$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/027DBEC91021154263BB0CF1565833705023D987.cer File: 027DBEC91021154263BB0CF1565833705023D987.cer (raw, json) Hash identifier: hV0wd3SQYK/kixKT2Wx+3REneKJyBvRB13PSfdE8pFs= Subject key identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 28D5ABF75826FA32F7F408475C6DCAC7C1EB02FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft caRepository: rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 18 Feb 2025 04:27:51 +0000 Certificate not after: Tue 17 Feb 2026 04:32:51 +0000 Subordinate resources: IP: 202.160.139.0/24 IP: 2403:e380::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d5:ab:f7:58:26:fa:32:f7:f4:08:47:5c:6d:ca:c7:c1:eb:02:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 18 04:27:51 2025 GMT Not After : Feb 17 04:32:51 2026 GMT Subject: CN=027DBEC91021154263BB0CF1565833705023D987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:84:4d:f1:7c:03:34:83:4c:63:14:b4:1a:0c: fb:fc:d1:a4:49:72:df:88:8b:ac:66:60:0e:e2:e2: 57:20:0f:e2:87:97:db:e8:ff:95:89:c0:ba:45:29: 5f:33:f8:91:73:74:e2:55:41:77:8a:aa:66:59:de: 8e:dc:ee:f3:17:69:29:de:ad:7f:4e:1a:ea:b3:c9: 99:6e:3d:ca:6e:9b:22:6a:b3:7d:50:f1:f4:db:62: 13:bb:89:dc:1f:a6:a0:ee:c5:59:e0:47:48:6d:ad: 66:c3:b7:52:52:e1:dd:80:e2:8d:be:f4:05:22:4a: 45:95:a1:0f:85:ed:fc:ff:4f:21:7d:03:98:15:ae: 4f:43:80:84:a9:32:d0:13:5d:79:c7:23:72:d0:c0: ff:fd:75:0a:f8:c0:32:b8:e7:ad:ac:cd:0c:45:33: 80:63:b5:2c:b0:4f:1f:92:2b:70:34:57:1d:54:7a: 4a:21:34:14:6b:f6:f6:1e:8e:9f:ae:39:78:0b:8f: 7d:8d:0e:e7:6a:ee:30:79:f2:6c:73:99:c9:a5:1c: 75:d8:bf:75:b2:9e:42:72:0d:45:ad:4a:7e:6b:d8: 3c:15:20:00:07:b9:f5:d2:d6:c2:ad:cc:90:06:00: 2f:ef:cc:72:e0:1d:cb:a5:5a:de:48:35:54:2b:93: bd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:7D:BE:C9:10:21:15:42:63:BB:0C:F1:56:58:33:70:50:23:D9:87 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/074f214a-bf55-4048-845d-20675fb5f2a4/0/027DBEC91021154263BB0CF1565833705023D987.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.160.139.0/24 IPv6: 2403:e380::/32 Signature Algorithm: sha256WithRSAEncryption 95:22:07:83:92:2d:cf:26:3e:19:15:16:72:51:c3:ad:a3:69: 2d:2b:f2:f3:09:73:7b:0d:a1:7a:28:96:93:c5:3b:a1:99:cd: 01:19:9b:83:dd:d2:2c:7a:d8:53:60:9e:3e:4e:30:b1:f2:d7: 7a:a9:6b:a1:54:db:e4:1b:7b:63:36:55:6d:70:80:82:54:ea: 1b:08:19:36:7e:19:70:3e:76:37:2c:20:d5:bc:6b:00:b1:63: bc:fc:67:5f:7c:46:1c:4e:74:28:2f:75:22:3c:f8:0a:b6:55: af:93:33:d9:b7:80:2a:82:ad:2c:39:9d:b2:22:04:b6:75:9b: 55:2e:04:3d:34:95:77:cf:5d:0d:23:29:d6:0d:d2:0d:a0:5c: 02:f5:b6:8a:75:8a:1f:86:c4:72:2c:b5:9e:32:13:87:85:79: b8:b7:a5:1d:fa:7d:1a:df:8e:41:d0:06:9f:bf:62:e4:fc:0b: 96:d5:57:fc:53:c2:9c:0a:59:d1:82:eb:be:a5:1c:1e:5f:20: 06:d3:54:93:b6:0d:08:1b:e6:2e:df:b5:84:72:62:ff:f5:c0: 91:f3:4a:7e:38:63:3f:be:ce:82:f6:0b:dd:6d:a4:18:f5:8e: 50:3d:33:8f:34:9d:f2:fc:ce:e2:f7:88:e2:4d:3a:2e:ab:fd: c7:55:ac:08 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUKNWr91gm+jL39AhHXG3Kx8HrAvwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxODA0Mjc1MVoX DTI2MDIxNzA0MzI1MVowMzExMC8GA1UEAxMoMDI3REJFQzkxMDIxMTU0MjYzQkIw Q0YxNTY1ODMzNzA1MDIzRDk4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqETfF8AzSDTGMUtBoM+/zRpEly34iLrGZgDuLiVyAP4oeX2+j/lYnAukUp XzP4kXN04lVBd4qqZlnejtzu8xdpKd6tf04a6rPJmW49ym6bImqzfVDx9NtiE7uJ 3B+moO7FWeBHSG2tZsO3UlLh3YDijb70BSJKRZWhD4Xt/P9PIX0DmBWuT0OAhKky 0BNdeccjctDA//11CvjAMrjnrazNDEUzgGO1LLBPH5IrcDRXHVR6SiE0FGv29h6O n645eAuPfY0O52ruMHnybHOZyaUcddi/dbKeQnINRa1KfmvYPBUgAAe59dLWwq3M kAYAL+/McuAdy6Va3kg1VCuTveMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAJ9vskQIRVCY7sM8VZYM3BQI9mHMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNzRmMjE0YS1iZjU1LTQwNDgtODQ1ZC0yMDY3NWZiNWYyYTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3NGYyMTRh LWJmNTUtNDA0OC04NDVkLTIwNjc1ZmI1ZjJhNC8wLzAyN0RCRUM5MTAyMTE1NDI2 M0JCMENGMTU2NTgzMzcwNTAyM0Q5ODcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BADKoIswDQQCAAIwBwMFACQD44AwDQYJKoZIhvcNAQELBQADggEBAJUiB4OSLc8m PhkVFnJRw62jaS0r8vMJc3sNoXoolpPFO6GZzQEZm4Pd0ix62FNgnj5OMLHy13qp a6FU2+Qbe2M2VW1wgIJU6hsIGTZ+GXA+djcsINW8awCxY7z8Z198RhxOdCgvdSI8 +Aq2Va+TM9m3gCqCrSw5nbIiBLZ1m1UuBD00lXfPXQ0jKdYN0g2gXAL1top1ih+G xHIstZ4yE4eFebi3pR36fRrfjkHQBp+/YuT8C5bVV/xTwpwKWdGC676lHB5fIAbT VJO2DQgb5i7ftYRyYv/1wJHzSn44Yz++zoL2C91tpBj1jlA9M480nfL8zuL3iOJN Oi6r/cdVrAg= -----END CERTIFICATE-----Generated at Sat Apr 5 10:25:27 2025 by rpki-client