$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer File: 7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer (raw, json) Hash identifier: ukwgS0V0FifpyDdEEiKDvP5qY9ZoouEvA1fESlxw3PM= Subject key identifier: 7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 170E56D35C2CCB876B192447772B4894612912A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft caRepository: rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 23 Apr 2024 12:50:50 +0000 Certificate not after: Tue 22 Apr 2025 12:55:50 +0000 Subordinate resources: IP: 103.172.70.0/23 IP: 2001:df1:98c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0e:56:d3:5c:2c:cb:87:6b:19:24:47:77:2b:48:94:61:29:12:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 23 12:50:50 2024 GMT Not After : Apr 22 12:55:50 2025 GMT Subject: CN=7E46C2EE5082354F1494DE6AEA6CDA642769EDF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:b4:37:8b:c0:46:69:6a:2c:88:4d:f5:c8: 7a:68:5a:ba:8a:c1:dc:20:20:20:46:43:35:ce:8f: 2c:af:74:19:61:4d:95:80:08:8d:f6:3d:02:99:f2: 70:40:4f:96:06:70:cf:3f:75:b9:23:a8:98:1f:47: b3:8e:57:fa:3b:29:f3:85:a4:2c:f0:8d:b5:76:af: 64:51:08:14:80:dd:bf:31:ec:63:6b:cd:c6:2c:38: 17:5e:34:ee:99:5c:21:30:75:52:18:42:0e:60:39: 5d:18:f7:23:a2:25:8f:94:88:b2:2a:ce:e2:18:95: 14:28:66:6b:0c:2e:11:c5:f6:64:36:cb:47:dd:08: aa:6a:a1:7c:9b:8a:03:7f:c0:6f:8f:b7:ba:29:4d: 22:84:5d:e9:54:bf:ea:08:11:a8:69:04:4e:9f:b6: 5c:30:65:13:3a:28:ac:7f:ff:05:52:24:38:c2:65: b4:28:6a:6b:e0:6c:9d:82:76:7f:f1:c2:66:bd:2b: fe:84:f0:52:a8:49:3b:ef:70:7d:ed:82:fa:45:89: 27:19:b7:76:97:31:a6:8f:bc:2e:ea:82:5e:46:03: 01:32:4f:0e:b9:b7:73:a6:0d:d2:29:48:ff:a5:a2: 5f:41:59:a9:bd:95:0a:0f:9b:02:e8:54:59:5c:73: ee:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.70.0/23 IPv6: 2001:df1:98c0::/48 Signature Algorithm: sha256WithRSAEncryption 66:b1:a4:ca:53:79:3b:96:7b:7b:d5:d2:ed:2b:55:de:89:44: f5:d0:ef:22:03:e5:6c:50:14:ed:9c:23:cb:9f:83:83:28:30: 5d:b6:94:c9:a1:09:cf:58:e4:d4:f5:43:14:84:88:f7:ba:bc: d8:16:9c:74:3c:17:15:a8:45:40:eb:b5:ff:f7:7f:83:ce:ff: a8:02:90:9b:da:eb:c7:65:d0:bd:c8:eb:5c:24:e7:ea:6b:27: 4d:9d:85:6b:d9:8a:ad:78:9f:4c:e8:00:80:0f:59:a2:12:b1: b6:c0:98:90:22:74:0f:83:45:5c:04:0c:8f:52:09:5b:25:82: f1:b7:cf:1c:11:ee:01:12:c4:2a:58:28:5d:60:3e:2e:a1:56: 8b:13:ac:18:52:af:a8:f7:de:c4:00:06:1c:e4:f6:b5:89:5e: 44:7d:b5:70:90:39:71:e4:2e:f6:57:d2:99:d7:e8:13:9d:82: 32:48:d9:7f:ab:b4:45:98:8c:7a:d8:ad:ed:7c:81:b6:8e:83: 35:99:45:2d:9d:c4:79:75:64:7b:a4:b4:8f:13:8a:f8:25:31: a8:b7:17:d6:16:ca:03:fb:d0:ee:d9:0b:a5:db:2c:65:36:f2: 2e:4a:b7:4e:0d:81:37:6c:b6:95:0b:c9:d0:24:bd:0b:fa:ec: 2a:be:ab:d3 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUFw5W01wsy4drGSRHdytIlGEpEqkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQyMzEyNTA1MFoX DTI1MDQyMjEyNTU1MFowMzExMC8GA1UEAxMoN0U0NkMyRUU1MDgyMzU0RjE0OTRE RTZBRUE2Q0RBNjQyNzY5RURGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYhtDeLwEZpaiyITfXIemhauorB3CAgIEZDNc6PLK90GWFNlYAIjfY9Apny cEBPlgZwzz91uSOomB9Hs45X+jsp84WkLPCNtXavZFEIFIDdvzHsY2vNxiw4F140 7plcITB1UhhCDmA5XRj3I6Ilj5SIsirO4hiVFChmawwuEcX2ZDbLR90IqmqhfJuK A3/Ab4+3uilNIoRd6VS/6ggRqGkETp+2XDBlEzoorH//BVIkOMJltChqa+BsnYJ2 f/HCZr0r/oTwUqhJO+9wfe2C+kWJJxm3dpcxpo+8LuqCXkYDATJPDrm3c6YN0ilI /6WiX0FZqb2VCg+bAuhUWVxz7j0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH5Gwu5QgjVPFJTeaups2mQnae3xMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMGZmMDIyYS05YjE2LTRiNGMtOThhMi01MzQ5OTRmNTg5ZDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEwZmYwMjJh LTliMTYtNGI0Yy05OGEyLTUzNDk5NGY1ODlkMC8wLzdFNDZDMkVFNTA4MjM1NEYx NDk0REU2QUVBNkNEQTY0Mjc2OUVERjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnrEYwDwQCAAIwCQMHACABDfGYwDANBgkqhkiG9w0BAQsFAAOCAQEAZrGkylN5 O5Z7e9XS7StV3olE9dDvIgPlbFAU7Zwjy5+DgygwXbaUyaEJz1jk1PVDFISI97q8 2BacdDwXFahFQOu1//d/g87/qAKQm9rrx2XQvcjrXCTn6msnTZ2Fa9mKrXifTOgA gA9ZohKxtsCYkCJ0D4NFXAQMj1IJWyWC8bfPHBHuARLEKlgoXWA+LqFWixOsGFKv qPfexAAGHOT2tYleRH21cJA5ceQu9lfSmdfoE52CMkjZf6u0RZiMetit7XyBto6D NZlFLZ3EeXVke6S0jxOK+CUxqLcX1hbKA/vQ7tkLpdssZTbyLkq3Tg2BN2y2lQvJ 0CS9C/rsKr6r0w== -----END CERTIFICATE-----Generated at Wed May 8 04:37:52 2024 by rpki-client on console-fra.rpki-client.org