$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer File: 03F45A130990D1072FE172E1EF64AAFAEC347834.cer (raw, json) Hash identifier: JOxQRSMR58ehl9OomOV2rU7X8JIx/KK2x89pC8xnK0Y= Subject key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 44D9820EC4300458B4F1AB60300B6EDD3636E710 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft caRepository: rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 14 Jan 2025 01:04:00 +0000 Certificate not after: Tue 13 Jan 2026 01:09:00 +0000 Subordinate resources: IP: 103.143.4.0/23 IP: 2405:4640::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d9:82:0e:c4:30:04:58:b4:f1:ab:60:30:0b:6e:dd:36:36:e7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 14 01:04:00 2025 GMT Not After : Jan 13 01:09:00 2026 GMT Subject: CN=03F45A130990D1072FE172E1EF64AAFAEC347834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:55:16:3c:03:d7:bd:be:7b:6c:39:66:1f:5a: 37:ca:8d:03:e6:fd:f2:ff:7d:20:ea:65:30:74:6a: fd:48:27:52:9b:b4:b7:30:3d:35:b9:c2:4a:c6:05: 28:61:61:ed:4b:1a:6e:f0:72:4c:40:25:1f:2c:70: f3:49:21:77:3d:06:30:d0:76:93:8e:1c:ef:fe:19: 22:29:e6:dc:b6:62:fa:e4:04:d5:13:b6:7a:96:3f: 4d:53:be:a0:51:73:e6:ad:21:70:67:ae:83:ce:8a: 67:9c:9b:82:63:19:6a:25:28:b5:84:16:c4:07:25: 74:54:1c:9d:e1:d0:65:79:a9:ba:74:0b:07:d9:59: 43:6c:03:df:96:9c:21:55:85:8f:5b:75:57:92:11: dd:2a:86:a9:52:fe:13:f2:b0:cd:2a:d2:b9:94:6f: c1:4e:38:25:d5:c8:8e:f0:ec:4e:ff:cd:62:37:3b: 01:ee:38:69:6b:c2:8b:73:8f:35:0d:5e:38:c7:79: 57:ab:cf:a3:64:35:a1:c7:27:1d:aa:d8:f9:2e:bf: 74:fe:0e:25:46:3a:e8:09:e3:cd:0e:7d:e9:4e:c9: ea:e3:8e:17:8b:d4:26:df:5a:91:84:92:67:84:50: 7e:19:39:39:0a:d6:40:4a:4c:70:43:f5:2e:7c:04: e1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.4.0/23 IPv6: 2405:4640::/32 Signature Algorithm: sha256WithRSAEncryption 5d:d6:90:85:16:dc:09:84:a1:22:3a:e3:58:83:d8:26:9f:3e: 99:34:fe:bb:cb:28:39:ae:15:e1:1b:e4:1f:b8:f3:1f:24:30: 04:be:18:c5:fb:20:b5:97:14:ca:59:3a:40:55:47:cd:18:62: ef:b8:27:3f:fa:46:78:47:d7:4e:c1:1f:f8:73:71:34:c4:b8: 74:15:fb:ae:82:98:03:f8:68:56:28:e7:f9:6c:aa:35:5b:14: e0:39:36:a2:04:d3:17:e7:75:51:e3:5b:eb:c2:2a:69:a7:6b: dc:4b:92:49:f3:9a:35:92:ca:c2:85:35:b9:e0:d5:fc:ff:88: 12:4a:29:cc:78:37:b5:71:7a:66:66:af:dc:6d:6b:c7:1b:c7: 24:e9:41:df:3e:1f:67:76:50:f7:42:ef:ed:3b:a7:18:3d:95: 24:b9:db:b0:84:ce:4b:20:df:59:25:1e:6a:f7:9e:36:d2:24: 81:cf:c4:81:5b:e8:72:f5:06:26:fa:35:42:a0:6d:01:d1:11: f1:0a:8d:38:14:e2:0e:bc:df:fc:f1:33:d6:17:40:d3:9c:fe: 36:6d:c9:5d:3e:65:48:64:8c:74:51:82:ca:2a:2e:fb:52:ba: 40:bb:e5:33:94:c6:8b:82:85:24:d9:c1:fa:d0:c2:d6:02:6c: 58:87:7c:b6 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIURNmCDsQwBFi08atgMAtu3TY25xAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDExNDAxMDQwMFoX DTI2MDExMzAxMDkwMFowMzExMC8GA1UEAxMoMDNGNDVBMTMwOTkwRDEwNzJGRTE3 MkUxRUY2NEFBRkFFQzM0NzgzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALxVFjwD172+e2w5Zh9aN8qNA+b98v99IOplMHRq/UgnUpu0tzA9NbnCSsYF KGFh7UsabvByTEAlHyxw80khdz0GMNB2k44c7/4ZIinm3LZi+uQE1RO2epY/TVO+ oFFz5q0hcGeug86KZ5ybgmMZaiUotYQWxAcldFQcneHQZXmpunQLB9lZQ2wD35ac IVWFj1t1V5IR3SqGqVL+E/KwzSrSuZRvwU44JdXIjvDsTv/NYjc7Ae44aWvCi3OP NQ1eOMd5V6vPo2Q1occnHarY+S6/dP4OJUY66AnjzQ596U7J6uOOF4vUJt9akYSS Z4RQfhk5OQrWQEpMcEP1LnwE4fUCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAP0WhMJkNEHL+Fy4e9kqvrsNHg0MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83OTk4ZDZlZS02ZmQ3LTRlMmQtYWU0MS02OTM5ZmRiMTUzZWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5OThkNmVl LTZmZDctNGUyZC1hZTQxLTY5MzlmZGIxNTNlZS8wLzAzRjQ1QTEzMDk5MEQxMDcy RkUxNzJFMUVGNjRBQUZBRUMzNDc4MzQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnjwQwDQQCAAIwBwMFACQFRkAwDQYJKoZIhvcNAQELBQADggEBAF3WkIUW3AmE oSI641iD2CafPpk0/rvLKDmuFeEb5B+48x8kMAS+GMX7ILWXFMpZOkBVR80YYu+4 Jz/6RnhH107BH/hzcTTEuHQV+66CmAP4aFYo5/lsqjVbFOA5NqIE0xfndVHjW+vC Kmmna9xLkknzmjWSysKFNbng1fz/iBJKKcx4N7VxemZmr9xta8cbxyTpQd8+H2d2 UPdC7+07pxg9lSS527CEzksg31klHmr3njbSJIHPxIFb6HL1Bib6NUKgbQHREfEK jTgU4g683/zxM9YXQNOc/jZtyV0+ZUhkjHRRgsoqLvtSukC75TOUxouChSTZwfrQ wtYCbFiHfLY= -----END CERTIFICATE-----Generated at Sun Feb 16 20:57:09 2025 by rpki-client