$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer File: 789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer (raw, json) Hash identifier: z+wLEJS3ZBQkMCmqZhudxe7o968A3mKxAvxzxDpohHI= Subject key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3F75A6A2C3FE2A4E980764DE0AEF2D321C08765A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft caRepository: rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 11 Apr 2025 05:24:10 +0000 Certificate not after: Fri 10 Apr 2026 05:29:10 +0000 Subordinate resources: IP: 103.158.58.0/23 IP: 2406:b140::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 20:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:75:a6:a2:c3:fe:2a:4e:98:07:64:de:0a:ef:2d:32:1c:08:76:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 11 05:24:10 2025 GMT Not After : Apr 10 05:29:10 2026 GMT Subject: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:8d:d9:a9:b5:3e:4b:a7:45:5d:d1:e9:64: 9a:1e:d0:a8:36:a9:2f:e9:2b:e2:00:0d:bc:40:21: a7:f3:cb:c3:64:95:42:c9:ad:51:00:ba:a7:2a:47: 5e:93:19:fb:a6:dc:ab:cb:34:83:0c:ff:3c:b7:c9: b4:63:ab:3d:d0:f2:3c:55:a5:e9:27:09:e5:a2:ca: 33:0b:46:f3:1c:20:b6:6f:15:bf:98:18:38:3e:34: b1:af:8e:cb:69:a9:d4:84:c2:4d:16:4a:21:2f:ac: b9:34:94:d5:c4:5e:58:be:c5:0a:22:0d:19:0b:23: cc:1e:ef:05:e8:7a:e3:8e:a4:af:32:72:d2:67:ad: 23:c7:61:8f:9d:7b:96:ff:c6:f6:98:1f:16:2c:1a: 22:99:90:16:68:69:d7:6b:6a:bb:d8:4f:87:b8:2c: 71:1d:45:52:58:cd:8c:c1:a6:d4:fe:d6:4e:d7:f3: 9b:4d:12:ac:95:a5:95:c1:f5:32:cb:db:49:50:41: df:4d:c2:a5:f0:bc:4d:51:33:69:98:8f:9c:cc:8c: 05:48:14:18:d5:be:af:8c:c1:10:06:22:ae:c1:45: 4d:cb:b5:65:78:1b:cb:87:4b:f3:f2:60:57:66:58: 39:8b:02:3b:95:fc:be:f5:31:5e:51:70:d1:e4:cc: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.58.0/23 IPv6: 2406:b140::/32 Signature Algorithm: sha256WithRSAEncryption 96:8b:b1:64:f7:79:05:8e:1d:89:17:ea:a5:c3:80:aa:61:35: bc:4d:65:8e:7d:1c:1d:4d:7a:b5:2d:19:32:f5:90:d4:1a:99: 0d:b6:30:5e:57:af:0f:8a:25:b7:22:f7:6a:d5:f2:77:5a:4c: 3b:51:ed:1c:3f:a9:e3:48:54:67:b5:8d:06:07:83:03:4a:aa: 2d:91:b0:96:cb:e4:d0:8b:17:ec:bb:d0:e1:58:06:e3:e4:90: a0:9b:73:1b:c1:e1:f3:ef:67:b0:3a:23:92:d4:c1:e4:34:48: f6:46:f6:c6:b2:f1:75:2d:4c:a0:16:e4:4c:df:91:47:d2:ba: 6e:10:08:f3:0c:20:ab:3d:b8:40:8b:9f:f7:4b:ce:af:f4:79: dd:82:5d:cc:62:ea:7f:dd:5b:ca:de:08:43:10:29:de:a8:16: 04:7f:85:a5:b0:cf:cd:08:68:d9:1a:4a:cc:da:e4:8e:b9:03: 42:a9:26:a3:98:bd:78:de:b6:ca:94:74:b4:3f:ca:e9:e9:21: 24:f3:e6:b1:d8:9e:71:d2:03:79:7a:bf:cf:75:6c:ca:a8:38: 9f:8a:c0:a9:de:e0:c7:38:b3:3d:5c:a8:01:20:39:49:71:77: ab:73:ea:34:a8:62:a1:9b:51:c1:d2:71:8d:69:a1:e6:94:5e: c4:d0:15:01 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUP3WmosP+Kk6YB2TeCu8tMhwIdlowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxMTA1MjQxMFoX DTI2MDQxMDA1MjkxMFowMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZB REE0QzcwQTQzQ0FBODIzNzQ2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsfjdmptT5Lp0Vd0elkmh7QqDapL+kr4gANvEAhp/PLw2SVQsmtUQC6pypH XpMZ+6bcq8s0gwz/PLfJtGOrPdDyPFWl6ScJ5aLKMwtG8xwgtm8Vv5gYOD40sa+O y2mp1ITCTRZKIS+suTSU1cReWL7FCiINGQsjzB7vBeh6446krzJy0metI8dhj517 lv/G9pgfFiwaIpmQFmhp12tqu9hPh7gscR1FUljNjMGm1P7WTtfzm00SrJWllcH1 MsvbSVBB303CpfC8TVEzaZiPnMyMBUgUGNW+r4zBEAYirsFFTcu1ZXgby4dL8/Jg V2ZYOYsCO5X8vvUxXlFw0eTMr48CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHidt4n+GfHwuSatpMcKQ8qoI3RpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViNzRkNzZi LTViMTYtNGFiNS1hYmNmLWU0YTg2MDdhMjhiMi8wLzc4OURCNzg5RkUxOUYxRjBC OTI2QURBNEM3MEE0M0NBQTgyMzc0NjkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnnjowDQQCAAIwBwMFACQGsUAwDQYJKoZIhvcNAQELBQADggEBAJaLsWT3eQWO HYkX6qXDgKphNbxNZY59HB1NerUtGTL1kNQamQ22MF5Xrw+KJbci92rV8ndaTDtR 7Rw/qeNIVGe1jQYHgwNKqi2RsJbL5NCLF+y70OFYBuPkkKCbcxvB4fPvZ7A6I5LU weQ0SPZG9say8XUtTKAW5EzfkUfSum4QCPMMIKs9uECLn/dLzq/0ed2CXcxi6n/d W8reCEMQKd6oFgR/haWwz80IaNkaSsza5I65A0KpJqOYvXjetsqUdLQ/yunpISTz 5rHYnnHSA3l6v891bMqoOJ+KwKne4Mc4sz1cqAEgOUlxd6tz6jSoYqGbUcHScY1p oeaUXsTQFQE= -----END CERTIFICATE-----Generated at Sat Apr 26 23:26:46 2025 by rpki-client