$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer File: 7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer (raw, json) Hash identifier: Um0qo5mBxL655CBARXOdPLwhaMWQDX0Lu46xEXoFmHc= Subject key identifier: 7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 55C96FCBF7348F2810AC19D2B8FF9C8721AB2DF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft caRepository: rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 28 Sep 2024 03:37:20 +0000 Certificate not after: Sat 27 Sep 2025 03:42:20 +0000 Subordinate resources: IP: 103.147.72.0/23 IP: 2405:b040::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c9:6f:cb:f7:34:8f:28:10:ac:19:d2:b8:ff:9c:87:21:ab:2d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 28 03:37:20 2024 GMT Not After : Sep 27 03:42:20 2025 GMT Subject: CN=7D52713C0D26932DC1EECC75CB0C11784C9B0592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:0b:63:39:85:6e:97:29:ee:9e:10:ec:ea: 8a:59:e5:57:5f:9d:24:f7:5f:c0:a5:c5:0c:a0:af: 3d:77:4c:38:d6:ac:f9:30:29:d8:0e:b9:00:ae:fc: aa:3b:d2:7b:aa:de:24:84:ad:80:e5:1c:dd:8b:6d: 0e:dd:8a:75:35:77:64:6e:f1:b0:66:85:2b:dc:c5: d6:5e:9b:f4:6e:cc:97:1c:b7:27:80:3b:b0:21:af: e9:34:83:17:3c:34:25:78:2a:c7:81:ce:18:e3:d0: f9:1a:4c:7d:f3:d2:96:9b:6c:bd:a5:5c:c4:93:07: 06:85:0e:b0:28:fa:f6:25:0f:3e:dd:d1:a3:00:16: 5e:8e:27:79:9f:be:27:59:96:f4:c6:15:60:cd:13: aa:b4:9b:02:b4:e9:9a:e4:bf:4a:f5:33:90:09:52: 27:5f:a0:ad:0c:5a:3c:c0:5c:14:25:4f:3b:ac:ad: e8:25:56:94:b4:25:c4:44:e5:5b:46:6f:21:e4:df: 4f:03:6e:c6:1d:5e:d2:25:5f:e0:17:98:e3:f0:c1: 78:c3:f2:1f:7d:af:aa:07:03:0d:d8:dc:4a:23:06: 8b:99:59:d8:86:e6:ff:18:cb:2b:1b:34:dc:15:76: 3c:d6:ae:09:5a:53:a6:52:41:23:5b:55:44:d1:8d: 25:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.72.0/23 IPv6: 2405:b040::/32 Signature Algorithm: sha256WithRSAEncryption 0d:24:76:48:3b:d0:dd:08:94:33:84:72:ee:d1:75:ab:a0:50: 18:a0:ed:0b:aa:e6:6b:ff:84:cc:4e:8e:94:9c:49:39:e6:de: 61:48:f9:86:ca:ae:54:a4:c6:94:8d:a0:7b:ae:9e:c3:c9:bf: d1:8d:72:63:e1:c1:40:99:fb:04:cf:a3:68:c4:a9:fd:f7:61: bd:65:0b:ff:9b:0a:c7:3c:17:da:27:12:85:56:aa:e7:ab:74: 64:09:59:a0:44:eb:8e:bd:1c:82:fb:38:6c:e6:68:8f:6d:46: be:7d:6a:f0:e4:93:44:6d:59:5b:37:43:4a:b1:78:c5:7c:c5: a6:bc:bf:8d:42:e5:03:e2:6d:4d:cb:74:ac:21:09:9a:98:aa: cd:4c:bf:c5:ba:36:80:ec:79:c0:4e:a2:de:99:12:a9:89:8b: fc:ec:2a:a1:04:7d:f0:04:d5:16:37:fa:5b:46:bd:2f:16:e5: 51:8d:f8:45:9d:2a:3e:c0:c0:c9:3c:e0:5c:7e:b5:2f:e6:ed: 79:46:56:bc:78:5a:4b:08:d8:58:c2:bb:2e:e6:ba:e6:5e:de: 8c:92:52:19:09:0f:70:be:c9:cd:09:2e:19:78:97:85:1d:81: 5f:70:e4:04:27:df:31:c7:1c:af:47:76:18:f4:34:23:bc:be: 43:c4:35:9e -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUVclvy/c0jygQrBnSuP+chyGrLfQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkyODAzMzcyMFoX DTI1MDkyNzAzNDIyMFowMzExMC8GA1UEAxMoN0Q1MjcxM0MwRDI2OTMyREMxRUVD Qzc1Q0IwQzExNzg0QzlCMDU5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALtJC2M5hW6XKe6eEOzqilnlV1+dJPdfwKXFDKCvPXdMONas+TAp2A65AK78 qjvSe6reJIStgOUc3YttDt2KdTV3ZG7xsGaFK9zF1l6b9G7Mlxy3J4A7sCGv6TSD Fzw0JXgqx4HOGOPQ+RpMffPSlptsvaVcxJMHBoUOsCj69iUPPt3RowAWXo4neZ++ J1mW9MYVYM0TqrSbArTpmuS/SvUzkAlSJ1+grQxaPMBcFCVPO6yt6CVWlLQlxETl W0ZvIeTfTwNuxh1e0iVf4BeY4/DBeMPyH32vqgcDDdjcSiMGi5lZ2Ibm/xjLKxs0 3BV2PNauCVpTplJBI1tVRNGNJcECAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH1ScTwNJpMtwe7MdcsMEXhMmwWSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNjY1MjAwMC0xZjJjLTQ3OTEtODFiNC1kNDQ1N2NlZjEyNzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2NjUyMDAw LTFmMmMtNDc5MS04MWI0LWQ0NDU3Y2VmMTI3MC8wLzdENTI3MTNDMEQyNjkzMkRD MUVFQ0M3NUNCMEMxMTc4NEM5QjA1OTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnk0gwDQQCAAIwBwMFACQFsEAwDQYJKoZIhvcNAQELBQADggEBAA0kdkg70N0I lDOEcu7RdaugUBig7Quq5mv/hMxOjpScSTnm3mFI+YbKrlSkxpSNoHuunsPJv9GN cmPhwUCZ+wTPo2jEqf33Yb1lC/+bCsc8F9onEoVWquerdGQJWaBE6469HIL7OGzm aI9tRr59avDkk0RtWVs3Q0qxeMV8xaa8v41C5QPibU3LdKwhCZqYqs1Mv8W6NoDs ecBOot6ZEqmJi/zsKqEEffAE1RY3+ltGvS8W5VGN+EWdKj7AwMk84Fx+tS/m7XlG Vrx4WksI2FjCuy7muuZe3oySUhkJD3C+yc0JLhl4l4UdgV9w5AQn3zHHHK9Hdhj0 NCO8vkPENZ4= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:50 2024 by rpki-client on console-fra.rpki-client.org