$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer File: 1BA1ADD734797C0383628A8723DEBADA827B5B02.cer (raw, json) Hash identifier: AhaRFLBjT2zpnW/LsxvJLI/IfAshiJPNKu9OKnvBNzE= Subject key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0F0E1F24CBE18415EE943ED7CBF528D8939E96D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft caRepository: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 18 Jan 2025 19:47:44 +0000 Certificate not after: Sat 17 Jan 2026 19:52:44 +0000 Subordinate resources: IP: 103.141.244.0/23 IP: 2001:df1:1d80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:0e:1f:24:cb:e1:84:15:ee:94:3e:d7:cb:f5:28:d8:93:9e:96:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 18 19:47:44 2025 GMT Not After : Jan 17 19:52:44 2026 GMT Subject: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:0f:9c:64:32:a0:f9:22:ad:5c:19:6c:6b: 27:b3:d1:0a:e0:69:9a:3f:e9:fb:b8:f4:ec:68:7c: 13:4d:44:a8:ff:06:df:43:dc:33:57:16:de:79:e5: ef:2c:0a:ad:f5:21:87:26:60:9c:98:a4:ba:80:f9: 94:aa:c5:77:60:cb:3c:1d:af:5b:e3:8c:88:5a:fb: 36:58:e9:3a:81:18:48:6f:47:f0:8d:6a:60:9c:6a: 5c:77:8b:4d:ff:03:6c:54:df:57:c6:83:ed:9d:72: 5e:5f:1b:72:95:94:bd:68:5a:9c:4c:91:00:c8:f6: c6:d0:68:16:5b:d3:a0:3b:19:00:b2:21:14:3d:04: 5c:d4:e3:5b:cc:8a:92:d4:f0:ec:b5:93:ae:d3:99: 2f:32:f2:f1:6a:35:9e:d4:ad:68:86:0d:63:c6:47: fd:ff:e1:c0:4c:79:82:0a:b1:eb:a6:c4:1a:25:b5: 04:06:d5:3c:90:a1:f0:57:e6:4e:3d:d4:fb:e8:62: 0c:19:7b:8e:b8:b9:e1:f7:dc:9b:d6:54:87:7d:02: 0a:e5:ba:63:a3:d0:9a:5a:94:5d:05:7f:7e:0c:57: df:d3:6c:58:d1:f5:47:38:fd:fc:dd:41:d8:5a:13: 5e:27:24:08:cc:d8:1b:37:31:3a:5a:8f:31:f6:97: 10:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.141.244.0/23 IPv6: 2001:df1:1d80::/48 Signature Algorithm: sha256WithRSAEncryption 66:80:70:7e:18:92:85:8e:06:ca:92:3d:bb:e9:3a:3e:eb:d6: 54:d5:21:86:97:47:ca:40:02:b9:16:42:2b:d9:31:93:32:0e: 9b:aa:c8:1c:3a:d2:a9:e5:f7:88:36:0a:9e:3c:2f:be:e3:bb: 8d:cf:69:86:49:41:f1:65:5f:35:dd:e4:f6:40:8c:77:f8:30: d2:6f:d8:cd:4f:d4:04:96:a2:a7:34:5a:6f:ab:95:16:34:c2: 94:06:2c:96:ee:e0:80:34:c7:bf:00:fe:42:b0:e5:c4:1f:07: e1:5c:05:db:34:e4:bd:40:a9:a9:21:d1:db:32:03:95:a2:0f: fd:d5:5a:22:1e:cb:bd:58:f9:41:56:44:a2:11:94:1c:92:ae: bf:c2:bf:85:7a:ae:05:8b:0b:9a:de:30:02:eb:c0:32:1a:ce: 80:e5:ad:72:8f:ff:a6:43:68:51:d8:e3:f6:ff:2a:10:9d:73: 62:b6:f4:6c:e4:4e:84:15:2f:64:cd:da:71:14:bc:b5:be:05: f0:14:55:7e:5f:50:ae:e7:b1:c6:33:1d:22:c6:b6:03:f1:c3: dd:38:db:a3:cd:ec:1c:b0:1c:d9:aa:34:77:fb:8e:2c:03:aa: 37:86:bd:52:e3:9e:46:f8:7d:0f:f5:2f:de:77:76:27:5b:d5: d0:c3:56:32 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUDw4fJMvhhBXulD7Xy/Uo2JOeltIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDExODE5NDc0NFoX DTI2MDExNzE5NTI0NFowMzExMC8GA1UEAxMoMUJBMUFERDczNDc5N0MwMzgzNjI4 QTg3MjNERUJBREE4MjdCNUIwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALA5D5xkMqD5Iq1cGWxrJ7PRCuBpmj/p+7j07Gh8E01EqP8G30PcM1cW3nnl 7ywKrfUhhyZgnJikuoD5lKrFd2DLPB2vW+OMiFr7NljpOoEYSG9H8I1qYJxqXHeL Tf8DbFTfV8aD7Z1yXl8bcpWUvWhanEyRAMj2xtBoFlvToDsZALIhFD0EXNTjW8yK ktTw7LWTrtOZLzLy8Wo1ntStaIYNY8ZH/f/hwEx5ggqx66bEGiW1BAbVPJCh8Ffm Tj3U++hiDBl7jri54ffcm9ZUh30CCuW6Y6PQmlqUXQV/fgxX39NsWNH1Rzj9/N1B 2FoTXickCMzYGzcxOlqPMfaXEBUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBuhrdc0eXwDg2KKhyPeutqCe1sCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YmVkODNiZC04OTg2LTQ0MjktYTAxMS1hYzU5MDcyNGQ1ODYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiZWQ4M2Jk LTg5ODYtNDQyOS1hMDExLWFjNTkwNzI0ZDU4Ni8wLzFCQTFBREQ3MzQ3OTdDMDM4 MzYyOEE4NzIzREVCQURBODI3QjVCMDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnjfQwDwQCAAIwCQMHACABDfEdgDANBgkqhkiG9w0BAQsFAAOCAQEAZoBwfhiS hY4GypI9u+k6PuvWVNUhhpdHykACuRZCK9kxkzIOm6rIHDrSqeX3iDYKnjwvvuO7 jc9phklB8WVfNd3k9kCMd/gw0m/YzU/UBJaipzRab6uVFjTClAYslu7ggDTHvwD+ QrDlxB8H4VwF2zTkvUCpqSHR2zIDlaIP/dVaIh7LvVj5QVZEohGUHJKuv8K/hXqu BYsLmt4wAuvAMhrOgOWtco//pkNoUdjj9v8qEJ1zYrb0bOROhBUvZM3acRS8tb4F 8BRVfl9QruexxjMdIsa2A/HD3Tjbo83sHLAc2ao0d/uOLAOqN4a9UuOeRvh9D/Uv 3nd2J1vV0MNWMg== -----END CERTIFICATE-----Generated at Sat Apr 5 06:27:13 2025 by rpki-client