$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer File: E7D91E7B841DB274E77E823084312F8B78A5C951.cer (raw, json) Hash identifier: cnp9zqupfHhAjOjmI3BHKxCtAugeD0PRckPIz/TdBZg= Subject key identifier: E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1ADC7AA5A9E8DFF9B84BEAC21A1AC3EFFC5F4FF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft caRepository: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 12 Sep 2023 21:59:55 +0000 Certificate not after: Tue 10 Sep 2024 22:04:55 +0000 Subordinate resources: IP: 103.141.238.0/23 IP: 2001:df1:1c80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:dc:7a:a5:a9:e8:df:f9:b8:4b:ea:c2:1a:1a:c3:ef:fc:5f:4f:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 12 21:59:55 2023 GMT Not After : Sep 10 22:04:55 2024 GMT Subject: CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:db:8c:c5:e5:6f:9a:6a:c2:4f:2d:8e:92: 87:7e:87:37:50:84:ef:28:f4:8b:c9:f3:97:f6:13: 42:5b:ec:20:85:95:9e:8e:7c:a0:fd:4d:4b:fa:dc: 74:c1:4e:84:aa:cf:b0:2f:57:7c:d9:98:7e:6b:e2: 14:22:09:11:bc:2a:84:24:ee:b4:f9:1e:33:90:1b: 04:0b:69:cb:34:55:ec:02:20:b8:fd:87:9b:fb:12: 79:07:88:76:10:a2:ee:23:1f:25:5a:27:e9:e9:07: 5e:8b:52:5e:83:58:fe:df:f6:bb:fb:35:a8:dc:32: 4d:01:df:94:c4:16:ac:92:04:5c:25:52:d0:0e:95: af:6a:52:8a:f6:73:a4:d8:09:ac:70:2d:e2:66:ef: ae:9f:8a:60:79:40:f6:a7:2c:a5:df:a8:b0:4a:a3: af:8a:37:aa:f7:a6:1e:4a:4b:8b:ab:e7:38:64:97: 08:c3:d2:83:e3:46:44:4a:db:c7:4e:1d:db:ba:c9: 04:a8:e6:fd:09:23:79:15:8b:f4:44:6e:c6:74:86: 41:69:2d:66:47:c2:d7:d6:e7:a0:8d:a9:a5:34:40: 18:7d:42:30:9e:8d:e1:0c:7c:8c:3d:c9:b2:10:c7: 36:af:47:23:c0:a0:d7:8f:27:ac:f1:65:91:5d:85: fc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.141.238.0/23 IPv6: 2001:df1:1c80::/48 Signature Algorithm: sha256WithRSAEncryption 31:1f:34:e0:c7:a1:fc:cd:67:43:88:1d:71:5c:f2:aa:57:5f: 09:c1:be:2f:6f:33:20:e5:6d:e3:2b:cb:10:98:ab:4f:1f:04: 49:0b:fa:ef:f5:e7:3b:1b:41:6a:75:d4:6b:aa:36:47:6c:4c: c9:64:1a:be:de:dc:e8:e4:5b:64:56:18:85:7f:82:79:a1:c7: 4f:c4:43:24:2e:b1:2b:9d:2c:5d:97:25:83:97:d5:26:49:12: 1c:8f:56:b9:49:43:0e:33:ac:ad:2c:34:00:76:c7:66:18:ef: c3:69:a8:18:a6:64:8f:32:c7:d3:4f:53:24:28:4c:a1:5c:b0: 64:f1:f7:80:84:74:89:a8:f1:78:c5:42:0f:c5:85:d6:b9:b8: 29:78:df:51:4b:18:ed:be:ca:11:f8:55:32:3f:a4:ec:57:9c: 2a:09:92:80:7a:a2:93:ab:df:cd:8a:38:58:ab:3b:9d:47:71: 91:95:c7:15:15:5e:d4:9e:dc:3e:e2:35:05:ba:46:4a:fa:ff: 7a:75:e8:1f:91:75:53:c4:23:e2:a2:7b:0c:47:a7:cd:0b:77: 3d:75:f5:b2:d6:77:b3:7d:a3:4c:ae:fe:b2:3d:58:0a:be:b8: c5:22:7d:75:2e:60:8b:e7:a9:06:d5:0f:43:c1:4b:8c:dc:b0: fb:b5:6a:c1 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUGtx6pano3/m4S+rCGhrD7/xfT/EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkxMjIxNTk1NVoX DTI0MDkxMDIyMDQ1NVowMzExMC8GA1UEAxMoRTdEOTFFN0I4NDFEQjI3NEU3N0U4 MjMwODQzMTJGOEI3OEE1Qzk1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIW24zF5W+aasJPLY6Sh36HN1CE7yj0i8nzl/YTQlvsIIWVno58oP1NS/rc dMFOhKrPsC9XfNmYfmviFCIJEbwqhCTutPkeM5AbBAtpyzRV7AIguP2Hm/sSeQeI dhCi7iMfJVon6ekHXotSXoNY/t/2u/s1qNwyTQHflMQWrJIEXCVS0A6Vr2pSivZz pNgJrHAt4mbvrp+KYHlA9qcspd+osEqjr4o3qvemHkpLi6vnOGSXCMPSg+NGRErb x04d27rJBKjm/QkjeRWL9ERuxnSGQWktZkfC19bnoI2ppTRAGH1CMJ6N4Qx8jD3J shDHNq9HI8Cg148nrPFlkV2F/OcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOfZHnuEHbJ0536CMIQxL4t4pclRMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wYTcwODNhYi0yNzBhLTRiMGEtOGU1NS1hNDVlMWNmMWFmZDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhNzA4M2Fi LTI3MGEtNGIwYS04ZTU1LWE0NWUxY2YxYWZkNS8wL0U3RDkxRTdCODQxREIyNzRF NzdFODIzMDg0MzEyRjhCNzhBNUM5NTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnje4wDwQCAAIwCQMHACABDfEcgDANBgkqhkiG9w0BAQsFAAOCAQEAMR804Meh /M1nQ4gdcVzyqldfCcG+L28zIOVt4yvLEJirTx8ESQv67/XnOxtBanXUa6o2R2xM yWQavt7c6ORbZFYYhX+CeaHHT8RDJC6xK50sXZclg5fVJkkSHI9WuUlDDjOsrSw0 AHbHZhjvw2moGKZkjzLH009TJChMoVywZPH3gIR0iajxeMVCD8WF1rm4KXjfUUsY 7b7KEfhVMj+k7FecKgmSgHqik6vfzYo4WKs7nUdxkZXHFRVe1J7cPuI1BbpGSvr/ enXoH5F1U8Qj4qJ7DEenzQt3PXX1stZ3s32jTK7+sj1YCr64xSJ9dS5gi+epBtUP Q8FLjNyw+7VqwQ== -----END CERTIFICATE-----Generated at Wed May 8 17:45:31 2024 by rpki-client on console-ams.rpki-client.org