$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer File: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer (raw, json) Hash identifier: G5mWWrMPgJ8mugasOoMhOc8F8c0KuRFzhnJYRXGNDuA= Subject key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7B583BB2D423D3A8388CCDCBD1D3D9DCF62A95B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft caRepository: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 11 Dec 2023 08:50:32 +0000 Certificate not after: Mon 09 Dec 2024 08:55:32 +0000 Subordinate resources: IP: 202.47.188.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:58:3b:b2:d4:23:d3:a8:38:8c:cd:cb:d1:d3:d9:dc:f6:2a:95:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 11 08:50:32 2023 GMT Not After : Dec 9 08:55:32 2024 GMT Subject: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:36:52:79:98:3b:79:56:37:9d:ce:38:fa: 6d:36:28:a6:f1:36:12:99:07:d1:40:42:13:65:95: a2:10:ac:6e:3d:fc:7f:2b:ef:16:2d:da:d9:cb:bb: 9c:bf:7b:da:f1:f6:dd:40:ec:4b:ed:8a:27:5c:e3: c4:32:1f:db:f1:09:d9:d2:88:66:1d:b7:a4:fe:56: ed:65:03:9d:e1:89:14:64:a9:e7:2c:af:d6:3e:04: cc:45:ca:7b:7a:00:58:5e:e4:61:21:d7:5a:f0:3a: f4:e6:77:86:a3:e9:bf:91:16:66:48:0f:fe:60:d2: ba:79:78:f9:c8:f0:d8:3e:00:f4:80:cc:5b:34:91: 02:85:aa:9c:c8:77:e4:c6:bd:34:5a:38:f9:f0:76: 61:13:76:6f:48:cc:7a:ad:ef:dd:4d:f5:13:1e:5a: 7d:58:a3:7c:1d:af:5d:3a:8c:cd:ae:46:52:dc:8b: b6:c7:9d:69:09:d6:f6:d0:87:bb:43:cc:85:df:9f: b2:cb:88:c1:d5:7a:37:50:96:14:74:28:c9:11:67: 02:0a:1d:2c:f1:33:4d:86:5e:f8:5c:8c:dd:9d:2e: 29:4e:52:12:09:25:42:b1:08:53:b0:7f:ef:c3:db: f6:02:71:33:46:a9:e3:f1:d8:79:fe:ab:0f:31:88: e7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.188.0/23 Signature Algorithm: sha256WithRSAEncryption 55:26:d9:e5:07:2a:64:c4:64:5a:86:e9:bb:d3:91:df:e1:8d: 52:2b:fb:66:4f:2c:43:e2:f9:55:5f:e7:80:18:4e:9a:52:26: 87:53:96:00:50:dc:23:d2:c6:33:97:03:a5:df:51:9e:7e:11: a1:fe:c9:ad:c2:0e:ca:33:19:70:b5:64:cc:c3:01:ad:96:c9: 62:eb:7d:0c:ec:81:79:7c:29:82:d4:05:7f:bf:1c:7d:39:a6: ac:41:be:9a:0b:91:9e:87:69:40:48:b8:14:f0:60:92:f0:02: e9:6e:ea:fc:9e:52:85:ce:59:80:f6:05:20:0d:c8:23:8e:8f: 69:13:80:39:99:33:44:19:66:1d:d6:a8:10:9c:0a:2a:6e:91: 3a:42:5a:aa:eb:db:45:dc:0e:22:71:e3:ae:bb:88:21:27:ce: c3:6d:70:c7:0a:7f:f9:e7:62:29:b2:e3:ba:31:06:a9:94:a1: 5e:0c:47:e2:fa:c0:38:65:1c:19:88:0b:61:ff:06:7d:c8:94: dd:91:9d:74:75:33:8b:7f:a1:f5:ba:40:ee:43:1b:7e:9f:d4: eb:1f:c0:85:a0:28:e8:eb:ba:de:c7:6b:ce:15:8f:ce:94:81: ce:29:0f:af:e4:de:f0:eb:09:71:82:4b:2b:4d:7c:27:33:2c: ba:f4:d5:d3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUe1g7stQj06g4jM3L0dPZ3PYqlbYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIxMTA4NTAzMloX DTI0MTIwOTA4NTUzMlowMzExMC8GA1UEAxMoNzlCRDA3NUQxQkM0QkQ4QUUwQzI2 RUZEMkQzNzIyQ0NGNkVGRjY1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9hNlJ5mDt5Vjedzjj6bTYopvE2EpkH0UBCE2WVohCsbj38fyvvFi3a2cu7 nL972vH23UDsS+2KJ1zjxDIf2/EJ2dKIZh23pP5W7WUDneGJFGSp5yyv1j4EzEXK e3oAWF7kYSHXWvA69OZ3hqPpv5EWZkgP/mDSunl4+cjw2D4A9IDMWzSRAoWqnMh3 5Ma9NFo4+fB2YRN2b0jMeq3v3U31Ex5afVijfB2vXTqMza5GUtyLtsedaQnW9tCH u0PMhd+fssuIwdV6N1CWFHQoyRFnAgodLPEzTYZe+FyM3Z0uKU5SEgklQrEIU7B/ 78Pb9gJxM0ap4/HYef6rDzGI50cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHm9B10bxL2K4MJu/S03Isz27/ZeMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZWU5NDAxNC04N2ZhLTRiYzItYjFjNi03ZmQyYTg5NDc2ZjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlZTk0MDE0 LTg3ZmEtNGJjMi1iMWM2LTdmZDJhODk0NzZmMy8wLzc5QkQwNzVEMUJDNEJEOEFF MEMyNkVGRDJEMzcyMkNDRjZFRkY2NUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHKL7wwDQYJKoZIhvcNAQELBQADggEBAFUm2eUHKmTEZFqG6bvTkd/hjVIr+2ZP LEPi+VVf54AYTppSJodTlgBQ3CPSxjOXA6XfUZ5+EaH+ya3CDsozGXC1ZMzDAa2W yWLrfQzsgXl8KYLUBX+/HH05pqxBvpoLkZ6HaUBIuBTwYJLwAulu6vyeUoXOWYD2 BSANyCOOj2kTgDmZM0QZZh3WqBCcCipukTpCWqrr20XcDiJx4667iCEnzsNtcMcK f/nnYimy47oxBqmUoV4MR+L6wDhlHBmIC2H/Bn3IlN2RnXR1M4t/ofW6QO5DG36f 1OsfwIWgKOjrut7Ha84Vj86Ugc4pD6/k3vDrCXGCSytNfCczLLr01dM= -----END CERTIFICATE-----Generated at Wed May 8 21:02:17 2024 by rpki-client on console-fra.rpki-client.org