$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer File: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer (raw, json) Hash identifier: 5KXRI2wRUbjpszFODZEX006z5sVuba6uh1X1HjkOqvo= Subject key identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7928C2B346EEF4C07FAD1831C9F331617A61A748 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft caRepository: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 26 Jul 2024 16:09:40 +0000 Certificate not after: Fri 25 Jul 2025 16:14:40 +0000 Subordinate resources: IP: 103.220.22.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 20:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:28:c2:b3:46:ee:f4:c0:7f:ad:18:31:c9:f3:31:61:7a:61:a7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 26 16:09:40 2024 GMT Not After : Jul 25 16:14:40 2025 GMT Subject: CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:d8:46:fc:22:7c:60:59:9b:39:72:83:67: d5:73:21:60:34:d1:1c:23:c6:4b:7d:b3:a1:9c:e5: 90:81:af:41:cf:c6:25:82:a5:8f:73:d5:32:14:eb: 47:c9:09:b4:5e:71:b7:83:40:1f:db:c9:53:f8:fe: eb:a7:99:d1:4a:b6:45:88:1d:43:4b:95:66:21:7f: 44:d3:95:12:11:ea:84:21:3f:77:f2:d4:9b:07:e8: 6f:26:56:e1:e4:e3:13:6f:71:7f:5c:ef:23:74:a0: 6a:2d:ab:b0:d0:8b:5b:b0:cf:52:38:69:c4:d7:d3: 54:2f:85:49:3b:e1:47:f6:71:a9:16:b8:dc:44:50: 2a:ec:7a:76:a5:88:1f:dc:ea:06:6d:55:32:90:9b: 15:82:00:55:ba:7c:69:7c:23:06:3d:dd:a5:aa:d2: c8:1b:1f:2e:3f:d4:56:83:bb:c8:8d:86:b2:c5:5b: cd:0f:f7:4e:4d:23:fb:56:6f:6a:09:8f:58:42:46: 25:ec:66:d9:e5:02:ce:76:1d:ba:c4:8b:97:f1:46: 86:88:ec:95:fa:9a:84:ab:a0:47:77:3b:4c:fa:ed: b1:5f:ff:79:83:66:36:9a:7e:9e:7e:1b:c0:81:54: 3b:a2:c3:7f:4c:a0:33:3b:14:28:36:82:6d:2f:a2: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.220.22.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:2d:97:83:0d:e7:82:3f:8a:38:d3:02:cc:82:1a:5f:ca:6c: 87:05:4a:1c:56:67:ec:05:d5:23:b2:06:95:87:5c:39:b7:86: 8c:25:4a:7b:cb:66:4c:54:4a:6c:58:28:b4:34:60:38:4b:38: aa:ae:0f:d5:17:77:c7:3a:9a:75:90:25:8c:98:4c:de:f9:e4: 14:64:16:48:23:63:95:bf:f1:a0:1a:d1:41:86:d1:c5:1e:2b: 7e:d7:cf:ae:ff:57:37:b5:bd:46:cb:75:9c:cd:f5:4b:d7:97: 60:59:cc:07:af:32:c3:9a:a3:24:4a:4b:a5:b7:a8:c5:9a:5b: bc:37:69:56:cc:81:ee:e2:be:c2:81:3e:ca:af:6e:d5:26:f3: c6:97:d3:1e:33:ff:cf:e6:fb:bc:4a:1b:c1:8d:13:d3:ec:54: 57:d2:54:43:e9:d7:e6:d8:03:95:57:d4:96:34:5b:5e:d0:fe: 6a:1e:6c:c0:50:72:27:e1:f6:23:f3:68:d8:e1:97:2c:e2:af: f0:96:95:6f:cc:ce:cd:2c:82:ae:81:8c:d0:8b:f1:cf:39:69: 04:fe:4b:d0:07:c6:79:80:5c:68:26:26:d8:80:41:c4:56:e3: e2:5c:14:f8:5f:8a:15:df:51:25:ed:aa:e5:c3:6b:da:2c:4d: f8:64:c3:b5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUeSjCs0bu9MB/rRgxyfMxYXphp0gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcyNjE2MDk0MFoX DTI1MDcyNTE2MTQ0MFowMzExMC8GA1UEAxMoNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZE N0JBMThERUM1MTVEOEJBMzg2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrA2Eb8InxgWZs5coNn1XMhYDTRHCPGS32zoZzlkIGvQc/GJYKlj3PVMhTr R8kJtF5xt4NAH9vJU/j+66eZ0Uq2RYgdQ0uVZiF/RNOVEhHqhCE/d/LUmwfobyZW 4eTjE29xf1zvI3Sgai2rsNCLW7DPUjhpxNfTVC+FSTvhR/ZxqRa43ERQKux6dqWI H9zqBm1VMpCbFYIAVbp8aXwjBj3dparSyBsfLj/UVoO7yI2GssVbzQ/3Tk0j+1Zv agmPWEJGJexm2eUCznYdusSLl/FGhojslfqahKugR3c7TPrtsV//eYNmNpp+nn4b wIFUO6LDf0ygMzsUKDaCbS+ipDcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHcdCrnERbKMiH/XuhjexRXYujhiMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YWFkNmEzZi02Y2EwLTQ2NjktOThmNy02ZjM0ODM3ZmFhNjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhYWQ2YTNm LTZjYTAtNDY2OS05OGY3LTZmMzQ4MzdmYWE2Mi8wLzc3MUQwQUI5QzQ0NUIyOEM4 ODdGRDdCQTE4REVDNTE1RDhCQTM4NjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn3BYwDQYJKoZIhvcNAQELBQADggEBABstl4MN54I/ijjTAsyCGl/KbIcFShxW Z+wF1SOyBpWHXDm3howlSnvLZkxUSmxYKLQ0YDhLOKquD9UXd8c6mnWQJYyYTN75 5BRkFkgjY5W/8aAa0UGG0cUeK37Xz67/Vze1vUbLdZzN9UvXl2BZzAevMsOaoyRK S6W3qMWaW7w3aVbMge7ivsKBPsqvbtUm88aX0x4z/8/m+7xKG8GNE9PsVFfSVEPp 1+bYA5VX1JY0W17Q/moebMBQcifh9iPzaNjhlyzir/CWlW/Mzs0sgq6BjNCL8c85 aQT+S9AHxnmAXGgmJtiAQcRW4+JcFPhfihXfUSXtquXDa9osTfhkw7U= -----END CERTIFICATE-----Generated at Fri Nov 22 11:14:19 2024 by rpki-client on console-fra.rpki-client.org