$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer (raw, json) Hash identifier: DJSOsdFK0zsmvtpMWnMtgSk9qPi8UwuBfONm6pwsXJg= Subject key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 61A216069A6CBDD663560859876E793B6B772F9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft caRepository: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 19 Oct 2023 11:42:50 +0000 Certificate not after: Thu 17 Oct 2024 11:47:50 +0000 Subordinate resources: IP: 103.97.76.0/22 IP: 2401:8440::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 13:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:a2:16:06:9a:6c:bd:d6:63:56:08:59:87:6e:79:3b:6b:77:2f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 19 11:42:50 2023 GMT Not After : Oct 17 11:47:50 2024 GMT Subject: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b8:0d:f2:07:2f:87:a4:f7:4e:e1:65:b0:37: 44:99:60:2f:68:ef:ec:53:06:e6:46:80:68:34:6c: 06:28:fb:d3:05:72:1d:44:ca:bc:51:5d:cd:16:f0: b7:e7:cf:c7:2e:e3:30:54:c9:f3:88:2f:23:ab:07: 59:70:fe:d3:9e:b0:53:33:ac:2f:c4:04:3b:f3:54: d7:98:e9:60:8c:56:f0:b2:ac:eb:e4:42:29:05:76: 32:10:7f:52:a2:4a:e8:d3:8d:e5:0b:ad:cd:56:f0: 1d:08:97:8f:c2:17:df:67:fd:30:3f:b6:b3:78:70: 64:d2:66:2f:34:fa:97:4f:36:77:4e:13:48:22:88: ed:c2:76:0b:33:e2:68:ba:00:79:e7:c5:0b:08:84: da:a6:0d:6f:af:fd:32:1f:63:5b:bd:44:06:3e:77: b7:de:f6:b7:aa:94:cd:be:47:f6:63:31:7b:a5:aa: 3b:78:ce:01:04:71:50:8c:1a:45:55:b2:1b:8d:1c: 5b:59:63:4c:72:08:da:b9:fb:c0:84:d1:39:2a:89: d8:a7:54:4f:e2:0c:f2:fc:2a:c6:56:fc:4a:0f:a5: fc:70:47:9d:08:1b:da:f1:d5:62:28:d1:ea:e6:93: 74:e4:77:48:fa:61:3b:fc:dc:8a:e6:34:d9:97:30: ff:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.76.0/22 IPv6: 2401:8440::/32 Signature Algorithm: sha256WithRSAEncryption 71:f2:5b:64:75:fd:55:52:a1:cb:e2:4b:37:7f:cb:ba:d2:23: 5e:ee:f2:9d:8b:c9:86:2b:35:ca:81:f9:58:e6:ce:40:dc:2f: e4:22:7d:89:66:59:4d:fd:ed:a6:7e:ec:83:39:da:25:d8:66: 81:ec:d3:5f:d7:f8:9c:eb:ad:81:15:78:fe:4e:9b:a2:8e:6b: 5e:d5:0f:92:60:fe:ed:25:d8:2b:8d:3e:0e:c0:bc:a1:bd:b9: 05:13:97:9a:ea:92:4f:bd:60:85:4e:1a:b0:a9:2f:d1:d1:2c: be:3d:ee:32:24:b4:f8:02:d6:a3:50:70:fa:a6:27:87:60:d4: f7:f2:0d:1e:f9:b6:73:5b:6e:6c:0e:39:15:03:98:9a:bd:2c: f0:68:19:08:54:28:69:ee:11:77:4b:30:1d:02:a7:ef:71:36: 2c:b2:11:80:bc:f2:e4:d9:55:2e:ec:0b:53:8d:27:54:a4:62: 69:b1:8f:64:77:28:b6:21:03:9f:59:f1:22:1d:2d:88:ee:dc: fa:e6:c6:0f:99:35:ce:d8:9a:71:70:90:36:16:f9:83:e8:3d: a1:41:12:34:5d:53:b8:cb:c6:f2:a1:5c:36:b9:1d:00:0d:18: b7:f4:84:08:30:06:17:70:17:98:76:74:ad:fe:4e:f2:a5:b2: 32:91:3c:86 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUYaIWBppsvdZjVghZh255O2t3L50wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMTAxOTExNDI1MFoX DTI0MTAxNzExNDc1MFowMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdE MTBGOUU3M0ZGRDBCQUI5M0Y2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+4DfIHL4ek907hZbA3RJlgL2jv7FMG5kaAaDRsBij70wVyHUTKvFFdzRbw t+fPxy7jMFTJ84gvI6sHWXD+056wUzOsL8QEO/NU15jpYIxW8LKs6+RCKQV2MhB/ UqJK6NON5QutzVbwHQiXj8IX32f9MD+2s3hwZNJmLzT6l082d04TSCKI7cJ2CzPi aLoAeefFCwiE2qYNb6/9Mh9jW71EBj53t972t6qUzb5H9mMxe6WqO3jOAQRxUIwa RVWyG40cW1ljTHII2rn7wITROSqJ2KdUT+IM8vwqxlb8Sg+l/HBHnQgb2vHVYijR 6uaTdOR3SPphO/zciuY02Zcw/70CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH1kuPTPtocUETfRD55z/9C6uT9nMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1N2IwZDdl LWVhZGUtNDMxOC1hYjIwLThjN2YyZDViZTY5Zi8wLzdENjRCOEY0Q0ZCNjg3MTQx MTM3RDEwRjlFNzNGRkQwQkFCOTNGNjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnYUwwDQQCAAIwBwMFACQBhEAwDQYJKoZIhvcNAQELBQADggEBAHHyW2R1/VVS ocviSzd/y7rSI17u8p2LyYYrNcqB+VjmzkDcL+QifYlmWU397aZ+7IM52iXYZoHs 01/X+JzrrYEVeP5Om6KOa17VD5Jg/u0l2CuNPg7AvKG9uQUTl5rqkk+9YIVOGrCp L9HRLL497jIktPgC1qNQcPqmJ4dg1PfyDR75tnNbbmwOORUDmJq9LPBoGQhUKGnu EXdLMB0Cp+9xNiyyEYC88uTZVS7sC1ONJ1SkYmmxj2R3KLYhA59Z8SIdLYju3Prm xg+ZNc7YmnFwkDYW+YPoPaFBEjRdU7jLxvKhXDa5HQANGLf0hAgwBhdwF5h2dK3+ TvKlsjKRPIY= -----END CERTIFICATE-----Generated at Wed May 8 09:50:32 2024 by rpki-client on console-fra.rpki-client.org