$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer File: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer (raw, json) Hash identifier: xYMClwYscLys3ZFTWax8SBW9JerRBlmhfDop+PVtoTc= Subject key identifier: C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 427CF9E2AE1A345E172AC69F85000298D05198D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft caRepository: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 13 Nov 2023 07:00:21 +0000 Certificate not after: Mon 11 Nov 2024 07:05:21 +0000 Subordinate resources: IP: 103.144.128.0/23 IP: 2405:6d40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 00:20:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7c:f9:e2:ae:1a:34:5e:17:2a:c6:9f:85:00:02:98:d0:51:98:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 13 07:00:21 2023 GMT Not After : Nov 11 07:05:21 2024 GMT Subject: CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:6a:7b:c6:a6:3d:e0:72:74:c0:65:f4:76: ae:aa:fb:01:4c:aa:a9:9d:03:8b:1c:d7:13:58:7a: fb:83:a8:de:56:b9:80:bb:b7:95:99:12:e4:2d:d4: 85:05:dd:b7:ab:39:cc:94:16:f1:7e:5a:5f:a0:94: 97:d8:a1:ab:4b:a9:30:c4:a1:84:e3:7e:38:04:22: de:72:8a:6b:24:f2:9a:7f:d0:f1:0d:fa:68:1e:0d: cc:77:0b:04:46:6c:87:26:96:37:df:83:92:c7:e3: fc:2e:9a:c9:8a:dd:ef:8d:63:6a:85:03:10:5d:b7: f8:23:61:88:d8:a8:c8:a6:4b:e8:8f:96:da:5c:6a: f8:bd:8a:e1:d0:8f:a0:5b:ce:e4:29:fc:71:73:13: 85:d2:66:d9:fa:09:78:81:ba:e3:17:ed:91:22:6c: d1:13:6a:b1:93:b8:73:e1:ea:94:65:ca:9d:84:07: ef:fa:bd:6c:4d:84:94:12:61:40:18:ef:40:83:7e: d9:53:fb:8a:c2:e3:de:ee:23:24:46:5a:46:4f:07: d7:e6:fd:70:0b:f9:09:bc:32:4d:54:ed:d3:f6:1e: c3:ee:27:ce:07:1e:67:f3:9e:e7:c5:d9:e7:19:77: 81:51:9c:76:ef:f9:1a:97:fc:44:7e:38:23:b4:9b: ab:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.128.0/23 IPv6: 2405:6d40::/32 Signature Algorithm: sha256WithRSAEncryption 40:09:fc:59:de:58:2f:cd:d3:70:ed:13:11:60:33:3f:93:f2: d6:8e:25:9f:e8:92:ef:28:6f:ea:6e:a8:fa:dc:52:d4:92:2e: 11:bc:8b:36:a9:5c:fe:03:69:48:0a:e3:44:7f:b0:06:59:5a: 5a:45:9e:dd:5d:18:93:d0:f6:f3:7f:12:81:86:c2:90:87:26: 74:6a:6b:66:e5:29:30:09:84:ca:f1:9b:d4:29:49:43:33:8b: 98:35:e5:8f:82:55:11:5e:bf:54:be:00:e5:5f:c6:b5:00:f7: 50:9e:ad:76:bc:b0:5e:fc:02:ed:41:3e:e3:f8:5d:aa:bb:42: 66:6c:75:b0:12:11:d7:28:ff:55:1b:34:68:ca:a8:4b:b2:4c: 25:fe:9d:a3:64:5f:4b:51:48:cf:90:cc:3c:8e:0a:03:b4:c7: cd:f5:31:d9:8d:f2:88:d0:06:7d:a8:f5:e4:8c:d1:3d:09:b8: d3:ec:6f:f9:d2:24:9c:9a:bf:2d:96:86:44:3c:b7:0e:33:07: 6b:00:e9:18:8c:57:e4:04:0f:3d:21:c6:79:63:bd:57:c7:15: 55:53:29:48:28:93:c4:1e:0e:ff:be:93:d7:70:c0:d7:5a:65: e9:98:42:6a:67:52:ea:7e:f3:bc:66:a4:99:25:aa:f6:5c:b0: d7:5c:3b:3f -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUQnz54q4aNF4XKsafhQACmNBRmNgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTExMzA3MDAyMVoX DTI0MTExMTA3MDUyMVowMzExMC8GA1UEAxMoQzdGM0Y3QUM2NDhDNjA3M0M3RkU3 MzYyNzFBMUE4RTcyNzc5NjJCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANHKanvGpj3gcnTAZfR2rqr7AUyqqZ0DixzXE1h6+4Oo3la5gLu3lZkS5C3U hQXdt6s5zJQW8X5aX6CUl9ihq0upMMShhON+OAQi3nKKayTymn/Q8Q36aB4NzHcL BEZshyaWN9+Dksfj/C6ayYrd741jaoUDEF23+CNhiNioyKZL6I+W2lxq+L2K4dCP oFvO5Cn8cXMThdJm2foJeIG64xftkSJs0RNqsZO4c+HqlGXKnYQH7/q9bE2ElBJh QBjvQIN+2VP7isLj3u4jJEZaRk8H1+b9cAv5CbwyTVTt0/Yew+4nzgceZ/Oe58XZ 5xl3gVGcdu/5Gpf8RH44I7SbqxsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMfz96xkjGBzx/5zYnGhqOcneWK3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lOWY1NzVkYi1jNzM4LTRiOGUtYjM2YS02YjAyMGM2Njg0OWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5ZjU3NWRi LWM3MzgtNGI4ZS1iMzZhLTZiMDIwYzY2ODQ5ZC8wL0M3RjNGN0FDNjQ4QzYwNzND N0ZFNzM2MjcxQTFBOEU3Mjc3OTYyQjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnkIAwDQQCAAIwBwMFACQFbUAwDQYJKoZIhvcNAQELBQADggEBAEAJ/FneWC/N 03DtExFgMz+T8taOJZ/oku8ob+puqPrcUtSSLhG8izapXP4DaUgK40R/sAZZWlpF nt1dGJPQ9vN/EoGGwpCHJnRqa2blKTAJhMrxm9QpSUMzi5g15Y+CVRFev1S+AOVf xrUA91CerXa8sF78Au1BPuP4Xaq7QmZsdbASEdco/1UbNGjKqEuyTCX+naNkX0tR SM+QzDyOCgO0x831MdmN8ojQBn2o9eSM0T0JuNPsb/nSJJyavy2WhkQ8tw4zB2sA 6RiMV+QEDz0hxnljvVfHFVVTKUgok8QeDv++k9dwwNdaZemYQmpnUup+87xmpJkl qvZcsNdcOz8= -----END CERTIFICATE-----Generated at Thu May 9 00:37:10 2024 by rpki-client on console-fra.rpki-client.org