$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer (raw, json) Hash identifier: QX9m1WlQbAx1bkGHj61z0x6Yu+uVGf0VFdRE/SW/L3w= Subject key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7D49A32D013448C1F344BF4A1CF41CF6B8D632B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft caRepository: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 22 Mar 2024 14:50:20 +0000 Certificate not after: Fri 21 Mar 2025 14:55:20 +0000 Subordinate resources: IP: 103.185.42.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:49:a3:2d:01:34:48:c1:f3:44:bf:4a:1c:f4:1c:f6:b8:d6:32:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 22 14:50:20 2024 GMT Not After : Mar 21 14:55:20 2025 GMT Subject: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:3c:79:ed:71:ae:9c:28:60:e2:5b:c4:ac: 07:7e:a0:90:29:35:d1:03:77:82:94:9b:8a:8f:92: ff:d4:e6:0d:e1:76:5a:9b:6a:d1:91:b0:a5:3c:79: 03:c5:9b:11:be:58:71:29:1f:cb:a7:c5:e6:58:05: b2:38:d4:a3:55:ac:f3:df:16:f9:fe:0f:09:ee:15: 55:c8:26:08:75:08:ec:6a:89:83:85:1b:f1:df:d8: f1:06:7b:77:7f:12:d2:f3:0c:1e:6a:d9:7e:06:7e: 95:81:4f:02:44:49:15:ce:92:25:17:17:eb:d0:a7: df:a1:e4:3d:03:0f:77:3f:62:42:c5:e6:2e:b7:ac: 65:af:22:29:0e:07:f4:3e:d0:af:d5:97:ac:1a:6e: 2f:dc:92:fe:57:28:f9:11:2e:ea:4e:14:ae:ac:28: b8:68:b4:d8:53:38:a9:21:ec:05:ef:5a:1a:fd:5f: a0:15:7e:85:de:ce:8e:0c:e3:d6:79:04:a6:e4:a3: 1b:9b:fd:af:d3:94:03:e0:b4:1a:dd:26:10:31:57: 2e:72:5e:24:3d:95:f9:0d:02:e1:e5:82:39:9d:04: a8:ae:8a:b9:7c:70:6d:a4:2a:0a:6b:b6:15:b5:e9: 8e:7e:93:55:b0:a8:9d:6f:73:a9:37:44:88:5c:a6: ad:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.42.0/23 Signature Algorithm: sha256WithRSAEncryption 84:18:54:0c:b7:e5:1c:c6:cf:a6:3f:a7:24:95:c2:de:5e:93: f2:78:1a:8a:32:9c:be:f4:0f:64:ae:61:84:94:69:27:d5:52: 0d:6d:b9:d3:6a:17:fe:d2:c1:26:0d:b9:be:1e:50:42:0f:19: b7:0e:91:c0:ac:27:dc:d5:92:0d:81:eb:96:3e:2e:57:eb:6f: bc:2d:ac:1e:01:d8:f2:ed:c6:4d:c9:88:ed:07:35:3b:e5:d3: 27:bf:88:e4:f7:47:f4:89:4e:84:ad:b3:f8:f6:84:29:ec:e0: 40:26:38:d1:7e:ae:1f:3c:ea:d5:58:cd:3a:31:99:6f:fe:ea: 52:fe:24:c5:18:58:69:3b:e1:69:a8:93:87:5e:f5:05:ea:a0: 2f:21:6a:a3:fe:87:52:3a:ca:26:34:93:e2:2b:2d:f1:28:18: 7f:c8:b7:cc:64:7e:90:13:10:b9:b7:45:79:6b:d9:fd:68:2d: d3:57:6b:53:0f:ac:58:11:45:be:07:7a:19:ad:73:17:fe:b1: 2d:4f:07:b6:9c:11:0b:78:39:bb:ea:e7:0a:28:d3:67:c4:48: 3e:fc:2b:8a:a5:67:1b:62:1c:99:6c:cd:23:8c:5c:fb:a7:a7: 6a:e1:54:ad:7b:93:96:e0:64:af:fc:5a:6d:7c:2c:53:c4:de: 59:8b:2c:77 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfUmjLQE0SMHzRL9KHPQc9rjWMrYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDMyMjE0NTAyMFoX DTI1MDMyMTE0NTUyMFowMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRF NUE4MjRFNEFCRUI4NTgyQkFDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKv8PHntca6cKGDiW8SsB36gkCk10QN3gpSbio+S/9TmDeF2Wptq0ZGwpTx5 A8WbEb5YcSkfy6fF5lgFsjjUo1Ws898W+f4PCe4VVcgmCHUI7GqJg4Ub8d/Y8QZ7 d38S0vMMHmrZfgZ+lYFPAkRJFc6SJRcX69Cn36HkPQMPdz9iQsXmLresZa8iKQ4H 9D7Qr9WXrBpuL9yS/lco+REu6k4UrqwouGi02FM4qSHsBe9aGv1foBV+hd7Ojgzj 1nkEpuSjG5v9r9OUA+C0Gt0mEDFXLnJeJD2V+Q0C4eWCOZ0EqK6KuXxwbaQqCmu2 FbXpjn6TVbConW9zqTdEiFymrekCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNfHYSJCZJG4H4TlqCTkq+uFgrrEMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwNTBkY2Mz LTg0ZGQtNDU5NS1iYTJjLWJjNjk5ODk2OTJmMS8wL0Q3Qzc2MTIyNDI2NDkxQjgx Rjg0RTVBODI0RTRBQkVCODU4MkJBQzQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnuSowDQYJKoZIhvcNAQELBQADggEBAIQYVAy35RzGz6Y/pySVwt5ek/J4Gooy nL70D2SuYYSUaSfVUg1tudNqF/7SwSYNub4eUEIPGbcOkcCsJ9zVkg2B65Y+Llfr b7wtrB4B2PLtxk3JiO0HNTvl0ye/iOT3R/SJToSts/j2hCns4EAmONF+rh886tVY zToxmW/+6lL+JMUYWGk74Wmok4de9QXqoC8haqP+h1I6yiY0k+IrLfEoGH/It8xk fpATELm3RXlr2f1oLdNXa1MPrFgRRb4Hehmtcxf+sS1PB7acEQt4Obvq5woo02fE SD78K4qlZxtiHJlszSOMXPunp2rhVK17k5bgZK/8Wm18LFPE3lmLLHc= -----END CERTIFICATE-----Generated at Wed May 8 22:46:46 2024 by rpki-client on console-ams.rpki-client.org