$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.cer (raw, json) Hash identifier: xLJ4hIpnRcUoDNnq5FqsrTMO/e5DLH45kHfWxeoss9s= Subject key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3CF6FA18E8121FDFBFB7A160A6DF75B6DF9DD90F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft caRepository: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 10 May 2025 02:12:33 +0000 Certificate not after: Sat 09 May 2026 02:17:33 +0000 Subordinate resources: IP: 103.166.164.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f6:fa:18:e8:12:1f:df:bf:b7:a1:60:a6:df:75:b6:df:9d:d9:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 10 02:12:33 2025 GMT Not After : May 9 02:17:33 2026 GMT Subject: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:fd:b7:46:4b:bd:ec:53:be:25:56:a3:a0: ff:f4:f5:63:3d:85:b0:c9:0f:4e:d9:b2:a6:14:f5: 3c:bf:ef:cd:55:ed:32:71:a1:f0:2f:fe:99:74:78: 4b:51:23:89:d8:88:f3:da:42:af:be:7c:8e:95:b5: c8:a5:32:f4:e0:13:86:75:4c:b2:9b:d7:15:87:31: 55:4e:47:eb:d4:7c:fd:e4:59:d5:c8:8f:51:be:95: 78:0d:42:b5:55:3e:37:06:87:c0:c3:91:b1:25:e5: cd:7f:ca:ee:25:eb:8e:87:21:e9:cb:cb:09:db:fa: 31:06:07:8f:74:70:c9:68:9b:51:1d:2f:12:42:cd: 4b:8d:5d:53:c4:28:e1:dd:04:f7:69:a6:5b:00:9e: 59:e4:cf:f8:14:da:c6:d7:bf:d1:ed:15:4f:07:af: 1e:fd:f1:dc:b4:e2:88:99:96:82:76:75:f2:91:6b: b3:96:01:1b:75:04:c5:8f:6e:c7:64:09:84:cc:1c: 42:db:ee:b7:01:02:d4:87:78:de:32:30:93:e3:34: c8:f5:28:00:a2:f8:65:88:47:23:cf:34:5e:72:9b: d0:85:25:2e:fd:0f:f0:de:eb:11:db:5a:4f:87:aa: de:30:e3:38:8e:74:2a:e5:b4:c3:e0:f3:4f:2e:a1: 46:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.164.0/24 Signature Algorithm: sha256WithRSAEncryption 51:8a:f9:fd:a2:51:67:6a:28:a6:49:e5:61:df:4c:ae:76:04: 0d:6e:eb:e9:e9:b8:3a:67:2d:fd:01:07:d2:f5:c1:99:2c:b6: 8e:46:4f:31:73:9b:08:2c:1b:cc:63:e4:f2:49:3f:de:a4:4e: 6a:2e:f8:98:c2:e6:23:4d:37:ad:61:52:85:b0:3b:b1:1c:a4: 1a:13:24:94:a5:58:6d:01:e6:42:0f:ab:b1:9b:7b:36:76:95: d3:b7:cd:a7:8a:c3:34:3b:98:42:bf:83:b2:50:21:68:00:38: 28:99:df:ea:32:0e:b5:30:af:dd:18:72:bb:aa:88:a7:b2:e3: f1:db:94:13:04:1e:96:38:8c:93:10:af:b0:f7:87:cf:1a:95: bd:bd:78:56:b5:90:b9:24:80:cf:53:71:70:c2:ee:1a:7f:63: da:d0:cb:ef:a8:c0:00:fb:50:d6:78:91:a4:39:0e:b8:a6:17: be:b8:4a:1d:90:c1:1e:27:6d:04:91:2b:29:bc:01:67:bf:20: bf:c1:8d:df:53:08:ba:64:2d:fe:a8:de:a4:b0:af:7c:2b:ab: 46:70:c7:15:eb:2a:a4:47:5e:a6:fc:5a:5d:d6:f2:d2:dd:0c: 0f:cd:6c:69:68:3a:c0:a9:41:ab:1a:b0:eb:01:cf:d2:92:6a: f2:ab:1f:ca -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPPb6GOgSH9+/t6Fgpt91tt+d2Q8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUxMDAyMTIzM1oX DTI2MDUwOTAyMTczM1owMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2 NDFGQUZCM0JCRjI1RDg0RDY2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6c/bdGS73sU74lVqOg//T1Yz2FsMkPTtmyphT1PL/vzVXtMnGh8C/+mXR4 S1EjidiI89pCr758jpW1yKUy9OAThnVMspvXFYcxVU5H69R8/eRZ1ciPUb6VeA1C tVU+NwaHwMORsSXlzX/K7iXrjoch6cvLCdv6MQYHj3RwyWibUR0vEkLNS41dU8Qo 4d0E92mmWwCeWeTP+BTaxte/0e0VTwevHv3x3LTiiJmWgnZ18pFrs5YBG3UExY9u x2QJhMwcQtvutwEC1Id43jIwk+M0yPUoAKL4ZYhHI880XnKb0IUlLv0P8N7rEdta T4eq3jDjOI50KuW0w+DzTy6hRmUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAEhtSPKR0skgw9kH6+zu/JdhNZvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhOWI4MjJh LThiOTEtNDhkMi05YmMxLWFlMGQ5MDBiZjljNy8wLzAxMjFCNTIzQ0E0NzRCMjQ4 MzBGNjQxRkFGQjNCQkYyNUQ4NEQ2NkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnpqQwDQYJKoZIhvcNAQELBQADggEBAFGK+f2iUWdqKKZJ5WHfTK52BA1u6+np uDpnLf0BB9L1wZksto5GTzFzmwgsG8xj5PJJP96kTmou+JjC5iNNN61hUoWwO7Ec pBoTJJSlWG0B5kIPq7GbezZ2ldO3zaeKwzQ7mEK/g7JQIWgAOCiZ3+oyDrUwr90Y cruqiKey4/HblBMEHpY4jJMQr7D3h88alb29eFa1kLkkgM9TcXDC7hp/Y9rQy++o wAD7UNZ4kaQ5DrimF764Sh2QwR4nbQSRKym8AWe/IL/Bjd9TCLpkLf6o3qSwr3wr q0ZwxxXrKqRHXqb8Wl3W8tLdDA/NbGloOsCpQasasOsBz9KSavKrH8o= -----END CERTIFICATE-----Generated at Tue Jun 3 23:59:28 2025 by rpki-client