$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer File: 764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer (raw, json) Hash identifier: KFNQkQkxouvB8eDa40adPmn+f90ibUdLfJfqnu2CIeA= Subject key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6DC1240AF0508475F6453919F2121A10189B270A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft caRepository: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 19:13:03 +0000 Certificate not after: Mon 30 Jun 2025 19:18:03 +0000 Subordinate resources: IP: 103.49.28.0/22 IP: 2401:f980::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c1:24:0a:f0:50:84:75:f6:45:39:19:f2:12:1a:10:18:9b:27:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 19:13:03 2024 GMT Not After : Jun 30 19:18:03 2025 GMT Subject: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:ef:cb:e5:eb:de:8f:8f:87:71:ce:25:be: 80:fd:d6:c3:f9:24:d2:2b:1a:74:a9:56:fa:d2:ef: c7:fb:36:25:48:bc:5d:96:0b:4b:bb:58:75:4c:79: ca:26:16:b2:56:cd:6e:cf:38:75:1c:a4:0e:27:d0: 44:d5:b7:da:5c:8d:98:51:8c:30:d1:7d:6f:13:5b: bd:fd:cc:b4:be:82:ea:91:22:17:5f:bd:37:ec:c0: 30:f0:27:8c:f6:97:5d:73:86:53:fe:03:c3:88:a3: fb:08:12:7b:b8:46:36:c9:b4:4c:9b:57:a8:fd:e3: d9:53:6d:e0:7b:ee:86:9d:f6:8a:3c:d2:d8:86:ed: 7d:1f:b6:71:07:b3:cf:c1:bc:e0:89:aa:99:cd:f5: b9:9b:d3:27:9b:d0:01:f1:7e:a2:c3:30:ff:99:c3: 5b:1f:f6:3d:2e:f7:2f:9a:da:09:0b:19:5e:5c:90: bd:69:7b:d0:a1:ae:e1:c2:7e:f3:20:6c:2c:ca:01: 6a:69:52:06:60:52:19:35:b5:20:5a:bf:1c:b5:ed: d1:11:82:9e:16:11:b4:38:8d:df:a7:bd:9c:09:ca: 54:5c:3d:1f:64:57:da:11:8c:22:6e:09:58:43:9c: 7e:a9:2c:a8:1d:2b:35:12:c7:2a:2e:46:59:fd:cb: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.49.28.0/22 IPv6: 2401:f980::/32 Signature Algorithm: sha256WithRSAEncryption 01:d5:c8:cf:df:6c:18:6e:c9:9f:1a:d3:9b:79:16:1d:6e:d8: e9:ea:90:16:10:91:10:5c:da:7f:ee:c9:64:58:0c:a3:22:b6: 75:5e:d8:61:4d:6d:57:48:6d:ba:70:44:ce:dd:f3:7e:eb:95: 3c:aa:72:d1:19:ce:3c:60:82:86:22:9a:f5:a4:9a:dd:e0:c5: c9:d3:0b:8b:a8:62:64:22:2d:23:34:d9:96:0c:56:d2:e5:24: ba:72:e9:0c:7b:55:f8:a1:52:9b:75:38:64:6e:47:30:69:f6: 76:87:a4:d1:05:43:dc:c1:3d:8c:9d:44:65:7b:41:e2:7b:22: be:86:c8:68:e5:fe:21:4f:e2:35:50:6e:ba:b6:63:41:c1:2e: 28:4f:21:d9:55:07:7c:f0:af:3a:ca:37:45:d6:70:7d:8b:96: 18:8e:d9:56:2b:de:6b:77:98:2f:a9:28:bb:9c:b5:6c:fa:8f: 3f:d0:e0:67:05:f7:b3:b5:a0:10:7f:90:3f:d1:61:fd:5b:32: e8:24:29:43:db:6f:56:66:d5:c5:01:db:bb:e2:0c:21:a7:be: 0d:f6:26:8a:0e:8a:ef:65:49:04:e3:46:5a:cb:19:0f:86:40: a1:b1:c7:04:e5:18:d8:10:b7:62:a5:0d:5d:4b:2d:24:c4:f7: 85:b9:6d:b6 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUbcEkCvBQhHX2RTkZ8hIaEBibJwowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE5MTMwM1oX DTI1MDYzMDE5MTgwM1owMzExMC8GA1UEAxMoNzY0QjIzRUI2QzYzRkZDQUEzMDVG MzdEQkU5QjkwNEFFMDFENjBDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/z78vl696Pj4dxziW+gP3Ww/kk0isadKlW+tLvx/s2JUi8XZYLS7tYdUx5 yiYWslbNbs84dRykDifQRNW32lyNmFGMMNF9bxNbvf3MtL6C6pEiF1+9N+zAMPAn jPaXXXOGU/4Dw4ij+wgSe7hGNsm0TJtXqP3j2VNt4Hvuhp32ijzS2IbtfR+2cQez z8G84Imqmc31uZvTJ5vQAfF+osMw/5nDWx/2PS73L5raCQsZXlyQvWl70KGu4cJ+ 8yBsLMoBamlSBmBSGTW1IFq/HLXt0RGCnhYRtDiN36e9nAnKVFw9H2RX2hGMIm4J WEOcfqksqB0rNRLHKi5GWf3L51sCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHZLI+tsY//KowXzfb6bkErgHWDJMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84N2U4MzBjOC1kNTU5LTQ1NmEtODgzNS00ZjZlYjU1MjdhYTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4 LWQ1NTktNDU2YS04ODM1LTRmNmViNTUyN2FhMi8wLzc2NEIyM0VCNkM2M0ZGQ0FB MzA1RjM3REJFOUI5MDRBRTAxRDYwQzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnMRwwDQQCAAIwBwMFACQB+YAwDQYJKoZIhvcNAQELBQADggEBAAHVyM/fbBhu yZ8a05t5Fh1u2OnqkBYQkRBc2n/uyWRYDKMitnVe2GFNbVdIbbpwRM7d837rlTyq ctEZzjxggoYimvWkmt3gxcnTC4uoYmQiLSM02ZYMVtLlJLpy6Qx7VfihUpt1OGRu RzBp9naHpNEFQ9zBPYydRGV7QeJ7Ir6GyGjl/iFP4jVQbrq2Y0HBLihPIdlVB3zw rzrKN0XWcH2LlhiO2VYr3mt3mC+pKLuctWz6jz/Q4GcF97O1oBB/kD/RYf1bMugk KUPbb1Zm1cUB27viDCGnvg32JooOiu9lSQTjRlrLGQ+GQKGxxwTlGNgQt2KlDV1L LSTE94W5bbY= -----END CERTIFICATE-----Generated at Fri Nov 22 11:43:43 2024 by rpki-client on console-ams.rpki-client.org