$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer File: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer (raw, json) Hash identifier: cBpOUD43FgKQy6HORXXkIhdYnEVftimWHhjvpvMjkCw= Subject key identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4B70A96550D9686A16A5DC3755026A5D8532CEB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft caRepository: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 25 Aug 2023 12:30:48 +0000 Certificate not after: Fri 23 Aug 2024 12:35:48 +0000 Subordinate resources: IP: 103.220.22.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 17:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:70:a9:65:50:d9:68:6a:16:a5:dc:37:55:02:6a:5d:85:32:ce:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 25 12:30:48 2023 GMT Not After : Aug 23 12:35:48 2024 GMT Subject: CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:d8:46:fc:22:7c:60:59:9b:39:72:83:67: d5:73:21:60:34:d1:1c:23:c6:4b:7d:b3:a1:9c:e5: 90:81:af:41:cf:c6:25:82:a5:8f:73:d5:32:14:eb: 47:c9:09:b4:5e:71:b7:83:40:1f:db:c9:53:f8:fe: eb:a7:99:d1:4a:b6:45:88:1d:43:4b:95:66:21:7f: 44:d3:95:12:11:ea:84:21:3f:77:f2:d4:9b:07:e8: 6f:26:56:e1:e4:e3:13:6f:71:7f:5c:ef:23:74:a0: 6a:2d:ab:b0:d0:8b:5b:b0:cf:52:38:69:c4:d7:d3: 54:2f:85:49:3b:e1:47:f6:71:a9:16:b8:dc:44:50: 2a:ec:7a:76:a5:88:1f:dc:ea:06:6d:55:32:90:9b: 15:82:00:55:ba:7c:69:7c:23:06:3d:dd:a5:aa:d2: c8:1b:1f:2e:3f:d4:56:83:bb:c8:8d:86:b2:c5:5b: cd:0f:f7:4e:4d:23:fb:56:6f:6a:09:8f:58:42:46: 25:ec:66:d9:e5:02:ce:76:1d:ba:c4:8b:97:f1:46: 86:88:ec:95:fa:9a:84:ab:a0:47:77:3b:4c:fa:ed: b1:5f:ff:79:83:66:36:9a:7e:9e:7e:1b:c0:81:54: 3b:a2:c3:7f:4c:a0:33:3b:14:28:36:82:6d:2f:a2: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.220.22.0/23 Signature Algorithm: sha256WithRSAEncryption 54:e4:7e:86:5e:5c:f5:a3:f8:69:92:7a:86:3f:91:bd:19:2b: 8c:f0:83:9e:4d:41:7c:68:64:79:0d:1f:a2:02:c6:a6:b4:25: 90:6f:59:7b:a2:54:d6:1f:c7:7b:92:52:0c:3c:19:68:3d:8e: 0e:7e:61:fd:a6:18:d5:f3:9e:86:8e:37:9c:b1:f3:92:6e:84: 63:0c:c2:0c:58:c5:33:20:9e:72:32:e5:a5:e3:0b:80:2a:18: 31:4e:2b:b2:16:60:b1:d6:08:05:63:3b:79:8d:4d:82:a2:fb: 74:a9:cb:2b:65:52:7e:b6:78:94:49:93:21:17:bf:5c:08:6a: ab:81:5b:f9:a4:1f:94:c5:83:84:d9:7c:72:be:78:4c:f0:dd: f3:5c:6d:22:4b:83:d1:fe:9b:9d:a1:ac:74:29:98:d7:2b:bb: 46:4e:84:2d:a3:33:13:4c:b5:69:51:81:6c:10:d4:66:bd:a2: fd:84:07:e1:d0:9e:fc:9c:ed:5a:a1:00:ba:37:86:32:ab:25: 09:9a:e9:b5:a1:b8:e6:e6:53:1a:c1:de:c6:4b:d9:7c:66:7a: 27:2a:cb:85:d1:88:ea:a0:49:7b:84:8a:01:7b:bf:62:be:73: f0:13:95:6a:10:59:14:9a:af:66:e0:9c:be:e7:86:d6:e5:88: 79:1c:91:f7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUS3CpZVDZaGoWpdw3VQJqXYUyzrQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDgyNTEyMzA0OFoX DTI0MDgyMzEyMzU0OFowMzExMC8GA1UEAxMoNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZE N0JBMThERUM1MTVEOEJBMzg2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrA2Eb8InxgWZs5coNn1XMhYDTRHCPGS32zoZzlkIGvQc/GJYKlj3PVMhTr R8kJtF5xt4NAH9vJU/j+66eZ0Uq2RYgdQ0uVZiF/RNOVEhHqhCE/d/LUmwfobyZW 4eTjE29xf1zvI3Sgai2rsNCLW7DPUjhpxNfTVC+FSTvhR/ZxqRa43ERQKux6dqWI H9zqBm1VMpCbFYIAVbp8aXwjBj3dparSyBsfLj/UVoO7yI2GssVbzQ/3Tk0j+1Zv agmPWEJGJexm2eUCznYdusSLl/FGhojslfqahKugR3c7TPrtsV//eYNmNpp+nn4b wIFUO6LDf0ygMzsUKDaCbS+ipDcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHcdCrnERbKMiH/XuhjexRXYujhiMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YWFkNmEzZi02Y2EwLTQ2NjktOThmNy02ZjM0ODM3ZmFhNjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhYWQ2YTNm LTZjYTAtNDY2OS05OGY3LTZmMzQ4MzdmYWE2Mi8wLzc3MUQwQUI5QzQ0NUIyOEM4 ODdGRDdCQTE4REVDNTE1RDhCQTM4NjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn3BYwDQYJKoZIhvcNAQELBQADggEBAFTkfoZeXPWj+GmSeoY/kb0ZK4zwg55N QXxoZHkNH6ICxqa0JZBvWXuiVNYfx3uSUgw8GWg9jg5+Yf2mGNXznoaON5yx85Ju hGMMwgxYxTMgnnIy5aXjC4AqGDFOK7IWYLHWCAVjO3mNTYKi+3SpyytlUn62eJRJ kyEXv1wIaquBW/mkH5TFg4TZfHK+eEzw3fNcbSJLg9H+m52hrHQpmNcru0ZOhC2j MxNMtWlRgWwQ1Ga9ov2EB+HQnvyc7VqhALo3hjKrJQma6bWhuObmUxrB3sZL2Xxm eicqy4XRiOqgSXuEigF7v2K+c/ATlWoQWRSar2bgnL7nhtbliHkckfc= -----END CERTIFICATE-----Generated at Wed May 8 14:59:52 2024 by rpki-client on console-ams.rpki-client.org