$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer (raw, json) Hash identifier: c0rdKEjGtXiCqfQe3otrL+OgTWtNcTuYvgZ3Lpmce/Q= Subject key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3C8F1A15735A344D41946C3B1774DDAF77DD3FF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft caRepository: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 19 Sep 2024 18:30:28 +0000 Certificate not after: Thu 18 Sep 2025 18:35:28 +0000 Subordinate resources: IP: 103.97.76.0/22 IP: 2401:8440::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8f:1a:15:73:5a:34:4d:41:94:6c:3b:17:74:dd:af:77:dd:3f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 19 18:30:28 2024 GMT Not After : Sep 18 18:35:28 2025 GMT Subject: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b8:0d:f2:07:2f:87:a4:f7:4e:e1:65:b0:37: 44:99:60:2f:68:ef:ec:53:06:e6:46:80:68:34:6c: 06:28:fb:d3:05:72:1d:44:ca:bc:51:5d:cd:16:f0: b7:e7:cf:c7:2e:e3:30:54:c9:f3:88:2f:23:ab:07: 59:70:fe:d3:9e:b0:53:33:ac:2f:c4:04:3b:f3:54: d7:98:e9:60:8c:56:f0:b2:ac:eb:e4:42:29:05:76: 32:10:7f:52:a2:4a:e8:d3:8d:e5:0b:ad:cd:56:f0: 1d:08:97:8f:c2:17:df:67:fd:30:3f:b6:b3:78:70: 64:d2:66:2f:34:fa:97:4f:36:77:4e:13:48:22:88: ed:c2:76:0b:33:e2:68:ba:00:79:e7:c5:0b:08:84: da:a6:0d:6f:af:fd:32:1f:63:5b:bd:44:06:3e:77: b7:de:f6:b7:aa:94:cd:be:47:f6:63:31:7b:a5:aa: 3b:78:ce:01:04:71:50:8c:1a:45:55:b2:1b:8d:1c: 5b:59:63:4c:72:08:da:b9:fb:c0:84:d1:39:2a:89: d8:a7:54:4f:e2:0c:f2:fc:2a:c6:56:fc:4a:0f:a5: fc:70:47:9d:08:1b:da:f1:d5:62:28:d1:ea:e6:93: 74:e4:77:48:fa:61:3b:fc:dc:8a:e6:34:d9:97:30: ff:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.76.0/22 IPv6: 2401:8440::/32 Signature Algorithm: sha256WithRSAEncryption 64:09:5d:0b:c5:c5:4e:d8:ae:09:67:07:ef:68:9f:30:7a:1a: c4:60:00:79:75:e0:b0:c3:59:28:09:d1:97:30:4f:ca:2b:cc: 00:d1:44:44:62:6b:13:3f:85:f5:5d:51:bc:4e:34:8c:5e:74: 0c:37:92:80:7b:83:b3:ab:12:0c:ca:5a:41:52:f7:e1:6c:62: a8:5f:4c:10:8b:a5:fe:1a:62:5b:9e:4a:91:d6:db:64:a5:41: 3e:8f:41:aa:dc:8f:84:c9:67:e0:c0:df:b1:ea:6d:aa:ea:0b: 1b:b0:4c:f1:1b:b2:80:13:47:f6:1b:45:dc:23:f6:8a:12:62: f5:ca:68:20:5f:de:b0:73:64:ad:68:b6:1d:5d:ad:96:5e:41: 6f:4e:96:89:4a:15:71:71:83:8e:94:39:a7:e4:59:ab:ee:7c: ae:da:c8:1c:55:4d:ae:8c:c2:56:1a:91:3a:8c:d4:7c:1b:0e: fd:6e:47:3d:1d:13:d4:39:ab:ae:69:4c:95:40:18:4d:8b:b0: d3:ec:1f:14:50:c1:73:9e:c3:7e:8a:f4:80:8e:f1:82:3f:58: 02:4e:89:12:4d:55:e3:83:81:60:6a:8a:e7:02:e5:80:47:be: c5:78:91:d8:a7:42:8d:b6:f0:35:4a:62:9a:b1:6d:0b:cf:64: 68:8a:c5:d8 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUPI8aFXNaNE1BlGw7F3Tdr3fdP/QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxOTE4MzAyOFoX DTI1MDkxODE4MzUyOFowMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdE MTBGOUU3M0ZGRDBCQUI5M0Y2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+4DfIHL4ek907hZbA3RJlgL2jv7FMG5kaAaDRsBij70wVyHUTKvFFdzRbw t+fPxy7jMFTJ84gvI6sHWXD+056wUzOsL8QEO/NU15jpYIxW8LKs6+RCKQV2MhB/ UqJK6NON5QutzVbwHQiXj8IX32f9MD+2s3hwZNJmLzT6l082d04TSCKI7cJ2CzPi aLoAeefFCwiE2qYNb6/9Mh9jW71EBj53t972t6qUzb5H9mMxe6WqO3jOAQRxUIwa RVWyG40cW1ljTHII2rn7wITROSqJ2KdUT+IM8vwqxlb8Sg+l/HBHnQgb2vHVYijR 6uaTdOR3SPphO/zciuY02Zcw/70CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH1kuPTPtocUETfRD55z/9C6uT9nMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1N2IwZDdl LWVhZGUtNDMxOC1hYjIwLThjN2YyZDViZTY5Zi8wLzdENjRCOEY0Q0ZCNjg3MTQx MTM3RDEwRjlFNzNGRkQwQkFCOTNGNjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnYUwwDQQCAAIwBwMFACQBhEAwDQYJKoZIhvcNAQELBQADggEBAGQJXQvFxU7Y rglnB+9onzB6GsRgAHl14LDDWSgJ0ZcwT8orzADRRERiaxM/hfVdUbxONIxedAw3 koB7g7OrEgzKWkFS9+FsYqhfTBCLpf4aYlueSpHW22SlQT6PQarcj4TJZ+DA37Hq barqCxuwTPEbsoATR/YbRdwj9ooSYvXKaCBf3rBzZK1oth1drZZeQW9OlolKFXFx g46UOafkWavufK7ayBxVTa6MwlYakTqM1HwbDv1uRz0dE9Q5q65pTJVAGE2LsNPs HxRQwXOew36K9ICO8YI/WAJOiRJNVeODgWBqiucC5YBHvsV4kdinQo228DVKYpqx bQvPZGiKxdg= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:23 2024 by rpki-client on console-ams.rpki-client.org