$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer File: 7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer (raw, json) Hash identifier: MXePSNPXkl/NYvg4hacyOEtPx+jHjVT1JeoKlLOmRx8= Subject key identifier: 7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 02546AC73B552FB4F886ECA91554D7B23DC68CF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft caRepository: rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 26 Mar 2025 00:37:53 +0000 Certificate not after: Wed 25 Mar 2026 00:42:53 +0000 Subordinate resources: IP: 103.172.70.0/23 IP: 2001:df1:98c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:54:6a:c7:3b:55:2f:b4:f8:86:ec:a9:15:54:d7:b2:3d:c6:8c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Mar 26 00:37:53 2025 GMT Not After : Mar 25 00:42:53 2026 GMT Subject: CN=7E46C2EE5082354F1494DE6AEA6CDA642769EDF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:b4:37:8b:c0:46:69:6a:2c:88:4d:f5:c8: 7a:68:5a:ba:8a:c1:dc:20:20:20:46:43:35:ce:8f: 2c:af:74:19:61:4d:95:80:08:8d:f6:3d:02:99:f2: 70:40:4f:96:06:70:cf:3f:75:b9:23:a8:98:1f:47: b3:8e:57:fa:3b:29:f3:85:a4:2c:f0:8d:b5:76:af: 64:51:08:14:80:dd:bf:31:ec:63:6b:cd:c6:2c:38: 17:5e:34:ee:99:5c:21:30:75:52:18:42:0e:60:39: 5d:18:f7:23:a2:25:8f:94:88:b2:2a:ce:e2:18:95: 14:28:66:6b:0c:2e:11:c5:f6:64:36:cb:47:dd:08: aa:6a:a1:7c:9b:8a:03:7f:c0:6f:8f:b7:ba:29:4d: 22:84:5d:e9:54:bf:ea:08:11:a8:69:04:4e:9f:b6: 5c:30:65:13:3a:28:ac:7f:ff:05:52:24:38:c2:65: b4:28:6a:6b:e0:6c:9d:82:76:7f:f1:c2:66:bd:2b: fe:84:f0:52:a8:49:3b:ef:70:7d:ed:82:fa:45:89: 27:19:b7:76:97:31:a6:8f:bc:2e:ea:82:5e:46:03: 01:32:4f:0e:b9:b7:73:a6:0d:d2:29:48:ff:a5:a2: 5f:41:59:a9:bd:95:0a:0f:9b:02:e8:54:59:5c:73: ee:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.70.0/23 IPv6: 2001:df1:98c0::/48 Signature Algorithm: sha256WithRSAEncryption 8f:56:56:12:87:9f:a5:81:94:8c:7d:0f:df:a3:8c:1c:a1:68: cf:1f:be:ac:59:6a:4b:d6:47:d9:17:ff:c1:55:80:7c:3f:72: 33:0d:d6:94:35:f2:dc:b1:ac:e8:e0:8a:83:0d:7c:b6:3d:62: 38:28:56:ba:bd:d1:3c:c4:1c:cb:53:a2:e7:44:36:2e:59:83: a3:04:10:51:50:b6:e2:d6:1d:4e:07:b3:5e:0f:1a:f3:62:51: 37:a2:9b:97:be:00:c2:b7:d2:0e:b6:ae:bc:43:e9:67:db:b1: 1c:40:d3:4d:ac:45:b4:4a:02:e9:91:88:1b:15:48:d5:07:06: 58:6d:88:af:13:9d:c3:c9:28:f8:47:df:cc:17:78:52:85:40: 1a:53:be:02:55:cb:92:d2:f6:21:ce:b7:8e:9b:22:95:49:4b: ef:3a:1a:e8:f0:09:db:3d:f4:49:8c:89:46:45:8a:bb:43:ed: 1a:73:d7:8d:22:67:b7:6c:5c:0c:8c:52:35:68:79:38:51:7a: 81:62:94:ba:2a:ca:70:a5:d8:3e:7a:eb:2f:b9:d3:1a:d1:86: 4f:48:d7:12:db:d1:b6:de:dd:a2:eb:f9:ac:46:dc:58:a1:16: f9:f9:d7:ec:6a:d0:a0:27:be:18:75:21:ee:db:14:ff:5f:6d: 99:10:5f:c9 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUAlRqxztVL7T4huypFVTXsj3GjPcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMyNjAwMzc1M1oX DTI2MDMyNTAwNDI1M1owMzExMC8GA1UEAxMoN0U0NkMyRUU1MDgyMzU0RjE0OTRE RTZBRUE2Q0RBNjQyNzY5RURGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYhtDeLwEZpaiyITfXIemhauorB3CAgIEZDNc6PLK90GWFNlYAIjfY9Apny cEBPlgZwzz91uSOomB9Hs45X+jsp84WkLPCNtXavZFEIFIDdvzHsY2vNxiw4F140 7plcITB1UhhCDmA5XRj3I6Ilj5SIsirO4hiVFChmawwuEcX2ZDbLR90IqmqhfJuK A3/Ab4+3uilNIoRd6VS/6ggRqGkETp+2XDBlEzoorH//BVIkOMJltChqa+BsnYJ2 f/HCZr0r/oTwUqhJO+9wfe2C+kWJJxm3dpcxpo+8LuqCXkYDATJPDrm3c6YN0ilI /6WiX0FZqb2VCg+bAuhUWVxz7j0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH5Gwu5QgjVPFJTeaups2mQnae3xMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMGZmMDIyYS05YjE2LTRiNGMtOThhMi01MzQ5OTRmNTg5ZDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEwZmYwMjJh LTliMTYtNGI0Yy05OGEyLTUzNDk5NGY1ODlkMC8wLzdFNDZDMkVFNTA4MjM1NEYx NDk0REU2QUVBNkNEQTY0Mjc2OUVERjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnrEYwDwQCAAIwCQMHACABDfGYwDANBgkqhkiG9w0BAQsFAAOCAQEAj1ZWEoef pYGUjH0P36OMHKFozx++rFlqS9ZH2Rf/wVWAfD9yMw3WlDXy3LGs6OCKgw18tj1i OChWur3RPMQcy1Oi50Q2LlmDowQQUVC24tYdTgezXg8a82JRN6Kbl74AwrfSDrau vEPpZ9uxHEDTTaxFtEoC6ZGIGxVI1QcGWG2IrxOdw8ko+EffzBd4UoVAGlO+AlXL ktL2Ic63jpsilUlL7zoa6PAJ2z30SYyJRkWKu0PtGnPXjSJnt2xcDIxSNWh5OFF6 gWKUuirKcKXYPnrrL7nTGtGGT0jXEtvRtt7douv5rEbcWKEW+fnX7GrQoCe+GHUh 7tsU/19tmRBfyQ== -----END CERTIFICATE-----Generated at Sat Apr 5 06:40:15 2025 by rpki-client