$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer File: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer (raw, json) Hash identifier: ISjZswnOsvkLk8/YRCQM6DqzWnZOXdlpO7PAkKLPYn8= Subject key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1314B94002CA139B7D134E1936CDCD810B7F99A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft caRepository: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 24 Apr 2024 10:47:51 +0000 Certificate not after: Wed 23 Apr 2025 10:52:51 +0000 Subordinate resources: IP: 61.29.252.0/23 IP: 103.130.198.0/23 IP: 117.103.116.0/24 IP: 160.20.222.0/24 IP: 2407:14c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 11 May 2024 10:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:14:b9:40:02:ca:13:9b:7d:13:4e:19:36:cd:cd:81:0b:7f:99:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 24 10:47:51 2024 GMT Not After : Apr 23 10:52:51 2025 GMT Subject: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bb:7c:05:4b:9c:56:b1:d0:04:b6:63:90:c0: 24:ea:42:22:cf:2d:83:91:72:38:6b:c6:18:a9:6a: 02:dc:d8:07:f4:b4:be:a6:f7:32:14:7b:fe:e8:d0: 29:09:7d:b4:b2:85:9b:c8:09:96:4f:9b:44:e1:aa: 4b:18:c4:ec:be:93:4e:01:0a:47:30:9f:73:28:61: a1:db:05:32:d5:cf:9c:46:63:c8:8c:30:c2:7e:61: 6d:1b:d3:2f:a0:53:d5:b6:e3:df:5f:45:0e:c4:ae: d1:aa:f2:b2:9d:b4:06:cb:b2:50:99:ae:a8:aa:e1: 1c:2b:42:92:7e:d6:8f:11:38:8e:58:15:03:d2:d7: 30:fd:f5:2e:ef:5d:cc:d4:54:ed:fe:75:17:e0:20: bd:83:05:ec:b4:d2:41:31:ab:6c:45:d6:9c:e8:0e: 15:8b:e0:70:bd:40:44:6d:f4:05:e8:36:11:1e:d5: 12:3b:69:eb:e9:5a:75:8c:b1:66:ec:b9:77:b8:35: c1:01:be:f3:7c:0f:f3:a4:42:b0:32:e2:7d:10:9d: 8c:c5:f2:3d:e2:05:dc:35:8d:cf:57:7a:27:ca:b4: 81:7f:62:b9:9d:38:be:8e:4d:f9:f5:1d:8c:85:e6: 75:92:36:3a:5e:53:43:35:94:25:ad:be:99:c1:05: e3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.29.252.0/23 103.130.198.0/23 117.103.116.0/24 160.20.222.0/24 IPv6: 2407:14c0::/32 Signature Algorithm: sha256WithRSAEncryption 00:29:ed:96:b4:69:05:4a:a7:13:c6:05:b4:c3:95:69:7c:c5: a4:d1:f7:90:fb:51:58:2a:08:1f:f0:58:92:7b:f7:04:d8:4e: 5f:90:eb:ae:71:f0:70:8f:5b:df:5e:12:3b:a6:2f:ef:fc:60: c3:97:8c:e1:1d:de:dd:b9:0b:92:b1:6e:fd:a9:03:95:33:36: 0b:f8:e4:48:4b:c3:e6:c9:83:fe:d5:a0:a5:e4:be:c4:18:cf: 21:e8:d2:37:96:52:ba:a0:87:22:db:e6:06:a5:12:7f:31:20: 6b:77:fd:e1:4d:29:5c:dc:61:b1:14:cb:9a:f0:aa:f2:6e:77: 3d:2b:9e:ae:a6:a1:54:b2:89:f4:94:be:b1:11:29:d2:44:21: 7f:e2:13:13:59:17:32:df:1d:54:e4:cf:7f:b2:33:78:12:4f: d7:0b:94:24:f8:e9:28:79:e2:d9:fb:b2:da:ed:9b:a0:47:f8: 26:6f:40:d6:de:25:d5:49:7f:e1:57:23:1f:ae:aa:1f:05:b5: ef:b0:c2:da:00:5f:2e:03:7b:b3:5c:31:aa:5c:bf:45:7a:e0: b4:d4:b6:e7:61:b7:93:67:6e:5a:89:dc:e9:1c:5f:c7:ef:f1: c3:28:59:ae:28:5d:0b:27:62:79:ff:c8:31:c7:8b:30:e9:05: b0:91:f1:4e -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgIUExS5QALKE5t9E04ZNs3NgQt/macwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDQyNDEwNDc1MVoX DTI1MDQyMzEwNTI1MVowMzExMC8GA1UEAxMoQjg3N0NEMUM1NDJDM0RFMkNCQjhF RjE1MUYxNzlCODU3RTkzNzZFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALW7fAVLnFax0AS2Y5DAJOpCIs8tg5FyOGvGGKlqAtzYB/S0vqb3MhR7/ujQ KQl9tLKFm8gJlk+bROGqSxjE7L6TTgEKRzCfcyhhodsFMtXPnEZjyIwwwn5hbRvT L6BT1bbj319FDsSu0arysp20BsuyUJmuqKrhHCtCkn7WjxE4jlgVA9LXMP31Lu9d zNRU7f51F+AgvYMF7LTSQTGrbEXWnOgOFYvgcL1ARG30Beg2ER7VEjtp6+ladYyx Zuy5d7g1wQG+83wP86RCsDLifRCdjMXyPeIF3DWNz1d6J8q0gX9iuZ04vo5N+fUd jIXmdZI2Ol5TQzWUJa2+mcEF4w8CAwEAAaOCAtkwggLVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLh3zRxULD3iy7jvFR8Xm4V+k3bkMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmNmQxODVl LWQ0ZjQtNDgyMC1iNGI2LTc5OGMzMDdhZDdlNS8wL0I4NzdDRDFDNTQyQzNERTJD QkI4RUYxNTFGMTc5Qjg1N0U5Mzc2RTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgD BAE9HfwDBAFngsYDBAB1Z3QDBACgFN4wDQQCAAIwBwMFACQHFMAwDQYJKoZIhvcN AQELBQADggEBAAAp7Za0aQVKpxPGBbTDlWl8xaTR95D7UVgqCB/wWJJ79wTYTl+Q 665x8HCPW99eEjumL+/8YMOXjOEd3t25C5Kxbv2pA5UzNgv45EhLw+bJg/7VoKXk vsQYzyHo0jeWUrqghyLb5galEn8xIGt3/eFNKVzcYbEUy5rwqvJudz0rnq6moVSy ifSUvrERKdJEIX/iExNZFzLfHVTkz3+yM3gST9cLlCT46Sh54tn7strtm6BH+CZv QNbeJdVJf+FXIx+uqh8Fte+wwtoAXy4De7NcMapcv0V64LTUtudht5NnblqJ3Okc X8fv8cMoWa4oXQsnYnn/yDHHizDpBbCR8U4= -----END CERTIFICATE-----Generated at Wed May 8 05:33:22 2024 by rpki-client on console-ams.rpki-client.org