$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer File: 7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer (raw, json) Hash identifier: veAKj1zyWnOzZ4+8Yw5SyoJymsZanpKUSZrz0MxSKec= Subject key identifier: 7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 68246EFE59BEF4659418B6AE6E6EC23E50CFA4A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft caRepository: rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 27 Oct 2023 13:20:55 +0000 Certificate not after: Fri 25 Oct 2024 13:25:55 +0000 Subordinate resources: IP: 103.147.72.0/23 IP: 2405:b040::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:24:6e:fe:59:be:f4:65:94:18:b6:ae:6e:6e:c2:3e:50:cf:a4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 27 13:20:55 2023 GMT Not After : Oct 25 13:25:55 2024 GMT Subject: CN=7D52713C0D26932DC1EECC75CB0C11784C9B0592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:0b:63:39:85:6e:97:29:ee:9e:10:ec:ea: 8a:59:e5:57:5f:9d:24:f7:5f:c0:a5:c5:0c:a0:af: 3d:77:4c:38:d6:ac:f9:30:29:d8:0e:b9:00:ae:fc: aa:3b:d2:7b:aa:de:24:84:ad:80:e5:1c:dd:8b:6d: 0e:dd:8a:75:35:77:64:6e:f1:b0:66:85:2b:dc:c5: d6:5e:9b:f4:6e:cc:97:1c:b7:27:80:3b:b0:21:af: e9:34:83:17:3c:34:25:78:2a:c7:81:ce:18:e3:d0: f9:1a:4c:7d:f3:d2:96:9b:6c:bd:a5:5c:c4:93:07: 06:85:0e:b0:28:fa:f6:25:0f:3e:dd:d1:a3:00:16: 5e:8e:27:79:9f:be:27:59:96:f4:c6:15:60:cd:13: aa:b4:9b:02:b4:e9:9a:e4:bf:4a:f5:33:90:09:52: 27:5f:a0:ad:0c:5a:3c:c0:5c:14:25:4f:3b:ac:ad: e8:25:56:94:b4:25:c4:44:e5:5b:46:6f:21:e4:df: 4f:03:6e:c6:1d:5e:d2:25:5f:e0:17:98:e3:f0:c1: 78:c3:f2:1f:7d:af:aa:07:03:0d:d8:dc:4a:23:06: 8b:99:59:d8:86:e6:ff:18:cb:2b:1b:34:dc:15:76: 3c:d6:ae:09:5a:53:a6:52:41:23:5b:55:44:d1:8d: 25:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.72.0/23 IPv6: 2405:b040::/32 Signature Algorithm: sha256WithRSAEncryption 3e:3d:e8:e2:c7:fd:5b:6b:0d:54:c4:50:c8:ab:56:62:41:c9: 48:17:a0:03:88:f7:e8:1c:69:e3:a7:fe:bf:9e:ab:4b:18:7c: 76:83:e5:51:83:60:90:b0:e7:6c:7e:b2:7b:b0:f9:30:10:7b: b8:fe:db:75:23:bb:56:de:0b:eb:ee:e5:92:47:71:b8:d1:a0: 09:8b:3a:88:fb:72:56:e9:27:85:95:da:af:e8:56:0c:cc:c7: 28:cf:ef:0b:be:43:4e:00:4d:93:20:28:b3:fe:4a:de:0a:db: 90:21:60:53:8c:9b:bd:2d:08:6d:0f:d3:43:47:52:50:80:a0: 20:95:4c:31:36:2d:76:2e:93:fc:68:3d:b9:34:8d:66:de:aa: 11:3d:ee:ff:31:b7:82:4c:04:54:dd:21:39:7d:a4:99:25:56: 9b:6a:b8:e9:ec:a6:26:14:e5:dc:c3:05:bf:d3:8c:a4:93:88: aa:86:83:16:98:dd:b5:a0:89:0f:29:e6:e5:4a:34:51:93:5b: 59:85:e3:10:c7:2e:29:e5:41:d5:f3:8b:57:e9:e2:3c:59:7c: 47:1c:4c:bd:c4:c1:11:fb:78:c9:c4:ce:ca:5d:b4:dc:f6:b2: 87:82:32:d1:5f:3e:c8:70:3b:8b:6f:47:75:2a:c2:a9:9c:57: f1:6f:73:04 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUaCRu/lm+9GWUGLaubm7CPlDPpKAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAyNzEzMjA1NVoX DTI0MTAyNTEzMjU1NVowMzExMC8GA1UEAxMoN0Q1MjcxM0MwRDI2OTMyREMxRUVD Qzc1Q0IwQzExNzg0QzlCMDU5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALtJC2M5hW6XKe6eEOzqilnlV1+dJPdfwKXFDKCvPXdMONas+TAp2A65AK78 qjvSe6reJIStgOUc3YttDt2KdTV3ZG7xsGaFK9zF1l6b9G7Mlxy3J4A7sCGv6TSD Fzw0JXgqx4HOGOPQ+RpMffPSlptsvaVcxJMHBoUOsCj69iUPPt3RowAWXo4neZ++ J1mW9MYVYM0TqrSbArTpmuS/SvUzkAlSJ1+grQxaPMBcFCVPO6yt6CVWlLQlxETl W0ZvIeTfTwNuxh1e0iVf4BeY4/DBeMPyH32vqgcDDdjcSiMGi5lZ2Ibm/xjLKxs0 3BV2PNauCVpTplJBI1tVRNGNJcECAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH1ScTwNJpMtwe7MdcsMEXhMmwWSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNjY1MjAwMC0xZjJjLTQ3OTEtODFiNC1kNDQ1N2NlZjEyNzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2NjUyMDAw LTFmMmMtNDc5MS04MWI0LWQ0NDU3Y2VmMTI3MC8wLzdENTI3MTNDMEQyNjkzMkRD MUVFQ0M3NUNCMEMxMTc4NEM5QjA1OTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnk0gwDQQCAAIwBwMFACQFsEAwDQYJKoZIhvcNAQELBQADggEBAD496OLH/Vtr DVTEUMirVmJByUgXoAOI9+gcaeOn/r+eq0sYfHaD5VGDYJCw52x+snuw+TAQe7j+ 23Uju1beC+vu5ZJHcbjRoAmLOoj7clbpJ4WV2q/oVgzMxyjP7wu+Q04ATZMgKLP+ St4K25AhYFOMm70tCG0P00NHUlCAoCCVTDE2LXYuk/xoPbk0jWbeqhE97v8xt4JM BFTdITl9pJklVptquOnspiYU5dzDBb/TjKSTiKqGgxaY3bWgiQ8p5uVKNFGTW1mF 4xDHLinlQdXzi1fp4jxZfEccTL3EwRH7eMnEzspdtNz2soeCMtFfPshwO4tvR3Uq wqmcV/FvcwQ= -----END CERTIFICATE-----Generated at Wed May 8 09:50:32 2024 by rpki-client on console-fra.rpki-client.org