$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer File: 179284A2BF606F69A6FF340CD3D6460BE9BF26DD.cer (raw, json) Hash identifier: xs1UyWvNEqpT4aSwJcd4NwX9VBanSzSdskBUMAzs88E= Subject key identifier: 17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 46E53CF1E7704402C692DFAE08AD5688D9EA1E3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft caRepository: rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 03 Feb 2025 11:59:57 +0000 Certificate not after: Mon 02 Feb 2026 12:04:57 +0000 Subordinate resources: IP: 103.54.172.0/24 IP: 103.242.233.0/24 IP: 2001:df4:5000::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:e5:3c:f1:e7:70:44:02:c6:92:df:ae:08:ad:56:88:d9:ea:1e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 3 11:59:57 2025 GMT Not After : Feb 2 12:04:57 2026 GMT Subject: CN=179284A2BF606F69A6FF340CD3D6460BE9BF26DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:29:82:f0:e9:bd:88:35:a0:b4:89:7e:5e:a9: be:71:f8:9c:dd:ba:a9:1f:79:58:3c:fd:26:26:93: a6:39:9e:3c:e9:c0:aa:cd:36:0a:d8:06:44:6c:3c: 9d:94:ad:c3:30:10:9e:6a:b9:0c:61:1a:58:17:6b: 36:d7:b5:5d:8e:98:32:36:3c:b9:2b:bd:9e:6c:5f: 70:d4:89:5d:60:18:18:a9:17:03:af:13:2a:a7:9f: 9e:fa:76:42:94:0f:28:29:1c:f0:66:7c:d4:86:66: f3:cc:1d:0f:1a:5d:fa:63:af:58:1d:d0:e0:67:12: b5:a5:a5:5c:e7:49:06:e3:b8:39:9a:96:4d:8c:22: 01:88:54:68:8d:f9:59:c1:d7:77:16:46:30:8b:f7: cd:a7:23:c6:c1:f2:b0:5b:79:e7:d2:9e:ba:b4:69: 92:0f:46:0a:ac:f2:48:49:af:ee:74:20:5b:07:48: 4b:2d:8b:d1:bb:1a:5e:ac:69:5b:68:56:da:32:6a: 72:91:b6:45:58:01:c7:35:31:5d:f7:2c:a5:2d:58: f7:b2:30:c7:ba:2a:8d:57:dd:1c:13:6e:fb:83:85: 8c:a7:ba:04:af:c1:e7:f5:b2:8c:18:8a:cd:41:ee: 4a:26:68:37:8c:37:10:7f:c6:6c:f0:7a:2f:d5:7a: 70:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:92:84:A2:BF:60:6F:69:A6:FF:34:0C:D3:D6:46:0B:E9:BF:26:DD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e7e0faf0-788d-495b-ac98-f3516195db60/0/179284A2BF606F69A6FF340CD3D6460BE9BF26DD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.54.172.0/24 103.242.233.0/24 IPv6: 2001:df4:5000::/48 Signature Algorithm: sha256WithRSAEncryption 0b:bc:51:d3:61:ff:37:6e:ef:bd:bf:e1:dd:ed:1a:77:e1:5f: 60:e1:e9:66:64:4f:71:89:ba:a3:8e:c3:d5:38:ec:28:f9:91: e9:ad:d5:b2:2d:6d:24:75:78:e9:c8:e7:18:8c:4f:8f:36:0e: 41:27:94:72:31:cb:e6:b3:58:ee:74:ae:ec:94:cd:fa:ad:0c: 63:0e:52:a2:1e:9d:66:21:57:4f:e8:02:3b:be:a0:de:bd:e7: 1e:17:29:a3:e3:b4:d0:bd:54:ac:4f:f7:05:58:a9:67:ae:90: 17:70:af:38:c4:a0:3f:8a:05:42:b4:ec:19:5f:39:10:f1:f5: 65:70:2d:79:0c:14:f7:b7:17:bc:0c:f7:b7:ed:26:f3:31:97: 31:ee:68:e1:35:1e:17:4a:ff:bf:e4:f6:5d:da:0b:e2:e6:5f: e9:36:6b:a9:1e:cd:1f:7f:74:26:09:ac:e0:5e:e0:50:67:a4: d0:83:8d:7a:ae:a9:a5:3d:21:bc:c8:3c:72:ac:f4:f3:7d:0a: 79:d5:df:8f:6e:c5:7f:ec:99:b5:9a:db:d8:49:30:41:51:7d: 09:86:75:db:0b:07:62:f8:ea:c9:89:ce:23:44:85:93:b9:c4: 92:69:10:a0:1f:40:6f:92:06:9a:52:5d:9c:5b:c9:ba:eb:02: f1:b9:b7:de -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIURuU88edwRALGkt+uCK1WiNnqHjswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIwMzExNTk1N1oX DTI2MDIwMjEyMDQ1N1owMzExMC8GA1UEAxMoMTc5Mjg0QTJCRjYwNkY2OUE2RkYz NDBDRDNENjQ2MEJFOUJGMjZERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOIpgvDpvYg1oLSJfl6pvnH4nN26qR95WDz9JiaTpjmePOnAqs02CtgGRGw8 nZStwzAQnmq5DGEaWBdrNte1XY6YMjY8uSu9nmxfcNSJXWAYGKkXA68TKqefnvp2 QpQPKCkc8GZ81IZm88wdDxpd+mOvWB3Q4GcStaWlXOdJBuO4OZqWTYwiAYhUaI35 WcHXdxZGMIv3zacjxsHysFt559KeurRpkg9GCqzySEmv7nQgWwdISy2L0bsaXqxp W2hW2jJqcpG2RVgBxzUxXfcspS1Y97Iwx7oqjVfdHBNu+4OFjKe6BK/B5/WyjBiK zUHuSiZoN4w3EH/GbPB6L9V6cBcCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBeShKK/YG9ppv80DNPWRgvpvybdMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lN2UwZmFmMC03ODhkLTQ5NWItYWM5OC1mMzUxNjE5NWRiNjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U3ZTBmYWYw LTc4OGQtNDk1Yi1hYzk4LWYzNTE2MTk1ZGI2MC8wLzE3OTI4NEEyQkY2MDZGNjlB NkZGMzQwQ0QzRDY0NjBCRTlCRjI2REQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BABnNqwDBABn8ukwDwQCAAIwCQMHACABDfRQADANBgkqhkiG9w0BAQsFAAOCAQEA C7xR02H/N27vvb/h3e0ad+FfYOHpZmRPcYm6o47D1TjsKPmR6a3Vsi1tJHV46cjn GIxPjzYOQSeUcjHL5rNY7nSu7JTN+q0MYw5Soh6dZiFXT+gCO76g3r3nHhcpo+O0 0L1UrE/3BVipZ66QF3CvOMSgP4oFQrTsGV85EPH1ZXAteQwU97cXvAz3t+0m8zGX Me5o4TUeF0r/v+T2XdoL4uZf6TZrqR7NH390Jgms4F7gUGek0IONeq6ppT0hvMg8 cqz0830KedXfj27Ff+yZtZrb2EkwQVF9CYZ12wsHYvjqyYnOI0SFk7nEkmkQoB9A b5IGmlJdnFvJuusC8bm33g== -----END CERTIFICATE-----Generated at Sat Apr 5 08:37:13 2025 by rpki-client