$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer File: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer (raw, json) Hash identifier: sPNhbm6Kb/av7jPev+bROYpWhfj+tdKE2I4qCd+gj+0= Subject key identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 25CEB3DAB9D7B75B69B10321E040C1384A022E5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft caRepository: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 11 Jun 2024 20:07:36 +0000 Certificate not after: Tue 10 Jun 2025 20:12:36 +0000 Subordinate resources: IP: 103.211.83.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:ce:b3:da:b9:d7:b7:5b:69:b1:03:21:e0:40:c1:38:4a:02:2e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 11 20:07:36 2024 GMT Not After : Jun 10 20:12:36 2025 GMT Subject: CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:b9:15:9c:24:81:29:47:2c:7e:e7:c0:b7: fa:07:9c:0f:08:95:73:e5:41:f8:b9:96:1f:87:e9: 69:c6:41:df:9a:39:f0:c1:af:1c:37:8d:7c:d4:43: 44:c7:30:1a:75:b5:c6:26:c9:b1:92:60:12:34:5f: f1:7d:b1:bb:14:91:9b:09:51:76:0e:c7:be:83:b6: 3c:42:f2:39:ea:24:82:8a:9a:23:75:03:24:f8:1e: 43:dc:b1:c4:8b:03:d9:8b:e8:80:f3:70:27:5e:82: f8:5a:c4:5d:9b:67:90:d7:b2:7e:a5:cc:d7:56:4b: 6d:0e:af:47:b7:55:17:93:54:8a:31:4c:6d:7e:61: e4:63:d2:a3:dc:7b:a8:24:86:d0:61:4e:0b:2d:f3: 66:f4:d2:0d:92:f8:85:86:55:04:9c:7b:6f:45:89: 60:91:a4:4d:46:81:fc:fc:59:cf:48:8d:d8:36:cf: 55:fa:ac:fc:65:08:cb:dc:c4:43:a7:8b:68:71:ca: 2f:59:21:d8:23:48:1e:e6:c7:fd:c4:e0:e3:c2:90: 36:c2:3e:0b:d2:d7:b9:ae:a4:56:3a:47:7d:00:83: c1:8d:fd:e2:75:5d:2d:f4:7d:9f:b1:4e:f0:e5:36: 71:c1:e8:48:56:ff:b0:ac:1a:03:8c:a7:8c:43:ad: a5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.83.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:ba:55:07:e3:e9:5d:46:8a:4a:9b:2c:9e:eb:b7:42:6f:75: ca:80:1c:fa:2a:85:3c:80:7a:83:54:83:ad:4c:0f:50:85:5f: 73:a4:83:0b:9e:ab:52:76:db:e1:7e:2b:45:0b:94:a1:b8:44: 35:5f:1d:a2:eb:fd:c5:4c:f4:0a:b5:97:f6:f9:d3:13:5f:be: 1e:72:ab:8d:6f:c2:6d:5b:34:d9:e1:1f:ed:5d:07:12:cd:1a: de:d0:77:ce:e4:fa:53:f3:68:a2:26:d9:ce:ce:e2:b4:18:35: 42:c9:1b:fa:f6:5a:de:26:e1:c2:a1:07:87:9e:73:d4:d1:5a: 74:e4:f8:73:ed:55:b6:71:c1:36:ab:7d:f8:33:d9:e1:15:f7: d5:49:e0:b9:8b:9c:e1:44:21:a2:64:33:f2:34:4c:ef:82:87: 75:e9:dc:10:66:16:94:74:f6:ab:ad:73:47:62:f5:be:10:19: 0f:67:7b:81:8f:6a:4c:25:c8:d8:64:bd:a4:cb:05:50:42:81: 55:73:24:a9:0c:b9:76:10:8f:f0:70:ee:2c:e3:d1:3f:37:f3: e3:1a:34:77:67:48:d2:e2:b9:42:35:18:f1:15:e8:d6:94:fa: 4b:80:95:fc:bc:f4:f4:00:e3:4f:0d:d9:0f:c0:a8:42:b6:4c: 79:57:f1:77 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJc6z2rnXt1tpsQMh4EDBOEoCLlswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDYxMTIwMDczNloX DTI1MDYxMDIwMTIzNlowMzExMC8GA1UEAxMoN0RBMzA4QTY2RUY3MDVCRUU0MkNB MDQ2MzFBMEUzOTAxREFGODhEODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLwuRWcJIEpRyx+58C3+gecDwiVc+VB+LmWH4fpacZB35o58MGvHDeNfNRD RMcwGnW1xibJsZJgEjRf8X2xuxSRmwlRdg7HvoO2PELyOeokgoqaI3UDJPgeQ9yx xIsD2YvogPNwJ16C+FrEXZtnkNeyfqXM11ZLbQ6vR7dVF5NUijFMbX5h5GPSo9x7 qCSG0GFOCy3zZvTSDZL4hYZVBJx7b0WJYJGkTUaB/PxZz0iN2DbPVfqs/GUIy9zE Q6eLaHHKL1kh2CNIHubH/cTg48KQNsI+C9LXua6kVjpHfQCDwY394nVdLfR9n7FO 8OU2ccHoSFb/sKwaA4ynjEOtpXUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH2jCKZu9wW+5CygRjGg45Adr4jYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZmI1ZmYzNy0zOTRhLTRlYmEtYTQ3MC0xMGFmMzdjZjc1ZGMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBmYjVmZjM3 LTM5NGEtNGViYS1hNDcwLTEwYWYzN2NmNzVkYy8wLzdEQTMwOEE2NkVGNzA1QkVF NDJDQTA0NjMxQTBFMzkwMURBRjg4RDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn01MwDQYJKoZIhvcNAQELBQADggEBAE+6VQfj6V1GikqbLJ7rt0JvdcqAHPoq hTyAeoNUg61MD1CFX3Okgwueq1J22+F+K0ULlKG4RDVfHaLr/cVM9Aq1l/b50xNf vh5yq41vwm1bNNnhH+1dBxLNGt7Qd87k+lPzaKIm2c7O4rQYNULJG/r2Wt4m4cKh B4eec9TRWnTk+HPtVbZxwTarffgz2eEV99VJ4LmLnOFEIaJkM/I0TO+Ch3Xp3BBm FpR09qutc0di9b4QGQ9ne4GPakwlyNhkvaTLBVBCgVVzJKkMuXYQj/Bw7izj0T83 8+MaNHdnSNLiuUI1GPEV6NaU+kuAlfy89PQA408N2Q/AqEK2THlX8Xc= -----END CERTIFICATE-----Generated at Mon Nov 25 13:14:23 2024 by rpki-client on console-ams.rpki-client.org