$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer File: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer (raw, json) Hash identifier: k2/Sv9Ccy06e6C/hKAqqZ1mxQqlf2GsiW6zET7E5WNk= Subject key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 78C618BAB0AECE7A4F2262424D1ACB754B0B7F5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft caRepository: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 11 Nov 2024 16:18:09 +0000 Certificate not after: Mon 10 Nov 2025 16:23:09 +0000 Subordinate resources: IP: 202.47.188.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c6:18:ba:b0:ae:ce:7a:4f:22:62:42:4d:1a:cb:75:4b:0b:7f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 11 16:18:09 2024 GMT Not After : Nov 10 16:23:09 2025 GMT Subject: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:36:52:79:98:3b:79:56:37:9d:ce:38:fa: 6d:36:28:a6:f1:36:12:99:07:d1:40:42:13:65:95: a2:10:ac:6e:3d:fc:7f:2b:ef:16:2d:da:d9:cb:bb: 9c:bf:7b:da:f1:f6:dd:40:ec:4b:ed:8a:27:5c:e3: c4:32:1f:db:f1:09:d9:d2:88:66:1d:b7:a4:fe:56: ed:65:03:9d:e1:89:14:64:a9:e7:2c:af:d6:3e:04: cc:45:ca:7b:7a:00:58:5e:e4:61:21:d7:5a:f0:3a: f4:e6:77:86:a3:e9:bf:91:16:66:48:0f:fe:60:d2: ba:79:78:f9:c8:f0:d8:3e:00:f4:80:cc:5b:34:91: 02:85:aa:9c:c8:77:e4:c6:bd:34:5a:38:f9:f0:76: 61:13:76:6f:48:cc:7a:ad:ef:dd:4d:f5:13:1e:5a: 7d:58:a3:7c:1d:af:5d:3a:8c:cd:ae:46:52:dc:8b: b6:c7:9d:69:09:d6:f6:d0:87:bb:43:cc:85:df:9f: b2:cb:88:c1:d5:7a:37:50:96:14:74:28:c9:11:67: 02:0a:1d:2c:f1:33:4d:86:5e:f8:5c:8c:dd:9d:2e: 29:4e:52:12:09:25:42:b1:08:53:b0:7f:ef:c3:db: f6:02:71:33:46:a9:e3:f1:d8:79:fe:ab:0f:31:88: e7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.188.0/23 Signature Algorithm: sha256WithRSAEncryption 94:b7:4f:6c:cc:a5:85:ec:f7:a0:fa:e1:16:ca:aa:4d:80:19: 34:03:d9:cd:cb:58:47:67:e0:39:a6:e1:fe:36:35:ac:80:9d: ac:02:bf:1b:d9:e1:9a:dd:9b:fe:f3:0f:a3:a5:64:e3:2b:b4: b3:3b:b0:13:11:d9:45:f8:ed:e1:84:46:65:67:69:78:78:33: 31:2f:99:00:b4:c8:0a:02:27:17:72:e1:4a:7c:e3:cf:16:c8: 14:12:90:5e:cc:be:98:46:6a:2d:a2:42:c1:d4:52:e1:09:73: eb:36:f2:53:a8:8e:e3:e3:20:56:28:2e:f9:84:aa:a3:da:39: 31:fe:e2:53:47:46:0d:77:87:e5:ca:1a:95:db:72:fa:d3:13: 0c:ca:9c:12:e2:ff:7d:b0:4e:57:ba:62:6d:64:7e:a3:ca:cb: a0:94:3c:aa:ef:d4:03:94:39:a6:de:5e:e0:71:0a:0f:f8:a9: 69:29:2b:bb:23:23:b6:1c:a4:61:15:54:7c:a4:3a:cd:f5:cd: d7:c2:15:09:19:bd:94:54:1b:4a:f8:68:dd:5b:e3:ae:6d:8e: 71:c0:d1:b3:39:af:b5:94:9b:9a:de:f6:a7:81:e7:b4:9d:e0: dc:93:50:b8:8f:a3:13:4a:c7:c8:52:75:c9:d2:06:89:3e:52: 39:26:d1:5f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUeMYYurCuznpPImJCTRrLdUsLf1owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTExMTE2MTgwOVoX DTI1MTExMDE2MjMwOVowMzExMC8GA1UEAxMoNzlCRDA3NUQxQkM0QkQ4QUUwQzI2 RUZEMkQzNzIyQ0NGNkVGRjY1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9hNlJ5mDt5Vjedzjj6bTYopvE2EpkH0UBCE2WVohCsbj38fyvvFi3a2cu7 nL972vH23UDsS+2KJ1zjxDIf2/EJ2dKIZh23pP5W7WUDneGJFGSp5yyv1j4EzEXK e3oAWF7kYSHXWvA69OZ3hqPpv5EWZkgP/mDSunl4+cjw2D4A9IDMWzSRAoWqnMh3 5Ma9NFo4+fB2YRN2b0jMeq3v3U31Ex5afVijfB2vXTqMza5GUtyLtsedaQnW9tCH u0PMhd+fssuIwdV6N1CWFHQoyRFnAgodLPEzTYZe+FyM3Z0uKU5SEgklQrEIU7B/ 78Pb9gJxM0ap4/HYef6rDzGI50cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHm9B10bxL2K4MJu/S03Isz27/ZeMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZWU5NDAxNC04N2ZhLTRiYzItYjFjNi03ZmQyYTg5NDc2ZjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlZTk0MDE0 LTg3ZmEtNGJjMi1iMWM2LTdmZDJhODk0NzZmMy8wLzc5QkQwNzVEMUJDNEJEOEFF MEMyNkVGRDJEMzcyMkNDRjZFRkY2NUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHKL7wwDQYJKoZIhvcNAQELBQADggEBAJS3T2zMpYXs96D64RbKqk2AGTQD2c3L WEdn4Dmm4f42NayAnawCvxvZ4Zrdm/7zD6OlZOMrtLM7sBMR2UX47eGERmVnaXh4 MzEvmQC0yAoCJxdy4Up8488WyBQSkF7MvphGai2iQsHUUuEJc+s28lOojuPjIFYo LvmEqqPaOTH+4lNHRg13h+XKGpXbcvrTEwzKnBLi/32wTle6Ym1kfqPKy6CUPKrv 1AOUOabeXuBxCg/4qWkpK7sjI7YcpGEVVHykOs31zdfCFQkZvZRUG0r4aN1b465t jnHA0bM5r7WUm5re9qeB57Sd4NyTULiPoxNKx8hSdcnSBok+Ujkm0V8= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:20 2024 by rpki-client on console-fra.rpki-client.org