$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer File: C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer (raw, json) Hash identifier: gvzJZhbs5MBDBfRsic+V7T4ixpkjgEp2EcGti8u2l8o= Subject key identifier: C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2D8DAD5019BA5CCBDBF7C0A5A88ED4A7C391A9AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft caRepository: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 07 Nov 2023 15:11:46 +0000 Certificate not after: Tue 05 Nov 2024 15:16:46 +0000 Subordinate resources: IP: 103.207.236.0/22 IP: 2404:3580::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:8d:ad:50:19:ba:5c:cb:db:f7:c0:a5:a8:8e:d4:a7:c3:91:a9:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 7 15:11:46 2023 GMT Not After : Nov 5 15:16:46 2024 GMT Subject: CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ec:bf:23:42:3d:7e:9a:a2:13:fa:b9:d0:cc: 7f:6b:c7:8c:a2:8d:25:01:bb:bf:54:05:bf:70:5d: ad:ec:56:4b:79:80:d2:54:87:b1:4f:05:34:e7:b4: 9c:fb:f1:0b:8b:73:a7:aa:13:59:62:7a:e0:93:d3: 13:37:ff:da:d1:4d:8b:ac:6d:07:6c:56:56:73:2f: cf:80:70:1c:8c:20:a4:ee:bd:90:78:00:99:21:2c: 5f:e5:cf:cd:09:79:65:87:a6:58:84:26:23:9b:93: b9:e5:1b:37:4c:7d:4c:14:bf:47:a3:15:27:82:90: 2a:6b:0f:6b:b0:59:52:d3:1c:a5:57:b9:f2:50:a5: c0:5b:eb:f3:fd:19:25:9a:56:13:84:9a:14:6c:34: d8:88:0a:d8:09:c4:4a:ca:a9:72:3a:86:68:c3:8e: df:67:bf:6f:59:40:2f:01:2c:26:c3:b9:02:f7:1d: 58:b8:34:0b:19:70:d7:49:1f:69:35:8c:fa:95:b5: 67:24:ee:dd:e0:51:54:35:95:bf:e9:c6:b4:b0:28: 63:7f:40:0e:b4:c5:69:63:50:20:89:f9:63:42:a4: 34:8b:ff:89:7c:fb:6f:df:9b:11:78:78:5f:31:f2: cb:9b:6b:ba:73:c4:cf:56:c0:fb:55:78:a9:19:6c: 29:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.207.236.0/22 IPv6: 2404:3580::/32 Signature Algorithm: sha256WithRSAEncryption 38:98:99:99:ac:39:2a:4d:04:f0:6b:b2:c7:7d:1d:e3:77:0b: f7:92:f7:3a:f8:fd:5a:e4:a9:1b:c8:07:4f:65:99:1f:22:90: 7f:84:15:7e:99:06:2f:68:53:4c:ae:2f:ed:b8:a0:52:63:5d: b0:49:d6:bc:6c:9d:87:be:da:89:a7:f8:49:01:a7:7e:d3:c1: b6:c9:2c:fd:e4:5a:99:84:bd:c0:d2:ea:81:0d:e0:64:59:5c: c3:85:af:ea:fc:44:52:6e:3f:0c:58:50:35:2d:79:f5:62:95: 4a:bb:b0:57:04:bf:2c:8a:e2:a4:b7:d4:4f:6f:a6:ae:d5:b1: 4d:05:51:ca:11:b8:8b:23:47:d2:6a:b4:18:51:4b:62:96:d6: 25:8f:40:f7:1a:22:d2:a9:d2:51:3c:be:37:0f:6a:3a:23:12: fd:89:82:cb:0c:fd:d9:fd:67:36:02:4e:ad:e1:e4:87:9d:5a: 5e:10:a5:d5:1f:2d:a9:0b:ec:47:73:f8:76:90:85:08:3b:93: ed:5d:3c:5d:68:c5:ac:f9:e5:4d:2f:74:03:e3:3f:ae:4b:cf: a5:4e:27:21:d4:41:54:e1:99:aa:79:eb:31:b3:d6:4d:6e:b6: 76:82:e9:a9:04:b4:41:38:4d:f6:5f:da:81:b6:42:8b:2f:6d: 22:ba:94:76 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIULY2tUBm6XMvb98ClqI7Up8ORqa4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTEwNzE1MTE0NloX DTI0MTEwNTE1MTY0NlowMzExMC8GA1UEAxMoQzdGNUFBNzJEQjg3MEUxNjFCNjJB Q0E5MjUwQUQ5OEFBMTEwQTAxNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK7svyNCPX6aohP6udDMf2vHjKKNJQG7v1QFv3BdrexWS3mA0lSHsU8FNOe0 nPvxC4tzp6oTWWJ64JPTEzf/2tFNi6xtB2xWVnMvz4BwHIwgpO69kHgAmSEsX+XP zQl5ZYemWIQmI5uTueUbN0x9TBS/R6MVJ4KQKmsPa7BZUtMcpVe58lClwFvr8/0Z JZpWE4SaFGw02IgK2AnESsqpcjqGaMOO32e/b1lALwEsJsO5AvcdWLg0Cxlw10kf aTWM+pW1ZyTu3eBRVDWVv+nGtLAoY39ADrTFaWNQIIn5Y0KkNIv/iXz7b9+bEXh4 XzHyy5trunPEz1bA+1V4qRlsKQMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMf1qnLbhw4WG2KsqSUK2YqhEKAUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80YjBlN2Y4ZS1jMjlmLTRlNmItYWQwYS05OTU3ZmJkNTY5NTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiMGU3Zjhl LWMyOWYtNGU2Yi1hZDBhLTk5NTdmYmQ1Njk1My8wL0M3RjVBQTcyREI4NzBFMTYx QjYyQUNBOTI1MEFEOThBQTExMEEwMTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnz+wwDQQCAAIwBwMFACQENYAwDQYJKoZIhvcNAQELBQADggEBADiYmZmsOSpN BPBrssd9HeN3C/eS9zr4/VrkqRvIB09lmR8ikH+EFX6ZBi9oU0yuL+24oFJjXbBJ 1rxsnYe+2omn+EkBp37TwbbJLP3kWpmEvcDS6oEN4GRZXMOFr+r8RFJuPwxYUDUt efVilUq7sFcEvyyK4qS31E9vpq7VsU0FUcoRuIsjR9JqtBhRS2KW1iWPQPcaItKp 0lE8vjcPajojEv2JgssM/dn9ZzYCTq3h5IedWl4QpdUfLakL7Edz+HaQhQg7k+1d PF1oxaz55U0vdAPjP65Lz6VOJyHUQVThmap56zGz1k1utnaC6akEtEE4TfZf2oG2 QosvbSK6lHY= -----END CERTIFICATE-----Generated at Wed May 8 18:12:20 2024 by rpki-client on console-fra.rpki-client.org