$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer File: 7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer (raw, json) Hash identifier: n8IRop+8CNnVfPHT67UjwW8xCvcpzeL6tQbY1J0T6T0= Subject key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 70E5EB65DF392488740350B72CA51002E1584039 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft caRepository: rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 07:13:02 +0000 Certificate not after: Mon 29 Jul 2024 07:18:02 +0000 Subordinate resources: IP: 45.126.80.0/22 IP: 101.50.16.0/20 IP: 101.128.64.0/18 IP: 103.61.248.0/22 IP: 116.206.232.0 -- 116.206.243.255 IP: 125.208.128.0/18 IP: 202.158.0.0/17 IP: 210.210.128.0/18 IP: 2001:d10::/32 IP: 2405:8180::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e5:eb:65:df:39:24:88:74:03:50:b7:2c:a5:10:02:e1:58:40:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 07:13:02 2023 GMT Not After : Jul 29 07:18:02 2024 GMT Subject: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fd:2c:a0:3b:12:e9:9e:ae:25:4e:85:4b:b4: a6:ad:bb:ae:33:32:94:75:f4:60:d9:d3:1f:2f:58: 64:4f:90:b1:30:3b:ee:b7:e4:7f:a6:3c:63:18:e8: fb:75:55:0c:ab:78:f7:8e:2f:30:ce:1f:f7:97:9c: 7d:74:bf:54:d7:59:48:73:a9:dd:d5:19:19:19:67: f8:a3:57:34:f6:b8:a8:2d:be:22:15:48:b0:5c:28: 12:3f:21:55:4f:6a:26:38:ae:85:62:69:41:56:8f: d3:0a:a4:ec:d0:37:d5:64:37:f7:42:e9:65:aa:3f: 23:c6:17:f8:ef:5e:7d:6d:c4:e1:ae:7b:2e:15:ff: a5:57:23:37:84:7d:30:56:60:25:64:3b:79:f3:b7: 2d:cb:48:d4:ff:f5:df:38:46:5b:83:3a:69:a6:53: fd:cb:74:cd:5e:72:e6:b0:14:d2:01:7b:7e:24:b3: 08:d2:d3:7a:11:a6:54:51:e4:5f:6c:43:2a:ed:fd: 68:75:fb:7c:5f:1f:49:a6:c3:b2:6d:0f:f9:c2:41: c0:06:fa:71:80:e2:e8:55:5b:b5:3a:f8:26:f8:e5: 75:e9:b8:5c:ea:77:61:58:c8:58:5c:db:65:e3:75: 78:57:bf:e6:2a:8a:bd:fd:d3:5b:ce:7c:f5:3e:61: 5c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.80.0/22 101.50.16.0/20 101.128.64.0/18 103.61.248.0/22 116.206.232.0-116.206.243.255 125.208.128.0/18 202.158.0.0/17 210.210.128.0/18 IPv6: 2001:d10::/32 2405:8180::/32 Signature Algorithm: sha256WithRSAEncryption 94:e7:4b:2b:41:04:59:9c:53:99:67:42:c0:4c:5f:54:eb:58: cd:92:33:6c:3c:09:b5:4f:9a:a2:20:0a:32:8b:52:42:8c:ca: 53:0c:c1:7e:7a:a6:a5:73:8a:8f:59:0f:15:7c:0a:98:dc:15: 03:25:5f:27:ab:37:b7:3d:66:45:7f:5d:39:ba:d7:6e:34:9c: e8:a9:5e:b7:f4:3b:0c:7e:77:51:f4:99:0d:c6:9b:63:1d:95: 59:7c:ce:bd:02:2f:b6:e1:a0:58:cc:28:96:b9:72:75:ed:48: 01:c1:b5:03:c0:39:08:14:46:40:d1:d3:11:4a:31:cb:9c:42: 94:48:49:73:5e:c1:f6:82:54:85:1c:71:4f:be:78:f1:b4:64: 79:63:36:81:ce:06:2e:1d:58:48:5a:4e:83:a5:a8:51:8c:f4: f9:96:14:18:a6:3a:a5:23:6a:ba:71:4e:9a:9e:07:f8:9d:3b: 13:a0:99:a3:00:ae:48:b5:99:c9:65:c8:23:5a:7f:42:2d:d0: a9:bd:0d:8b:79:ea:eb:af:57:24:c3:af:1f:03:cf:f2:54:88: a9:d3:af:b0:e1:60:25:25:29:39:2e:71:41:82:e1:16:c7:2b: 1d:f4:07:61:5f:14:6c:0f:dc:a9:ed:8f:9f:a0:1f:fe:c3:b6: 39:80:bc:a9 -----BEGIN CERTIFICATE----- MIIGDTCCBPWgAwIBAgIUcOXrZd85JIh0A1C3LKUQAuFYQDkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA3MTMwMloX DTI0MDcyOTA3MTgwMlowMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5 NDRDOTE4RURDNTEzN0Q2OTk4QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMH9LKA7EumeriVOhUu0pq27rjMylHX0YNnTHy9YZE+QsTA77rfkf6Y8Yxjo +3VVDKt4944vMM4f95ecfXS/VNdZSHOp3dUZGRln+KNXNPa4qC2+IhVIsFwoEj8h VU9qJjiuhWJpQVaP0wqk7NA31WQ390LpZao/I8YX+O9efW3E4a57LhX/pVcjN4R9 MFZgJWQ7efO3LctI1P/13zhGW4M6aaZT/ct0zV5y5rAU0gF7fiSzCNLTehGmVFHk X2xDKu39aHX7fF8fSabDsm0P+cJBwAb6cYDi6FVbtTr4Jvjldem4XOp3YVjIWFzb ZeN1eFe/5iqKvf3TW8589T5hXAkCAwEAAaOCAwAwggL8MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH4s80bV3oQNwO6UTJGO3FE31pmKMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2 LWIyYzYtNDZmYy04Mjk3LTJkYmRlYzZkNmQ1ZC8wLzdFMkNGMzQ2RDVERTg0MERD MEVFOTQ0QzkxOEVEQzUxMzdENjk5OEEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwZwYIKwYBBQUHAQcBAf8EWDBWMD4EAgABMDgD BAItflADBARlMhADBAZlgEADBAJnPfgwDAMEA3TO6AMEAnTO8AMEBn3QgAMEB8qe AAMEBtLSgDAUBAIAAjAOAwUAIAENEAMFACQFgYAwDQYJKoZIhvcNAQELBQADggEB AJTnSytBBFmcU5lnQsBMX1TrWM2SM2w8CbVPmqIgCjKLUkKMylMMwX56pqVzio9Z DxV8CpjcFQMlXyerN7c9ZkV/XTm61240nOipXrf0Owx+d1H0mQ3Gm2MdlVl8zr0C L7bhoFjMKJa5cnXtSAHBtQPAOQgURkDR0xFKMcucQpRISXNewfaCVIUccU++ePG0 ZHljNoHOBi4dWEhaToOlqFGM9PmWFBimOqUjarpxTpqeB/idOxOgmaMArki1mcll yCNaf0It0Km9DYt56uuvVyTDrx8Dz/JUiKnTr7DhYCUlKTkucUGC4RbHKx30B2Ff FGwP3Kntj5+gH/7DtjmAvKk= -----END CERTIFICATE-----Generated at Wed May 8 21:02:17 2024 by rpki-client on console-fra.rpki-client.org