$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer File: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer (raw, json) Hash identifier: eQAEifkAUcIwCKlCtg6aw4wHsZk5YFoi6RyNqfRy9P0= Subject key identifier: F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 579ADBE2C696E389A06FCC3D4B914D5CD6D9ADE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft caRepository: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 10 Sep 2024 08:52:54 +0000 Certificate not after: Tue 09 Sep 2025 08:57:54 +0000 Subordinate resources: IP: 103.121.58.0/24 IP: 2001:df6:3f00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:9a:db:e2:c6:96:e3:89:a0:6f:cc:3d:4b:91:4d:5c:d6:d9:ad:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 10 08:52:54 2024 GMT Not After : Sep 9 08:57:54 2025 GMT Subject: CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e7:20:39:49:02:8a:4a:fe:4e:c1:31:e1:9f: 46:d2:d0:d8:a4:c7:bb:df:fd:e1:fc:8b:88:e8:e5: 47:9f:b1:aa:92:b8:a1:2c:0a:48:f6:a4:53:19:36: 97:df:67:db:f9:87:2d:2c:be:ae:22:3b:22:c3:02: 36:cd:c3:69:e8:11:18:9a:95:fa:ac:62:d5:22:01: 13:c7:57:1e:94:04:86:3c:6e:18:72:5a:60:29:db: ef:d2:06:94:a3:3d:32:b1:5b:98:69:a4:76:ef:d9: 82:55:dc:fb:3e:77:91:60:0e:56:a4:9d:a9:6f:cc: 76:1d:89:48:1b:fe:08:b9:01:76:8b:5f:1a:5d:f1: e0:cb:4b:3a:1b:c9:59:b4:8d:d5:a9:77:f4:4a:09: 17:af:a1:64:12:01:28:34:77:6c:a4:ca:32:e4:d5: 42:50:2a:fb:31:b7:06:97:23:e1:4e:7f:0e:97:0f: 06:65:d6:47:92:11:0b:32:7a:74:8d:4e:19:78:cf: 50:c4:5a:c2:0d:30:56:de:d1:64:a7:21:97:05:aa: e8:60:d1:4d:8f:ae:29:51:4e:8c:af:41:58:ac:0a: 16:db:a2:56:90:c3:b0:cb:40:3f:a7:16:94:90:b5: cd:ff:bf:44:21:4a:6d:71:1a:87:01:5a:26:e5:be: 81:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.58.0/24 IPv6: 2001:df6:3f00::/48 Signature Algorithm: sha256WithRSAEncryption 42:9c:48:8c:78:eb:19:2e:1c:00:bb:bd:81:6b:9c:8e:09:f0: df:83:82:b7:f1:db:8c:76:d9:b6:33:6f:2b:d4:5c:6b:f1:f7: 70:f9:19:e8:a7:e3:94:af:c5:aa:98:d0:e2:82:91:63:45:44: 94:35:89:b7:99:bf:b1:06:21:0d:56:0a:c0:d2:64:2d:a3:64: db:a1:f4:e0:0b:c2:bc:5a:63:d9:9f:84:4a:41:d4:9d:8c:9d: 39:57:11:4d:a8:03:f2:80:82:43:fb:aa:d8:0b:24:9f:7e:8a: de:a2:c6:6d:b4:31:5e:48:01:81:c7:b2:0f:d5:86:63:61:d6: 02:a4:8a:6b:1f:c6:53:f2:a0:2e:e9:f7:7b:65:5d:32:d7:3c: 9a:ac:fd:f4:9b:11:60:83:71:55:54:ce:4b:1b:7a:ee:bb:13: 52:34:da:be:62:55:c5:a6:c5:24:76:6a:35:e6:d2:42:f6:57: 9d:7d:a7:5d:56:86:1a:50:33:b6:d0:16:4b:bd:e8:ad:e1:f1: c0:69:e7:ef:c0:30:b1:9d:f2:bb:71:4a:c0:3f:24:85:3a:55: 73:34:eb:78:b2:5e:eb:99:f0:16:87:43:8b:84:50:68:c8:ec: 66:89:ed:cf:a0:33:ea:26:61:fe:cb:79:7d:22:e4:59:c4:ec: e9:c4:90:e1 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUV5rb4saW44mgb8w9S5FNXNbZreAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkxMDA4NTI1NFoX DTI1MDkwOTA4NTc1NFowMzExMC8GA1UEAxMoRjA3RkZGNDcyRUQ5QzcwMDczQkM5 ODg2NUE0QTVBNkMyQjBFQTM1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOHnIDlJAopK/k7BMeGfRtLQ2KTHu9/94fyLiOjlR5+xqpK4oSwKSPakUxk2 l99n2/mHLSy+riI7IsMCNs3DaegRGJqV+qxi1SIBE8dXHpQEhjxuGHJaYCnb79IG lKM9MrFbmGmkdu/ZglXc+z53kWAOVqSdqW/Mdh2JSBv+CLkBdotfGl3x4MtLOhvJ WbSN1al39EoJF6+hZBIBKDR3bKTKMuTVQlAq+zG3Bpcj4U5/DpcPBmXWR5IRCzJ6 dI1OGXjPUMRawg0wVt7RZKchlwWq6GDRTY+uKVFOjK9BWKwKFtuiVpDDsMtAP6cW lJC1zf+/RCFKbXEahwFaJuW+gZ0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPB//0cu2ccAc7yYhlpKWmwrDqNeMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MjRkYjU2Ny0zM2E4LTRjZTAtYmNmZi1jYjBmMGE4NWMyMzkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyNGRiNTY3 LTMzYTgtNGNlMC1iY2ZmLWNiMGYwYTg1YzIzOS8wL0YwN0ZGRjQ3MkVEOUM3MDA3 M0JDOTg4NjVBNEE1QTZDMkIwRUEzNUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABneTowDwQCAAIwCQMHACABDfY/ADANBgkqhkiG9w0BAQsFAAOCAQEAQpxIjHjr GS4cALu9gWucjgnw34OCt/HbjHbZtjNvK9Rca/H3cPkZ6KfjlK/FqpjQ4oKRY0VE lDWJt5m/sQYhDVYKwNJkLaNk26H04AvCvFpj2Z+ESkHUnYydOVcRTagD8oCCQ/uq 2Askn36K3qLGbbQxXkgBgceyD9WGY2HWAqSKax/GU/KgLun3e2VdMtc8mqz99JsR YINxVVTOSxt67rsTUjTavmJVxabFJHZqNebSQvZXnX2nXVaGGlAzttAWS73oreHx wGnn78AwsZ3yu3FKwD8khTpVczTreLJe65nwFodDi4RQaMjsZontz6Az6iZh/st5 fSLkWcTs6cSQ4Q== -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:53 2024 by rpki-client on console-ams.rpki-client.org