$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7B7F414EB90DB2AC9713729961F3D35102FEA537.cer File: 7B7F414EB90DB2AC9713729961F3D35102FEA537.cer (raw, json) Hash identifier: MgpA8MeQmHthEtLpnIwKjYxuQs9qr5wkoe8g/bD8UBQ= Subject key identifier: 7B:7F:41:4E:B9:0D:B2:AC:97:13:72:99:61:F3:D3:51:02:FE:A5:37 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 173583782577CF7221968B902A7DDCE7AA7A327B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft caRepository: rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 13 Dec 2023 12:21:43 +0000 Certificate not after: Wed 11 Dec 2024 12:26:43 +0000 Subordinate resources: IP: 103.115.35.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:35:83:78:25:77:cf:72:21:96:8b:90:2a:7d:dc:e7:aa:7a:32:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 13 12:21:43 2023 GMT Not After : Dec 11 12:26:43 2024 GMT Subject: CN=7B7F414EB90DB2AC9713729961F3D35102FEA537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5b:8a:b7:7d:4f:3b:48:7d:65:13:28:ac:4f: 02:36:32:be:66:f4:39:0c:4d:e2:a9:c9:e3:a4:02: 2d:2d:1d:76:28:84:06:7e:08:9c:1c:9f:bb:6a:37: 41:5e:16:6f:71:00:ab:55:7f:07:ef:10:78:04:60: dc:ec:84:ab:c9:79:d2:55:14:83:8e:0a:d5:89:b2: 4d:75:07:b7:4c:64:cd:2d:31:53:ce:ad:d4:37:12: bc:48:ef:6f:81:46:24:74:43:13:b9:e5:ca:32:fc: 5e:46:4f:b6:06:fe:55:1f:f3:d8:3b:87:71:09:d8: 5c:6f:ad:63:a1:2a:7a:f3:6c:38:7a:6f:b4:03:e8: c1:0a:7d:14:c5:65:fb:a5:ee:db:5e:08:40:1d:ce: 49:57:97:4f:b9:04:da:15:92:ac:33:72:fa:84:1f: be:14:af:fa:b3:9f:a0:64:fc:a2:fe:1c:e5:f7:f3: 7c:0a:3e:e8:7e:25:fd:f6:eb:57:83:03:21:e9:a9: c8:c3:50:de:cb:1e:49:74:f4:8a:e9:87:a8:6b:4c: 71:ae:d7:be:34:54:4d:08:77:23:10:5a:1b:5f:e4: 4a:c4:ab:f1:c6:34:79:a8:eb:54:0a:75:71:24:c1: 56:83:81:68:59:94:4d:16:da:71:51:b9:7b:2d:4b: fa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:7F:41:4E:B9:0D:B2:AC:97:13:72:99:61:F3:D3:51:02:FE:A5:37 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.115.35.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:b0:99:20:1f:f8:52:ba:be:a1:79:7b:99:42:1b:52:8c:d9: 6c:8b:bc:b1:85:12:df:75:83:a4:97:4d:12:17:a8:fa:b7:34: 0d:10:25:f4:5b:31:2c:20:97:c3:bf:68:5d:46:4b:d8:5a:3d: 56:75:a4:6f:92:8b:69:62:97:0e:73:cc:90:00:74:b5:23:94: 07:9b:0d:bf:e3:97:56:4a:3a:48:4d:f4:8d:8c:1f:41:9e:bb: a5:9c:b2:18:23:a5:e7:81:f7:78:f1:48:8d:6d:52:c7:a6:d3: 0f:7b:2f:45:18:27:1a:8c:cd:57:c1:7a:8a:e7:6e:45:06:2e: cf:a6:16:66:db:d8:3f:c0:5b:82:0c:9e:00:88:cc:5e:cd:f4: f4:2c:48:d7:e3:f0:20:ef:99:19:97:d9:49:d3:c1:eb:ee:58: 5a:9c:e4:71:ab:5b:15:fd:5d:74:a6:5a:b2:b1:f4:b7:58:d5: 91:82:a4:1a:be:b7:f9:a6:ff:d6:4f:e0:ad:67:23:9a:df:83: cf:9c:66:34:7a:b4:6c:93:d4:60:d3:71:b8:89:92:df:2b:2c: 40:b0:5e:d8:98:26:34:61:fe:40:0f:24:49:a7:dd:d0:98:90: 0e:7a:52:62:af:fd:c9:0d:1d:53:62:7d:3f:e3:6d:7b:8d:25: 31:63:64:14 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUFzWDeCV3z3IhlouQKn3c56p6MnswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTIxMzEyMjE0M1oX DTI0MTIxMTEyMjY0M1owMzExMC8GA1UEAxMoN0I3RjQxNEVCOTBEQjJBQzk3MTM3 Mjk5NjFGM0QzNTEwMkZFQTUzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlbird9TztIfWUTKKxPAjYyvmb0OQxN4qnJ46QCLS0ddiiEBn4InByfu2o3 QV4Wb3EAq1V/B+8QeARg3OyEq8l50lUUg44K1YmyTXUHt0xkzS0xU86t1DcSvEjv b4FGJHRDE7nlyjL8XkZPtgb+VR/z2DuHcQnYXG+tY6EqevNsOHpvtAPowQp9FMVl +6Xu214IQB3OSVeXT7kE2hWSrDNy+oQfvhSv+rOfoGT8ov4c5ffzfAo+6H4l/fbr V4MDIempyMNQ3sseSXT0iumHqGtMca7XvjRUTQh3IxBaG1/kSsSr8cY0eajrVAp1 cSTBVoOBaFmUTRbacVG5ey1L+h0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHt/QU65DbKslxNymWHz01EC/qU3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85OTg0MzJjZC1hMDQ3LTQ4NWItODE0My01OWEzNTMyYzA3YjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5ODQzMmNk LWEwNDctNDg1Yi04MTQzLTU5YTM1MzJjMDdiNy8wLzdCN0Y0MTRFQjkwREIyQUM5 NzEzNzI5OTYxRjNEMzUxMDJGRUE1MzcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABncyMwDQYJKoZIhvcNAQELBQADggEBAB2wmSAf+FK6vqF5e5lCG1KM2WyLvLGF Et91g6SXTRIXqPq3NA0QJfRbMSwgl8O/aF1GS9haPVZ1pG+Si2lilw5zzJAAdLUj lAebDb/jl1ZKOkhN9I2MH0Geu6WcshgjpeeB93jxSI1tUsem0w97L0UYJxqMzVfB eornbkUGLs+mFmbb2D/AW4IMngCIzF7N9PQsSNfj8CDvmRmX2UnTwevuWFqc5HGr WxX9XXSmWrKx9LdY1ZGCpBq+t/mm/9ZP4K1nI5rfg8+cZjR6tGyT1GDTcbiJkt8r LECwXtiYJjRh/kAPJEmn3dCYkA56UmKv/ckNHVNifT/jbXuNJTFjZBQ= -----END CERTIFICATE-----Generated at Wed May 8 22:46:40 2024 by rpki-client on console-ams.rpki-client.org