$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7701FBF4A9C9B559888F02656447A3AA1963811C.cer File: 7701FBF4A9C9B559888F02656447A3AA1963811C.cer (raw, json) Hash identifier: 6ufX1roW22F8L+C7EPywrRoTBQnABHMEv73ViD05fDw= Subject key identifier: 77:01:FB:F4:A9:C9:B5:59:88:8F:02:65:64:47:A3:AA:19:63:81:1C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 370E4DDB0DFBBF355D0F5F5D700719530CE449EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft caRepository: rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 22 Sep 2023 10:50:02 +0000 Certificate not after: Fri 20 Sep 2024 10:55:02 +0000 Subordinate resources: IP: 103.84.117.0/24 IP: 103.202.227.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 May 2024 03:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0e:4d:db:0d:fb:bf:35:5d:0f:5f:5d:70:07:19:53:0c:e4:49:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 22 10:50:02 2023 GMT Not After : Sep 20 10:55:02 2024 GMT Subject: CN=7701FBF4A9C9B559888F02656447A3AA1963811C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c0:aa:2d:ad:87:72:a1:00:3b:3f:c2:49:6a: 3d:93:95:3f:3a:4b:67:87:16:bc:b1:92:4c:3c:b8: 5d:5e:75:a8:62:59:e7:e2:e5:40:4f:0e:b6:5d:53: 87:2e:6f:29:7d:f4:9c:7a:f8:f3:fe:e6:fa:f1:d2: a8:99:66:fd:07:d0:d9:17:79:87:27:2b:9c:3b:c5: 77:48:44:6c:eb:b7:56:33:d6:57:5b:66:65:89:bf: 7f:90:1b:0d:05:ed:68:0d:d4:cf:e7:fd:db:28:85: 78:82:46:90:f0:1f:c4:04:3e:fa:8d:3b:a0:d5:e1: 1d:f4:75:29:fa:45:95:ba:81:e4:85:4f:62:0f:b6: 6a:83:ba:da:54:d0:1b:ac:44:fc:26:d4:fc:23:42: 56:a2:b6:96:a7:46:f8:d2:fa:d4:58:7f:17:24:08: ee:95:a9:72:8f:e0:60:d4:56:cd:83:f1:4f:7f:32: c2:ed:09:75:4c:bf:c9:29:91:b8:65:ba:81:1e:c9: 39:e5:68:93:cf:c1:65:da:7d:0f:c6:99:e2:30:76: 27:d8:09:98:11:8c:83:1b:a6:e2:6e:6d:09:c9:d4: 25:c7:ad:33:7d:07:ad:f0:6b:a1:58:0a:94:ff:5f: a9:f6:85:9f:39:60:89:aa:54:f2:e3:51:43:86:a5: 24:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 77:01:FB:F4:A9:C9:B5:59:88:8F:02:65:64:47:A3:AA:19:63:81:1C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6132a740-bd7d-46b8-b10a-a7a703e350f2/0/7701FBF4A9C9B559888F02656447A3AA1963811C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.84.117.0/24 103.202.227.0/24 Signature Algorithm: sha256WithRSAEncryption 72:12:f4:69:56:b8:ed:58:09:dc:28:10:69:33:75:a5:5f:08: 7c:1b:ba:12:ad:eb:6a:83:cd:c7:f9:fd:91:c4:89:ce:97:af: 1d:6f:3e:d0:aa:70:eb:d3:70:0a:76:7a:65:37:42:3d:8e:bc: 2c:f9:c7:88:7b:27:74:0e:e1:3d:0b:f1:2b:4a:40:2d:65:7b: b9:09:f3:63:1a:a8:f4:42:1f:1b:a0:05:b4:7f:39:fb:ba:20: 88:f5:16:0b:aa:93:fb:e5:e8:df:46:86:42:0a:5f:d0:b5:4d: 4e:14:af:98:c6:ac:39:b0:4b:3a:27:e5:73:f3:c8:24:8c:10: 8e:ab:f0:93:0c:ab:e6:11:91:00:7a:8b:43:a9:74:ba:1e:2e: 48:ab:91:e8:76:f4:03:0e:59:20:be:94:9f:69:6a:28:9f:3f: 13:ac:97:ea:b7:a6:d7:69:ae:76:08:1c:a9:82:12:e1:38:9c: 84:ed:02:29:e0:43:c7:1f:4d:c5:62:49:b6:72:e6:1e:c2:e8: db:f0:ec:70:a1:6a:6b:d1:bb:44:8f:7d:61:24:18:4f:c7:26: cd:79:ab:fb:fe:af:12:2e:87:6b:72:b4:1b:90:ad:2b:25:c5: d3:5a:9f:17:bb:d0:7e:ac:cd:06:25:00:8a:80:e4:7d:c4:a8: 3b:d7:9e:d9 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUNw5N2w37vzVdD19dcAcZUwzkSeowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDkyMjEwNTAwMloX DTI0MDkyMDEwNTUwMlowMzExMC8GA1UEAxMoNzcwMUZCRjRBOUM5QjU1OTg4OEYw MjY1NjQ0N0EzQUExOTYzODExQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLAqi2th3KhADs/wklqPZOVPzpLZ4cWvLGSTDy4XV51qGJZ5+LlQE8Otl1T hy5vKX30nHr48/7m+vHSqJlm/QfQ2Rd5hycrnDvFd0hEbOu3VjPWV1tmZYm/f5Ab DQXtaA3Uz+f92yiFeIJGkPAfxAQ++o07oNXhHfR1KfpFlbqB5IVPYg+2aoO62lTQ G6xE/CbU/CNCVqK2lqdG+NL61Fh/FyQI7pWpco/gYNRWzYPxT38ywu0JdUy/ySmR uGW6gR7JOeVok8/BZdp9D8aZ4jB2J9gJmBGMgxum4m5tCcnUJcetM30HrfBroVgK lP9fqfaFnzlgiapU8uNRQ4alJGcCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHcB+/SpybVZiI8CZWRHo6oZY4EcMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82MTMyYTc0MC1iZDdkLTQ2YjgtYjEwYS1hN2E3MDNlMzUwZjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxMzJhNzQw LWJkN2QtNDZiOC1iMTBhLWE3YTcwM2UzNTBmMi8wLzc3MDFGQkY0QTlDOUI1NTk4 ODhGMDI2NTY0NDdBM0FBMTk2MzgxMUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABnVHUDBABnyuMwDQYJKoZIhvcNAQELBQADggEBAHIS9GlWuO1YCdwoEGkzdaVf CHwbuhKt62qDzcf5/ZHEic6Xrx1vPtCqcOvTcAp2emU3Qj2OvCz5x4h7J3QO4T0L 8StKQC1le7kJ82MaqPRCHxugBbR/Ofu6IIj1Fguqk/vl6N9GhkIKX9C1TU4Ur5jG rDmwSzon5XPzyCSMEI6r8JMMq+YRkQB6i0OpdLoeLkirkeh29AMOWSC+lJ9paiif PxOsl+q3ptdprnYIHKmCEuE4nITtAingQ8cfTcViSbZy5h7C6Nvw7HChamvRu0SP fWEkGE/HJs15q/v+rxIuh2tytBuQrSslxdNanxe70H6szQYlAIqA5H3EqDvXntk= -----END CERTIFICATE-----Generated at Wed May 8 21:02:17 2024 by rpki-client on console-fra.rpki-client.org