4b:7a:23:c4:06:cf:97:d2:c1:93: 40:5c:cb:ac:46:f0:f8:45:84:a3:95:28:0e:04:62:31:38:23: 8d:93:18:79:59:da:0f:35:6c:a8:56:be:3a:2d:97:f3:69:ba: c1:19:70:43:22:d5:06:ec:3d:3f:11:7b:73:92:2a:75:e0:66: 21:25:5d:9e:b8:ec:8c:8c:0f:0d:56:3a:54:00:55:51:c3:7d: b0:b4:07:4e:07:ea:0c:8b:ac:23:7f:60:96:01:6c:e8:ed:ed: b3:aa:7b:03:2b:ba:40:7a:82:8a:81:0c:32:1b:ea:44:ad:07: 0c:5f:3a:db:95:13:65:aa:3c:07:39:44:1c:6e:29:6d:2a:bf: 45:c5:64:0f:d7:1b:49:79:bb:c2:20:7a:81:17:e2:1b:ab:8a: 28:e8:21:e0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAlfaJbl2O2S/vtyRmMzXu0lns4wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUxNTE5MTcyOFoX DTI2MDUxNDE5MjIyOFowMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3 QzUyMzM1M0NCNjdBMEI4RDNCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALx3lJxst5h+EsOx6pBtA5fyHWFTEShig9gu6rESgwqmT6JwPuMBtWss24hv p1rsLCWbNb5lsHG2q4gTB4vcyOCiKtKkcLvuO+eSzxr/lbx2hyVeTY9ZKh7qr2G8 4i9xBLqRDBu5YFZA0Ju2Nz2LYWzLM5EGZo3xLKBimE7YIunDKGDSG4r5bv7kOPKm RXVSBckpdGukFu0J4nexsp4EDQtcxOCEsIkZUscA/zqWd9cntokAiv50HhhoDwwL WAMwAAZTVMaBpHrtel5C1wxklT+hyiXIv0nw9HyfVWTfrARKDHmHIqW+vEkGw0d6 LsB0ln6LwcbMwiTgF/m0c2RXvPcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEQiGz0UX8wXc098UjNTy2eguNOzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zNjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM2MmJhY2M5 LWQyNWQtNDYxMC1hZWU0LTY1NWExNGVhMmZkNi8wLzQ0MjIxQjNEMTQ1RkNDMTc3 MzRGN0M1MjMzNTNDQjY3QTBCOEQzQjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnK6QwDQYJKoZIhvcNAQELBQADggEBAFyR4dw0pPg9pMXgJSCBrpF0OwsgugSM 9TR68JIJsaUAY/rEqOq3ha1qzy2E60NKxb4MFL0+qZRmdxCUAc0o4v7Ty4bUTuIE V+750Z88zndFeqF6uOYbPBCFK8VHPDR9dBD8S3ojxAbPl9LBk0Bcy6xG8PhFhKOV KA4EYjE4I42TGHlZ2g81bKhWvjotl/NpusEZcEMi1QbsPT8Re3OSKnXgZiElXZ64 7IyMDw1WOlQAVVHDfbC0B04H6gyLrCN/YJYBbOjt7bOqewMrukB6goqBDDIb6kSt BwxfOtuVE2WqPAc5RBxuKW0qv0XFZA/XG0l5u8IgeoEX4huriijoIeA= -----END CERTIFICATE-----Generated at Thu May 15 22:23:04 2025 by rpki-client