$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer File: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer (raw, json) Hash identifier: Mv/GtUb0IO22IeO11ryTjwWV4bvTJjjwLO3kH1Pgq7A= Subject key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 131D92EDCE581C42CF9FAAF7FC00BFEB9820822F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft caRepository: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 11 Aug 2024 23:43:32 +0000 Certificate not after: Sun 10 Aug 2025 23:48:32 +0000 Subordinate resources: IP: 103.169.143.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:1d:92:ed:ce:58:1c:42:cf:9f:aa:f7:fc:00:bf:eb:98:20:82:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 11 23:43:32 2024 GMT Not After : Aug 10 23:48:32 2025 GMT Subject: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:1a:c4:d8:4a:b7:a6:b6:7b:ea:b9:fe:bf: df:af:bb:86:2a:b2:a9:e9:3d:8a:fd:33:34:1d:49: 3a:22:7c:7a:96:66:4e:8e:4b:53:ba:e0:ce:b3:76: 5e:c5:ae:61:c0:09:9f:ed:47:75:27:c0:28:1f:a8: 18:a5:4f:ca:3e:0f:b2:c8:11:00:bf:8b:ea:34:4c: ba:7f:05:dc:5d:13:59:ff:e3:d9:2f:dd:19:f3:59: c7:ac:76:b9:d2:eb:4b:cc:bf:0c:2c:14:46:ca:96: 98:df:93:98:9e:49:a8:6c:fe:bb:25:ae:1b:1d:5d: 40:d1:92:7e:8d:e9:82:76:3f:9e:bd:25:fb:13:92: ad:ca:63:0f:af:ca:78:52:ba:ce:55:7f:87:55:66: c4:8a:e5:95:b2:0a:63:f4:2d:4b:11:d3:21:47:b9: fc:58:36:3a:99:b9:1a:56:fd:01:07:5b:52:24:c3: 4d:0c:58:4a:43:bd:08:35:97:0d:fc:65:24:4a:1b: 7b:dd:48:61:b9:6b:c4:8f:2c:12:c5:0c:bc:70:86: f9:57:e2:7f:b0:51:dd:91:f6:f7:ad:f6:cd:f4:4c: c0:c7:8b:e0:e4:3f:7e:cf:4d:96:7c:27:50:d2:73: a4:5e:56:40:d3:79:7d:cf:93:5b:c7:a4:06:d1:3b: 14:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.143.0/24 Signature Algorithm: sha256WithRSAEncryption 74:fd:7e:7c:20:14:31:64:d0:56:a2:19:f8:43:c3:0f:20:70: d8:f6:a4:92:57:f3:38:1d:92:03:3e:8f:f9:a8:e2:11:fa:03: 41:7b:3d:08:2c:1a:4e:5c:db:17:28:37:c4:ee:18:3e:3d:a1: 77:23:d9:0f:34:00:42:49:b9:8c:17:ac:19:f9:5b:28:71:76: c3:37:97:25:6e:2a:25:d4:6c:40:d0:af:35:5c:55:60:78:70: 48:0a:18:41:45:62:25:a6:f9:b5:ec:59:ad:90:b2:05:3c:fb: 42:e9:de:58:90:51:55:8a:1d:d1:ec:ad:ca:80:63:e1:97:ef: ea:8b:7c:64:ce:df:57:45:1b:c4:3b:01:de:4f:8a:e4:25:c5: c8:66:eb:36:19:ba:85:82:a7:00:02:9e:22:11:dd:fa:5f:70: 27:cf:45:cd:a3:d3:21:fc:07:8c:ef:51:ba:63:d5:e7:08:aa: 63:48:aa:ab:05:66:58:a2:4c:34:63:77:a6:c4:10:19:f7:bf: 4d:cf:1d:66:b0:d7:8e:b2:7e:8a:9b:04:e2:e0:17:82:20:09: 65:5e:19:7f:c1:96:5b:cd:e8:3a:cb:d7:a0:5e:cc:04:fa:21: 12:c7:c2:46:51:fa:a5:0d:c6:e5:7a:45:36:0b:f0:3e:04:64: 31:0d:13:f2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUEx2S7c5YHELPn6r3/AC/65gggi8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgxMTIzNDMzMloX DTI1MDgxMDIzNDgzMlowMzExMC8GA1UEAxMoN0Q5RTBFRTVCRTcyNzM2MDgxMDFE OTNDNUY3RkI2MUNCQzA0MDRDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPeGsTYSremtnvquf6/36+7hiqyqek9iv0zNB1JOiJ8epZmTo5LU7rgzrN2 XsWuYcAJn+1HdSfAKB+oGKVPyj4PssgRAL+L6jRMun8F3F0TWf/j2S/dGfNZx6x2 udLrS8y/DCwURsqWmN+TmJ5JqGz+uyWuGx1dQNGSfo3pgnY/nr0l+xOSrcpjD6/K eFK6zlV/h1VmxIrllbIKY/QtSxHTIUe5/Fg2Opm5Glb9AQdbUiTDTQxYSkO9CDWX DfxlJEobe91IYblrxI8sEsUMvHCG+Vfif7BR3ZH29632zfRMwMeL4OQ/fs9Nlnwn UNJzpF5WQNN5fc+TW8ekBtE7FCcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH2eDuW+cnNggQHZPF9/thy8BATHMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hNmRlMWE4ZS1jMmI4LTQ5OTYtOTQ5Mi02ZjkyYzJkZmVjN2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2ZGUxYThl LWMyYjgtNDk5Ni05NDkyLTZmOTJjMmRmZWM3YS8wLzdEOUUwRUU1QkU3MjczNjA4 MTAxRDkzQzVGN0ZCNjFDQkMwNDA0QzcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnqY8wDQYJKoZIhvcNAQELBQADggEBAHT9fnwgFDFk0FaiGfhDww8gcNj2pJJX 8zgdkgM+j/mo4hH6A0F7PQgsGk5c2xcoN8TuGD49oXcj2Q80AEJJuYwXrBn5Wyhx dsM3lyVuKiXUbEDQrzVcVWB4cEgKGEFFYiWm+bXsWa2QsgU8+0Lp3liQUVWKHdHs rcqAY+GX7+qLfGTO31dFG8Q7Ad5PiuQlxchm6zYZuoWCpwACniIR3fpfcCfPRc2j 0yH8B4zvUbpj1ecIqmNIqqsFZliiTDRjd6bEEBn3v03PHWaw146yfoqbBOLgF4Ig CWVeGX/BllvN6DrL16BezAT6IRLHwkZR+qUNxuV6RTYL8D4EZDENE/I= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:20 2024 by rpki-client on console-fra.rpki-client.org