$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer File: F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer (raw, json) Hash identifier: HxOUcoLAiLjpDkkVGSZO3GHiLHE4Dl6aoJZkPXCEadI= Subject key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 450C067532F77200A2F6A3C39CB5419571EBF041 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft caRepository: rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 07 Sep 2023 15:39:27 +0000 Certificate not after: Thu 05 Sep 2024 15:44:27 +0000 Subordinate resources: IP: 103.13.204.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:0c:06:75:32:f7:72:00:a2:f6:a3:c3:9c:b5:41:95:71:eb:f0:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 7 15:39:27 2023 GMT Not After : Sep 5 15:44:27 2024 GMT Subject: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ab:ed:ed:ab:72:cf:e5:d0:9e:4f:5c:38:08: 43:55:60:7b:e2:da:0b:15:60:17:88:18:ba:e1:17: 08:b6:86:a6:35:37:6e:e0:e5:e8:fd:33:b5:39:e5: 9d:6f:35:d1:dc:5d:e8:70:ab:8a:59:79:f4:0a:fb: a0:7a:e5:e2:2b:18:84:bc:ff:71:3b:ef:35:64:f1: ac:d1:af:52:a9:3a:a6:8e:d2:ff:2c:46:7f:97:b2: 8f:1c:1b:1f:e8:5f:5c:a1:70:9a:45:6c:b8:ac:cd: 3d:73:94:2c:50:ce:ad:3f:bd:2f:3a:22:c7:2d:30: 84:89:ca:9e:f9:0b:60:0e:8b:c5:34:d3:70:b4:d1: 5c:c1:e5:e0:3d:70:08:81:73:14:3c:47:65:24:7f: 81:17:7a:49:d4:f5:a4:1e:90:b6:26:a9:70:49:31: 54:0d:08:a9:66:d2:e6:ec:8c:4d:11:2f:cd:13:4e: 47:cd:fb:52:d3:d9:b9:a6:56:47:38:b8:79:ad:a3: 2c:9f:ca:71:35:47:e9:87:f7:e3:41:e9:aa:5f:6e: 4e:28:f7:46:c2:fc:34:16:3c:17:4d:63:30:a1:c2: 42:90:84:43:21:83:53:1d:8e:b0:66:5a:bd:78:d2: 35:ca:b9:2e:5e:2d:65:e5:e5:fb:2f:e6:b3:ae:f6: 38:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.204.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:8f:bc:37:22:a0:9d:e3:c1:e8:b8:43:7b:37:a0:4d:c0:fd: 7d:c5:61:16:10:c7:11:51:25:02:d9:ff:95:8a:c2:60:b7:cd: 8c:d9:2e:92:46:51:e5:32:ed:fc:15:0c:a1:80:c7:78:dd:57: 4f:34:da:80:9a:61:67:5b:9c:e1:8e:1e:79:91:d8:80:49:09: 35:c1:7b:c2:b1:8c:b4:14:be:85:fa:c3:d5:a8:95:27:a4:f2: ef:03:1c:ba:82:53:ff:c9:d1:fe:de:7b:87:29:b1:17:cd:a7: 2b:2c:a6:60:69:02:4f:94:9e:d3:0c:d8:37:77:fa:a6:6e:a2: fa:ce:f1:67:ea:8d:f7:f4:f7:5f:74:f2:37:4d:1c:42:a2:a2: 26:15:db:7f:5d:ae:ce:4e:33:c7:66:14:93:31:49:e8:a5:21: da:ec:00:d3:2c:10:d1:02:43:77:46:fd:b0:ec:26:bc:51:1a: f6:f5:9c:1d:6a:43:71:09:12:c7:a0:5c:c4:eb:23:16:f2:25: 3a:42:5d:10:e3:19:98:99:24:0c:93:85:0b:d6:48:85:48:f2: b0:ed:14:d5:98:00:8b:ac:57:eb:7c:33:ec:8c:a9:93:e6:56: f8:f3:7b:95:2f:cb:7d:cc:fa:19:23:5f:92:b6:37:a0:2e:92: af:50:d1:53 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURQwGdTL3cgCi9qPDnLVBlXHr8EEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkwNzE1MzkyN1oX DTI0MDkwNTE1NDQyN1owMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJE MUExMUQyMjYyNjkyQzQwNkQ5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6r7e2rcs/l0J5PXDgIQ1Vge+LaCxVgF4gYuuEXCLaGpjU3buDl6P0ztTnl nW810dxd6HCrill59Ar7oHrl4isYhLz/cTvvNWTxrNGvUqk6po7S/yxGf5eyjxwb H+hfXKFwmkVsuKzNPXOULFDOrT+9Lzoixy0whInKnvkLYA6LxTTTcLTRXMHl4D1w CIFzFDxHZSR/gRd6SdT1pB6QtiapcEkxVA0IqWbS5uyMTREvzRNOR837UtPZuaZW Rzi4ea2jLJ/KcTVH6Yf340Hpql9uTij3RsL8NBY8F01jMKHCQpCEQyGDUx2OsGZa vXjSNcq5Ll4tZeXl+y/ms672ODMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPfYmvSmtJVZuQvRoR0iYmksQG2bMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmYzkwOTZj LTI4ZGMtNDRlNC1iNGNmLTk2ZDYzMWI3M2FjMC8wL0Y3RDg5QUY0QTZCNDk1NTlC OTBCRDFBMTFEMjI2MjY5MkM0MDZEOUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnDcwwDQYJKoZIhvcNAQELBQADggEBAH2PvDcioJ3jwei4Q3s3oE3A/X3FYRYQ xxFRJQLZ/5WKwmC3zYzZLpJGUeUy7fwVDKGAx3jdV0802oCaYWdbnOGOHnmR2IBJ CTXBe8KxjLQUvoX6w9WolSek8u8DHLqCU//J0f7ee4cpsRfNpysspmBpAk+UntMM 2Dd3+qZuovrO8Wfqjff091908jdNHEKioiYV239drs5OM8dmFJMxSeilIdrsANMs ENECQ3dG/bDsJrxRGvb1nB1qQ3EJEsegXMTrIxbyJTpCXRDjGZiZJAyThQvWSIVI 8rDtFNWYAIusV+t8M+yMqZPmVvjze5Uvy33M+hkjX5K2N6Aukq9Q0VM= -----END CERTIFICATE-----Generated at Wed May 8 05:33:24 2024 by rpki-client on console-ams.rpki-client.org