$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer (raw, json) Hash identifier: uzvn6EfWpsgwIV2j5RFhEudZ3sEyv+9RbvEhWkTWUtQ= Subject key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1DA02D689F168BCA6FC3652D8CF4DA3B6C397D9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft caRepository: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 04 Dec 2024 07:41:58 +0000 Certificate not after: Wed 03 Dec 2025 07:46:58 +0000 Subordinate resources: IP: 2001:df4:9a40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 25 Feb 2025 10:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a0:2d:68:9f:16:8b:ca:6f:c3:65:2d:8c:f4:da:3b:6c:39:7d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 4 07:41:58 2024 GMT Not After : Dec 3 07:46:58 2025 GMT Subject: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:88:ba:e8:d5:de:13:79:da:67:8c:8e:3c:cc: 06:f7:c1:de:d1:ce:6f:75:d5:21:93:8b:2f:1d:50: 25:e5:eb:91:9c:5c:09:44:7b:5f:cc:63:c1:48:d7: b0:f6:65:d9:81:21:af:10:ae:a6:61:e9:4a:25:bf: 6a:51:73:99:62:1b:46:66:fa:97:d7:b2:24:d1:72: f3:f3:45:c4:dd:29:36:89:0e:f7:eb:1b:1e:c6:05: 00:0b:2e:c1:0b:a6:76:a8:da:65:1f:2d:d2:42:5d: 6a:f4:2f:0f:3e:68:06:8b:6b:d6:8f:ff:65:7c:fd: 52:d1:4a:c5:6c:2c:44:27:41:d4:bc:4d:26:98:b5: a6:91:c3:4f:87:e1:d3:27:11:9a:64:7d:71:fb:12: 59:36:ff:d0:f3:e2:a0:91:cb:56:84:7d:22:e8:62: 63:e2:44:1f:ca:f0:80:01:0f:88:43:be:44:7c:5e: 26:f1:96:16:8a:c2:eb:4c:96:3d:ac:10:3c:cd:4e: 85:cd:ee:4f:fc:46:e8:11:07:c5:3b:fe:c6:cf:70: d4:36:75:7a:f2:d3:57:37:a6:58:f6:74:0e:ad:ab: 7a:05:06:2a:4a:96:02:ee:d2:33:4d:f4:f0:72:67: 2a:af:ef:01:c4:00:60:ca:43:74:8c:c6:06:47:f9: 7d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:9a40::/48 Signature Algorithm: sha256WithRSAEncryption 9b:25:0e:69:22:9d:04:72:af:00:60:76:e3:bc:27:55:fe:6f: 0f:3e:9b:72:48:54:af:88:2f:56:c6:1f:1e:ec:86:3a:14:03: be:d2:ff:ed:e1:8b:bf:76:c2:65:d9:27:14:06:93:e5:a8:69: 26:35:7f:26:50:4b:67:f1:dc:2b:24:e2:56:0e:90:40:0b:f1: 53:05:36:d7:7a:18:f4:28:5d:ec:50:7d:89:e4:37:85:ef:85: f5:f6:30:dd:7a:be:14:62:b1:02:66:52:46:e9:f8:cb:85:50: c1:e9:69:e4:63:9e:4b:81:64:5d:71:11:58:be:e4:64:36:3e: 04:da:4f:3a:e1:1b:34:06:6c:44:8e:62:6f:93:c0:73:6c:a9: f2:3e:b4:3d:b1:94:3a:ce:8e:4c:3e:a7:ab:dd:ea:a9:c3:5f: d9:19:56:55:d5:3e:db:cf:ac:42:cc:9e:fd:d4:3f:7c:a3:a3: 22:e8:be:e7:d0:db:4f:38:de:20:9d:9e:5e:98:98:ff:dd:4d: 65:6b:90:8e:35:cb:eb:d1:50:14:66:70:37:db:2f:65:fa:d9: 83:6f:06:0e:bb:19:3d:df:26:fe:9f:f0:c7:e3:fb:d4:64:f7: 17:10:9e:23:d0:ae:6b:e7:25:23:be:8f:32:72:74:2e:09:81: 9a:70:f9:3a -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUHaAtaJ8Wi8pvw2UtjPTaO2w5fZ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIwNDA3NDE1OFoX DTI1MTIwMzA3NDY1OFowMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1 NjY5NUNBQkU5Q0U3RkRGNUYyNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOKIuujV3hN52meMjjzMBvfB3tHOb3XVIZOLLx1QJeXrkZxcCUR7X8xjwUjX sPZl2YEhrxCupmHpSiW/alFzmWIbRmb6l9eyJNFy8/NFxN0pNokO9+sbHsYFAAsu wQumdqjaZR8t0kJdavQvDz5oBotr1o//ZXz9UtFKxWwsRCdB1LxNJpi1ppHDT4fh 0ycRmmR9cfsSWTb/0PPioJHLVoR9IuhiY+JEH8rwgAEPiEO+RHxeJvGWForC60yW PawQPM1Ohc3uT/xG6BEHxTv+xs9w1DZ1evLTVzemWPZ0Dq2regUGKkqWAu7SM030 8HJnKq/vAcQAYMpDdIzGBkf5fdsCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH6N4VSeidS0gLVWaVyr6c5/318kMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zM2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzZGMwMzRm LTM4MjMtNDhhZi05NTNkLWFhYTg3M2IwZmI2YS8xLzdFOERFMTU0OUU4OUQ0QjQ4 MEI1NTY2OTVDQUJFOUNFN0ZERjVGMjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ30mkAwDQYJKoZIhvcNAQELBQADggEBAJslDmkinQRyrwBgduO8J1X+bw8+ m3JIVK+IL1bGHx7shjoUA77S/+3hi792wmXZJxQGk+WoaSY1fyZQS2fx3Csk4lYO kEAL8VMFNtd6GPQoXexQfYnkN4XvhfX2MN16vhRisQJmUkbp+MuFUMHpaeRjnkuB ZF1xEVi+5GQ2PgTaTzrhGzQGbESOYm+TwHNsqfI+tD2xlDrOjkw+p6vd6qnDX9kZ VlXVPtvPrELMnv3UP3yjoyLovufQ20843iCdnl6YmP/dTWVrkI41y+vRUBRmcDfb L2X62YNvBg67GT3fJv6f8Mfj+9Rk9xcQniPQrmvnJSO+jzJydC4JgZpw+To= -----END CERTIFICATE-----Generated at Sat Feb 22 15:04:56 2025 by rpki-client