$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer File: 1D6001A4F46548B37ED871CA5CF088F7AF50D754.cer (raw, json) Hash identifier: EDKzv862xdo7xjHAK9dvMm2NeS6tTF1FDpYGGAvgN2o= Subject key identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 56EB021275B87604A1813AED061AD07F5749048B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft caRepository: rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 26 Jan 2025 08:49:11 +0000 Certificate not after: Sun 25 Jan 2026 08:54:11 +0000 Subordinate resources: IP: 103.102.140.0/22 IP: 2401:e440::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:eb:02:12:75:b8:76:04:a1:81:3a:ed:06:1a:d0:7f:57:49:04:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 26 08:49:11 2025 GMT Not After : Jan 25 08:54:11 2026 GMT Subject: CN=1D6001A4F46548B37ED871CA5CF088F7AF50D754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:66:8c:4f:a4:b8:84:ac:8c:c6:0b:ff:21:36: 7d:78:f8:9d:74:df:e5:dd:81:36:03:70:29:98:2e: ff:3c:21:cb:90:b1:3e:b0:87:47:13:27:fd:07:99: b9:06:ed:52:5a:73:88:bb:90:a0:3a:fa:08:fc:dd: 34:21:c6:37:53:e4:f5:85:2c:bd:1e:cd:8d:08:13: 2c:a0:08:0e:8d:e6:51:de:f7:19:d8:d1:b7:1b:00: 89:15:1c:1b:8d:6f:5b:56:c5:06:e0:a2:6f:70:7e: 93:f9:91:23:1b:cb:47:74:5e:b8:a2:be:cb:50:7a: 76:bc:9b:e4:07:9c:ce:c7:28:90:74:6d:27:5f:5c: f6:2c:f5:5f:04:f1:a0:7a:0b:2b:dc:a6:0c:4c:0d: 16:95:c2:30:d5:0e:d7:6c:17:f9:f7:46:ff:af:4d: 90:c4:4a:9a:1d:40:fb:73:8f:29:bb:6f:f1:b8:05: 8d:c7:0e:6b:64:15:f2:57:1b:23:1c:8e:3a:3b:e7: 03:6d:3a:88:ea:e3:da:2a:0b:01:db:92:d1:fa:6b: 8f:cd:e4:b3:fd:aa:1f:d4:73:5f:b2:19:63:c4:4d: c7:51:f3:50:8c:c8:4b:61:b0:a9:73:92:7e:16:ec: 5e:a7:2b:1a:1a:a5:23:67:99:d6:95:a4:cf:c8:be: 68:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:60:01:A4:F4:65:48:B3:7E:D8:71:CA:5C:F0:88:F7:AF:50:D7:54 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b5632d99-32b2-467b-b7fe-0d25f853bfa6/0/1D6001A4F46548B37ED871CA5CF088F7AF50D754.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.140.0/22 IPv6: 2401:e440::/32 Signature Algorithm: sha256WithRSAEncryption 2b:43:87:8f:0e:2a:35:68:0a:2d:b0:d8:e1:f9:f7:13:08:a0: f4:2c:11:56:f4:40:23:ca:62:55:0d:e9:d7:01:5d:08:9b:00: b3:c0:db:5a:36:7b:5a:20:86:a1:ac:b8:8a:fd:51:0f:64:51: cd:b5:54:45:80:f7:c7:f5:f0:66:37:16:ef:79:0a:8b:2d:f2: ad:d0:ed:c3:f8:3a:86:d7:fa:16:2c:3f:85:f8:9a:93:60:84: 30:64:b7:20:e9:d2:c9:90:ec:18:9d:59:a3:9d:f2:6d:d6:a0: 6f:47:56:3d:58:08:f3:3e:20:2e:54:4f:5b:ef:25:ed:c7:b2: a4:85:90:98:51:01:b9:0c:a9:77:b4:1b:91:5a:96:01:8e:39: 95:01:95:e0:30:4d:e7:09:b9:42:7d:f9:83:89:d5:b4:50:5b: 3f:f1:b0:28:4b:8b:9f:44:26:fb:58:c8:c6:f6:9d:21:f1:fd: 49:68:82:e1:a5:9a:69:04:bb:7a:cb:9e:b2:8e:2b:93:13:ff: 21:19:d5:1b:4f:2b:2f:59:b1:bf:7b:8c:d3:97:b6:20:6b:d9: ba:2f:aa:26:8f:ee:86:45:bb:8e:7a:10:cc:ec:7f:f7:9e:60: 4e:e8:e2:fe:22:8b:33:b5:cc:2e:67:36:0c:9e:b4:ad:63:90: 8e:1b:3b:a8 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUVusCEnW4dgShgTrtBhrQf1dJBIswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEyNjA4NDkxMVoX DTI2MDEyNTA4NTQxMVowMzExMC8GA1UEAxMoMUQ2MDAxQTRGNDY1NDhCMzdFRDg3 MUNBNUNGMDg4RjdBRjUwRDc1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOVmjE+kuISsjMYL/yE2fXj4nXTf5d2BNgNwKZgu/zwhy5CxPrCHRxMn/QeZ uQbtUlpziLuQoDr6CPzdNCHGN1Pk9YUsvR7NjQgTLKAIDo3mUd73GdjRtxsAiRUc G41vW1bFBuCib3B+k/mRIxvLR3ReuKK+y1B6dryb5AeczscokHRtJ19c9iz1XwTx oHoLK9ymDEwNFpXCMNUO12wX+fdG/69NkMRKmh1A+3OPKbtv8bgFjccOa2QV8lcb IxyOOjvnA206iOrj2ioLAduS0fprj83ks/2qH9RzX7IZY8RNx1HzUIzIS2GwqXOS fhbsXqcrGhqlI2eZ1pWkz8i+aEMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB1gAaT0ZUizfthxylzwiPevUNdUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNTYzMmQ5OS0zMmIyLTQ2N2ItYjdmZS0wZDI1Zjg1M2JmYTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1NjMyZDk5 LTMyYjItNDY3Yi1iN2ZlLTBkMjVmODUzYmZhNi8wLzFENjAwMUE0RjQ2NTQ4QjM3 RUQ4NzFDQTVDRjA4OEY3QUY1MEQ3NTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnZowwDQQCAAIwBwMFACQB5EAwDQYJKoZIhvcNAQELBQADggEBACtDh48OKjVo Ci2w2OH59xMIoPQsEVb0QCPKYlUN6dcBXQibALPA21o2e1oghqGsuIr9UQ9kUc21 VEWA98f18GY3Fu95Cost8q3Q7cP4OobX+hYsP4X4mpNghDBktyDp0smQ7BidWaOd 8m3WoG9HVj1YCPM+IC5UT1vvJe3HsqSFkJhRAbkMqXe0G5FalgGOOZUBleAwTecJ uUJ9+YOJ1bRQWz/xsChLi59EJvtYyMb2nSHx/UloguGlmmkEu3rLnrKOK5MT/yEZ 1RtPKy9Zsb97jNOXtiBr2bovqiaP7oZFu456EMzsf/eeYE7o4v4iizO1zC5nNgye tK1jkI4bO6g= -----END CERTIFICATE-----Generated at Sat Apr 5 06:54:04 2025 by rpki-client