$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer File: 7B04CE58A1370241E93EF01F597DD18A039D613D.cer (raw, json) Hash identifier: wCuEAvtLNeeeEf5gM1UI8bXT+PFAe7PEdm7J6P2o0BA= Subject key identifier: 7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6ECABFD6941B6E35F1E3B95353748D2949B45BD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft caRepository: rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 31 Jan 2025 22:00:08 +0000 Certificate not after: Fri 30 Jan 2026 22:05:08 +0000 Subordinate resources: IP: 103.97.198.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ca:bf:d6:94:1b:6e:35:f1:e3:b9:53:53:74:8d:29:49:b4:5b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 31 22:00:08 2025 GMT Not After : Jan 30 22:05:08 2026 GMT Subject: CN=7B04CE58A1370241E93EF01F597DD18A039D613D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:af:f0:98:1b:45:ee:3e:e2:ce:5a:7e:ff:ee: 42:b6:15:ba:97:4e:45:2c:ab:b4:b4:95:be:f9:c2: 21:a1:d5:6a:17:e9:9e:fe:a3:82:ec:c6:2d:f0:99: c9:c7:f1:6e:a8:e5:04:75:7c:82:29:aa:41:e8:a0: dd:93:25:1b:3e:8d:6d:e8:b9:da:78:96:cc:ed:aa: 55:dc:45:37:23:1f:f2:cb:10:9a:02:f4:8f:a8:21: 05:3c:6c:99:26:f8:01:57:6f:83:ab:6d:d2:a4:11: c4:3e:5b:64:5a:e4:d5:88:44:92:bb:fa:b1:1e:46: 95:e2:a6:27:d8:84:f3:60:c8:1e:10:f1:9c:5e:90: 7d:8b:af:87:79:ab:8d:b3:9e:fa:6e:95:42:b3:bc: 9b:67:d2:50:22:12:47:5f:09:33:23:e0:eb:92:e0: 97:41:aa:1a:d1:db:56:47:6f:bd:96:a0:f5:94:c2: 1b:be:c0:db:20:d8:89:53:63:ef:e9:1f:68:fc:4a: 03:40:f0:85:69:af:68:35:1b:1f:8d:9b:78:ca:63: 21:ad:f9:82:3f:04:df:c5:41:56:3f:d0:57:ce:a3: ad:7e:c5:00:0a:a8:c6:7b:d5:aa:e6:1b:18:6f:d9: 03:98:1f:4c:6d:aa:5d:cd:2c:b4:3f:a4:90:c2:2f: db:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.198.0/23 Signature Algorithm: sha256WithRSAEncryption 92:d8:8e:0c:34:ac:19:ed:ee:7a:9b:82:2b:69:40:ed:a4:02: 3c:2d:b7:20:96:d3:d3:68:c9:d0:7a:74:62:af:cf:c9:78:2b: d1:f7:df:ad:7d:62:d9:ec:d8:a0:f0:02:b1:d8:af:6d:51:2d: 11:e0:24:c0:57:fb:b6:32:9d:f2:a5:cb:17:c8:f1:c0:5a:e3: ff:35:89:7c:62:a5:84:67:63:d8:e0:11:04:fe:ad:c8:23:5e: 1a:df:be:1c:ac:24:47:4b:3d:9e:50:07:b8:d3:47:73:da:94: 83:02:f5:29:9f:0c:16:93:d2:49:f5:b9:fe:3d:a1:79:a6:a0: b3:7a:19:99:e6:50:3b:5f:bf:bc:ef:d3:01:4a:59:7f:80:84: 2a:8a:20:e9:1f:cc:76:35:9a:8f:7a:72:c0:e4:86:dd:5f:8b: 92:c7:7f:45:c0:69:c7:41:6f:a9:ce:f8:31:24:ac:6c:bc:b4: 22:f1:03:ae:60:42:69:b8:59:e6:8d:fb:f2:0e:7e:c3:3a:0d: 82:a1:ce:95:53:2e:76:9d:c9:59:58:49:8c:f7:32:40:30:0b: a0:9b:e2:c1:af:ec:c8:eb:59:b6:cc:58:7f:c2:f5:fd:4d:c6: e7:ea:66:88:c8:84:f6:1e:d0:0a:b0:7d:4f:f9:b6:cd:82:ac: b1:1f:a6:eb -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbsq/1pQbbjXx47lTU3SNKUm0W9EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEzMTIyMDAwOFoX DTI2MDEzMDIyMDUwOFowMzExMC8GA1UEAxMoN0IwNENFNThBMTM3MDI0MUU5M0VG MDFGNTk3REQxOEEwMzlENjEzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqv8JgbRe4+4s5afv/uQrYVupdORSyrtLSVvvnCIaHVahfpnv6jguzGLfCZ ycfxbqjlBHV8gimqQeig3ZMlGz6Nbei52niWzO2qVdxFNyMf8ssQmgL0j6ghBTxs mSb4AVdvg6tt0qQRxD5bZFrk1YhEkrv6sR5GleKmJ9iE82DIHhDxnF6QfYuvh3mr jbOe+m6VQrO8m2fSUCISR18JMyPg65Lgl0GqGtHbVkdvvZag9ZTCG77A2yDYiVNj 7+kfaPxKA0DwhWmvaDUbH42beMpjIa35gj8E38VBVj/QV86jrX7FAAqoxnvVquYb GG/ZA5gfTG2qXc0stD+kkMIv2w0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHsEzlihNwJB6T7wH1l90YoDnWE9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kODQ2M2FkNS0xNzQ1LTQ0M2UtYjE2NS1kMTk0ZWVkODllNmIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4NDYzYWQ1 LTE3NDUtNDQzZS1iMTY1LWQxOTRlZWQ4OWU2Yi8wLzdCMDRDRTU4QTEzNzAyNDFF OTNFRjAxRjU5N0REMThBMDM5RDYxM0QubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnYcYwDQYJKoZIhvcNAQELBQADggEBAJLYjgw0rBnt7nqbgitpQO2kAjwttyCW 09NoydB6dGKvz8l4K9H33619Ytns2KDwArHYr21RLRHgJMBX+7YynfKlyxfI8cBa 4/81iXxipYRnY9jgEQT+rcgjXhrfvhysJEdLPZ5QB7jTR3PalIMC9SmfDBaT0kn1 uf49oXmmoLN6GZnmUDtfv7zv0wFKWX+AhCqKIOkfzHY1mo96csDkht1fi5LHf0XA acdBb6nO+DEkrGy8tCLxA65gQmm4WeaN+/IOfsM6DYKhzpVTLnadyVlYSYz3MkAw C6Cb4sGv7MjrWbbMWH/C9f1NxufqZojIhPYe0AqwfU/5ts2CrLEfpus= -----END CERTIFICATE-----Generated at Sat Apr 5 09:52:21 2025 by rpki-client