$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer File: 7DF6602C113DDEE922AA019C74EF4283764A4695.cer (raw, json) Hash identifier: /tYdGlF6lnknuI3zAAX1+WBlN4cCUImlfSkYW0ici6o= Subject key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 786E9E50A6C8B35471A09F52298E3E591A08AC56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft caRepository: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 12 Aug 2024 14:58:54 +0000 Certificate not after: Mon 11 Aug 2025 15:03:54 +0000 Subordinate resources: IP: 43.252.8.0/22 IP: 103.24.104.0/22 IP: 175.106.8.0/21 IP: 2406:b900::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6e:9e:50:a6:c8:b3:54:71:a0:9f:52:29:8e:3e:59:1a:08:ac:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 12 14:58:54 2024 GMT Not After : Aug 11 15:03:54 2025 GMT Subject: CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e1:e3:91:be:65:f2:2f:10:f7:1d:2e:76:ef: da:ae:fa:51:1d:ef:10:60:80:b1:3b:b1:6b:bd:bd: 34:05:29:58:77:3f:4b:fe:86:9b:ec:0e:6c:f7:d2: d2:73:d4:5c:19:15:3b:07:3d:55:b2:66:a8:61:54: 7e:20:3f:05:bd:01:81:c5:a0:9d:b7:11:6d:00:5d: bf:fc:a8:5f:dd:06:e7:17:b9:1c:aa:19:1c:a6:64: 78:f9:b8:9d:fc:db:c4:05:64:6f:4f:0a:75:2f:dd: 51:69:ff:50:e5:1a:17:f4:92:1b:cd:d1:fa:ae:fd: e7:ac:de:66:81:29:7c:29:0a:73:68:ef:a8:3d:0d: 30:69:ed:60:30:bc:15:94:49:1e:fa:6e:76:4d:74: f0:f1:44:6e:0a:bd:51:d5:d4:5a:aa:2b:be:72:5d: 7f:97:66:ad:47:c9:11:8c:36:a8:c6:03:66:6f:97: 59:16:11:bc:f4:f6:d2:60:37:9d:49:75:84:d6:76: 3c:aa:11:54:be:ab:42:f1:fc:eb:8d:3d:a3:6c:d8: 23:95:bb:d3:f5:2e:33:71:e8:b8:df:8b:44:79:d6: 68:91:19:fb:3b:04:83:ac:32:35:4d:26:79:5b:23: 48:5e:d6:05:99:8d:7a:f3:37:a1:45:23:32:f1:61: b9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.8.0/22 103.24.104.0/22 175.106.8.0/21 IPv6: 2406:b900::/32 Signature Algorithm: sha256WithRSAEncryption 92:13:c8:81:b1:5c:e6:33:cf:44:1e:a7:86:df:eb:36:29:18: 2c:99:37:c6:15:f9:d5:45:bb:d1:c2:14:51:90:16:87:09:2f: 25:17:06:08:67:83:4d:d7:ca:0e:03:e4:a8:b1:f8:1d:62:b7: eb:2f:30:db:2e:52:d5:e1:5b:78:a9:64:52:3e:99:4f:ce:2f: 42:1a:ba:1a:1f:aa:c2:4a:6b:0b:61:a2:92:c9:e7:f6:06:bf: dd:79:ac:28:80:57:e7:fa:00:09:0f:39:6e:04:aa:aa:ee:ba: 13:c6:7d:02:ca:da:c6:f9:50:ff:49:c7:6e:16:dc:08:45:b7: 6b:02:b1:24:cc:9c:bb:bc:99:22:d9:3a:d1:27:52:2e:c0:ed: a8:67:7e:29:f8:d4:8f:f5:f8:8b:fe:c1:bb:9f:a5:36:d0:e1: a9:56:a6:f0:af:49:4f:62:5a:b7:68:f0:33:1d:44:dd:54:e7: 22:6a:b3:e0:39:8d:86:25:85:61:6b:3f:f4:8e:4c:9d:cd:b0: 07:52:33:79:c7:1e:77:85:6c:46:8c:1f:ba:49:a9:eb:60:16: 70:e9:1f:fa:61:cc:43:54:69:b9:13:14:8d:af:60:3d:c0:d2: f6:73:57:41:51:13:cc:e1:b8:4e:79:d8:c0:33:f7:32:dd:9f: 0b:ea:26:ac -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUeG6eUKbIs1RxoJ9SKY4+WRoIrFYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDgxMjE0NTg1NFoX DTI1MDgxMTE1MDM1NFowMzExMC8GA1UEAxMoN0RGNjYwMkMxMTNEREVFOTIyQUEw MTlDNzRFRjQyODM3NjRBNDY5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXh45G+ZfIvEPcdLnbv2q76UR3vEGCAsTuxa729NAUpWHc/S/6Gm+wObPfS 0nPUXBkVOwc9VbJmqGFUfiA/Bb0BgcWgnbcRbQBdv/yoX90G5xe5HKoZHKZkePm4 nfzbxAVkb08KdS/dUWn/UOUaF/SSG83R+q7956zeZoEpfCkKc2jvqD0NMGntYDC8 FZRJHvpudk108PFEbgq9UdXUWqorvnJdf5dmrUfJEYw2qMYDZm+XWRYRvPT20mA3 nUl1hNZ2PKoRVL6rQvH86409o2zYI5W70/UuM3HouN+LRHnWaJEZ+zsEg6wyNU0m eVsjSF7WBZmNevM3oUUjMvFhuacCAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH32YCwRPd7pIqoBnHTvQoN2SkaVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMGE5ODViMC1lMTdhLTQyMWItOTY1NS0wMzI0NWEwMWFlZjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwYTk4NWIw LWUxN2EtNDIxYi05NjU1LTAzMjQ1YTAxYWVmOC8wLzdERjY2MDJDMTEzRERFRTky MkFBMDE5Qzc0RUY0MjgzNzY0QTQ2OTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAIr/AgDBAJnGGgDBAOvaggwDQQCAAIwBwMFACQGuQAwDQYJKoZIhvcNAQELBQAD ggEBAJITyIGxXOYzz0Qep4bf6zYpGCyZN8YV+dVFu9HCFFGQFocJLyUXBghng03X yg4D5Kix+B1it+svMNsuUtXhW3ipZFI+mU/OL0IauhofqsJKawthopLJ5/YGv915 rCiAV+f6AAkPOW4EqqruuhPGfQLK2sb5UP9Jx24W3AhFt2sCsSTMnLu8mSLZOtEn Ui7A7ahnfin41I/1+Iv+wbufpTbQ4alWpvCvSU9iWrdo8DMdRN1U5yJqs+A5jYYl hWFrP/SOTJ3NsAdSM3nHHneFbEaMH7pJqetgFnDpH/phzENUabkTFI2vYD3A0vZz V0FRE8zhuE552MAz9zLdnwvqJqw= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:43 2024 by rpki-client on console-ams.rpki-client.org