$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer File: 77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer (raw, json) Hash identifier: +vtUPRbQQdFxVen4Y/y8reKg0QSgtm3lUec0BC42m98= Subject key identifier: 77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6EFE699EF023C5D84100F4737BB87D9E0A44FCD8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft caRepository: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 25 Mar 2025 05:51:14 +0000 Certificate not after: Tue 24 Mar 2026 05:56:14 +0000 Subordinate resources: IP: 157.20.204.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:fe:69:9e:f0:23:c5:d8:41:00:f4:73:7b:b8:7d:9e:0a:44:fc:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Mar 25 05:51:14 2025 GMT Not After : Mar 24 05:56:14 2026 GMT Subject: CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:25:9a:c8:47:ff:99:dc:28:66:93:03:5f: d3:01:79:6f:15:d1:0a:06:62:89:27:48:25:1e:9f: 70:c5:06:57:26:36:4c:6e:93:59:e4:d7:ab:c6:3a: b4:b9:db:e4:4a:c0:08:4b:fc:85:54:5e:64:88:7b: a9:f9:ca:cb:60:d4:6e:91:98:c6:aa:ad:75:80:df: fd:c7:35:ab:c3:14:9e:1e:5a:f9:6e:80:2e:b2:a0: e4:d0:62:04:b9:ec:b4:09:00:8f:18:3d:da:e0:93: d9:66:03:25:79:db:e0:a7:e8:20:32:45:e0:cc:e9: 38:35:00:0b:49:31:d2:50:c3:0f:e3:e1:a2:5c:fb: c6:7c:a5:d1:d1:4c:bf:69:46:a0:6d:d8:6b:1a:9b: 3e:53:ac:e6:13:19:87:d7:0a:33:96:72:4b:98:36: 66:3f:15:c9:21:d5:f5:65:c3:86:0d:1b:55:a1:40: eb:d2:5b:63:32:07:43:ae:dd:1f:85:1c:bc:13:19: e4:8f:d4:da:b9:a0:22:04:d5:5b:67:10:f4:f1:ec: 92:7e:cf:39:1b:2a:16:b5:f0:d4:f6:e0:6e:0d:26: ef:ad:51:0b:fa:16:1c:56:84:3d:fb:73:a2:f2:88: 37:fe:b8:52:65:9d:8e:e7:c1:b7:0b:a8:b5:86:ad: 88:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.204.0/23 Signature Algorithm: sha256WithRSAEncryption 09:36:d3:60:39:46:93:66:b0:ca:cb:15:b6:d0:44:d7:16:e5: 54:93:6f:75:df:45:50:4e:6d:76:e4:48:84:f6:86:86:0d:e7: 99:9e:58:e3:4d:a4:c0:c1:4d:b6:8e:9a:24:1f:9f:3e:8c:b1: df:60:19:24:23:01:b2:48:86:c8:ea:65:60:04:ee:45:71:be: b4:99:d5:42:ee:11:ab:16:72:4c:65:e7:dc:77:45:24:b6:f6: e9:70:03:11:9f:17:53:93:51:10:9a:05:38:c8:00:5c:e0:bd: dd:74:f6:4e:a5:0d:d8:cf:11:30:48:b3:36:d6:42:f6:ef:f2: b2:0e:56:69:07:ff:ca:e6:6a:a1:e1:ce:72:c4:22:38:6f:f2: a3:14:dc:56:44:37:18:75:6f:49:aa:57:fb:27:bb:bf:a0:aa: fa:13:48:8b:7f:b0:fa:3b:2d:fb:b7:3e:c6:f2:23:7f:5c:ad: 0b:9a:68:f6:af:bd:e2:63:f3:de:ce:36:21:3d:90:0c:a1:c0: 4e:3f:6a:60:3d:4c:b7:36:21:a6:a6:a7:63:41:8f:99:da:14: 15:c0:0d:e4:8e:29:dc:81:5e:2b:58:9b:3f:49:e6:44:09:56: a7:0c:4c:9c:23:00:53:a5:a0:c0:01:45:d3:c5:87:3e:f4:48: 46:c8:ca:b9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbv5pnvAjxdhBAPRze7h9ngpE/NgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI1MDMyNTA1NTExNFoX DTI2MDMyNDA1NTYxNFowMzExMC8GA1UEAxMoNzdBQ0YxOEY1MzE3RTdBMjAyRTU4 M0MzQzU5QzIyMzIzNEZBMkQ4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9qJZrIR/+Z3ChmkwNf0wF5bxXRCgZiiSdIJR6fcMUGVyY2TG6TWeTXq8Y6 tLnb5ErACEv8hVReZIh7qfnKy2DUbpGYxqqtdYDf/cc1q8MUnh5a+W6ALrKg5NBi BLnstAkAjxg92uCT2WYDJXnb4KfoIDJF4MzpODUAC0kx0lDDD+Pholz7xnyl0dFM v2lGoG3YaxqbPlOs5hMZh9cKM5ZyS5g2Zj8VySHV9WXDhg0bVaFA69JbYzIHQ67d H4UcvBMZ5I/U2rmgIgTVW2cQ9PHskn7PORsqFrXw1Pbgbg0m761RC/oWHFaEPftz ovKIN/64UmWdjufBtwuotYatiI0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHes8Y9TF+eiAuWDw8WcIjI0+i2LMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkODIzYmIz LTVhMDEtNDY1OC1hNzgzLWY4ZTg5ZmFkY2Y0NS8wLzc3QUNGMThGNTMxN0U3QTIw MkU1ODNDM0M1OUMyMjMyMzRGQTJEOEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFMwwDQYJKoZIhvcNAQELBQADggEBAAk202A5RpNmsMrLFbbQRNcW5VSTb3Xf RVBObXbkSIT2hoYN55meWONNpMDBTbaOmiQfnz6Msd9gGSQjAbJIhsjqZWAE7kVx vrSZ1ULuEasWckxl59x3RSS29ulwAxGfF1OTURCaBTjIAFzgvd109k6lDdjPETBI szbWQvbv8rIOVmkH/8rmaqHhznLEIjhv8qMU3FZENxh1b0mqV/snu7+gqvoTSIt/ sPo7Lfu3PsbyI39crQuaaPavveJj897ONiE9kAyhwE4/amA9TLc2Iaamp2NBj5na FBXADeSOKdyBXitYmz9J5kQJVqcMTJwjAFOloMABRdPFhz70SEbIyrk= -----END CERTIFICATE-----Generated at Mon Apr 7 03:48:59 2025 by rpki-client