$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer File: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer (raw, json) Hash identifier: riX1T7CAqBtDizT+kUHIX0pXumICLG3g0jtHFGgFJlo= Subject key identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2A8303989CB3073D81DDBACB9F5609146F792E63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft caRepository: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 11 Jul 2023 10:59:26 +0000 Certificate not after: Tue 09 Jul 2024 11:04:26 +0000 Subordinate resources: IP: 103.211.83.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:83:03:98:9c:b3:07:3d:81:dd:ba:cb:9f:56:09:14:6f:79:2e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 11 10:59:26 2023 GMT Not After : Jul 9 11:04:26 2024 GMT Subject: CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:b9:15:9c:24:81:29:47:2c:7e:e7:c0:b7: fa:07:9c:0f:08:95:73:e5:41:f8:b9:96:1f:87:e9: 69:c6:41:df:9a:39:f0:c1:af:1c:37:8d:7c:d4:43: 44:c7:30:1a:75:b5:c6:26:c9:b1:92:60:12:34:5f: f1:7d:b1:bb:14:91:9b:09:51:76:0e:c7:be:83:b6: 3c:42:f2:39:ea:24:82:8a:9a:23:75:03:24:f8:1e: 43:dc:b1:c4:8b:03:d9:8b:e8:80:f3:70:27:5e:82: f8:5a:c4:5d:9b:67:90:d7:b2:7e:a5:cc:d7:56:4b: 6d:0e:af:47:b7:55:17:93:54:8a:31:4c:6d:7e:61: e4:63:d2:a3:dc:7b:a8:24:86:d0:61:4e:0b:2d:f3: 66:f4:d2:0d:92:f8:85:86:55:04:9c:7b:6f:45:89: 60:91:a4:4d:46:81:fc:fc:59:cf:48:8d:d8:36:cf: 55:fa:ac:fc:65:08:cb:dc:c4:43:a7:8b:68:71:ca: 2f:59:21:d8:23:48:1e:e6:c7:fd:c4:e0:e3:c2:90: 36:c2:3e:0b:d2:d7:b9:ae:a4:56:3a:47:7d:00:83: c1:8d:fd:e2:75:5d:2d:f4:7d:9f:b1:4e:f0:e5:36: 71:c1:e8:48:56:ff:b0:ac:1a:03:8c:a7:8c:43:ad: a5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.83.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:89:29:0d:71:b4:01:e8:4e:d0:5c:13:8d:35:47:30:12:0f: ff:27:1a:0a:c8:44:87:7c:4c:c7:b6:15:7f:7a:a7:d4:c5:11: fb:57:58:82:5c:72:c9:42:cb:ee:d1:4c:29:01:51:1d:98:7a: 24:9a:5d:d7:bc:ea:fb:6b:01:98:72:78:da:35:34:77:db:d5: 29:f5:93:fd:54:2e:1c:d7:74:b4:49:e0:e2:17:bd:4c:a0:18: 78:97:95:be:99:c6:b3:a9:4f:af:03:74:cf:4b:bb:51:17:10: a9:eb:81:46:e1:9a:e9:a2:bb:a7:64:9b:f8:90:2c:77:72:b5: 67:1a:72:d7:cc:c2:ca:72:65:32:af:62:30:5b:a6:47:1b:3f: 1e:e1:af:a7:3d:d6:6e:39:65:b7:d9:03:26:f0:82:5f:d4:f5: 02:cc:47:62:d7:6c:95:34:1e:b8:ad:1f:5a:78:69:0b:61:8f: b9:59:a2:82:ae:84:49:44:27:26:63:fa:42:a4:84:cf:8c:51: 32:40:5b:51:12:25:bc:b8:d0:e4:2f:a8:23:d8:d5:32:30:67: 77:83:4d:a2:86:7f:84:07:6a:f6:d1:5b:75:1c:ec:66:a1:92: 62:e9:68:9c:c1:00:16:8a:be:bc:eb:b7:98:98:19:63:84:72: 0a:42:15:bf -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKoMDmJyzBz2B3brLn1YJFG95LmMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDcxMTEwNTkyNloX DTI0MDcwOTExMDQyNlowMzExMC8GA1UEAxMoN0RBMzA4QTY2RUY3MDVCRUU0MkNB MDQ2MzFBMEUzOTAxREFGODhEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLwuRWcJIEpRyx+58C3+gecDwiVc+VB+LmWH4fpacZB35o58MGvHDeNfNRD RMcwGnW1xibJsZJgEjRf8X2xuxSRmwlRdg7HvoO2PELyOeokgoqaI3UDJPgeQ9yx xIsD2YvogPNwJ16C+FrEXZtnkNeyfqXM11ZLbQ6vR7dVF5NUijFMbX5h5GPSo9x7 qCSG0GFOCy3zZvTSDZL4hYZVBJx7b0WJYJGkTUaB/PxZz0iN2DbPVfqs/GUIy9zE Q6eLaHHKL1kh2CNIHubH/cTg48KQNsI+C9LXua6kVjpHfQCDwY394nVdLfR9n7FO 8OU2ccHoSFb/sKwaA4ynjEOtpXUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH2jCKZu9wW+5CygRjGg45Adr4jYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZmI1ZmYzNy0zOTRhLTRlYmEtYTQ3MC0xMGFmMzdjZjc1ZGMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBmYjVmZjM3 LTM5NGEtNGViYS1hNDcwLTEwYWYzN2NmNzVkYy8wLzdEQTMwOEE2NkVGNzA1QkVF NDJDQTA0NjMxQTBFMzkwMURBRjg4RDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn01MwDQYJKoZIhvcNAQELBQADggEBAF2JKQ1xtAHoTtBcE401RzASD/8nGgrI RId8TMe2FX96p9TFEftXWIJccslCy+7RTCkBUR2YeiSaXde86vtrAZhyeNo1NHfb 1Sn1k/1ULhzXdLRJ4OIXvUygGHiXlb6ZxrOpT68DdM9Lu1EXEKnrgUbhmumiu6dk m/iQLHdytWcactfMwspyZTKvYjBbpkcbPx7hr6c91m45ZbfZAybwgl/U9QLMR2LX bJU0HritH1p4aQthj7lZooKuhElEJyZj+kKkhM+MUTJAW1ESJby40OQvqCPY1TIw Z3eDTaKGf4QHavbRW3Uc7GahkmLpaJzBABaKvrzrt5iYGWOEcgpCFb8= -----END CERTIFICATE-----Generated at Wed May 8 17:45:19 2024 by rpki-client on console-ams.rpki-client.org