$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer File: 77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer (raw, json) Hash identifier: OaJeaLopf6iFq13sGKfpl5J3KqNYb3/JCMPaFQWpY70= Subject key identifier: 77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 65EB9BD36BA886DD0C1BDAE861727294268F17E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft caRepository: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 22 Apr 2024 15:39:08 +0000 Certificate not after: Mon 21 Apr 2025 15:44:08 +0000 Subordinate resources: IP: 157.20.204.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 May 2024 18:51:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:eb:9b:d3:6b:a8:86:dd:0c:1b:da:e8:61:72:72:94:26:8f:17:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 22 15:39:08 2024 GMT Not After : Apr 21 15:44:08 2025 GMT Subject: CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:25:9a:c8:47:ff:99:dc:28:66:93:03:5f: d3:01:79:6f:15:d1:0a:06:62:89:27:48:25:1e:9f: 70:c5:06:57:26:36:4c:6e:93:59:e4:d7:ab:c6:3a: b4:b9:db:e4:4a:c0:08:4b:fc:85:54:5e:64:88:7b: a9:f9:ca:cb:60:d4:6e:91:98:c6:aa:ad:75:80:df: fd:c7:35:ab:c3:14:9e:1e:5a:f9:6e:80:2e:b2:a0: e4:d0:62:04:b9:ec:b4:09:00:8f:18:3d:da:e0:93: d9:66:03:25:79:db:e0:a7:e8:20:32:45:e0:cc:e9: 38:35:00:0b:49:31:d2:50:c3:0f:e3:e1:a2:5c:fb: c6:7c:a5:d1:d1:4c:bf:69:46:a0:6d:d8:6b:1a:9b: 3e:53:ac:e6:13:19:87:d7:0a:33:96:72:4b:98:36: 66:3f:15:c9:21:d5:f5:65:c3:86:0d:1b:55:a1:40: eb:d2:5b:63:32:07:43:ae:dd:1f:85:1c:bc:13:19: e4:8f:d4:da:b9:a0:22:04:d5:5b:67:10:f4:f1:ec: 92:7e:cf:39:1b:2a:16:b5:f0:d4:f6:e0:6e:0d:26: ef:ad:51:0b:fa:16:1c:56:84:3d:fb:73:a2:f2:88: 37:fe:b8:52:65:9d:8e:e7:c1:b7:0b:a8:b5:86:ad: 88:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.204.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:44:a1:ea:6e:e9:24:e0:f0:95:37:ec:4d:dc:8d:c7:a7:0f: 64:2b:de:d5:5c:0c:9a:e5:37:a6:37:e5:25:3b:29:f5:17:df: 58:e3:98:59:bf:1b:48:3b:d5:f9:68:f1:ed:44:88:8c:75:08: e9:fc:04:7d:55:20:6f:49:9f:c0:4d:7c:91:9c:31:26:a3:3e: 75:75:d3:8f:61:8b:20:46:55:cd:95:54:9f:5f:f1:99:2c:7c: a1:6e:cb:df:e8:f5:76:fe:5e:01:e7:ac:c3:5f:4d:d0:0a:dc: b3:bc:18:62:98:a7:f2:52:3b:99:ed:82:e3:5f:07:e6:c3:ee: cc:5f:75:b3:78:28:7b:06:59:80:84:e2:0a:a5:cf:7b:e0:b5: 94:e9:31:4f:c0:50:bd:91:e3:0c:5d:a6:ed:01:00:2a:7a:32: 3f:d0:55:87:d9:3e:68:c2:37:86:a0:58:2a:1f:4a:32:24:85: c1:9e:a2:6f:fe:20:12:af:8a:df:6d:1e:00:e7:bf:03:9a:c6: d9:10:fb:7d:82:75:ad:da:03:93:1e:df:72:24:d7:3a:aa:ac: 41:66:bb:b1:c5:68:46:1a:e5:8b:06:37:a8:04:fb:8b:1b:25: 8d:9a:0f:13:5e:19:c9:12:ac:64:7f:ba:ff:27:da:b8:fc:fb: be:a9:be:20 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZeub02uoht0MG9roYXJylCaPF+IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI0MDQyMjE1MzkwOFoX DTI1MDQyMTE1NDQwOFowMzExMC8GA1UEAxMoNzdBQ0YxOEY1MzE3RTdBMjAyRTU4 M0MzQzU5QzIyMzIzNEZBMkQ4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9qJZrIR/+Z3ChmkwNf0wF5bxXRCgZiiSdIJR6fcMUGVyY2TG6TWeTXq8Y6 tLnb5ErACEv8hVReZIh7qfnKy2DUbpGYxqqtdYDf/cc1q8MUnh5a+W6ALrKg5NBi BLnstAkAjxg92uCT2WYDJXnb4KfoIDJF4MzpODUAC0kx0lDDD+Pholz7xnyl0dFM v2lGoG3YaxqbPlOs5hMZh9cKM5ZyS5g2Zj8VySHV9WXDhg0bVaFA69JbYzIHQ67d H4UcvBMZ5I/U2rmgIgTVW2cQ9PHskn7PORsqFrXw1Pbgbg0m761RC/oWHFaEPftz ovKIN/64UmWdjufBtwuotYatiI0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHes8Y9TF+eiAuWDw8WcIjI0+i2LMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkODIzYmIz LTVhMDEtNDY1OC1hNzgzLWY4ZTg5ZmFkY2Y0NS8wLzc3QUNGMThGNTMxN0U3QTIw MkU1ODNDM0M1OUMyMjMyMzRGQTJEOEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFMwwDQYJKoZIhvcNAQELBQADggEBAA1Eoepu6STg8JU37E3cjcenD2Qr3tVc DJrlN6Y35SU7KfUX31jjmFm/G0g71flo8e1EiIx1COn8BH1VIG9Jn8BNfJGcMSaj PnV1049hiyBGVc2VVJ9f8ZksfKFuy9/o9Xb+XgHnrMNfTdAK3LO8GGKYp/JSO5nt guNfB+bD7sxfdbN4KHsGWYCE4gqlz3vgtZTpMU/AUL2R4wxdpu0BACp6Mj/QVYfZ PmjCN4agWCofSjIkhcGeom/+IBKvit9tHgDnvwOaxtkQ+32Cda3aA5Me33Ik1zqq rEFmu7HFaEYa5YsGN6gE+4sbJY2aDxNeGckSrGR/uv8n2rj8+76pviA= -----END CERTIFICATE-----Generated at Tue May 21 08:37:20 2024 by rpki-client on console-fra.rpki-client.org