$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer File: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer (raw, json) Hash identifier: xyNy3xAKqsbANG06TzF2kvK8RajsCbSyOOGFHtGT85M= Subject key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6795DFE455333678B9AA00A576F71AF257A7ABC7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft caRepository: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 07 Sep 2024 03:31:37 +0000 Certificate not after: Sat 06 Sep 2025 03:36:37 +0000 Subordinate resources: IP: 103.182.80.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:95:df:e4:55:33:36:78:b9:aa:00:a5:76:f7:1a:f2:57:a7:ab:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Sep 7 03:31:37 2024 GMT Not After : Sep 6 03:36:37 2025 GMT Subject: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:cd:d6:2c:eb:a6:a7:c2:50:9b:de:84:27: 69:7f:06:15:91:39:67:af:9a:c5:ee:11:33:a0:36: e8:8b:59:49:9b:d5:a5:9b:a7:5c:df:b6:cf:a3:5f: 93:b4:3f:0c:01:f6:b2:7b:da:94:2d:dc:f2:67:9f: 7e:6c:8e:4e:d5:16:ba:97:90:7e:bd:b1:c8:ff:d7: 03:90:32:bd:d4:34:bf:dc:64:87:9f:b5:53:2b:36: 95:76:ce:48:99:04:40:78:78:63:77:f1:f4:d9:c9: fe:83:a7:c1:b3:64:0c:32:22:11:5c:e0:c6:eb:33: e5:f5:2d:85:97:91:f6:4a:a2:ab:23:ab:7c:a9:4e: 24:71:41:28:cb:de:de:f6:b3:f3:1d:08:b9:d7:ee: bb:45:87:66:66:a1:5b:7c:58:bb:03:9f:61:f1:a3: d5:da:08:60:ea:a7:51:e9:6b:15:47:e8:1c:51:c1: 54:97:aa:a6:70:97:10:37:7b:9e:ae:35:93:7e:68: 15:fc:a3:bd:bb:51:52:51:e0:56:f3:ed:5d:2f:b2: 54:60:49:c5:1d:9f:05:ac:71:b8:c7:d6:2b:fd:88: 80:4b:f2:88:ed:8a:b5:91:eb:92:2c:c8:84:e6:72: db:0a:20:9a:6b:21:38:0a:d2:79:77:c5:b5:25:a0: 82:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.80.0/23 Signature Algorithm: sha256WithRSAEncryption 78:11:38:08:04:41:c5:79:51:f7:37:4b:d9:2d:67:0b:a2:39: 9c:03:a8:df:cf:0a:d5:a3:f0:2c:64:9b:82:cc:a8:e8:4e:87: b6:2b:cc:26:03:da:28:8a:b7:aa:a1:5b:4f:52:77:72:75:9d: 3f:99:ef:99:82:50:43:94:44:65:91:22:de:73:f8:50:5a:bf: 20:77:bd:3f:f9:7f:7b:9f:ff:b4:3b:35:9d:7f:b9:6b:7e:54: 29:e5:de:b0:ea:c4:70:97:72:51:66:9f:29:e8:37:6c:af:78: 49:2f:66:35:37:21:4f:f2:44:2f:b8:8d:6f:b7:47:e7:e3:af: 84:94:ee:d7:5f:4f:e5:70:fc:c4:a1:87:54:26:cb:64:1e:a9: 71:fa:fe:20:e7:f3:05:e8:bc:54:87:a0:a4:b6:74:36:a3:b7: b6:9a:4e:40:f5:37:0d:2c:2f:61:dd:dd:85:0b:c4:d8:6b:fa: fc:a3:8f:12:7e:73:6f:81:05:03:a5:f9:e2:93:23:35:20:bf: cb:f5:3d:1d:ab:52:72:0a:0b:17:a5:93:f9:78:2a:16:19:70: 21:73:9f:4d:f5:8b:ba:ac:fe:2b:9d:8a:d7:b9:97:c8:e0:e0: d0:4f:70:59:3a:80:d3:ef:9a:da:f6:14:26:85:a7:52:e6:4e: c2:03:71:7d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZ5Xf5FUzNni5qgCldvca8lenq8cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkwNzAzMzEzN1oX DTI1MDkwNjAzMzYzN1owMzExMC8GA1UEAxMoMTQ5REYxOTkxMjE5OEIyQzc5QTU1 QzdDRjFCN0NCN0E3NTc5QUQ1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMd5zdYs66anwlCb3oQnaX8GFZE5Z6+axe4RM6A26ItZSZvVpZunXN+2z6Nf k7Q/DAH2snvalC3c8meffmyOTtUWupeQfr2xyP/XA5AyvdQ0v9xkh5+1Uys2lXbO SJkEQHh4Y3fx9NnJ/oOnwbNkDDIiEVzgxusz5fUthZeR9kqiqyOrfKlOJHFBKMve 3vaz8x0Iudfuu0WHZmahW3xYuwOfYfGj1doIYOqnUelrFUfoHFHBVJeqpnCXEDd7 nq41k35oFfyjvbtRUlHgVvPtXS+yVGBJxR2fBaxxuMfWK/2IgEvyiO2KtZHrkizI hOZy2wogmmshOArSeXfFtSWggtcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBSd8ZkSGYsseaVcfPG3y3p1ea1RMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81YjUwYmFjNC1hNmE3LTQ1NmMtODUwZi02MGRjZGU2N2I0OTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViNTBiYWM0 LWE2YTctNDU2Yy04NTBmLTYwZGNkZTY3YjQ5OS8wLzE0OURGMTk5MTIxOThCMkM3 OUE1NUM3Q0YxQjdDQjdBNzU3OUFENTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFntlAwDQYJKoZIhvcNAQELBQADggEBAHgROAgEQcV5Ufc3S9ktZwuiOZwDqN/P CtWj8Cxkm4LMqOhOh7YrzCYD2iiKt6qhW09Sd3J1nT+Z75mCUEOURGWRIt5z+FBa vyB3vT/5f3uf/7Q7NZ1/uWt+VCnl3rDqxHCXclFmnynoN2yveEkvZjU3IU/yRC+4 jW+3R+fjr4SU7tdfT+Vw/MShh1Qmy2QeqXH6/iDn8wXovFSHoKS2dDajt7aaTkD1 Nw0sL2Hd3YULxNhr+vyjjxJ+c2+BBQOl+eKTIzUgv8v1PR2rUnIKCxelk/l4KhYZ cCFzn031i7qs/iudite5l8jg4NBPcFk6gNPvmtr2FCaFp1LmTsIDcX0= -----END CERTIFICATE-----Generated at Sun Feb 16 21:00:46 2025 by rpki-client