$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer File: E7953AD51AF5D89FB7129E253DEEFE8072247264.cer (raw, json) Hash identifier: SvA1uU2hNFiBaHCukn9qm+i5ikMkAVgaK4eRp1yZgSA= Subject key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6E430685EF77A2440E5CEDDD805FDCE16E710412 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft caRepository: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 18 Dec 2024 17:16:52 +0000 Certificate not after: Wed 17 Dec 2025 17:21:52 +0000 Subordinate resources: IP: 103.66.62.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:43:06:85:ef:77:a2:44:0e:5c:ed:dd:80:5f:dc:e1:6e:71:04:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 18 17:16:52 2024 GMT Not After : Dec 17 17:21:52 2025 GMT Subject: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:05:45:26:8c:78:e5:51:c0:6e:6b:ea:0c:13: 52:6e:5b:92:a4:5e:c8:67:5f:78:54:51:ee:9f:9a: b8:e8:12:8e:95:dd:47:71:3f:4d:b4:ec:db:5a:b8: 4d:40:96:2b:9d:e0:b3:5b:27:44:f1:db:e8:4f:f6: a1:bf:c1:ef:97:ee:4c:cf:83:0d:52:0b:c9:7a:fa: 6f:b0:62:40:2e:b7:aa:4c:9f:8d:0a:a1:19:e7:cc: 34:66:38:fd:fb:81:9c:ee:e2:aa:9e:bd:08:7a:2c: 7c:89:94:fe:81:8c:12:62:bc:3e:e8:a4:63:d9:f4: 08:2b:0e:45:c9:a4:2b:40:18:9d:c4:1b:e3:77:00: c9:d8:9e:a6:08:31:bb:80:27:99:91:4a:66:13:73: 2f:04:74:7d:3f:1e:d6:ea:6f:b2:33:9d:1c:cd:86: 33:6c:ba:d6:05:f5:b6:1a:9c:d8:63:07:a7:7c:99: e3:05:f8:27:76:a0:16:cd:9f:75:84:5a:bb:a0:12: 8f:cf:18:02:2b:33:ac:39:b4:b5:76:a0:06:93:4e: 60:d1:02:0c:14:c0:6d:f0:6e:9c:5d:93:ff:80:49: 10:b1:e0:86:5c:09:18:39:90:ff:6b:63:4e:07:1a: 64:03:f8:2c:ba:71:d2:e1:a2:70:73:69:f4:c6:42: 66:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.66.62.0/23 Signature Algorithm: sha256WithRSAEncryption 39:08:90:d5:f2:e0:4a:1a:c7:77:3f:ff:39:f1:d5:62:51:0b: 6b:ce:95:3b:93:d6:09:b3:21:06:d7:7d:9f:9d:51:da:dc:ba: 80:b5:1b:82:c3:27:70:02:71:37:c0:27:f3:16:ce:2b:0f:e2: 96:84:7b:27:93:f6:9d:0e:78:eb:1f:c1:b9:3c:eb:27:f4:5e: 31:0a:46:bc:5e:d3:8e:4c:74:fc:e1:8c:14:0e:16:f2:62:c6: 25:4e:b7:83:76:01:e7:f5:81:55:40:a7:58:a9:f9:ee:7c:9e: 9b:b3:e5:e0:25:24:f0:cf:5d:44:bd:64:0c:01:26:f6:35:4b: c5:cf:45:71:c0:8b:6f:18:a9:62:f0:04:55:32:4f:f3:4a:ff: 3c:0d:d3:09:e6:12:8d:07:16:ee:88:d6:1e:5f:2b:a6:a9:28: 96:c9:ef:b8:e7:69:e3:3a:7b:b4:47:f0:9b:e0:40:f2:c4:56: b5:9d:f9:7a:4d:2a:7d:2f:cd:18:2c:13:21:a2:91:0b:59:75: c1:05:d1:d0:7a:01:11:e1:6d:84:60:cc:29:50:50:1b:82:35: cf:67:cf:32:2f:9c:11:7b:80:f2:bf:93:58:10:be:b5:39:f4: 96:88:f8:64:f6:83:19:2a:29:f8:8d:49:66:ba:f4:78:98:db: fe:28:91:a3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbkMGhe93okQOXO3dgF/c4W5xBBIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxODE3MTY1MloX DTI1MTIxNzE3MjE1MlowMzExMC8GA1UEAxMoRTc5NTNBRDUxQUY1RDg5RkI3MTI5 RTI1M0RFRUZFODA3MjI0NzI2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANgFRSaMeOVRwG5r6gwTUm5bkqReyGdfeFRR7p+auOgSjpXdR3E/TbTs21q4 TUCWK53gs1snRPHb6E/2ob/B75fuTM+DDVILyXr6b7BiQC63qkyfjQqhGefMNGY4 /fuBnO7iqp69CHosfImU/oGMEmK8PuikY9n0CCsORcmkK0AYncQb43cAydiepggx u4AnmZFKZhNzLwR0fT8e1upvsjOdHM2GM2y61gX1thqc2GMHp3yZ4wX4J3agFs2f dYRau6ASj88YAiszrDm0tXagBpNOYNECDBTAbfBunF2T/4BJELHghlwJGDmQ/2tj TgcaZAP4LLpx0uGicHNp9MZCZlkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOeVOtUa9diftxKeJT3u/oByJHJkMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hYmE5MDk0NC02NTZkLTRhYTctOTE3My01OTEyODA4MzNmODEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FiYTkwOTQ0 LTY1NmQtNGFhNy05MTczLTU5MTI4MDgzM2Y4MS8wL0U3OTUzQUQ1MUFGNUQ4OUZC NzEyOUUyNTNERUVGRTgwNzIyNDcyNjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnQj4wDQYJKoZIhvcNAQELBQADggEBADkIkNXy4Eoax3c//znx1WJRC2vOlTuT 1gmzIQbXfZ+dUdrcuoC1G4LDJ3ACcTfAJ/MWzisP4paEeyeT9p0OeOsfwbk86yf0 XjEKRrxe045MdPzhjBQOFvJixiVOt4N2Aef1gVVAp1ip+e58npuz5eAlJPDPXUS9 ZAwBJvY1S8XPRXHAi28YqWLwBFUyT/NK/zwN0wnmEo0HFu6I1h5fK6apKJbJ77jn aeM6e7RH8JvgQPLEVrWd+XpNKn0vzRgsEyGikQtZdcEF0dB6ARHhbYRgzClQUBuC Nc9nzzIvnBF7gPK/k1gQvrU59JaI+GT2gxkqKfiNSWa69HiY2/4okaM= -----END CERTIFICATE-----Generated at Tue Apr 8 20:54:16 2025 by rpki-client