$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer File: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer (raw, json) Hash identifier: vmxOzpEYXtac6KIIo66Era0uW9pCf4rcj63P5/7cyFY= Subject key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5A157EE4E9C7F700783F54DA7E7642A1BF714ACD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft caRepository: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0 Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 31 Jul 2023 05:27:38 +0000 Certificate not after: Mon 29 Jul 2024 05:32:38 +0000 Subordinate resources: IP: 103.126.8.0/22 IP: 2404:40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 May 2024 01:07:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:15:7e:e4:e9:c7:f7:00:78:3f:54:da:7e:76:42:a1:bf:71:4a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 05:27:38 2023 GMT Not After : Jul 29 05:32:38 2024 GMT Subject: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cf:ae:fc:fe:61:bf:0f:f9:c2:c3:86:03:fc: a2:4a:e5:26:31:2a:41:a2:02:ca:1e:25:9e:4d:0c: 5b:6c:05:a7:bc:c1:95:a5:df:20:3b:3c:a0:1b:cc: da:56:24:4c:ce:a2:e0:1a:c6:5e:de:c3:99:26:96: a8:1d:95:f1:ac:ff:41:ef:f4:f7:52:78:ca:13:2f: dd:fd:60:00:ad:de:65:ca:0a:a9:0d:8c:f8:97:c9: d2:0f:60:1a:0f:95:8f:db:f9:2e:4f:fb:a2:05:aa: 74:e2:01:e5:44:9f:8b:77:50:aa:56:ff:95:5b:ec: 77:16:a2:bc:6f:ee:d6:04:e6:8a:52:80:92:75:43: 32:d9:8f:6f:59:a3:d7:46:c8:db:92:c1:e6:0b:9e: 71:58:4f:03:38:e7:07:4d:da:0b:10:96:c7:b0:a3: b8:df:80:15:4e:b9:be:8f:03:09:00:2d:1d:17:b9: b0:11:cb:dd:82:68:75:cc:52:0b:48:c6:1d:a6:bf: 36:b0:43:09:00:13:15:04:34:15:c1:f0:ea:aa:eb: 32:6a:6f:ce:3c:e0:f2:15:2c:3d:e6:fe:0b:e3:47: 37:22:21:81:8a:9d:f3:51:46:44:78:ef:0f:4a:ab: d1:42:a9:3f:c3:5d:7a:38:7e:f8:d7:63:4c:23:6d: 42:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.8.0/22 IPv6: 2404:40::/32 Signature Algorithm: sha256WithRSAEncryption 33:b4:96:d6:1f:ae:25:8c:2a:d1:e9:20:13:7d:03:86:88:da: 74:08:13:f2:7c:a1:52:28:24:b3:ea:52:8e:9b:54:94:81:68: 8c:60:aa:67:12:8f:2d:7b:6c:30:f3:ab:18:11:85:34:f7:84: bd:01:a7:0e:06:99:5b:d5:1b:05:a8:27:99:87:1b:25:24:3b: 80:75:06:fc:05:a9:02:ef:d4:33:a0:c1:89:68:4b:97:50:5c: b7:e8:d5:96:9e:51:fe:5d:74:60:9c:13:c0:d1:14:e6:22:84: 42:95:81:5a:df:86:d6:ba:12:6a:6d:2b:84:55:8f:6c:24:65: 2c:4e:93:51:37:c5:cb:20:be:9d:1f:a1:a0:6d:fc:6f:0c:24: 3e:6b:80:19:59:1c:d7:91:27:a1:95:02:9e:db:58:c0:6e:a0: 91:ed:dd:4c:dd:b6:95:dc:d9:59:78:1f:bc:29:90:6e:50:be: 0b:38:7f:af:27:0d:e6:55:9e:c5:ac:61:91:e6:6a:d9:62:55: fe:82:3d:28:06:23:98:57:7d:3e:3b:8a:40:a0:ed:6f:da:9c: 03:42:d6:8f:40:05:51:2e:c3:0a:f4:c6:2b:21:72:3a:97:3f: 5c:e4:4b:a8:3c:9e:c8:da:b9:c0:f3:ff:aa:69:8b:a1:f8:65: 4c:96:b0:f0 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUWhV+5OnH9wB4P1TafnZCob9xSs0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIzMDczMTA1MjczOFoX DTI0MDcyOTA1MzIzOFowMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhB Q0FFMkE3NTJCQjE1QTI0NUUxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLPrvz+Yb8P+cLDhgP8okrlJjEqQaICyh4lnk0MW2wFp7zBlaXfIDs8oBvM 2lYkTM6i4BrGXt7DmSaWqB2V8az/Qe/091J4yhMv3f1gAK3eZcoKqQ2M+JfJ0g9g Gg+Vj9v5Lk/7ogWqdOIB5USfi3dQqlb/lVvsdxaivG/u1gTmilKAknVDMtmPb1mj 10bI25LB5guecVhPAzjnB03aCxCWx7CjuN+AFU65vo8DCQAtHRe5sBHL3YJodcxS C0jGHaa/NrBDCQATFQQ0FcHw6qrrMmpvzjzg8hUsPeb+C+NHNyIhgYqd81FGRHjv D0qr0UKpP8Ndejh++NdjTCNtQtkCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCX7A9Ciw1R8Ojisrip1K7FaJF4VMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAxOGM2ODMx LThmNDAtNGEyMC04MTNlLTg3ODU1OGU4MGMyNi8wLzI1RkIwM0QwQTJDMzU0N0Mz QTM4QUNBRTJBNzUyQkIxNUEyNDVFMTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnfggwDQQCAAIwBwMFACQEAEAwDQYJKoZIhvcNAQELBQADggEBADO0ltYfriWM KtHpIBN9A4aI2nQIE/J8oVIoJLPqUo6bVJSBaIxgqmcSjy17bDDzqxgRhTT3hL0B pw4GmVvVGwWoJ5mHGyUkO4B1BvwFqQLv1DOgwYloS5dQXLfo1ZaeUf5ddGCcE8DR FOYihEKVgVrfhta6EmptK4RVj2wkZSxOk1E3xcsgvp0foaBt/G8MJD5rgBlZHNeR J6GVAp7bWMBuoJHt3UzdtpXc2Vl4H7wpkG5Qvgs4f68nDeZVnsWsYZHmatliVf6C PSgGI5hXfT47ikCg7W/anANC1o9ABVEuwwr0xishcjqXP1zkS6g8nsjaucDz/6pp i6H4ZUyWsPA= -----END CERTIFICATE-----Generated at Sat Apr 27 20:19:54 2024 by rpki-client on console-ams.rpki-client.org