$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer (raw, json) Hash identifier: HMawsZExNf0LcQ2weSFmcHP+NzllMEgRfn1WUDrttpw= Subject key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 27262534076297D553CBD4CCC17800F95AF65BB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft caRepository: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 22 Nov 2024 21:09:55 +0000 Certificate not after: Fri 21 Nov 2025 21:14:55 +0000 Subordinate resources: IP: 103.46.4.0/23 IP: 2001:df1:be40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 10:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:26:25:34:07:62:97:d5:53:cb:d4:cc:c1:78:00:f9:5a:f6:5b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Nov 22 21:09:55 2024 GMT Not After : Nov 21 21:14:55 2025 GMT Subject: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3a:07:d0:ea:ef:f9:47:d3:0e:df:2c:5a:31: 2a:ff:94:43:3d:1b:ed:7c:9f:4d:fd:aa:49:a3:d1: 07:08:de:cd:26:54:20:e4:a0:25:bd:9e:9f:6b:13: bc:74:d3:72:aa:69:90:a5:d8:21:6e:2b:8f:68:c5: 08:fb:56:59:02:f7:6e:92:af:d8:a1:cd:1a:e0:87: 39:10:0c:89:22:c9:4e:bf:9e:0c:aa:20:30:60:63: 5c:07:3d:92:2a:fd:81:24:5e:5f:39:71:1f:15:6c: e4:bc:9f:f2:41:2d:1e:88:09:77:df:1f:79:71:53: 5b:1e:e0:9f:95:af:ce:23:28:74:b6:4b:d4:b0:88: 4c:5c:7c:ce:df:8d:2c:45:01:1a:cd:17:94:d0:ad: 70:5d:8a:ac:46:d9:60:80:a1:38:22:51:01:fb:85: 2e:cb:be:39:8f:63:60:bc:c0:ef:36:f0:00:6f:62: bf:bb:5c:c1:be:fa:6d:6f:a5:9e:ef:44:74:cc:2b: f0:f0:d3:00:17:be:80:61:32:19:2c:d5:f6:a6:6f: 36:73:2c:64:cc:b1:1a:4f:88:05:ed:3b:1b:ff:68: 69:48:55:a1:89:dc:11:c6:c9:5e:a6:cc:58:ba:bd: 99:c6:af:1b:9a:e7:28:86:14:93:29:e7:6c:2d:e6: c9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.46.4.0/23 IPv6: 2001:df1:be40::/48 Signature Algorithm: sha256WithRSAEncryption 94:2b:0f:b8:17:bd:9a:9b:83:6c:b1:53:11:d5:d3:a5:99:45: 7a:7b:ee:4a:a7:69:55:5e:bd:82:f5:d0:17:1d:d9:d4:a0:32: ce:a2:d6:be:39:cf:7a:8f:74:2c:81:23:93:81:24:c1:be:32: de:31:9e:7e:35:46:97:c1:f1:f5:8b:57:58:4e:3f:ec:71:e0: 0b:d4:78:bd:45:6f:6a:33:0e:12:89:f1:93:31:a1:99:53:5a: bb:ba:75:59:8b:4c:06:da:ef:b3:a5:50:71:24:a6:5b:3e:0c: df:c4:99:aa:74:3d:a9:89:b6:2b:11:27:f1:2e:b5:d7:c2:35: f2:72:82:21:af:d9:4b:2d:5e:48:63:20:46:a2:8f:3d:ad:4f: d7:80:e7:6d:dc:37:d0:f1:a1:d4:e1:ae:39:53:af:35:35:ad: 81:81:b9:fa:24:6d:b5:32:9b:44:66:02:95:77:f2:e3:dc:cc: 57:ee:3c:01:15:de:97:0c:db:50:64:e7:b3:ff:90:c7:4c:fe: c1:5c:a7:1b:f1:41:4e:af:36:5f:72:d8:d3:b2:52:78:7b:f9: 4b:73:e2:b4:7c:9a:fb:7d:bc:e2:14:fb:08:94:0a:3c:c3:00: eb:87:0d:71:a7:6a:7a:e0:48:1a:9a:c8:60:0e:06:c6:02:d9: 97:7f:ec:9e -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUJyYlNAdil9VTy9TMwXgA+Vr2W7QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEyMjIxMDk1NVoX DTI1MTEyMTIxMTQ1NVowMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5 OTBBN0JFQ0FEODVFOEJFQjk1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANk6B9Dq7/lH0w7fLFoxKv+UQz0b7XyfTf2qSaPRBwjezSZUIOSgJb2en2sT vHTTcqppkKXYIW4rj2jFCPtWWQL3bpKv2KHNGuCHORAMiSLJTr+eDKogMGBjXAc9 kir9gSReXzlxHxVs5Lyf8kEtHogJd98feXFTWx7gn5WvziModLZL1LCITFx8zt+N LEUBGs0XlNCtcF2KrEbZYIChOCJRAfuFLsu+OY9jYLzA7zbwAG9iv7tcwb76bW+l nu9EdMwr8PDTABe+gGEyGSzV9qZvNnMsZMyxGk+IBe07G/9oaUhVoYncEcbJXqbM WLq9mcavG5rnKIYUkynnbC3myaUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH1u39shuLfmp1qZCnvsrYXovrlTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiYzhjZGE1 LTM0ODMtNDJiMC1iMzg1LWZjMDcwNzE2ZmJjYy8wLzdENkVERkRCMjFCOEI3RTZB NzVBOTkwQTdCRUNBRDg1RThCRUI5NTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnLgQwDwQCAAIwCQMHACABDfG+QDANBgkqhkiG9w0BAQsFAAOCAQEAlCsPuBe9 mpuDbLFTEdXTpZlFenvuSqdpVV69gvXQFx3Z1KAyzqLWvjnPeo90LIEjk4Ekwb4y 3jGefjVGl8Hx9YtXWE4/7HHgC9R4vUVvajMOEonxkzGhmVNau7p1WYtMBtrvs6VQ cSSmWz4M38SZqnQ9qYm2KxEn8S6118I18nKCIa/ZSy1eSGMgRqKPPa1P14Dnbdw3 0PGh1OGuOVOvNTWtgYG5+iRttTKbRGYClXfy49zMV+48ARXelwzbUGTns/+Qx0z+ wVynG/FBTq82X3LY07JSeHv5S3PitHya+3284hT7CJQKPMMA64cNcadqeuBIGprI YA4GxgLZl3/sng== -----END CERTIFICATE-----Generated at Sun Apr 6 11:49:11 2025 by rpki-client