$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer File: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer (raw, json) Hash identifier: MulLGc4xEloHYKhRpS6GXCkrli0gY9mOq1z15JDdlGY= Subject key identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 59CE4DE4C9D9D7BEB41000C1C44E56F72D1D9523 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft caRepository: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 04 Feb 2024 11:20:56 +0000 Certificate not after: Sun 02 Feb 2025 11:25:56 +0000 Subordinate resources: IP: 103.191.116.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ce:4d:e4:c9:d9:d7:be:b4:10:00:c1:c4:4e:56:f7:2d:1d:95:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 4 11:20:56 2024 GMT Not After : Feb 2 11:25:56 2025 GMT Subject: CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:15:20:f4:bd:5a:6a:0e:32:45:2c:d2:47:54: be:d1:8c:1d:67:01:d1:69:3e:a7:12:7e:50:f9:56: af:89:bd:af:6f:8a:47:1c:16:fb:3b:7f:8b:ee:3d: c1:78:ac:98:33:83:7e:45:eb:26:58:25:35:9f:98: 5e:69:e3:5a:c0:bb:f6:35:04:c2:3f:a5:95:f4:c9: 70:e5:28:bc:13:98:bc:45:3b:8c:85:42:71:fc:22: a7:aa:bc:b4:90:97:37:79:1a:ab:35:dc:56:09:e0: 52:a6:cd:6c:c3:29:62:6d:52:5e:d1:4b:e9:55:3b: 5d:b3:1f:5f:44:74:82:ee:5b:ba:00:60:12:d9:1f: db:fb:14:4a:72:80:64:8d:d6:5e:d0:03:81:60:0e: 7a:01:ca:41:70:e4:22:c4:ff:2d:b8:69:83:7f:ca: 72:b3:a6:46:dc:0a:2b:13:c9:12:33:cc:a8:45:71: 33:81:e0:b6:8f:13:d9:74:06:a7:0f:93:d4:21:92: 6e:7c:dd:54:d3:0f:c1:77:21:98:9c:3b:c3:6b:be: 7b:88:1a:1d:12:0a:8b:df:ec:3b:3d:b9:b1:9d:17: 52:07:d5:65:fe:8b:e8:b7:5c:42:45:ea:88:84:15: 30:65:30:9b:54:2e:45:eb:85:ba:fd:fd:54:1f:93: 7e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.116.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:38:c6:a6:ed:60:4e:9a:37:b6:f4:ec:98:af:41:7b:56:26: 48:37:b4:05:8a:20:a8:3a:6c:76:bd:36:40:9c:0d:7c:b9:7e: 53:f9:75:e2:a6:17:f6:8b:d1:2d:84:04:a0:17:f2:73:44:cf: ac:2a:01:73:ff:c1:8c:ca:1c:a1:af:ef:03:51:74:ca:aa:24: 80:9a:44:24:d7:c9:34:99:63:ee:36:11:d3:37:e2:a3:75:d0: e8:0f:2e:e7:40:d0:6a:a5:e0:b1:a6:b8:1d:ac:7e:04:11:f7: d2:ba:0e:2e:84:36:a1:47:51:7a:68:d9:82:4b:05:d0:4d:f9: ee:95:07:45:99:37:8c:19:7f:0c:9e:a9:b7:91:99:36:c0:b4: c2:d9:06:f3:f7:79:6a:69:8d:b1:ff:76:e8:67:30:fd:bc:6e: 6e:ae:49:b9:8c:cd:03:20:81:02:0e:2e:2d:7b:67:4f:38:4f: 19:64:12:1d:d8:9e:1d:36:26:2b:a5:24:9e:1d:ef:60:4e:c1: d4:0e:29:81:dd:5c:56:6b:62:08:2b:d9:bf:fb:98:48:d2:3c: 92:7f:5a:47:3c:4a:8a:a8:d5:1d:6e:45:b4:fd:c8:7a:18:c3: 85:d5:25:ad:99:6f:40:58:46:68:1b:fb:ff:82:66:1b:e8:5e: 82:b9:ab:c0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUWc5N5MnZ1760EADBxE5W9y0dlSMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIwNDExMjA1NloX DTI1MDIwMjExMjU1NlowMzExMC8GA1UEAxMoN0NBM0YyQzQwRkU0NTNDRUUyMzBB RjU5NDk4NUIyNzU1MTRGNUVDRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALkVIPS9WmoOMkUs0kdUvtGMHWcB0Wk+pxJ+UPlWr4m9r2+KRxwW+zt/i+49 wXismDODfkXrJlglNZ+YXmnjWsC79jUEwj+llfTJcOUovBOYvEU7jIVCcfwip6q8 tJCXN3kaqzXcVgngUqbNbMMpYm1SXtFL6VU7XbMfX0R0gu5bugBgEtkf2/sUSnKA ZI3WXtADgWAOegHKQXDkIsT/Lbhpg3/KcrOmRtwKKxPJEjPMqEVxM4Hgto8T2XQG pw+T1CGSbnzdVNMPwXchmJw7w2u+e4gaHRIKi9/sOz25sZ0XUgfVZf6L6LdcQkXq iIQVMGUwm1QuReuFuv39VB+TfvcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHyj8sQP5FPO4jCvWUmFsnVRT17PMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lNmFkYWUyYS00N2I2LTRhZTUtOWMzZi0zZThjYjkyYTM5ODcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2YWRhZTJh LTQ3YjYtNGFlNS05YzNmLTNlOGNiOTJhMzk4Ny8wLzdDQTNGMkM0MEZFNDUzQ0VF MjMwQUY1OTQ5ODVCMjc1NTE0RjVFQ0YubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnv3QwDQYJKoZIhvcNAQELBQADggEBAFo4xqbtYE6aN7b07JivQXtWJkg3tAWK IKg6bHa9NkCcDXy5flP5deKmF/aL0S2EBKAX8nNEz6wqAXP/wYzKHKGv7wNRdMqq JICaRCTXyTSZY+42EdM34qN10OgPLudA0Gql4LGmuB2sfgQR99K6Di6ENqFHUXpo 2YJLBdBN+e6VB0WZN4wZfwyeqbeRmTbAtMLZBvP3eWppjbH/duhnMP28bm6uSbmM zQMggQIOLi17Z084TxlkEh3Ynh02JiulJJ4d72BOwdQOKYHdXFZrYggr2b/7mEjS PJJ/Wkc8Soqo1R1uRbT9yHoYw4XVJa2Zb0BYRmgb+/+CZhvoXoK5q8A= -----END CERTIFICATE-----Generated at Wed May 8 22:46:40 2024 by rpki-client on console-ams.rpki-client.org