$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7B29BAF4812476761482CE1C3A92188A2A8334CE.cer File: 7B29BAF4812476761482CE1C3A92188A2A8334CE.cer (raw, json) Hash identifier: iq+YZ7rT2VaqRFTYD9j9Y4jGuE8UJK/LLi9ln3iB8RI= Subject key identifier: 7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 43EF770A2C51082D191C12CFDB412B7F3699ED38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft caRepository: rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 08 Oct 2024 17:35:49 +0000 Certificate not after: Tue 07 Oct 2025 17:40:49 +0000 Subordinate resources: IP: 103.156.232.0/23 IP: 2406:8fc0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ef:77:0a:2c:51:08:2d:19:1c:12:cf:db:41:2b:7f:36:99:ed:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Oct 8 17:35:49 2024 GMT Not After : Oct 7 17:40:49 2025 GMT Subject: CN=7B29BAF4812476761482CE1C3A92188A2A8334CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:da:5d:fe:b1:4d:62:9b:d4:86:50:9b:55: ab:b5:4b:1e:db:b0:d1:f4:ec:4c:e2:8a:a5:64:8e: fc:f2:1d:e4:72:c3:cb:94:3d:4c:05:80:fd:48:55: cc:15:dd:95:6e:22:85:fa:92:9c:f3:9e:8d:fe:58: d1:a0:f6:a5:4c:b1:8d:13:dd:9f:de:86:af:d6:3f: d9:1f:ce:99:13:8b:b5:46:11:75:72:f6:53:e3:71: d7:ed:7e:47:ed:33:05:9f:b2:ec:5f:a4:32:dd:82: d1:58:e3:c9:74:c3:47:56:91:34:b2:92:79:88:8a: 88:ea:6a:a8:e3:ee:55:f6:c7:bb:5d:a7:40:98:82: 0c:f3:0e:c9:c9:50:53:3c:7f:6e:cb:f9:09:6b:4f: 99:59:ec:48:35:ae:52:a5:55:ce:20:85:86:bb:d8: 66:01:91:43:88:ec:97:e5:f1:9f:86:f5:d5:c9:7d: 02:43:ac:03:30:15:d3:4f:99:e0:a2:de:6c:a6:28: eb:e1:6d:bb:33:f1:04:eb:5d:63:58:da:78:3f:d6: d0:c0:e9:ca:68:f8:31:fe:59:60:d1:6d:0b:a7:11: dd:0e:7f:3d:c5:24:d5:c4:7f:ed:6a:57:c2:e4:17: d8:85:b8:c0:05:64:14:cc:ec:3f:c5:16:66:b3:61: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:29:BA:F4:81:24:76:76:14:82:CE:1C:3A:92:18:8A:2A:83:34:CE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/7B29BAF4812476761482CE1C3A92188A2A8334CE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.232.0/23 IPv6: 2406:8fc0::/32 Signature Algorithm: sha256WithRSAEncryption 30:06:ed:f1:43:5f:69:a6:78:a4:e5:8b:6a:9e:3d:5d:d9:9e: 99:29:16:b6:f2:89:dd:e3:c0:6a:6c:87:4b:34:b5:97:94:1a: e0:5b:72:56:6f:13:bd:fa:35:f7:12:11:fb:cb:0a:b8:a9:3f: 09:20:54:65:16:de:06:25:d3:79:72:07:f9:9c:10:3f:f1:00: 87:9e:3c:42:54:cc:e1:4c:59:26:9e:4c:56:d1:fa:6c:a2:cf: 59:30:5d:44:d6:b7:94:41:c8:44:a3:96:30:30:e7:d4:83:f3: a6:dc:ce:e8:e3:7c:95:63:00:d6:87:87:b3:74:bc:b1:97:aa: 3c:42:e8:75:d9:32:0c:9e:a5:41:ef:0f:4c:42:e5:74:92:a5: b4:5c:91:95:07:16:7b:98:f6:2f:b1:f8:5d:84:e9:7b:41:80: 27:ab:36:1f:88:f2:15:17:6d:99:c9:e3:11:9b:da:af:9a:fa: 98:ea:1c:b5:d5:ed:f3:e5:91:68:8b:66:ea:ea:29:b2:b4:6e: 81:e4:3b:06:3d:fb:50:09:57:bd:46:bf:8b:f7:e3:f9:91:2a: 49:e4:37:02:66:11:20:03:bb:e5:99:31:60:a9:62:af:29:76: 39:6a:14:d8:f6:cc:4e:57:d2:2b:55:15:f2:2b:8d:5e:87:6f: 27:0c:98:34 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUQ+93CixRCC0ZHBLP20ErfzaZ7TgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAwODE3MzU0OVoX DTI1MTAwNzE3NDA0OVowMzExMC8GA1UEAxMoN0IyOUJBRjQ4MTI0NzY3NjE0ODJD RTFDM0E5MjE4OEEyQTgzMzRDRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALoS2l3+sU1im9SGUJtVq7VLHtuw0fTsTOKKpWSO/PId5HLDy5Q9TAWA/UhV zBXdlW4ihfqSnPOejf5Y0aD2pUyxjRPdn96Gr9Y/2R/OmROLtUYRdXL2U+Nx1+1+ R+0zBZ+y7F+kMt2C0VjjyXTDR1aRNLKSeYiKiOpqqOPuVfbHu12nQJiCDPMOyclQ Uzx/bsv5CWtPmVnsSDWuUqVVziCFhrvYZgGRQ4jsl+Xxn4b11cl9AkOsAzAV00+Z 4KLebKYo6+FtuzPxBOtdY1jaeD/W0MDpymj4Mf5ZYNFtC6cR3Q5/PcUk1cR/7WpX wuQX2IW4wAVkFMzsP8UWZrNhwwMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHspuvSBJHZ2FILOHDqSGIoqgzTOMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNzJmM2RiNC00MWUyLTQwMjgtOTA4Yi01MDk3YzliMWMxZjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3MmYzZGI0 LTQxZTItNDAyOC05MDhiLTUwOTdjOWIxYzFmNS8wLzdCMjlCQUY0ODEyNDc2NzYx NDgyQ0UxQzNBOTIxODhBMkE4MzM0Q0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnnOgwDQQCAAIwBwMFACQGj8AwDQYJKoZIhvcNAQELBQADggEBADAG7fFDX2mm eKTli2qePV3ZnpkpFrbyid3jwGpsh0s0tZeUGuBbclZvE736NfcSEfvLCripPwkg VGUW3gYl03lyB/mcED/xAIeePEJUzOFMWSaeTFbR+myiz1kwXUTWt5RByESjljAw 59SD86bczujjfJVjANaHh7N0vLGXqjxC6HXZMgyepUHvD0xC5XSSpbRckZUHFnuY 9i+x+F2E6XtBgCerNh+I8hUXbZnJ4xGb2q+a+pjqHLXV7fPlkWiLZurqKbK0boHk OwY9+1AJV71Gv4v34/mRKknkNwJmESADu+WZMWCpYq8pdjlqFNj2zE5X0itVFfIr jV6HbycMmDQ= -----END CERTIFICATE-----Generated at Sun Feb 16 20:50:50 2025 by rpki-client