$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7B7F414EB90DB2AC9713729961F3D35102FEA537.cer File: 7B7F414EB90DB2AC9713729961F3D35102FEA537.cer (raw, json) Hash identifier: XZeOdmFNHuCn5fOqBXsY/XGyaG9LPbYLF22RnuUislw= Subject key identifier: 7B:7F:41:4E:B9:0D:B2:AC:97:13:72:99:61:F3:D3:51:02:FE:A5:37 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4C8673262BAB897DCEF9B38EC934E025EB54C40A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft caRepository: rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 13 Nov 2024 21:18:02 +0000 Certificate not after: Wed 12 Nov 2025 21:23:02 +0000 Subordinate resources: IP: 103.115.35.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:86:73:26:2b:ab:89:7d:ce:f9:b3:8e:c9:34:e0:25:eb:54:c4:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 13 21:18:02 2024 GMT Not After : Nov 12 21:23:02 2025 GMT Subject: CN=7B7F414EB90DB2AC9713729961F3D35102FEA537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5b:8a:b7:7d:4f:3b:48:7d:65:13:28:ac:4f: 02:36:32:be:66:f4:39:0c:4d:e2:a9:c9:e3:a4:02: 2d:2d:1d:76:28:84:06:7e:08:9c:1c:9f:bb:6a:37: 41:5e:16:6f:71:00:ab:55:7f:07:ef:10:78:04:60: dc:ec:84:ab:c9:79:d2:55:14:83:8e:0a:d5:89:b2: 4d:75:07:b7:4c:64:cd:2d:31:53:ce:ad:d4:37:12: bc:48:ef:6f:81:46:24:74:43:13:b9:e5:ca:32:fc: 5e:46:4f:b6:06:fe:55:1f:f3:d8:3b:87:71:09:d8: 5c:6f:ad:63:a1:2a:7a:f3:6c:38:7a:6f:b4:03:e8: c1:0a:7d:14:c5:65:fb:a5:ee:db:5e:08:40:1d:ce: 49:57:97:4f:b9:04:da:15:92:ac:33:72:fa:84:1f: be:14:af:fa:b3:9f:a0:64:fc:a2:fe:1c:e5:f7:f3: 7c:0a:3e:e8:7e:25:fd:f6:eb:57:83:03:21:e9:a9: c8:c3:50:de:cb:1e:49:74:f4:8a:e9:87:a8:6b:4c: 71:ae:d7:be:34:54:4d:08:77:23:10:5a:1b:5f:e4: 4a:c4:ab:f1:c6:34:79:a8:eb:54:0a:75:71:24:c1: 56:83:81:68:59:94:4d:16:da:71:51:b9:7b:2d:4b: fa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:7F:41:4E:B9:0D:B2:AC:97:13:72:99:61:F3:D3:51:02:FE:A5:37 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.115.35.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:a2:fd:3c:dc:1a:ff:9d:ea:6a:e5:11:e2:45:ab:0e:4b:17: 10:6d:ec:bb:9c:10:18:0f:0b:37:74:cb:84:74:b2:19:ee:7e: 69:8f:cb:89:d4:4c:1e:f1:88:a3:e3:ab:69:d9:a0:aa:3d:da: 1b:12:46:98:67:67:46:9b:6e:71:c0:21:23:7d:42:32:9a:ef: 77:67:51:89:46:1f:4c:54:c0:ec:df:29:12:0e:f0:3b:c7:de: c9:71:93:dc:b0:9e:10:4d:8d:d3:a4:0b:cc:ad:d9:1c:20:48: bd:2f:be:26:1b:26:64:64:1f:82:be:48:b8:c1:25:87:4b:d8: 23:9c:52:80:ed:26:45:af:5c:d4:3c:dc:e8:1f:bf:38:4f:c8: dd:57:b2:33:0b:f9:73:c8:57:e6:6e:34:dd:05:8c:2d:82:5a: c5:61:0e:36:b3:50:26:cf:fc:fc:66:34:8a:49:b8:7b:aa:57: 2e:4b:15:2a:f0:a7:33:7b:36:30:74:ba:32:72:3d:4d:86:95: 6d:89:cc:ba:77:50:35:78:e5:ff:47:ab:7d:95:e1:db:bc:dc: ca:68:08:2b:98:2c:e3:90:a8:a3:0f:89:41:a1:2d:5e:4b:e3: 05:89:f8:0b:36:9c:70:7e:6a:e8:c3:40:76:d9:07:b2:04:45: df:bf:bf:4c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTIZzJiuriX3O+bOOyTTgJetUxAowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTExMzIxMTgwMloX DTI1MTExMjIxMjMwMlowMzExMC8GA1UEAxMoN0I3RjQxNEVCOTBEQjJBQzk3MTM3 Mjk5NjFGM0QzNTEwMkZFQTUzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlbird9TztIfWUTKKxPAjYyvmb0OQxN4qnJ46QCLS0ddiiEBn4InByfu2o3 QV4Wb3EAq1V/B+8QeARg3OyEq8l50lUUg44K1YmyTXUHt0xkzS0xU86t1DcSvEjv b4FGJHRDE7nlyjL8XkZPtgb+VR/z2DuHcQnYXG+tY6EqevNsOHpvtAPowQp9FMVl +6Xu214IQB3OSVeXT7kE2hWSrDNy+oQfvhSv+rOfoGT8ov4c5ffzfAo+6H4l/fbr V4MDIempyMNQ3sseSXT0iumHqGtMca7XvjRUTQh3IxBaG1/kSsSr8cY0eajrVAp1 cSTBVoOBaFmUTRbacVG5ey1L+h0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHt/QU65DbKslxNymWHz01EC/qU3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85OTg0MzJjZC1hMDQ3LTQ4NWItODE0My01OWEzNTMyYzA3YjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5ODQzMmNk LWEwNDctNDg1Yi04MTQzLTU5YTM1MzJjMDdiNy8wLzdCN0Y0MTRFQjkwREIyQUM5 NzEzNzI5OTYxRjNEMzUxMDJGRUE1MzcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABncyMwDQYJKoZIhvcNAQELBQADggEBAB+i/TzcGv+d6mrlEeJFqw5LFxBt7Luc EBgPCzd0y4R0shnufmmPy4nUTB7xiKPjq2nZoKo92hsSRphnZ0abbnHAISN9QjKa 73dnUYlGH0xUwOzfKRIO8DvH3slxk9ywnhBNjdOkC8yt2RwgSL0vviYbJmRkH4K+ SLjBJYdL2COcUoDtJkWvXNQ83OgfvzhPyN1XsjML+XPIV+ZuNN0FjC2CWsVhDjaz UCbP/PxmNIpJuHuqVy5LFSrwpzN7NjB0ujJyPU2GlW2JzLp3UDV45f9Hq32V4du8 3MpoCCuYLOOQqKMPiUGhLV5L4wWJ+As2nHB+aujDQHbZB7IERd+/v0w= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:43 2024 by rpki-client on console-ams.rpki-client.org