$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer (raw, json) Hash identifier: GGYCEYWVOUCO8JUYR6nUI6mpBIMr38W2wXVCNgVh+j8= Subject key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 460EBF2115B049FF1435F41896C8E0D688573344 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft caRepository: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 13 Jul 2024 20:56:18 +0000 Certificate not after: Sat 12 Jul 2025 21:01:18 +0000 Subordinate resources: IP: 103.164.172.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:0e:bf:21:15:b0:49:ff:14:35:f4:18:96:c8:e0:d6:88:57:33:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jul 13 20:56:18 2024 GMT Not After : Jul 12 21:01:18 2025 GMT Subject: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:3e:6f:2e:ea:d4:64:4d:06:08:4b:72:d1: 31:fd:53:90:e3:aa:82:24:03:3d:13:ce:61:2c:b1: 1e:94:b0:7f:cf:06:b1:9c:cd:fa:32:0b:50:b0:21: e4:ca:52:d7:e1:f5:5e:fe:f3:f4:37:34:98:91:a2: ed:86:85:1b:a9:7a:d3:c7:8f:87:53:80:1d:e1:a3: e7:6e:8a:04:41:af:28:bd:8c:eb:b2:1a:d6:80:9c: 04:8d:06:ad:40:9b:06:4e:0b:76:4f:bc:48:9b:f2: ca:3e:1e:b6:7b:61:9d:f0:ed:c0:88:02:4f:11:d1: 92:92:11:10:bd:5a:f8:9a:de:6a:ee:67:ea:dd:39: a7:79:d4:71:9f:85:13:55:ae:86:9a:fd:7c:57:e6: 51:95:d5:18:f3:d8:b4:7b:f0:71:97:65:f9:56:03: af:15:be:20:26:6a:93:ef:7d:35:9e:03:ad:f8:c0: 61:11:0d:39:2c:99:d9:b2:10:d5:c4:fd:f2:1e:1e: 5b:f1:81:51:e6:d9:0b:34:e9:8e:9e:6b:fb:d2:0a: 67:f3:be:53:ce:da:b8:72:f5:5c:12:98:21:f4:3b: 21:dd:d6:a6:6d:a5:9f:ee:f8:6e:6a:c5:e8:36:2b: b1:14:11:92:e2:ca:46:31:aa:03:ef:5f:4b:8a:00: 09:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.172.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:ba:06:a9:cc:b3:41:34:a6:00:2d:dd:c1:7a:29:51:74:5a: 0c:e2:d9:54:49:35:54:0c:70:1c:ad:65:da:2f:38:a3:de:9c: 52:44:50:20:3b:da:f3:4c:9e:17:0f:bf:49:f6:d6:3c:7f:05: a7:68:6b:9c:6f:a7:67:a7:4b:69:67:bd:8c:85:21:24:96:8f: 8a:ed:ec:37:c1:65:6d:59:b5:70:30:b2:51:25:a3:9d:d1:39: d1:73:ac:14:a5:15:1a:3f:b7:21:2b:62:d4:6e:4a:65:db:13: 43:70:22:13:65:a8:62:64:67:9a:f1:9b:70:00:0b:84:bd:c7: f7:89:eb:a3:7f:b5:09:0e:43:8a:fb:8b:93:93:ec:b7:31:d1: 15:51:ea:c3:d1:d4:59:33:8e:9d:8c:61:df:36:0f:e9:af:35: 92:57:5b:f1:73:95:ec:25:79:6e:52:05:87:61:3c:02:19:6a: 33:c0:53:55:a2:26:15:ef:2e:f2:73:1e:1c:b8:17:35:ea:04: 40:d2:9e:46:ca:89:1e:7e:cb:7d:ce:9c:81:ce:b7:96:44:21: 26:e1:8e:6b:40:11:0c:14:99:aa:3e:25:9e:f0:e0:74:47:21: c6:71:78:b9:d5:7a:14:28:63:2c:9d:c7:c8:dc:f2:bd:bb:fc: 8e:7f:64:b4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURg6/IRWwSf8UNfQYlsjg1ohXM0QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcxMzIwNTYxOFoX DTI1MDcxMjIxMDExOFowMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZB MzczOTlGMjBERUExOUMyRUYyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/dPm8u6tRkTQYIS3LRMf1TkOOqgiQDPRPOYSyxHpSwf88GsZzN+jILULAh 5MpS1+H1Xv7z9Dc0mJGi7YaFG6l608ePh1OAHeGj526KBEGvKL2M67Ia1oCcBI0G rUCbBk4Ldk+8SJvyyj4etnthnfDtwIgCTxHRkpIREL1a+Jreau5n6t05p3nUcZ+F E1Wuhpr9fFfmUZXVGPPYtHvwcZdl+VYDrxW+ICZqk+99NZ4DrfjAYRENOSyZ2bIQ 1cT98h4eW/GBUebZCzTpjp5r+9IKZ/O+U87auHL1XBKYIfQ7Id3Wpm2ln+74bmrF 6DYrsRQRkuLKRjGqA+9fS4oACXkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNeFKvBd+7l6zUajc5nyDeoZwu8sMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlODlmMWI0 LWVmNjMtNDUzOS04NDU1LTk4YzY3MTk5NWNjZi8wL0Q3ODUyQUYwNURGQkI5N0FD RDQ2QTM3Mzk5RjIwREVBMTlDMkVGMkMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnpKwwDQYJKoZIhvcNAQELBQADggEBAHq6BqnMs0E0pgAt3cF6KVF0Wgzi2VRJ NVQMcBytZdovOKPenFJEUCA72vNMnhcPv0n21jx/Badoa5xvp2enS2lnvYyFISSW j4rt7DfBZW1ZtXAwslElo53ROdFzrBSlFRo/tyErYtRuSmXbE0NwIhNlqGJkZ5rx m3AAC4S9x/eJ66N/tQkOQ4r7i5OT7Lcx0RVR6sPR1Fkzjp2MYd82D+mvNZJXW/Fz lewleW5SBYdhPAIZajPAU1WiJhXvLvJzHhy4FzXqBEDSnkbKiR5+y33OnIHOt5ZE ISbhjmtAEQwUmao+JZ7w4HRHIcZxeLnVehQoYyydx8jc8r27/I5/ZLQ= -----END CERTIFICATE-----Generated at Sun Feb 16 20:41:53 2025 by rpki-client