$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer File: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer (raw, json) Hash identifier: XOZidk7gswjUyp5hcmNTqwAV6kct69MlwdNH50TOC/c= Subject key identifier: 01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7C630514D2CD3ACBED5C860B66504017632C8B8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft caRepository: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 02 Oct 2024 02:49:26 +0000 Certificate not after: Wed 01 Oct 2025 02:54:26 +0000 Subordinate resources: IP: 103.35.152.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:63:05:14:d2:cd:3a:cb:ed:5c:86:0b:66:50:40:17:63:2c:8b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 2 02:49:26 2024 GMT Not After : Oct 1 02:54:26 2025 GMT Subject: CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:eb:9e:9b:42:3f:c3:ca:76:2b:1d:26:a7:ed: a6:51:0c:ad:db:17:91:f1:7d:72:86:c1:a4:8a:1d: b9:27:b4:bf:19:ee:d3:9a:5b:44:6a:c9:c1:bd:81: af:db:d0:ff:07:29:6f:96:b5:5e:83:00:d4:04:14: a9:17:2a:98:e9:95:33:3f:40:6f:29:7c:a2:3b:d0: 0b:05:10:96:3a:6a:71:90:e2:1f:8b:9a:0f:da:42: 8f:bf:ac:ad:f3:e7:bb:d7:b1:f6:5b:0f:5b:06:dc: a4:f8:73:11:2c:4b:cd:fe:d8:bc:11:80:d6:b6:d4: c7:af:b3:08:5d:64:bf:0c:79:84:3d:33:0b:64:61: d6:45:ff:65:93:dd:74:1e:ed:5a:a3:11:89:ab:cc: 2c:21:bd:ad:af:55:26:dc:57:9e:63:c5:eb:8b:9d: a4:36:f0:43:86:2f:41:2b:ab:a2:bf:f4:84:53:23: 33:3a:83:89:a0:6c:8b:0c:ca:e9:7e:67:41:43:e0: 99:0f:9c:50:3e:09:fc:70:03:03:74:1b:96:75:eb: 29:27:d3:28:bb:0c:b4:33:e5:5b:18:f0:42:c1:ff: 0c:46:a9:20:04:17:b3:de:e3:06:f8:ac:8e:f3:e8: 57:60:08:5f:5b:e5:48:9b:72:87:70:1c:42:d8:db: 2d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.35.152.0/23 Signature Algorithm: sha256WithRSAEncryption 36:9e:e0:b6:4f:68:25:6e:fe:9b:7c:e8:c1:c7:96:17:1c:6d: 2c:38:63:b9:bf:47:aa:a4:ff:a6:f7:93:23:56:e4:b8:b2:dc: 60:6c:1c:d8:e3:e9:2d:68:97:a3:95:b3:50:4e:bd:70:b0:3f: 67:5a:84:31:5b:a7:b3:2c:c3:74:89:d9:47:46:92:0f:20:24: 34:fd:89:03:fd:ec:19:a9:ec:00:38:3a:ed:73:0f:7c:4f:24: aa:6a:a4:9b:b5:75:14:d0:12:a5:6e:c9:61:55:49:47:4d:ef: 88:05:c7:44:8e:ad:f8:5b:bb:05:89:2d:bf:66:c1:3a:a4:71: 65:30:02:51:6f:4b:94:5d:12:f5:9a:4d:44:80:95:45:8a:b1: 24:ce:15:ee:ca:78:7a:74:b8:be:eb:cd:69:26:5f:fe:be:c3: 39:8d:b7:b6:ee:e3:23:7e:1e:f9:38:8c:f0:4f:3c:8c:eb:5e: cc:87:2b:68:27:33:70:97:21:34:a8:b6:b7:50:54:ca:05:96: 5a:61:85:69:e8:3e:a7:00:93:27:2f:6e:37:98:ba:fa:a5:34: 54:15:e4:01:7b:09:e4:a3:15:a1:22:72:21:1b:9f:38:02:96: 1f:c1:3d:78:48:64:58:95:8b:51:27:a8:d3:db:2f:54:48:a7: f4:2e:8f:e5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfGMFFNLNOsvtXIYLZlBAF2Msi4wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAwMjAyNDkyNloX DTI1MTAwMTAyNTQyNlowMzExMC8GA1UEAxMoMDEwMEE3RjZDNEQ1OEMzODY3RjlD RUQ3RTdENDZEQ0VEMEE1NzgwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXrnptCP8PKdisdJqftplEMrdsXkfF9cobBpIoduSe0vxnu05pbRGrJwb2B r9vQ/wcpb5a1XoMA1AQUqRcqmOmVMz9Abyl8ojvQCwUQljpqcZDiH4uaD9pCj7+s rfPnu9ex9lsPWwbcpPhzESxLzf7YvBGA1rbUx6+zCF1kvwx5hD0zC2Rh1kX/ZZPd dB7tWqMRiavMLCG9ra9VJtxXnmPF64udpDbwQ4YvQSuror/0hFMjMzqDiaBsiwzK 6X5nQUPgmQ+cUD4J/HADA3QblnXrKSfTKLsMtDPlWxjwQsH/DEapIAQXs97jBvis jvPoV2AIX1vlSJtyh3AcQtjbLT0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAEAp/bE1Yw4Z/nO1+fUbc7QpXgEMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNDg4NTUyNS1jYjBmLTQ2YTAtODI1My0wNDJkN2Q3YWZmMzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0ODg1NTI1 LWNiMGYtNDZhMC04MjUzLTA0MmQ3ZDdhZmYzOC8wLzAxMDBBN0Y2QzRENThDMzg2 N0Y5Q0VEN0U3RDQ2RENFRDBBNTc4MDQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnI5gwDQYJKoZIhvcNAQELBQADggEBADae4LZPaCVu/pt86MHHlhccbSw4Y7m/ R6qk/6b3kyNW5Liy3GBsHNjj6S1ol6OVs1BOvXCwP2dahDFbp7Msw3SJ2UdGkg8g JDT9iQP97Bmp7AA4Ou1zD3xPJKpqpJu1dRTQEqVuyWFVSUdN74gFx0SOrfhbuwWJ Lb9mwTqkcWUwAlFvS5RdEvWaTUSAlUWKsSTOFe7KeHp0uL7rzWkmX/6+wzmNt7bu 4yN+Hvk4jPBPPIzrXsyHK2gnM3CXITSotrdQVMoFllphhWnoPqcAkycvbjeYuvql NFQV5AF7CeSjFaEiciEbnzgClh/BPXhIZFiVi1EnqNPbL1RIp/Quj+U= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org