$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7C4CED4E60170CCE711624802DD8A811A1562077.cer File: 7C4CED4E60170CCE711624802DD8A811A1562077.cer (raw, json) Hash identifier: WUEAB+SBvDBFjPuMFoQVgqtaUfDNFzwLsq0E8ZOkb+I= Subject key identifier: 7C:4C:ED:4E:60:17:0C:CE:71:16:24:80:2D:D8:A8:11:A1:56:20:77 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5CE931C45693B939EB27AF87C3D8E3231B2BB919 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c8c8af7a-e466-4252-9102-883597fbe3ee/0/7C4CED4E60170CCE711624802DD8A811A1562077.mft caRepository: rsync://repo-rpki.idnic.net/repo/c8c8af7a-e466-4252-9102-883597fbe3ee/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 12 Feb 2024 13:18:47 +0000 Certificate not after: Mon 10 Feb 2025 13:23:47 +0000 Subordinate resources: IP: 103.112.235.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e9:31:c4:56:93:b9:39:eb:27:af:87:c3:d8:e3:23:1b:2b:b9:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 12 13:18:47 2024 GMT Not After : Feb 10 13:23:47 2025 GMT Subject: CN=7C4CED4E60170CCE711624802DD8A811A1562077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:56:b3:86:52:5d:e3:8d:2d:7d:44:76:7f:91: 75:e3:9c:a2:5b:e8:97:df:68:ea:d4:43:e1:bb:7c: 3d:5a:08:e9:c0:0a:36:e3:7e:e5:2b:24:a8:0c:9c: 61:60:35:93:de:d7:8e:cd:a8:0e:0b:c6:68:08:39: a9:2f:d3:16:a6:3c:bb:f7:e6:a5:2b:80:b9:0f:eb: cf:f9:3a:7c:fd:0b:92:4d:d3:c4:4e:8b:50:53:d1: e3:86:93:1d:78:0d:cf:73:7a:55:69:75:66:ac:4a: ac:88:a3:c2:61:53:18:51:ab:78:81:81:3e:5e:3f: f8:0c:05:5c:db:dc:d1:f5:5e:76:cc:fc:07:0a:e2: 57:50:9d:06:40:8f:04:05:bc:21:9f:59:06:41:d4: 21:77:56:25:ed:11:f9:23:54:ba:83:fe:02:f3:ed: d0:04:04:d1:6c:98:8c:1f:ed:9c:72:90:f9:4a:32: fe:20:3c:b7:6d:a3:20:0c:43:4a:c4:a9:78:03:de: bd:bc:60:02:22:6d:88:b5:cb:d8:8c:e6:29:ad:d1: c3:92:83:fb:53:1c:56:0a:c9:95:4e:22:c5:c8:68: f8:ae:dc:b2:73:d7:ea:0e:82:8c:98:13:9e:65:ab: 50:c8:38:f4:e2:50:81:46:0f:9f:22:3b:14:6d:b3: 8f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:4C:ED:4E:60:17:0C:CE:71:16:24:80:2D:D8:A8:11:A1:56:20:77 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c8c8af7a-e466-4252-9102-883597fbe3ee/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c8c8af7a-e466-4252-9102-883597fbe3ee/0/7C4CED4E60170CCE711624802DD8A811A1562077.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.235.0/24 Signature Algorithm: sha256WithRSAEncryption 21:10:ce:b8:89:95:cc:40:59:95:01:24:4e:bb:15:6c:45:df: 4f:86:8f:e0:2f:45:0a:fb:aa:40:68:3f:73:fb:f5:a9:6f:47: 20:45:ec:d2:b8:55:11:bf:0f:69:da:da:8b:33:ea:2e:fb:ac: 60:59:87:8b:6b:fd:af:1d:e8:b3:56:b6:86:eb:22:99:12:0b: 9b:84:59:6c:e1:4e:71:a4:27:ce:97:84:71:9a:6c:32:33:5b: 73:59:cb:f6:a0:30:42:83:f7:82:8a:02:7a:3f:af:5d:f9:b6: 4c:05:3e:aa:0e:d4:e9:06:79:2a:b6:8c:d3:47:f1:e5:a4:25: 4a:0e:3f:28:81:2e:25:9e:b9:9c:da:6b:32:82:b9:6e:fb:39: 8c:93:4f:cc:69:12:d6:e8:5c:c7:97:4c:f1:86:09:0c:86:8f: ea:8f:2e:fc:e7:fb:5e:82:88:8a:79:c6:65:0d:fd:6a:76:ce: 1b:38:6e:15:69:ee:54:aa:82:46:06:54:a6:28:0e:93:ed:d4: 02:b6:fb:6a:ea:16:2e:46:26:53:91:3c:f6:49:23:f7:b2:5b: 59:45:ed:ff:2e:42:9e:36:7d:a3:54:8c:ff:25:4c:4f:21:03: a3:d0:a1:13:bd:ca:ad:32:6f:5e:cd:5e:3e:47:59:03:f3:d6: b6:35:0e:31 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXOkxxFaTuTnrJ6+Hw9jjIxsruRkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIxMjEzMTg0N1oX DTI1MDIxMDEzMjM0N1owMzExMC8GA1UEAxMoN0M0Q0VENEU2MDE3MENDRTcxMTYy NDgwMkREOEE4MTFBMTU2MjA3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO5Ws4ZSXeONLX1Edn+RdeOcolvol99o6tRD4bt8PVoI6cAKNuN+5SskqAyc YWA1k97Xjs2oDgvGaAg5qS/TFqY8u/fmpSuAuQ/rz/k6fP0Lkk3TxE6LUFPR44aT HXgNz3N6VWl1ZqxKrIijwmFTGFGreIGBPl4/+AwFXNvc0fVedsz8BwriV1CdBkCP BAW8IZ9ZBkHUIXdWJe0R+SNUuoP+AvPt0AQE0WyYjB/tnHKQ+Uoy/iA8t22jIAxD SsSpeAPevbxgAiJtiLXL2IzmKa3Rw5KD+1McVgrJlU4ixcho+K7csnPX6g6CjJgT nmWrUMg49OJQgUYPnyI7FG2zj4sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHxM7U5gFwzOcRYkgC3YqBGhViB3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jOGM4YWY3YS1lNDY2LTQyNTItOTEwMi04ODM1OTdmYmUzZWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4YzhhZjdh LWU0NjYtNDI1Mi05MTAyLTg4MzU5N2ZiZTNlZS8wLzdDNENFRDRFNjAxNzBDQ0U3 MTE2MjQ4MDJERDhBODExQTE1NjIwNzcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABncOswDQYJKoZIhvcNAQELBQADggEBACEQzriJlcxAWZUBJE67FWxF30+Gj+Av RQr7qkBoP3P79alvRyBF7NK4VRG/D2na2osz6i77rGBZh4tr/a8d6LNWtobrIpkS C5uEWWzhTnGkJ86XhHGabDIzW3NZy/agMEKD94KKAno/r135tkwFPqoO1OkGeSq2 jNNH8eWkJUoOPyiBLiWeuZzaazKCuW77OYyTT8xpEtboXMeXTPGGCQyGj+qPLvzn +16CiIp5xmUN/Wp2zhs4bhVp7lSqgkYGVKYoDpPt1AK2+2rqFi5GJlORPPZJI/ey W1lF7f8uQp42faNUjP8lTE8hA6PQoRO9yq0yb17NXj5HWQPz1rY1DjE= -----END CERTIFICATE-----Generated at Wed May 8 09:50:32 2024 by rpki-client on console-fra.rpki-client.org