$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer File: 7B29BAF4812476761482CE1C3A92188A2A8334CE.cer (raw, json) Hash identifier: 0yJK1ibVJ8fPhwUfGwFTJH0TIGjWm+JQHeCjcgSAzZo= Subject key identifier: 7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 42780B35D0F03DB3B4D434C8CCD1D614F2927A98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft caRepository: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 07 Nov 2023 11:24:44 +0000 Certificate not after: Tue 05 Nov 2024 11:29:44 +0000 Subordinate resources: IP: 103.156.232.0/23 IP: 2406:8fc0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:78:0b:35:d0:f0:3d:b3:b4:d4:34:c8:cc:d1:d6:14:f2:92:7a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 7 11:24:44 2023 GMT Not After : Nov 5 11:29:44 2024 GMT Subject: CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:da:5d:fe:b1:4d:62:9b:d4:86:50:9b:55: ab:b5:4b:1e:db:b0:d1:f4:ec:4c:e2:8a:a5:64:8e: fc:f2:1d:e4:72:c3:cb:94:3d:4c:05:80:fd:48:55: cc:15:dd:95:6e:22:85:fa:92:9c:f3:9e:8d:fe:58: d1:a0:f6:a5:4c:b1:8d:13:dd:9f:de:86:af:d6:3f: d9:1f:ce:99:13:8b:b5:46:11:75:72:f6:53:e3:71: d7:ed:7e:47:ed:33:05:9f:b2:ec:5f:a4:32:dd:82: d1:58:e3:c9:74:c3:47:56:91:34:b2:92:79:88:8a: 88:ea:6a:a8:e3:ee:55:f6:c7:bb:5d:a7:40:98:82: 0c:f3:0e:c9:c9:50:53:3c:7f:6e:cb:f9:09:6b:4f: 99:59:ec:48:35:ae:52:a5:55:ce:20:85:86:bb:d8: 66:01:91:43:88:ec:97:e5:f1:9f:86:f5:d5:c9:7d: 02:43:ac:03:30:15:d3:4f:99:e0:a2:de:6c:a6:28: eb:e1:6d:bb:33:f1:04:eb:5d:63:58:da:78:3f:d6: d0:c0:e9:ca:68:f8:31:fe:59:60:d1:6d:0b:a7:11: dd:0e:7f:3d:c5:24:d5:c4:7f:ed:6a:57:c2:e4:17: d8:85:b8:c0:05:64:14:cc:ec:3f:c5:16:66:b3:61: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.232.0/23 IPv6: 2406:8fc0::/32 Signature Algorithm: sha256WithRSAEncryption 3d:a3:52:22:35:9c:f7:43:64:b5:e4:e0:ff:f1:08:21:ac:ac: 23:bc:7c:96:58:3a:6a:44:df:18:5e:fe:ea:fa:e1:9d:21:6e: ed:6d:fd:f4:4a:bf:b0:39:6c:1d:c3:cb:4a:38:e7:d4:1e:a0: cb:b3:23:df:e6:80:40:8e:39:bb:8d:35:73:df:cb:9e:18:b9: d4:85:b0:91:27:74:79:62:10:52:9d:85:b1:c1:a3:07:f5:2d: 13:4c:e0:eb:fd:d1:07:11:88:64:8b:a4:7f:c9:b6:78:c4:54: 65:ea:07:e1:53:ae:85:93:7a:43:81:34:6a:5c:00:ee:da:86: 84:39:fa:6e:62:db:3e:94:af:bf:66:1b:00:ea:e2:1d:fb:6a: 99:44:bb:dd:7e:09:02:3d:33:03:40:82:f0:19:f3:d5:47:a5: 3e:4d:19:fa:1b:bd:8f:ec:94:86:bd:38:03:79:d8:bf:df:94: 6b:a4:77:ad:2c:f2:1d:6a:5b:15:6e:0a:70:8a:80:6b:68:3c: 08:6c:4b:05:82:17:8c:1f:d3:fd:9b:75:51:12:67:59:d8:bb: 27:08:55:3e:ab:b2:b1:72:29:f6:c9:45:f3:75:26:bf:40:4e: 25:bc:02:67:e3:5f:da:10:43:d2:3a:5f:1a:c9:6b:86:fc:14: 84:9f:77:d6 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUQngLNdDwPbO01DTIzNHWFPKSepgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEwNzExMjQ0NFoX DTI0MTEwNTExMjk0NFowMzExMC8GA1UEAxMoN0IyOUJBRjQ4MTI0NzY3NjE0ODJD RTFDM0E5MjE4OEEyQTgzMzRDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALoS2l3+sU1im9SGUJtVq7VLHtuw0fTsTOKKpWSO/PId5HLDy5Q9TAWA/UhV zBXdlW4ihfqSnPOejf5Y0aD2pUyxjRPdn96Gr9Y/2R/OmROLtUYRdXL2U+Nx1+1+ R+0zBZ+y7F+kMt2C0VjjyXTDR1aRNLKSeYiKiOpqqOPuVfbHu12nQJiCDPMOyclQ Uzx/bsv5CWtPmVnsSDWuUqVVziCFhrvYZgGRQ4jsl+Xxn4b11cl9AkOsAzAV00+Z 4KLebKYo6+FtuzPxBOtdY1jaeD/W0MDpymj4Mf5ZYNFtC6cR3Q5/PcUk1cR/7WpX wuQX2IW4wAVkFMzsP8UWZrNhwwMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHspuvSBJHZ2FILOHDqSGIoqgzTOMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNzJmM2RiNC00MWUyLTQwMjgtOTA4Yi01MDk3YzliMWMxZjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3MmYzZGI0 LTQxZTItNDAyOC05MDhiLTUwOTdjOWIxYzFmNS8wLzdCMjlCQUY0ODEyNDc2NzYx NDgyQ0UxQzNBOTIxODhBMkE4MzM0Q0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnnOgwDQQCAAIwBwMFACQGj8AwDQYJKoZIhvcNAQELBQADggEBAD2jUiI1nPdD ZLXk4P/xCCGsrCO8fJZYOmpE3xhe/ur64Z0hbu1t/fRKv7A5bB3Dy0o459QeoMuz I9/mgECOObuNNXPfy54YudSFsJEndHliEFKdhbHBowf1LRNM4Ov90QcRiGSLpH/J tnjEVGXqB+FTroWTekOBNGpcAO7ahoQ5+m5i2z6Ur79mGwDq4h37aplEu91+CQI9 MwNAgvAZ89VHpT5NGfobvY/slIa9OAN52L/flGukd60s8h1qWxVuCnCKgGtoPAhs SwWCF4wf0/2bdVESZ1nYuycIVT6rsrFyKfbJRfN1Jr9ATiW8AmfjX9oQQ9I6XxrJ a4b8FISfd9Y= -----END CERTIFICATE-----Generated at Wed May 8 04:37:52 2024 by rpki-client on console-fra.rpki-client.org