$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer File: 11489A5805B7FE2710AE32C3077C3450579D1288.cer (raw, json) Hash identifier: A8wSTtkim1/4NF5yUavYYtkILifVkWRKnJAx+OYCrvE= Subject key identifier: 11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 33E4E83D978D13024EA3C9161B9EE25DE0F26660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft caRepository: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 28 Nov 2024 01:08:41 +0000 Certificate not after: Thu 27 Nov 2025 01:13:41 +0000 Subordinate resources: IP: 103.113.26.0/24 IP: 2001:df4:c700::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:e4:e8:3d:97:8d:13:02:4e:a3:c9:16:1b:9e:e2:5d:e0:f2:66:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Nov 28 01:08:41 2024 GMT Not After : Nov 27 01:13:41 2025 GMT Subject: CN=11489A5805B7FE2710AE32C3077C3450579D1288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:05:46:7e:42:75:d1:fb:ae:45:00:5e:ee:86: c0:ca:4f:ae:b4:86:43:9b:b3:59:b2:cf:6e:e9:a5: 47:50:65:11:79:af:9a:67:65:43:5a:85:2a:28:fb: cc:32:7d:78:6d:20:78:96:cf:c6:5f:c1:c3:d5:d1: 50:14:e7:5a:e9:77:b7:74:52:e5:43:60:d1:6d:0f: 56:4b:6f:18:05:80:4e:a5:a4:4b:c1:29:e8:8b:47: d9:58:54:11:90:c0:60:a7:e9:cc:85:ba:3b:90:0b: 3d:04:e3:f6:f3:6e:d3:76:2b:1b:af:f3:e4:a8:13: 2f:7a:dc:33:0a:ad:c6:85:c8:89:8a:1d:bf:71:b4: 7b:13:aa:0b:f4:f8:9b:d0:cc:77:80:71:5f:e6:23: a0:2d:c6:23:24:e7:7c:49:d3:99:8d:39:ae:e8:bd: 2e:5e:b0:4c:45:5b:21:8c:c6:9d:89:20:08:fa:cd: 3c:12:10:f0:77:75:a6:46:19:31:71:27:0b:b5:ff: 1b:9b:7b:60:e4:4c:e8:35:9b:a5:33:0d:0d:79:df: 7e:86:e2:67:ad:32:89:ec:ed:bc:96:a5:72:7f:c1: b4:73:2e:26:55:2e:3e:41:f6:9a:72:91:90:c2:7e: c1:72:f1:3b:9a:76:c2:75:40:04:98:16:80:46:29: 7a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.113.26.0/24 IPv6: 2001:df4:c700::/48 Signature Algorithm: sha256WithRSAEncryption 1e:f2:ec:9d:8d:09:f9:3e:95:df:3d:84:29:b0:f7:a1:76:5a: fa:74:01:be:6a:db:59:1a:dc:8c:5b:5f:44:7d:6f:f6:58:4a: b8:d8:52:95:38:c6:af:1c:43:97:7b:07:a3:19:e4:53:ba:8b: b5:59:e1:5b:24:a6:a4:d6:45:b3:99:a1:b8:09:5b:ef:bb:93: ff:9f:6f:00:a8:ef:3b:1a:42:76:ba:b8:27:c1:f5:ac:cb:51: 7d:90:76:b8:95:90:34:b3:f6:59:3c:6f:e6:86:df:60:78:2b: 2b:d4:cd:cd:3f:83:90:0a:50:07:24:84:44:63:69:9e:2e:65: 5f:1d:60:d0:9a:7d:0a:32:2c:68:45:4a:a9:c7:ce:bf:24:36: 67:c3:74:63:08:16:34:6e:33:9a:49:fd:0b:30:b4:b5:03:12: 54:8b:ed:52:02:1d:8c:b8:17:fa:2b:e3:d4:25:e4:3f:ad:83: 0a:12:1b:3e:35:91:41:81:e8:60:3b:75:26:fb:60:8f:d9:40: 58:6f:d1:cc:d2:7f:45:ea:33:c3:fe:cd:30:55:dc:70:4f:ca: 06:46:3c:52:88:09:94:64:05:56:ab:f2:93:87:b4:ea:1d:7a: cc:bd:72:0a:03:0b:b0:e5:2b:f8:02:b3:dc:bc:d9:c8:f4:69: 2d:a4:bb:f7 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUM+ToPZeNEwJOo8kWG57iXeDyZmAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTEyODAxMDg0MVoX DTI1MTEyNzAxMTM0MVowMzExMC8GA1UEAxMoMTE0ODlBNTgwNUI3RkUyNzEwQUUz MkMzMDc3QzM0NTA1NzlEMTI4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANIFRn5CddH7rkUAXu6GwMpPrrSGQ5uzWbLPbumlR1BlEXmvmmdlQ1qFKij7 zDJ9eG0geJbPxl/Bw9XRUBTnWul3t3RS5UNg0W0PVktvGAWATqWkS8Ep6ItH2VhU EZDAYKfpzIW6O5ALPQTj9vNu03YrG6/z5KgTL3rcMwqtxoXIiYodv3G0exOqC/T4 m9DMd4BxX+YjoC3GIyTnfEnTmY05rui9Ll6wTEVbIYzGnYkgCPrNPBIQ8Hd1pkYZ MXEnC7X/G5t7YORM6DWbpTMNDXnffobiZ60yieztvJalcn/BtHMuJlUuPkH2mnKR kMJ+wXLxO5p2wnVABJgWgEYpel0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBFImlgFt/4nEK4ywwd8NFBXnRKIMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYWJjZTcxZS00ZWU0LTQ1OTAtOTRmYi0zN2ZmZDlmMGQ2YjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhYmNlNzFl LTRlZTQtNDU5MC05NGZiLTM3ZmZkOWYwZDZiNy8wLzExNDg5QTU4MDVCN0ZFMjcx MEFFMzJDMzA3N0MzNDUwNTc5RDEyODgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABncRowDwQCAAIwCQMHACABDfTHADANBgkqhkiG9w0BAQsFAAOCAQEAHvLsnY0J +T6V3z2EKbD3oXZa+nQBvmrbWRrcjFtfRH1v9lhKuNhSlTjGrxxDl3sHoxnkU7qL tVnhWySmpNZFs5mhuAlb77uT/59vAKjvOxpCdrq4J8H1rMtRfZB2uJWQNLP2WTxv 5obfYHgrK9TNzT+DkApQBySERGNpni5lXx1g0Jp9CjIsaEVKqcfOvyQ2Z8N0YwgW NG4zmkn9CzC0tQMSVIvtUgIdjLgX+ivj1CXkP62DChIbPjWRQYHoYDt1Jvtgj9lA WG/RzNJ/Reozw/7NMFXccE/KBkY8UogJlGQFVqvyk4e06h16zL1yCgMLsOUr+AKz 3LzZyPRpLaS79w== -----END CERTIFICATE-----Generated at Sat Apr 5 07:06:02 2025 by rpki-client