$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer File: 735D87BA86773AC70137CF53116358A1F3B19766.cer (raw, json) Hash identifier: 4VPIzbRUY5fv/GFs65YcQK7rXPw+2TF7rxYfmRzX6sM= Subject key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4303966B8414AEDD5888C904320D31428A46C835 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft caRepository: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 08 Feb 2024 13:42:44 +0000 Certificate not after: Thu 06 Feb 2025 13:47:44 +0000 Subordinate resources: IP: 103.3.208.0/22 IP: 103.234.120.0/22 IP: 114.79.0.0/18 IP: 115.178.160.0 -- 115.178.255.255 IP: 202.70.48.0/20 IP: 202.73.224.0/21 IP: 2407:a600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 18:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:03:96:6b:84:14:ae:dd:58:88:c9:04:32:0d:31:42:8a:46:c8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 8 13:42:44 2024 GMT Not After : Feb 6 13:47:44 2025 GMT Subject: CN=735D87BA86773AC70137CF53116358A1F3B19766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:61:35:cb:2b:b3:44:5e:ea:04:01:b4:82: c9:fe:9d:2e:f6:e7:1b:6f:ac:57:75:7f:fc:23:d7: d4:d4:4d:c6:37:51:fb:4d:60:84:10:c1:af:f0:35: 6e:98:de:39:03:8e:8f:2f:29:59:7e:23:70:ee:9f: 89:71:de:eb:30:b5:60:49:f0:9a:70:6c:1f:52:db: 63:d1:70:63:15:ed:13:c5:c4:df:f6:57:c3:30:f3: 3b:ae:33:a1:d6:e1:7a:ec:c6:45:ac:41:5d:23:5e: ad:d4:dc:11:c4:70:d8:10:4f:7b:4a:2a:ba:51:ae: e2:4a:94:b0:62:22:8c:20:e6:7e:f4:75:37:ff:d1: 9b:82:1f:c6:71:fe:64:cf:7a:f4:43:d8:6f:16:b7: a8:37:fa:55:24:6a:f2:eb:a1:cd:77:97:b3:b1:35: 46:0f:88:e4:33:78:2a:0e:6e:69:99:c9:f4:b6:58: af:f0:3a:75:c3:9d:52:84:f2:9e:d5:0e:90:55:8c: 70:65:a0:f6:17:1a:23:c7:1e:10:23:82:34:9a:73: 70:ec:46:f6:cd:0f:8b:a9:b3:a3:2a:7f:aa:d9:bc: 72:23:06:3e:7c:29:7d:eb:6e:c6:e7:cc:00:ca:6a: e2:ac:a3:9a:dd:59:c9:9a:d0:87:26:03:cb:fb:ca: fd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.208.0/22 103.234.120.0/22 114.79.0.0/18 115.178.160.0-115.178.255.255 202.70.48.0/20 202.73.224.0/21 IPv6: 2407:a600::/32 Signature Algorithm: sha256WithRSAEncryption 5d:8b:ee:21:03:ac:19:58:67:6e:57:29:7b:56:f2:59:1e:60: 94:35:7f:77:03:1e:a6:35:8d:d3:21:ae:dd:f7:bd:2a:7c:02: f7:9a:da:17:ce:73:81:2e:eb:48:fe:7e:5a:2c:b9:c7:53:ca: 8e:56:47:6c:7f:f6:5b:4d:30:cd:db:8f:2e:c5:24:a2:b9:65: ae:48:04:bb:ef:13:25:d6:70:7e:0c:99:18:84:8d:b6:b3:7b: 03:b2:d9:d2:7c:b9:9f:a3:7c:74:09:b8:34:cc:c3:a3:6e:3e: 31:22:0a:4a:64:44:ec:48:f2:f9:4a:a7:7b:a6:80:4d:c1:9c: b6:f0:c1:25:ef:db:a4:07:b5:a2:fd:6c:53:06:0c:c8:b0:b8: 38:b6:02:ca:8d:58:bf:06:fb:05:d1:fe:d3:1c:aa:18:37:83: b8:0b:58:cf:64:d0:51:0a:3d:d3:c8:09:d8:3e:85:11:d2:c1: 14:1d:00:96:7b:06:1d:45:79:ab:b6:bb:03:03:1c:d2:c6:8f: 15:29:59:59:3b:e6:9d:31:cc:3a:3c:10:40:5d:f4:16:03:86: 84:4a:bd:21:9d:00:ce:ef:52:f8:9f:69:33:9a:a3:7c:54:53: 3f:94:6f:7e:2c:5a:b0:8a:89:94:db:ec:6f:de:7c:3e:8b:b4: 5c:11:08:bc -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUQwOWa4QUrt1YiMkEMg0xQopGyDUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIwODEzNDI0NFoX DTI1MDIwNjEzNDc0NFowMzExMC8GA1UEAxMoNzM1RDg3QkE4Njc3M0FDNzAxMzdD RjUzMTE2MzU4QTFGM0IxOTc2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoYYTXLK7NEXuoEAbSCyf6dLvbnG2+sV3V//CPX1NRNxjdR+01ghBDBr/A1 bpjeOQOOjy8pWX4jcO6fiXHe6zC1YEnwmnBsH1LbY9FwYxXtE8XE3/ZXwzDzO64z odbheuzGRaxBXSNerdTcEcRw2BBPe0oqulGu4kqUsGIijCDmfvR1N//Rm4IfxnH+ ZM969EPYbxa3qDf6VSRq8uuhzXeXs7E1Rg+I5DN4Kg5uaZnJ9LZYr/A6dcOdUoTy ntUOkFWMcGWg9hcaI8ceECOCNJpzcOxG9s0Pi6mzoyp/qtm8ciMGPnwpfetuxufM AMpq4qyjmt1ZyZrQhyYDy/vK/bcCAwEAAaOCAuwwggLoMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHNdh7qGdzrHATfPUxFjWKHzsZdmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZjVkMzY0YS1kYTBiLTQ1NDAtOTM0OS01OTMwYmQ3MjVjZTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNWQzNjRh LWRhMGItNDU0MC05MzQ5LTU5MzBiZDcyNWNlMy8wLzczNUQ4N0JBODY3NzNBQzcw MTM3Q0Y1MzExNjM1OEExRjNCMTk3NjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwUwYIKwYBBQUHAQcBAf8ERDBCMDEEAgABMCsD BAJnA9ADBAJn6ngDBAZyTwAwCwMEBXOyoAMDAHOyAwQEykYwAwQDykngMA0EAgAC MAcDBQAkB6YAMA0GCSqGSIb3DQEBCwUAA4IBAQBdi+4hA6wZWGduVyl7VvJZHmCU NX93Ax6mNY3TIa7d970qfAL3mtoXznOBLutI/n5aLLnHU8qOVkdsf/ZbTTDN248u xSSiuWWuSAS77xMl1nB+DJkYhI22s3sDstnSfLmfo3x0Cbg0zMOjbj4xIgpKZETs SPL5Sqd7poBNwZy28MEl79ukB7Wi/WxTBgzIsLg4tgLKjVi/BvsF0f7THKoYN4O4 C1jPZNBRCj3TyAnYPoUR0sEUHQCWewYdRXmrtrsDAxzSxo8VKVlZO+adMcw6PBBA XfQWA4aESr0hnQDO71L4n2kzmqN8VFM/lG9+LFqwiomU2+xv3nw+i7RcEQi8 -----END CERTIFICATE-----Generated at Wed May 8 17:45:19 2024 by rpki-client on console-ams.rpki-client.org