$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1072AD17A8EDB1513AED95A258088F480ADA492B.cer File: 1072AD17A8EDB1513AED95A258088F480ADA492B.cer (raw, json) Hash identifier: LkrCFtjTOyP9P+bHyqzwaqQIeIC0fpX2YJMbJyav2uY= Subject key identifier: 10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6B37E1E98D2E7044BDF7A655ED17F8F344C92BBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft caRepository: rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 03 Jan 2025 13:28:22 +0000 Certificate not after: Fri 02 Jan 2026 13:33:22 +0000 Subordinate resources: IP: 103.220.114.0/23 IP: 2001:df2:6e00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:37:e1:e9:8d:2e:70:44:bd:f7:a6:55:ed:17:f8:f3:44:c9:2b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 3 13:28:22 2025 GMT Not After : Jan 2 13:33:22 2026 GMT Subject: CN=1072AD17A8EDB1513AED95A258088F480ADA492B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:89:bc:f0:36:5d:c9:ca:77:13:c2:1e:91: e0:da:67:fa:3e:5b:9a:fd:54:73:d0:d2:96:8a:2b: db:be:fc:c6:3b:35:ca:93:43:e1:9f:6d:e5:e5:15: 1d:b8:39:56:87:29:b7:2b:71:79:87:c5:ef:81:9b: 61:de:ee:b3:5a:2d:46:87:29:40:30:28:9b:dd:f9: 19:f3:0c:8b:bf:65:d8:0c:17:0d:a1:0f:43:c9:11: 0e:88:75:ac:17:79:fe:60:23:59:e4:b2:6d:d2:04: 24:0a:5e:71:e4:cb:b4:a0:59:a3:38:54:65:ea:b9: 3c:da:86:db:d9:c3:8e:c5:75:64:9a:8e:fe:05:ba: 03:33:3b:38:bb:2a:92:13:fe:be:19:a4:ea:33:cc: d1:87:9c:93:3b:48:a7:a3:bb:4d:c9:e7:4c:9c:e5: 9a:88:e0:43:ff:1f:6f:74:83:30:6b:db:f7:a1:8b: ec:4e:b0:b0:88:37:46:2f:5e:ce:79:31:95:80:23: 88:bb:f3:87:cb:c3:56:bc:e1:cf:74:46:93:54:6d: fc:e1:3c:45:7e:22:da:b0:1f:49:44:4d:67:78:4c: c2:38:22:6e:31:18:1b:1f:4b:56:cd:67:3f:36:e2: 11:3c:d5:52:93:b5:71:17:fe:cc:bf:64:bf:99:78: 1a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:72:AD:17:A8:ED:B1:51:3A:ED:95:A2:58:08:8F:48:0A:DA:49:2B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/154b9d32-3c5a-40e2-b788-069de0c3d2de/0/1072AD17A8EDB1513AED95A258088F480ADA492B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.220.114.0/23 IPv6: 2001:df2:6e00::/48 Signature Algorithm: sha256WithRSAEncryption 09:c3:4b:eb:7c:07:3e:3b:45:97:5d:e1:0a:2f:33:e2:10:96: 3f:e5:2e:5c:7b:6f:0d:5b:40:a3:16:43:fb:78:70:ea:72:cf: 26:72:b4:44:b1:b3:4f:b5:44:2e:11:5c:c4:c2:1d:08:c3:8a: d0:e0:3f:91:21:51:05:b6:29:84:f4:53:95:66:0c:3c:c4:e7: 7b:e2:93:1d:7f:89:27:31:ec:05:7d:41:3b:a8:ce:4a:ee:f7: 96:72:6a:89:14:00:4b:85:72:46:85:e0:96:fa:ac:09:d8:e5: 71:b4:f1:50:23:c1:ac:dc:66:ac:88:d3:5d:6a:60:d0:18:68: 03:4c:fb:48:5a:5a:a6:75:a2:a1:24:bd:c1:d4:cf:b2:7e:3e: 0c:24:e4:e2:91:3c:52:37:e3:9f:cc:b3:22:50:7a:02:58:43: 4c:33:f0:00:d4:b7:ef:2a:4e:dd:bc:67:d2:f6:2c:19:d6:ea: f6:0a:e2:10:de:fc:1f:18:b1:4b:57:9d:c4:de:5d:29:24:8d: 1d:f1:da:28:05:af:e9:d5:b0:05:59:8f:d2:08:96:31:8f:a7: a2:8c:a1:8c:7c:27:23:7f:e6:bb:41:0c:9a:48:ab:ee:72:81: c0:23:7b:f0:5b:b9:4d:eb:aa:05:f6:a8:70:e7:74:b0:b6:ce: 31:7f:39:db -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUazfh6Y0ucES996ZV7Rf480TJK74wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEwMzEzMjgyMloX DTI2MDEwMjEzMzMyMlowMzExMC8GA1UEAxMoMTA3MkFEMTdBOEVEQjE1MTNBRUQ5 NUEyNTgwODhGNDgwQURBNDkyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEXibzwNl3JyncTwh6R4Npn+j5bmv1Uc9DSloor2778xjs1ypND4Z9t5eUV Hbg5VocptytxeYfF74GbYd7us1otRocpQDAom935GfMMi79l2AwXDaEPQ8kRDoh1 rBd5/mAjWeSybdIEJApeceTLtKBZozhUZeq5PNqG29nDjsV1ZJqO/gW6AzM7OLsq khP+vhmk6jPM0YeckztIp6O7TcnnTJzlmojgQ/8fb3SDMGvb96GL7E6wsIg3Ri9e znkxlYAjiLvzh8vDVrzhz3RGk1Rt/OE8RX4i2rAfSURNZ3hMwjgibjEYGx9LVs1n PzbiETzVUpO1cRf+zL9kv5l4Gm0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBByrReo7bFROu2VolgIj0gK2kkrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNTRiOWQzMi0zYzVhLTQwZTItYjc4OC0wNjlkZTBjM2QyZGUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1NGI5ZDMy LTNjNWEtNDBlMi1iNzg4LTA2OWRlMGMzZDJkZS8wLzEwNzJBRDE3QThFREIxNTEz QUVEOTVBMjU4MDg4RjQ4MEFEQTQ5MkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFn3HIwDwQCAAIwCQMHACABDfJuADANBgkqhkiG9w0BAQsFAAOCAQEACcNL63wH PjtFl13hCi8z4hCWP+UuXHtvDVtAoxZD+3hw6nLPJnK0RLGzT7VELhFcxMIdCMOK 0OA/kSFRBbYphPRTlWYMPMTne+KTHX+JJzHsBX1BO6jOSu73lnJqiRQAS4VyRoXg lvqsCdjlcbTxUCPBrNxmrIjTXWpg0BhoA0z7SFpapnWioSS9wdTPsn4+DCTk4pE8 Ujfjn8yzIlB6AlhDTDPwANS37ypO3bxn0vYsGdbq9griEN78HxixS1edxN5dKSSN HfHaKAWv6dWwBVmP0giWMY+nooyhjHwnI3/mu0EMmkir7nKBwCN78Fu5TeuqBfao cOd0sLbOMX852w== -----END CERTIFICATE-----Generated at Sat Apr 5 06:42:16 2025 by rpki-client