$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer File: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer (raw, json) Hash identifier: Uxz26+XYrrJVWAGgjF2qMSB9+ax6WA8eFhPJuzfZwIc= Subject key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5EDDE7DD01F306F9495D8C442F30D1512AD2DE63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft caRepository: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 09:12:44 +0000 Certificate not after: Mon 30 Jun 2025 09:17:44 +0000 Subordinate resources: IP: 103.102.12.0/22 IP: 2401:db40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:dd:e7:dd:01:f3:06:f9:49:5d:8c:44:2f:30:d1:51:2a:d2:de:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jul 1 09:12:44 2024 GMT Not After : Jun 30 09:17:44 2025 GMT Subject: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:5f:50:24:b2:db:05:2b:92:79:49:03:03: 9f:0b:3c:fd:03:48:56:ca:b7:13:88:fa:44:df:0d: d6:b4:39:57:72:1a:95:93:b0:96:1e:99:6d:f6:ce: be:49:f1:39:0e:cf:7a:0d:d3:9d:e5:4f:ad:2b:01: 15:75:f1:7e:46:b7:71:64:b4:40:6f:ff:0d:2a:bd: 4c:4e:6e:e1:09:50:56:a9:53:11:cb:9a:59:74:af: 01:be:e4:76:4d:ce:c7:8d:64:71:c4:38:02:92:3c: 7f:54:18:f8:9f:34:82:f5:ee:bc:e8:ad:ec:98:ae: cf:1a:b8:f6:26:58:e0:8c:18:66:c4:23:3e:4b:17: 44:a2:d8:2b:2b:91:52:69:03:eb:6e:a6:80:1d:86: 1f:fd:25:f7:a6:12:c5:c6:3c:87:1b:65:84:aa:33: db:37:bd:ec:eb:ea:c5:df:92:af:bf:1f:d9:ec:84: 6f:36:2c:3f:07:8f:df:a8:43:52:dc:3e:ad:5b:62: 22:87:4a:4f:f5:af:17:6a:8d:4b:5c:79:3c:23:55: b4:ea:e0:e4:b1:cf:a1:0b:bd:9c:59:7e:a6:07:4e: 99:fc:d1:34:8e:6b:b2:a9:56:62:77:88:35:83:9f: c6:52:60:39:19:c2:18:15:55:5d:b9:fc:e7:e5:fb: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.12.0/22 IPv6: 2401:db40::/32 Signature Algorithm: sha256WithRSAEncryption 2c:d7:00:b5:a1:05:05:12:96:b4:6c:dd:f4:72:4c:cb:b0:79: 99:a2:a7:47:b9:40:96:4d:b5:b2:f9:55:51:79:1e:b8:16:d3: a5:d9:15:87:9b:ac:41:92:c9:a8:a5:c5:7c:00:fd:32:b2:73: d1:fe:84:0e:02:ba:c1:5d:22:55:ad:13:d1:1a:a1:28:96:fd: 41:7c:fc:0b:61:d2:91:40:bc:cf:a6:a0:5f:06:23:a6:da:46: 36:05:9c:77:21:c0:e0:b9:12:83:81:3e:10:eb:5c:7a:94:1e: 3c:51:d6:3b:cb:da:01:7c:9d:58:de:41:a2:d2:5c:f4:94:a8: 05:37:33:1c:3b:6c:d9:f0:c0:68:60:7c:4a:d5:ca:25:ac:a5: 96:21:c9:3c:7d:d9:26:1b:e9:21:8a:0b:d3:c7:d1:21:1f:f0: e5:38:52:d4:09:f0:59:e9:30:c9:c9:c5:63:e5:9d:60:68:00: dd:b1:f1:4f:4a:77:47:1f:f7:37:2d:95:c4:56:3c:c5:4d:a3: 23:63:82:b4:c4:d3:9b:53:11:bf:e9:95:c4:38:01:c2:ba:8a: e2:13:c0:f4:00:b1:cc:7f:fa:d1:8e:c0:d6:26:6f:34:e8:80: 9d:3f:4c:68:dc:82:aa:5d:5c:ed:cd:fa:34:06:e8:41:cc:65: 46:f5:9f:25 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUXt3n3QHzBvlJXYxELzDRUSrS3mMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTA5MTI0NFoX DTI1MDYzMDA5MTc0NFowMzExMC8GA1UEAxMoMDg3NzMxOTFGQkZDMjFBM0M4NjE1 QTNFMzZBMkFDQjE4N0Y2M0MyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjkX1AkstsFK5J5SQMDnws8/QNIVsq3E4j6RN8N1rQ5V3IalZOwlh6ZbfbO vknxOQ7Peg3TneVPrSsBFXXxfka3cWS0QG//DSq9TE5u4QlQVqlTEcuaWXSvAb7k dk3Ox41kccQ4ApI8f1QY+J80gvXuvOit7Jiuzxq49iZY4IwYZsQjPksXRKLYKyuR UmkD626mgB2GH/0l96YSxcY8hxtlhKoz2ze97Ovqxd+Sr78f2eyEbzYsPweP36hD Utw+rVtiIodKT/WvF2qNS1x5PCNVtOrg5LHPoQu9nFl+pgdOmfzRNI5rsqlWYneI NYOfxlJgORnCGBVVXbn85+X7ktECAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAh3MZH7/CGjyGFaPjairLGH9jwlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81Zjg2YjEyZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmODZiMTJl LWU1NzQtNDI2Yi1hYTZiLTQ5MzllM2IwMzBiYS8wLzA4NzczMTkxRkJGQzIxQTND ODYxNUEzRTM2QTJBQ0IxODdGNjNDMjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnZgwwDQQCAAIwBwMFACQB20AwDQYJKoZIhvcNAQELBQADggEBACzXALWhBQUS lrRs3fRyTMuweZmip0e5QJZNtbL5VVF5HrgW06XZFYebrEGSyailxXwA/TKyc9H+ hA4CusFdIlWtE9EaoSiW/UF8/Ath0pFAvM+moF8GI6baRjYFnHchwOC5EoOBPhDr XHqUHjxR1jvL2gF8nVjeQaLSXPSUqAU3Mxw7bNnwwGhgfErVyiWspZYhyTx92SYb 6SGKC9PH0SEf8OU4UtQJ8FnpMMnJxWPlnWBoAN2x8U9Kd0cf9zctlcRWPMVNoyNj grTE05tTEb/plcQ4AcK6iuITwPQAscx/+tGOwNYmbzTogJ0/TGjcgqpdXO3N+jQG 6EHMZUb1nyU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:48:40 2025 by rpki-client