$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer File: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer (raw, json) Hash identifier: QgIYi4VesM6N/mTY9p7jOrTLXBNotw8K/4RqLtAe/eI= Subject key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 66E29EBB7355B4554C695A10E839EDFE31C96B29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft caRepository: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 15:08:54 +0000 Certificate not after: Mon 30 Jun 2025 15:13:54 +0000 Subordinate resources: IP: 103.105.217.0/24 IP: 103.107.71.0/24 IP: 103.107.84.0/23 IP: 2402:c740::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e2:9e:bb:73:55:b4:55:4c:69:5a:10:e8:39:ed:fe:31:c9:6b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jul 1 15:08:54 2024 GMT Not After : Jun 30 15:13:54 2025 GMT Subject: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:2b:40:29:93:8a:21:02:54:a7:be:58:22: 6e:8d:e9:a0:04:d2:8e:94:c9:90:19:b6:84:47:b1: bd:b9:0d:b5:f7:88:74:3a:d1:57:14:7e:fb:19:ad: 93:1d:c2:01:c1:56:dd:66:6b:38:65:7c:c6:f3:f5: 66:37:0c:75:68:b7:3d:46:53:da:e5:53:d1:7c:1b: 99:43:46:98:92:83:82:d0:b3:df:7b:21:2a:b2:40: 25:1d:37:c6:7a:69:76:7d:cd:2c:e1:be:59:e4:04: d3:d2:c5:33:b4:df:8e:44:e8:9d:c4:23:80:b0:0b: e6:da:e1:ef:93:a9:a1:35:08:70:d4:17:60:45:fd: bf:21:9a:74:fd:46:46:19:53:71:c8:23:b2:2c:72: 72:ed:f8:b3:67:ca:9d:b3:9d:ad:dc:ac:fa:d5:09: 02:88:83:77:1b:26:1d:ad:8f:94:5f:91:51:a6:90: a1:c4:a1:ab:f3:4f:47:af:c5:fb:69:81:59:06:d5: 68:f0:99:46:8b:7a:83:b9:45:67:b1:71:2f:74:b8: 90:84:23:43:d4:7f:f7:21:20:7d:a2:9e:43:ef:3f: 33:4b:a2:67:d3:f6:cf:2e:fd:76:f7:dd:a7:e0:a6: 74:58:d8:f7:1b:7e:a8:dc:0a:39:3b:62:23:a2:b8: 04:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.217.0/24 103.107.71.0/24 103.107.84.0/23 IPv6: 2402:c740::/32 Signature Algorithm: sha256WithRSAEncryption 1a:09:f7:ac:f2:05:e1:38:dd:16:bd:51:af:43:df:8b:f1:59: e5:9d:04:68:97:36:4b:a7:85:6a:58:ca:db:bd:eb:b4:80:65: 6c:4b:73:ba:74:42:4e:93:f8:15:24:d9:01:84:65:eb:28:4e: 8a:3c:51:aa:6e:ed:76:90:7e:31:2c:78:ec:f0:3e:3d:6d:16: 8c:84:73:ba:f2:ca:7c:10:7a:56:32:53:37:54:4d:c9:28:5f: 92:79:41:f4:46:f8:a5:37:39:b6:52:e5:b9:0d:da:c6:29:c5: 77:c4:81:bb:08:54:15:ef:d4:9d:fe:ba:26:19:08:65:d3:23: 32:3c:3e:c4:b6:ca:35:e5:20:b1:25:1d:1e:8e:a6:a3:17:21: 11:98:a0:30:3b:57:a9:08:62:19:5c:ed:39:7a:96:5b:51:69: ce:b5:2a:5b:12:c9:6a:56:24:bf:2f:36:d1:f0:d0:1f:f5:ef: 64:31:d5:17:e7:fe:a3:03:d8:f6:11:7d:58:78:f8:bd:2a:ae: 43:62:96:1d:21:3b:3b:8c:65:2b:70:c7:08:64:cf:73:bc:e2: 0a:d9:61:ae:f8:83:a1:2a:1a:39:fb:2c:77:34:d7:30:20:59: 7b:5d:66:a2:b3:9a:7b:df:d6:7d:62:fd:64:e2:23:3a:d8:d6: 2c:86:05:1c -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUZuKeu3NVtFVMaVoQ6Dnt/jHJaykwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE1MDg1NFoX DTI1MDYzMDE1MTM1NFowMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNC MzAzNTAxNkRDNEVDNjJDREVCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVWK0Apk4ohAlSnvlgibo3poATSjpTJkBm2hEexvbkNtfeIdDrRVxR++xmt kx3CAcFW3WZrOGV8xvP1ZjcMdWi3PUZT2uVT0XwbmUNGmJKDgtCz33shKrJAJR03 xnppdn3NLOG+WeQE09LFM7TfjkToncQjgLAL5trh75OpoTUIcNQXYEX9vyGadP1G RhlTccgjsixycu34s2fKnbOdrdys+tUJAoiDdxsmHa2PlF+RUaaQocShq/NPR6/F +2mBWQbVaPCZRot6g7lFZ7FxL3S4kIQjQ9R/9yEgfaKeQ+8/M0uiZ9P2zy79dvfd p+CmdFjY9xt+qNwKOTtiI6K4BEECAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCJHUg8SCMjZrDOzA1AW3E7GLN6xMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkZGYxODFm LTFlODktNDAyMi04MmY4LWUwZGJhODU5ZWUyZS8wLzIyNDc1MjBGMTIwOEM4RDlB QzMzQjMwMzUwMTZEQzRFQzYyQ0RFQjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BABnadkDBABna0cDBAFna1QwDQQCAAIwBwMFACQCx0AwDQYJKoZIhvcNAQELBQAD ggEBABoJ96zyBeE43Ra9Ua9D34vxWeWdBGiXNkunhWpYytu967SAZWxLc7p0Qk6T +BUk2QGEZesoToo8Uapu7XaQfjEseOzwPj1tFoyEc7ryynwQelYyUzdUTckoX5J5 QfRG+KU3ObZS5bkN2sYpxXfEgbsIVBXv1J3+uiYZCGXTIzI8PsS2yjXlILElHR6O pqMXIRGYoDA7V6kIYhlc7Tl6lltRac61KlsSyWpWJL8vNtHw0B/172Qx1Rfn/qMD 2PYRfVh4+L0qrkNilh0hOzuMZStwxwhkz3O84grZYa74g6EqGjn7LHc01zAgWXtd ZqKzmnvf1n1i/WTiIzrY1iyGBRw= -----END CERTIFICATE-----Generated at Sun Feb 16 20:39:06 2025 by rpki-client