$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer File: 7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer (raw, json) Hash identifier: vj+E/XDSACg+0rB9RUNjEo8cso+OP+OnS8t+WjYq/uU= Subject key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2DB715B335A7D9F195BB04CA05DE8A99FEB0D4E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft caRepository: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 20:23:28 +0000 Certificate not after: Mon 30 Jun 2025 20:28:28 +0000 Subordinate resources: IP: 45.126.80.0/22 IP: 101.50.16.0/20 IP: 101.128.64.0/18 IP: 103.61.248.0/22 IP: 116.206.232.0 -- 116.206.243.255 IP: 125.208.128.0/18 IP: 202.158.0.0/17 IP: 210.210.128.0/18 IP: 2001:d10::/32 IP: 2405:8180::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b7:15:b3:35:a7:d9:f1:95:bb:04:ca:05:de:8a:99:fe:b0:d4:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 20:23:28 2024 GMT Not After : Jun 30 20:28:28 2025 GMT Subject: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fd:2c:a0:3b:12:e9:9e:ae:25:4e:85:4b:b4: a6:ad:bb:ae:33:32:94:75:f4:60:d9:d3:1f:2f:58: 64:4f:90:b1:30:3b:ee:b7:e4:7f:a6:3c:63:18:e8: fb:75:55:0c:ab:78:f7:8e:2f:30:ce:1f:f7:97:9c: 7d:74:bf:54:d7:59:48:73:a9:dd:d5:19:19:19:67: f8:a3:57:34:f6:b8:a8:2d:be:22:15:48:b0:5c:28: 12:3f:21:55:4f:6a:26:38:ae:85:62:69:41:56:8f: d3:0a:a4:ec:d0:37:d5:64:37:f7:42:e9:65:aa:3f: 23:c6:17:f8:ef:5e:7d:6d:c4:e1:ae:7b:2e:15:ff: a5:57:23:37:84:7d:30:56:60:25:64:3b:79:f3:b7: 2d:cb:48:d4:ff:f5:df:38:46:5b:83:3a:69:a6:53: fd:cb:74:cd:5e:72:e6:b0:14:d2:01:7b:7e:24:b3: 08:d2:d3:7a:11:a6:54:51:e4:5f:6c:43:2a:ed:fd: 68:75:fb:7c:5f:1f:49:a6:c3:b2:6d:0f:f9:c2:41: c0:06:fa:71:80:e2:e8:55:5b:b5:3a:f8:26:f8:e5: 75:e9:b8:5c:ea:77:61:58:c8:58:5c:db:65:e3:75: 78:57:bf:e6:2a:8a:bd:fd:d3:5b:ce:7c:f5:3e:61: 5c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.80.0/22 101.50.16.0/20 101.128.64.0/18 103.61.248.0/22 116.206.232.0-116.206.243.255 125.208.128.0/18 202.158.0.0/17 210.210.128.0/18 IPv6: 2001:d10::/32 2405:8180::/32 Signature Algorithm: sha256WithRSAEncryption 37:00:9e:e9:14:60:5a:86:d9:5a:44:71:45:93:ae:dc:bb:09: 71:3a:ab:e7:68:75:bc:be:64:b0:4b:53:d3:d0:57:ac:f7:23: df:84:16:2d:7a:0a:7e:b2:0e:b2:25:54:88:f4:7f:c8:92:ef: 26:73:43:61:2b:38:9f:aa:2d:e5:00:e2:99:11:80:93:82:95: 0a:5d:c3:b4:0c:29:c0:e7:d9:eb:6e:c2:8b:ca:48:cd:ca:7f: 0d:2c:62:8b:ef:52:c8:ee:d2:09:5d:94:0c:73:11:5f:8e:9a: 56:de:6b:a5:7a:db:65:47:c9:e2:d2:a7:81:58:5d:4d:6c:47: a6:ec:c8:68:6a:07:51:25:c5:8e:c5:58:65:de:99:f3:f5:e8: df:8b:46:95:b7:4c:70:08:5d:b9:aa:c6:74:b1:8a:69:dc:8c: 1f:4c:fa:36:b9:f8:e7:5f:87:ed:38:98:85:f1:1e:a6:1b:c6: 43:d6:db:30:12:b0:8e:d4:15:21:17:59:61:68:21:19:c8:2c: 43:29:a1:15:ca:c3:7f:76:09:5a:0f:41:0f:b6:59:eb:cd:14: 1b:70:2a:84:de:b8:60:9c:03:18:96:dd:5b:ca:ff:ea:70:de: d6:5c:ee:51:26:18:1d:39:e9:e7:fa:73:07:50:b2:d4:85:48: ec:81:42:4a -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIULbcVszWn2fGVuwTKBd6Kmf6w1OYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTIwMjMyOFoX DTI1MDYzMDIwMjgyOFowMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5 NDRDOTE4RURDNTEzN0Q2OTk4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMH9LKA7EumeriVOhUu0pq27rjMylHX0YNnTHy9YZE+QsTA77rfkf6Y8Yxjo +3VVDKt4944vMM4f95ecfXS/VNdZSHOp3dUZGRln+KNXNPa4qC2+IhVIsFwoEj8h VU9qJjiuhWJpQVaP0wqk7NA31WQ390LpZao/I8YX+O9efW3E4a57LhX/pVcjN4R9 MFZgJWQ7efO3LctI1P/13zhGW4M6aaZT/ct0zV5y5rAU0gF7fiSzCNLTehGmVFHk X2xDKu39aHX7fF8fSabDsm0P+cJBwAb6cYDi6FVbtTr4Jvjldem4XOp3YVjIWFzb ZeN1eFe/5iqKvf3TW8589T5hXAkCAwEAAaOCAwAwggL8MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH4s80bV3oQNwO6UTJGO3FE31pmKMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2 LWIyYzYtNDZmYy04Mjk3LTJkYmRlYzZkNmQ1ZC8wLzdFMkNGMzQ2RDVERTg0MERD MEVFOTQ0QzkxOEVEQzUxMzdENjk5OEEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwZwYIKwYBBQUHAQcBAf8EWDBWMD4EAgABMDgD BAItflADBARlMhADBAZlgEADBAJnPfgwDAMEA3TO6AMEAnTO8AMEBn3QgAMEB8qe AAMEBtLSgDAUBAIAAjAOAwUAIAENEAMFACQFgYAwDQYJKoZIhvcNAQELBQADggEB ADcAnukUYFqG2VpEcUWTrty7CXE6q+dodby+ZLBLU9PQV6z3I9+EFi16Cn6yDrIl VIj0f8iS7yZzQ2ErOJ+qLeUA4pkRgJOClQpdw7QMKcDn2etuwovKSM3Kfw0sYovv Usju0gldlAxzEV+Omlbea6V622VHyeLSp4FYXU1sR6bsyGhqB1ElxY7FWGXemfP1 6N+LRpW3THAIXbmqxnSximncjB9M+ja5+Odfh+04mIXxHqYbxkPW2zASsI7UFSEX WWFoIRnILEMpoRXKw392CVoPQQ+2WevNFBtwKoTeuGCcAxiW3VvK/+pw3tZc7lEm GB056ef6cwdQstSFSOyBQko= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:20 2024 by rpki-client on console-fra.rpki-client.org