$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer File: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer (raw, json) Hash identifier: aIRRqNWbrJfwO+uDKwJ9mN1vaSaO4+5XiOh+KjmvC78= Subject key identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2958328988A10674C4819B3053D6A008B78BB8CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft caRepository: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 14 May 2025 00:29:09 +0000 Certificate not after: Wed 13 May 2026 00:34:09 +0000 Subordinate resources: IP: 103.211.83.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:58:32:89:88:a1:06:74:c4:81:9b:30:53:d6:a0:08:b7:8b:b8:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 14 00:29:09 2025 GMT Not After : May 13 00:34:09 2026 GMT Subject: CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:b9:15:9c:24:81:29:47:2c:7e:e7:c0:b7: fa:07:9c:0f:08:95:73:e5:41:f8:b9:96:1f:87:e9: 69:c6:41:df:9a:39:f0:c1:af:1c:37:8d:7c:d4:43: 44:c7:30:1a:75:b5:c6:26:c9:b1:92:60:12:34:5f: f1:7d:b1:bb:14:91:9b:09:51:76:0e:c7:be:83:b6: 3c:42:f2:39:ea:24:82:8a:9a:23:75:03:24:f8:1e: 43:dc:b1:c4:8b:03:d9:8b:e8:80:f3:70:27:5e:82: f8:5a:c4:5d:9b:67:90:d7:b2:7e:a5:cc:d7:56:4b: 6d:0e:af:47:b7:55:17:93:54:8a:31:4c:6d:7e:61: e4:63:d2:a3:dc:7b:a8:24:86:d0:61:4e:0b:2d:f3: 66:f4:d2:0d:92:f8:85:86:55:04:9c:7b:6f:45:89: 60:91:a4:4d:46:81:fc:fc:59:cf:48:8d:d8:36:cf: 55:fa:ac:fc:65:08:cb:dc:c4:43:a7:8b:68:71:ca: 2f:59:21:d8:23:48:1e:e6:c7:fd:c4:e0:e3:c2:90: 36:c2:3e:0b:d2:d7:b9:ae:a4:56:3a:47:7d:00:83: c1:8d:fd:e2:75:5d:2d:f4:7d:9f:b1:4e:f0:e5:36: 71:c1:e8:48:56:ff:b0:ac:1a:03:8c:a7:8c:43:ad: a5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.83.0/24 Signature Algorithm: sha256WithRSAEncryption 30:d7:8a:1f:80:c0:cf:25:0f:e1:c0:a3:8d:4d:fe:a7:cf:33: 87:4d:72:0d:d6:6a:95:71:ca:12:ec:85:60:97:99:33:af:7c: b2:1a:55:94:db:27:1c:9c:69:fc:2d:fb:c4:d3:f2:e3:79:64: 23:c5:eb:45:26:aa:b8:91:61:cc:20:06:d8:f1:10:d6:37:c7: 0b:50:65:16:80:3c:32:dd:c1:a2:d5:1c:7f:f8:74:52:30:df: 6b:e5:cd:81:37:2a:00:8d:2b:3e:a8:8d:48:7d:9b:c4:df:b6: ce:7c:16:e7:3d:c3:73:3c:e6:1a:4f:67:02:2a:f6:89:2d:56: be:8e:e0:3b:90:94:77:4c:db:4c:7f:27:2d:c8:9e:5f:68:93: aa:a0:d1:2b:61:77:bf:61:b9:a9:ae:ff:08:6f:11:e8:47:76: 77:f1:53:69:1a:76:a1:1a:57:d0:09:3a:1f:67:b3:d8:45:b6: e1:12:0b:93:cc:5b:09:4f:05:54:f3:74:4c:1f:dd:00:db:27: 3c:92:0f:33:18:be:1b:9b:db:78:1b:5f:e8:1a:a3:77:25:62: 46:3e:3f:c0:cf:2b:9f:f3:45:d0:e9:fa:2f:fe:fe:87:f5:d6: 5f:cf:31:94:eb:cd:23:4c:78:e9:d9:33:f7:ac:9e:49:33:af: 59:a5:8b:7c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKVgyiYihBnTEgZswU9agCLeLuM0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUxNDAwMjkwOVoX DTI2MDUxMzAwMzQwOVowMzExMC8GA1UEAxMoN0RBMzA4QTY2RUY3MDVCRUU0MkNB MDQ2MzFBMEUzOTAxREFGODhEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLwuRWcJIEpRyx+58C3+gecDwiVc+VB+LmWH4fpacZB35o58MGvHDeNfNRD RMcwGnW1xibJsZJgEjRf8X2xuxSRmwlRdg7HvoO2PELyOeokgoqaI3UDJPgeQ9yx xIsD2YvogPNwJ16C+FrEXZtnkNeyfqXM11ZLbQ6vR7dVF5NUijFMbX5h5GPSo9x7 qCSG0GFOCy3zZvTSDZL4hYZVBJx7b0WJYJGkTUaB/PxZz0iN2DbPVfqs/GUIy9zE Q6eLaHHKL1kh2CNIHubH/cTg48KQNsI+C9LXua6kVjpHfQCDwY394nVdLfR9n7FO 8OU2ccHoSFb/sKwaA4ynjEOtpXUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH2jCKZu9wW+5CygRjGg45Adr4jYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZmI1ZmYzNy0zOTRhLTRlYmEtYTQ3MC0xMGFmMzdjZjc1ZGMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBmYjVmZjM3 LTM5NGEtNGViYS1hNDcwLTEwYWYzN2NmNzVkYy8wLzdEQTMwOEE2NkVGNzA1QkVF NDJDQTA0NjMxQTBFMzkwMURBRjg4RDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn01MwDQYJKoZIhvcNAQELBQADggEBADDXih+AwM8lD+HAo41N/qfPM4dNcg3W apVxyhLshWCXmTOvfLIaVZTbJxycafwt+8TT8uN5ZCPF60UmqriRYcwgBtjxENY3 xwtQZRaAPDLdwaLVHH/4dFIw32vlzYE3KgCNKz6ojUh9m8Tfts58Fuc9w3M85hpP ZwIq9oktVr6O4DuQlHdM20x/Jy3Inl9ok6qg0Sthd79huamu/whvEehHdnfxU2ka dqEaV9AJOh9ns9hFtuESC5PMWwlPBVTzdEwf3QDbJzySDzMYvhub23gbX+gao3cl YkY+P8DPK5/zRdDp+i/+/of11l/PMZTrzSNMeOnZM/esnkkzr1mli3w= -----END CERTIFICATE-----Generated at Tue Jun 3 23:46:38 2025 by rpki-client