$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer File: 735D87BA86773AC70137CF53116358A1F3B19766.cer (raw, json) Hash identifier: YU5aklQqUOleAE7VRIjsLUapMDCp+/pHzNOxpgwHEhc= Subject key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 362C880CE9ED585428B7FD69DDB40CDC117ED613 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft caRepository: rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 09 Jan 2025 20:37:58 +0000 Certificate not after: Thu 08 Jan 2026 20:42:58 +0000 Subordinate resources: IP: 103.3.208.0/22 IP: 103.234.120.0/22 IP: 114.79.0.0/18 IP: 115.178.160.0 -- 115.178.255.255 IP: 202.70.48.0/20 IP: 202.73.224.0/21 IP: 2407:a600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:2c:88:0c:e9:ed:58:54:28:b7:fd:69:dd:b4:0c:dc:11:7e:d6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 9 20:37:58 2025 GMT Not After : Jan 8 20:42:58 2026 GMT Subject: CN=735D87BA86773AC70137CF53116358A1F3B19766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:18:61:35:cb:2b:b3:44:5e:ea:04:01:b4:82: c9:fe:9d:2e:f6:e7:1b:6f:ac:57:75:7f:fc:23:d7: d4:d4:4d:c6:37:51:fb:4d:60:84:10:c1:af:f0:35: 6e:98:de:39:03:8e:8f:2f:29:59:7e:23:70:ee:9f: 89:71:de:eb:30:b5:60:49:f0:9a:70:6c:1f:52:db: 63:d1:70:63:15:ed:13:c5:c4:df:f6:57:c3:30:f3: 3b:ae:33:a1:d6:e1:7a:ec:c6:45:ac:41:5d:23:5e: ad:d4:dc:11:c4:70:d8:10:4f:7b:4a:2a:ba:51:ae: e2:4a:94:b0:62:22:8c:20:e6:7e:f4:75:37:ff:d1: 9b:82:1f:c6:71:fe:64:cf:7a:f4:43:d8:6f:16:b7: a8:37:fa:55:24:6a:f2:eb:a1:cd:77:97:b3:b1:35: 46:0f:88:e4:33:78:2a:0e:6e:69:99:c9:f4:b6:58: af:f0:3a:75:c3:9d:52:84:f2:9e:d5:0e:90:55:8c: 70:65:a0:f6:17:1a:23:c7:1e:10:23:82:34:9a:73: 70:ec:46:f6:cd:0f:8b:a9:b3:a3:2a:7f:aa:d9:bc: 72:23:06:3e:7c:29:7d:eb:6e:c6:e7:cc:00:ca:6a: e2:ac:a3:9a:dd:59:c9:9a:d0:87:26:03:cb:fb:ca: fd:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.208.0/22 103.234.120.0/22 114.79.0.0/18 115.178.160.0-115.178.255.255 202.70.48.0/20 202.73.224.0/21 IPv6: 2407:a600::/32 Signature Algorithm: sha256WithRSAEncryption 11:95:29:dc:fc:92:32:de:33:76:e4:bc:89:09:7e:39:6c:e8: 88:57:a6:f8:60:8c:4c:3b:16:45:f5:1c:d6:45:e6:e9:9d:6c: 7a:51:48:2d:c2:d8:13:15:4e:64:75:f4:3a:77:25:57:04:21: 51:05:25:f0:f5:af:e3:60:ab:36:1f:58:5e:49:1a:a3:ec:b5: 9f:d3:40:68:67:14:26:70:2d:81:39:10:34:cc:70:e4:c6:0e: c8:29:d3:ab:cb:46:74:69:a1:34:7c:fa:9d:ba:e9:0d:81:0b: a5:94:d5:08:88:07:22:1a:9b:3f:7c:a1:21:5e:d2:5b:20:58: 8b:3e:af:a9:2d:11:0b:58:b8:e8:2f:fa:fb:d0:b2:9e:4f:85: 83:21:f0:a1:ce:35:e0:89:e6:e7:24:a1:da:1a:bd:76:9a:78: 80:2b:61:c6:c8:fd:17:db:d4:a6:3d:3a:e4:6f:73:82:91:fd: cf:5c:22:e0:66:08:6e:c2:2f:52:e1:f2:1a:60:45:08:7d:4b: 10:8c:69:11:0b:ad:25:ea:73:8f:e6:a1:b3:57:a5:f8:34:09: b6:92:4b:11:f5:e6:e0:ba:92:e7:db:4f:bf:80:0d:e1:2a:cc: 18:8c:f8:8b:2d:8e:88:b7:65:7b:f9:e6:c7:52:ce:6d:2f:a8: 32:93:ad:a3 -----BEGIN CERTIFICATE----- MIIF+TCCBOGgAwIBAgIUNiyIDOntWFQot/1p3bQM3BF+1hMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEwOTIwMzc1OFoX DTI2MDEwODIwNDI1OFowMzExMC8GA1UEAxMoNzM1RDg3QkE4Njc3M0FDNzAxMzdD RjUzMTE2MzU4QTFGM0IxOTc2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMoYYTXLK7NEXuoEAbSCyf6dLvbnG2+sV3V//CPX1NRNxjdR+01ghBDBr/A1 bpjeOQOOjy8pWX4jcO6fiXHe6zC1YEnwmnBsH1LbY9FwYxXtE8XE3/ZXwzDzO64z odbheuzGRaxBXSNerdTcEcRw2BBPe0oqulGu4kqUsGIijCDmfvR1N//Rm4IfxnH+ ZM969EPYbxa3qDf6VSRq8uuhzXeXs7E1Rg+I5DN4Kg5uaZnJ9LZYr/A6dcOdUoTy ntUOkFWMcGWg9hcaI8ceECOCNJpzcOxG9s0Pi6mzoyp/qtm8ciMGPnwpfetuxufM AMpq4qyjmt1ZyZrQhyYDy/vK/bcCAwEAAaOCAuwwggLoMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHNdh7qGdzrHATfPUxFjWKHzsZdmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZjVkMzY0YS1kYTBiLTQ1NDAtOTM0OS01OTMwYmQ3MjVjZTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNWQzNjRh LWRhMGItNDU0MC05MzQ5LTU5MzBiZDcyNWNlMy8wLzczNUQ4N0JBODY3NzNBQzcw MTM3Q0Y1MzExNjM1OEExRjNCMTk3NjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwUwYIKwYBBQUHAQcBAf8ERDBCMDEEAgABMCsD BAJnA9ADBAJn6ngDBAZyTwAwCwMEBXOyoAMDAHOyAwQEykYwAwQDykngMA0EAgAC MAcDBQAkB6YAMA0GCSqGSIb3DQEBCwUAA4IBAQARlSnc/JIy3jN25LyJCX45bOiI V6b4YIxMOxZF9RzWRebpnWx6UUgtwtgTFU5kdfQ6dyVXBCFRBSXw9a/jYKs2H1he SRqj7LWf00BoZxQmcC2BORA0zHDkxg7IKdOry0Z0aaE0fPqduukNgQullNUIiAci Gps/fKEhXtJbIFiLPq+pLRELWLjoL/r70LKeT4WDIfChzjXgiebnJKHaGr12mniA K2HGyP0X29SmPTrkb3OCkf3PXCLgZghuwi9S4fIaYEUIfUsQjGkRC60l6nOP5qGz V6X4NAm2kksR9ebgupLn20+/gA3hKswYjPiLLY6It2V7+ebHUs5tL6gyk62j -----END CERTIFICATE-----Generated at Sun Feb 16 21:06:10 2025 by rpki-client