$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer File: 764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer (raw, json) Hash identifier: 6i6NyRrAgOQzpjZWpOh2QL27kCG9zS+gKDIrUCTpKuc= Subject key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 596A88BF1B65F3AE0A2946177FA5B8DAAA8E2A9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft caRepository: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 06:11:37 +0000 Certificate not after: Mon 29 Jul 2024 06:16:37 +0000 Subordinate resources: IP: 103.49.28.0/22 IP: 2401:f980::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Apr 2024 20:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6a:88:bf:1b:65:f3:ae:0a:29:46:17:7f:a5:b8:da:aa:8e:2a:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 06:11:37 2023 GMT Not After : Jul 29 06:16:37 2024 GMT Subject: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:ef:cb:e5:eb:de:8f:8f:87:71:ce:25:be: 80:fd:d6:c3:f9:24:d2:2b:1a:74:a9:56:fa:d2:ef: c7:fb:36:25:48:bc:5d:96:0b:4b:bb:58:75:4c:79: ca:26:16:b2:56:cd:6e:cf:38:75:1c:a4:0e:27:d0: 44:d5:b7:da:5c:8d:98:51:8c:30:d1:7d:6f:13:5b: bd:fd:cc:b4:be:82:ea:91:22:17:5f:bd:37:ec:c0: 30:f0:27:8c:f6:97:5d:73:86:53:fe:03:c3:88:a3: fb:08:12:7b:b8:46:36:c9:b4:4c:9b:57:a8:fd:e3: d9:53:6d:e0:7b:ee:86:9d:f6:8a:3c:d2:d8:86:ed: 7d:1f:b6:71:07:b3:cf:c1:bc:e0:89:aa:99:cd:f5: b9:9b:d3:27:9b:d0:01:f1:7e:a2:c3:30:ff:99:c3: 5b:1f:f6:3d:2e:f7:2f:9a:da:09:0b:19:5e:5c:90: bd:69:7b:d0:a1:ae:e1:c2:7e:f3:20:6c:2c:ca:01: 6a:69:52:06:60:52:19:35:b5:20:5a:bf:1c:b5:ed: d1:11:82:9e:16:11:b4:38:8d:df:a7:bd:9c:09:ca: 54:5c:3d:1f:64:57:da:11:8c:22:6e:09:58:43:9c: 7e:a9:2c:a8:1d:2b:35:12:c7:2a:2e:46:59:fd:cb: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.49.28.0/22 IPv6: 2401:f980::/32 Signature Algorithm: sha256WithRSAEncryption 65:06:41:d5:27:bf:10:d5:b1:fd:15:cd:2b:dd:d8:22:62:20: db:ad:b0:db:0f:a9:e7:c2:64:de:af:57:1e:d8:6d:3b:a5:a3: 2d:ed:99:51:38:29:d4:27:eb:1e:8a:a2:c1:6d:fa:9a:76:62: aa:86:f4:3f:cc:a2:4b:ed:3f:01:de:12:92:05:ab:d6:64:8b: a4:e0:f2:16:3f:00:77:71:92:ae:8b:0b:4d:67:73:29:ec:3d: 80:0f:ee:25:12:78:3f:d7:a9:8f:dc:0f:52:5f:87:4f:89:a3: 2f:cb:3a:12:a6:fe:38:84:31:42:b2:16:6d:a1:e6:bc:4c:17: 7f:45:3b:a0:99:cf:4f:e8:ee:9e:f9:65:c5:5a:c4:c3:35:0b: 09:4b:f0:26:c7:9d:c9:5d:76:3b:bd:0c:c4:54:92:4b:81:74: 81:65:48:0a:93:e8:28:00:44:a6:58:46:55:74:43:65:50:5a: f3:86:54:d4:f1:c6:5a:cb:4d:f4:a0:9b:3f:a9:e3:fb:07:77: d1:1f:67:6f:83:61:e2:e9:87:e9:68:36:be:63:ef:8c:0b:ba: 85:d9:9f:94:fd:94:c6:9e:de:a9:a6:05:30:93:c2:1f:87:c1: f0:c0:28:ca:0b:21:6e:72:87:c1:70:99:f7:7e:65:6a:8a:ea: c4:f7:55:22 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUWWqIvxtl864KKUYXf6W42qqOKp0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA2MTEzN1oX DTI0MDcyOTA2MTYzN1owMzExMC8GA1UEAxMoNzY0QjIzRUI2QzYzRkZDQUEzMDVG MzdEQkU5QjkwNEFFMDFENjBDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/z78vl696Pj4dxziW+gP3Ww/kk0isadKlW+tLvx/s2JUi8XZYLS7tYdUx5 yiYWslbNbs84dRykDifQRNW32lyNmFGMMNF9bxNbvf3MtL6C6pEiF1+9N+zAMPAn jPaXXXOGU/4Dw4ij+wgSe7hGNsm0TJtXqP3j2VNt4Hvuhp32ijzS2IbtfR+2cQez z8G84Imqmc31uZvTJ5vQAfF+osMw/5nDWx/2PS73L5raCQsZXlyQvWl70KGu4cJ+ 8yBsLMoBamlSBmBSGTW1IFq/HLXt0RGCnhYRtDiN36e9nAnKVFw9H2RX2hGMIm4J WEOcfqksqB0rNRLHKi5GWf3L51sCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHZLI+tsY//KowXzfb6bkErgHWDJMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84N2U4MzBjOC1kNTU5LTQ1NmEtODgzNS00ZjZlYjU1MjdhYTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4 LWQ1NTktNDU2YS04ODM1LTRmNmViNTUyN2FhMi8wLzc2NEIyM0VCNkM2M0ZGQ0FB MzA1RjM3REJFOUI5MDRBRTAxRDYwQzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnMRwwDQQCAAIwBwMFACQB+YAwDQYJKoZIhvcNAQELBQADggEBAGUGQdUnvxDV sf0VzSvd2CJiINutsNsPqefCZN6vVx7YbTuloy3tmVE4KdQn6x6KosFt+pp2YqqG 9D/MokvtPwHeEpIFq9Zki6Tg8hY/AHdxkq6LC01ncynsPYAP7iUSeD/XqY/cD1Jf h0+Joy/LOhKm/jiEMUKyFm2h5rxMF39FO6CZz0/o7p75ZcVaxMM1CwlL8CbHncld dju9DMRUkkuBdIFlSAqT6CgARKZYRlV0Q2VQWvOGVNTxxlrLTfSgmz+p4/sHd9Ef Z2+DYeLph+loNr5j74wLuoXZn5T9lMae3qmmBTCTwh+HwfDAKMoLIW5yh8Fwmfd+ ZWqK6sT3VSI= -----END CERTIFICATE-----Generated at Sat Apr 27 13:32:28 2024 by rpki-client on console-ams.rpki-client.org