$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer File: 79FE7055A022B9483725E25688019B44DD3B94A7.cer (raw, json) Hash identifier: SZOykUzHvO41jBacuX0eYhWr6QXOsQoC53wJ6hznTFo= Subject key identifier: 79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 05230A4AC90059DB0C4BFED73435CB5350A4910B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.mft caRepository: rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 27 Feb 2025 22:40:10 +0000 Certificate not after: Thu 26 Feb 2026 22:45:10 +0000 Subordinate resources: IP: 103.166.64.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:23:0a:4a:c9:00:59:db:0c:4b:fe:d7:34:35:cb:53:50:a4:91:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 27 22:40:10 2025 GMT Not After : Feb 26 22:45:10 2026 GMT Subject: CN=79FE7055A022B9483725E25688019B44DD3B94A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:f8:0b:8f:a3:9e:26:3b:15:cd:c2:0a:9e: 25:90:bc:f5:3f:b3:dd:74:b4:65:b1:6b:64:29:09: a6:6c:91:5c:87:5d:6e:19:e5:47:3a:03:c3:aa:a6: 4e:61:f3:fc:17:a5:70:02:4b:e9:e9:06:1b:1a:3c: c3:0d:bb:8f:a3:b0:d1:8d:f5:9c:69:d7:b5:09:52: bc:91:2d:81:8a:dc:e2:40:93:72:a6:d1:3b:25:c6: 09:dd:0b:f8:b9:49:2e:6a:2b:1a:95:51:83:13:9d: be:88:c5:4e:4a:f2:5b:89:78:65:67:05:62:22:78: 0b:0b:cb:db:b4:a9:f6:c1:95:6c:3e:2c:e2:ac:76: 81:31:12:4c:37:fb:5f:27:f3:3c:0f:79:61:07:0b: 26:3a:82:bf:ef:8c:07:e2:35:09:4f:1c:7e:64:72: d1:95:40:85:68:f5:46:a6:4c:f7:e8:0b:66:e7:b8: d7:54:8f:f2:28:77:03:16:48:44:83:14:8b:71:47: 4a:a4:c2:4b:6b:c6:19:ed:37:f1:df:71:bb:81:89: 89:f6:c7:4b:f6:6b:32:4d:69:15:44:d7:a2:66:2e: d5:88:e5:ae:71:5c:f7:0a:59:7e:5c:6f:d0:b8:c5: f7:7f:83:b3:ed:5b:17:80:a4:05:c4:61:98:8e:36: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.64.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:09:9f:7d:2e:dc:d1:05:43:e0:95:20:a8:f5:06:57:52:8e: 05:61:fd:75:a1:fb:dd:d8:db:af:6f:6b:0c:74:fa:67:4b:44: f7:31:79:bd:f7:e5:aa:e8:86:2a:3e:1e:ed:bf:d9:4a:34:96: b7:b8:84:63:76:96:91:ac:b1:00:74:74:cd:67:bf:6f:7b:6c: 91:71:ef:91:88:f2:44:7f:13:73:65:e1:ff:43:50:9d:64:5e: 38:15:d8:58:11:de:8d:55:45:c3:1f:32:56:41:ac:06:e5:8f: 6c:df:29:43:f4:8e:51:66:94:34:c1:9c:bc:d8:1c:fa:95:12: 94:c6:22:6d:f9:24:0c:9c:fa:cb:0a:d3:74:c3:16:a4:70:a0: 30:17:02:f5:80:8e:82:6d:36:d0:59:03:8d:21:bf:80:61:d9: d6:87:0d:01:9c:b1:8d:ba:39:66:0e:94:7f:76:59:11:0a:da: 30:7c:84:a1:c4:47:1a:b4:8f:df:2c:97:f3:e0:3a:39:df:e9: e0:c1:e1:28:11:9d:10:cb:37:4d:21:e9:cb:c6:57:87:d1:76: 20:3f:9f:08:56:f3:42:d2:45:2d:c2:41:6b:0b:57:69:5d:01: 27:c5:37:3f:fb:a2:be:ee:49:bd:b1:e9:c1:dd:05:73:0c:f0: 8b:88:a3:e2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUBSMKSskAWdsMS/7XNDXLU1CkkQswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIyNzIyNDAxMFoX DTI2MDIyNjIyNDUxMFowMzExMC8GA1UEAxMoNzlGRTcwNTVBMDIyQjk0ODM3MjVF MjU2ODgwMTlCNDRERDNCOTRBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6z+AuPo54mOxXNwgqeJZC89T+z3XS0ZbFrZCkJpmyRXIddbhnlRzoDw6qm TmHz/BelcAJL6ekGGxo8ww27j6Ow0Y31nGnXtQlSvJEtgYrc4kCTcqbROyXGCd0L +LlJLmorGpVRgxOdvojFTkryW4l4ZWcFYiJ4CwvL27Sp9sGVbD4s4qx2gTESTDf7 XyfzPA95YQcLJjqCv++MB+I1CU8cfmRy0ZVAhWj1RqZM9+gLZue411SP8ih3AxZI RIMUi3FHSqTCS2vGGe038d9xu4GJifbHS/ZrMk1pFUTXomYu1YjlrnFc9wpZflxv 0LjF93+Ds+1bF4CkBcRhmI42qDUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHn+cFWgIrlINyXiVogBm0TdO5SnMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMTBmZWY0OC0xZWU4LTQzNDItYTU0MS0yNTEwZmIxNWI5NmIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAxMGZlZjQ4 LTFlZTgtNDM0Mi1hNTQxLTI1MTBmYjE1Yjk2Yi8wLzc5RkU3MDU1QTAyMkI5NDgz NzI1RTI1Njg4MDE5QjQ0REQzQjk0QTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnpkAwDQYJKoZIhvcNAQELBQADggEBABoJn30u3NEFQ+CVIKj1BldSjgVh/XWh +93Y269vawx0+mdLRPcxeb335arohio+Hu2/2Uo0lre4hGN2lpGssQB0dM1nv297 bJFx75GI8kR/E3Nl4f9DUJ1kXjgV2FgR3o1VRcMfMlZBrAblj2zfKUP0jlFmlDTB nLzYHPqVEpTGIm35JAyc+ssK03TDFqRwoDAXAvWAjoJtNtBZA40hv4Bh2daHDQGc sY26OWYOlH92WREK2jB8hKHERxq0j98sl/PgOjnf6eDB4SgRnRDLN00h6cvGV4fR diA/nwhW80LSRS3CQWsLV2ldASfFNz/7or7uSb2x6cHdBXMM8IuIo+I= -----END CERTIFICATE-----Generated at Sat Apr 5 07:10:38 2025 by rpki-client