$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer File: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer (raw, json) Hash identifier: 6lc14kdennACmuD9bEEIJyyghtZwX16XpnrBonUIIkY= Subject key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 07EE27D977B24B765D993E5A9552D39F2419BA79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft caRepository: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 08 Aug 2024 04:51:45 +0000 Certificate not after: Thu 07 Aug 2025 04:56:45 +0000 Subordinate resources: IP: 103.160.202.0/23 IP: 2001:df1:6bc0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ee:27:d9:77:b2:4b:76:5d:99:3e:5a:95:52:d3:9f:24:19:ba:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 8 04:51:45 2024 GMT Not After : Aug 7 04:56:45 2025 GMT Subject: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a3:90:51:c1:bb:f4:a0:51:3b:b7:49:c7:8b: f4:ad:18:35:61:79:7c:cd:3b:27:bf:96:d9:bf:b1: c6:27:b8:c4:38:69:f3:00:c2:f0:60:26:cf:b9:70: c5:b2:92:0c:a6:70:4e:8e:08:8a:68:b5:7a:c2:e0: 52:ba:e7:97:d7:72:a8:bd:9f:84:aa:53:af:01:89: 82:89:e0:48:c2:9f:5f:0b:ff:52:03:ef:53:a2:9d: fe:f1:c6:f7:f8:de:a2:d3:f9:d0:71:fc:fc:97:5b: c9:44:1a:02:db:d1:4b:25:41:37:0f:89:6e:97:b5: 9d:b1:dc:69:39:06:cc:33:1a:85:a7:1b:18:d5:b3: 7c:5b:db:bb:a0:96:b1:fd:48:f0:72:7b:f5:3b:ea: 48:65:3b:71:79:cb:68:78:2d:42:3d:b6:3b:ec:9c: de:a7:dc:a7:91:74:33:de:fc:24:93:86:5d:97:de: 00:db:81:3d:63:3c:26:33:1e:c7:16:df:ca:22:ed: eb:da:5d:1e:5d:50:5f:d4:3c:a2:a4:af:4e:14:b9: 1a:ff:7c:b4:ee:58:13:ea:65:c0:0a:b9:58:c1:d0: 71:8f:51:e9:7c:14:9b:db:d4:9e:7b:be:8c:6e:a8: 6c:05:bf:b5:01:66:ad:fe:ce:c2:95:9e:37:a9:47: ff:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.202.0/23 IPv6: 2001:df1:6bc0::/48 Signature Algorithm: sha256WithRSAEncryption 95:64:6c:08:e4:0b:d8:3f:01:21:bf:a7:e1:73:a3:e1:44:9a: ad:e2:34:5a:0b:1e:00:98:42:53:c3:ee:bd:f5:c6:1c:d4:6e: ef:50:da:65:10:4b:5a:54:ce:80:f2:cf:e2:f8:87:d0:fd:94: 61:6b:73:8d:d1:a0:8a:b4:31:92:28:a9:20:b3:38:27:15:b9: 25:84:71:6e:42:4d:33:ca:e1:93:25:59:73:ab:d2:38:be:72: ff:12:33:98:85:87:a8:61:07:fc:0c:46:57:5c:6d:86:e8:0e: 78:da:3c:41:ef:41:94:a7:d9:49:e6:97:d8:4e:7a:5b:d5:93: aa:a4:97:12:a3:5d:6f:81:71:8a:35:79:3b:5d:c7:34:47:79: d1:a6:a1:db:37:bf:61:88:89:1f:ce:1e:1f:13:07:55:e3:61: 34:6a:40:f9:8f:f0:06:46:7b:35:8a:49:31:77:ea:49:d0:36: 4a:fa:ec:5b:98:75:84:da:a1:ea:9b:d0:4a:48:ce:73:76:8b: 30:eb:cb:e7:10:43:2b:28:b4:7e:a4:f6:62:85:3e:c6:bd:2d: 5d:7b:ab:f6:1e:03:ff:03:e2:0f:4b:63:d6:b9:9d:53:d7:5c: 2b:f0:e8:12:f9:26:93:9d:ea:98:5a:f7:96:b8:3d:59:8d:7d: f4:01:da:7a -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUB+4n2XeyS3ZdmT5alVLTnyQZunkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgwODA0NTE0NVoX DTI1MDgwNzA0NTY0NVowMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUy NUUyMDlGRjhFOTNFNDg2NTNDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOajkFHBu/SgUTu3SceL9K0YNWF5fM07J7+W2b+xxie4xDhp8wDC8GAmz7lw xbKSDKZwTo4Iimi1esLgUrrnl9dyqL2fhKpTrwGJgongSMKfXwv/UgPvU6Kd/vHG 9/jeotP50HH8/JdbyUQaAtvRSyVBNw+Jbpe1nbHcaTkGzDMahacbGNWzfFvbu6CW sf1I8HJ79TvqSGU7cXnLaHgtQj22O+yc3qfcp5F0M978JJOGXZfeANuBPWM8JjMe xxbfyiLt69pdHl1QX9Q8oqSvThS5Gv98tO5YE+plwAq5WMHQcY9R6XwUm9vUnnu+ jG6obAW/tQFmrf7OwpWeN6lH/9sCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEB7fH7gntuqCjUl4gn/jpPkhlPIMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZkNjRiZjZh LTQzMDItNDYwZi05NjY5LTA5YTUwYTczYWYxYS8wLzQwN0I3QzdFRTA5RURCQUEw QTM1MjVFMjA5RkY4RTkzRTQ4NjUzQzgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnoMowDwQCAAIwCQMHACABDfFrwDANBgkqhkiG9w0BAQsFAAOCAQEAlWRsCOQL 2D8BIb+n4XOj4USareI0WgseAJhCU8PuvfXGHNRu71DaZRBLWlTOgPLP4viH0P2U YWtzjdGgirQxkiipILM4JxW5JYRxbkJNM8rhkyVZc6vSOL5y/xIzmIWHqGEH/AxG V1xthugOeNo8Qe9BlKfZSeaX2E56W9WTqqSXEqNdb4FxijV5O13HNEd50aah2ze/ YYiJH84eHxMHVeNhNGpA+Y/wBkZ7NYpJMXfqSdA2SvrsW5h1hNqh6pvQSkjOc3aL MOvL5xBDKyi0fqT2YoU+xr0tXXur9h4D/wPiD0tj1rmdU9dcK/DoEvkmk53qmFr3 lrg9WY199AHaeg== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:40 2024 by rpki-client on console-ams.rpki-client.org