$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer File: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer (raw, json) Hash identifier: 4jMuzFTT1PBccVgq8FFfQQz21T0XqBv1mqp4X2hoJ+w= Subject key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 46292C819F129F4C77E24C1794028FA80A8585 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft caRepository: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 09 Aug 2024 00:42:38 +0000 Certificate not after: Fri 08 Aug 2025 00:47:38 +0000 Subordinate resources: IP: 103.13.204.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:29:2c:81:9f:12:9f:4c:77:e2:4c:17:94:02:8f:a8:0a:85:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 9 00:42:38 2024 GMT Not After : Aug 8 00:47:38 2025 GMT Subject: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ab:ed:ed:ab:72:cf:e5:d0:9e:4f:5c:38:08: 43:55:60:7b:e2:da:0b:15:60:17:88:18:ba:e1:17: 08:b6:86:a6:35:37:6e:e0:e5:e8:fd:33:b5:39:e5: 9d:6f:35:d1:dc:5d:e8:70:ab:8a:59:79:f4:0a:fb: a0:7a:e5:e2:2b:18:84:bc:ff:71:3b:ef:35:64:f1: ac:d1:af:52:a9:3a:a6:8e:d2:ff:2c:46:7f:97:b2: 8f:1c:1b:1f:e8:5f:5c:a1:70:9a:45:6c:b8:ac:cd: 3d:73:94:2c:50:ce:ad:3f:bd:2f:3a:22:c7:2d:30: 84:89:ca:9e:f9:0b:60:0e:8b:c5:34:d3:70:b4:d1: 5c:c1:e5:e0:3d:70:08:81:73:14:3c:47:65:24:7f: 81:17:7a:49:d4:f5:a4:1e:90:b6:26:a9:70:49:31: 54:0d:08:a9:66:d2:e6:ec:8c:4d:11:2f:cd:13:4e: 47:cd:fb:52:d3:d9:b9:a6:56:47:38:b8:79:ad:a3: 2c:9f:ca:71:35:47:e9:87:f7:e3:41:e9:aa:5f:6e: 4e:28:f7:46:c2:fc:34:16:3c:17:4d:63:30:a1:c2: 42:90:84:43:21:83:53:1d:8e:b0:66:5a:bd:78:d2: 35:ca:b9:2e:5e:2d:65:e5:e5:fb:2f:e6:b3:ae:f6: 38:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.204.0/23 Signature Algorithm: sha256WithRSAEncryption 67:d6:30:db:f8:31:11:1b:c5:bc:20:b6:2d:23:48:bc:84:59: 71:59:20:24:d2:4b:16:1f:51:4c:50:e3:a8:43:75:13:bc:8f: a5:54:fe:19:25:34:8b:e7:18:7a:06:10:fa:30:6c:18:b5:d7: 2c:e8:8f:f3:2c:24:1a:2e:9d:d5:80:33:49:1d:9b:62:8a:a8: a2:fb:ce:57:29:e9:2c:a5:f1:b6:59:5a:ae:6b:6c:e2:71:ea: 39:38:0f:bf:ed:83:8c:b0:66:a2:ef:67:bf:fe:b3:de:e7:70: 6a:a8:0d:6e:d3:63:e8:f9:65:d6:c2:3f:05:22:9e:f4:93:0a: b9:58:9d:0d:3f:c9:2a:3b:76:7c:cb:ee:06:a1:99:c6:d0:d9: 27:45:e8:1e:f4:0d:e0:3e:fa:f7:38:87:5f:49:77:48:b3:8a: 7f:4a:04:2b:10:63:84:f2:00:bc:4d:f9:f3:eb:b2:e1:42:cc: cb:8d:aa:57:57:ac:a0:f8:d1:d2:7b:75:5f:fc:f8:dc:e9:dc: 81:03:87:d1:52:02:3f:6b:f1:36:be:e1:85:1e:08:dd:27:a0: 29:83:64:19:72:f0:36:e9:be:77:f3:70:24:e5:4f:39:2d:4f: c0:c2:44:5a:0e:0d:70:ac:1a:3b:6b:80:ae:36:0b:6a:2a:36: e9:b0:65:13 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgITRiksgZ8Sn0x34kwXlAKPqAqFhTANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjQwODA5MDA0MjM4WhcN MjUwODA4MDA0NzM4WjAzMTEwLwYDVQQDEyhGN0Q4OUFGNEE2QjQ5NTU5QjkwQkQx QTExRDIyNjI2OTJDNDA2RDlCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qvt7atyz+XQnk9cOAhDVWB74toLFWAXiBi64RcItoamNTdu4OXo/TO1OeWd bzXR3F3ocKuKWXn0CvugeuXiKxiEvP9xO+81ZPGs0a9SqTqmjtL/LEZ/l7KPHBsf 6F9coXCaRWy4rM09c5QsUM6tP70vOiLHLTCEicqe+QtgDovFNNNwtNFcweXgPXAI gXMUPEdlJH+BF3pJ1PWkHpC2JqlwSTFUDQipZtLm7IxNES/NE05HzftS09m5plZH OLh5raMsn8pxNUfph/fjQemqX25OKPdGwvw0FjwXTWMwocJCkIRDIYNTHY6wZlq9 eNI1yrkuXi1l5eX7L+azrvY4MwIDAQABo4ICuDCCArQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQU99ia9Ka0lVm5C9GhHSJiaSxAbZswHwYDVR0jBBgwFoAUuo93 0h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIv QkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgzMzc2Qi5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvdW85 MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv LzZmYzkwOTZjLTI4ZGMtNDRlNC1iNGNmLTk2ZDYzMWI3M2FjMC8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZjOTA5NmMt MjhkYy00NGU0LWI0Y2YtOTZkNjMxYjczYWMwLzAvRjdEODlBRjRBNkI0OTU1OUI5 MEJEMUExMUQyMjYyNjkyQzQwNkQ5Qi5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWcNzDANBgkqhkiG9w0BAQsFAAOCAQEAZ9Yw2/gxERvFvCC2LSNIvIRZcVkgJNJL Fh9RTFDjqEN1E7yPpVT+GSU0i+cYegYQ+jBsGLXXLOiP8ywkGi6d1YAzSR2bYoqo ovvOVynpLKXxtllarmts4nHqOTgPv+2DjLBmou9nv/6z3udwaqgNbtNj6Pll1sI/ BSKe9JMKuVidDT/JKjt2fMvuBqGZxtDZJ0XoHvQN4D769ziHX0l3SLOKf0oEKxBj hPIAvE358+uy4ULMy42qV1esoPjR0nt1X/z43OncgQOH0VICP2vxNr7hhR4I3Seg KYNkGXLwNum+d/NwJOVPOS1PwMJEWg4NcKwaO2uArjYLaio26bBlEw== -----END CERTIFICATE-----Generated at Mon Nov 25 13:02:02 2024 by rpki-client on console-fra.rpki-client.org