$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer File: 25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.cer (raw, json) Hash identifier: osTK2lkqUQIDYHZgnAx55H3P05j1fYkoWwbx3T7p8+U= Subject key identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3AD3EE739326CD957BDA209753840E454A96A49B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft caRepository: rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 01 May 2024 11:29:54 +0000 Certificate not after: Wed 30 Apr 2025 11:34:54 +0000 Subordinate resources: IP: 103.172.96.0/24 IP: 103.189.229.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Nov 2024 22:23:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d3:ee:73:93:26:cd:95:7b:da:20:97:53:84:0e:45:4a:96:a4:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 1 11:29:54 2024 GMT Not After : Apr 30 11:34:54 2025 GMT Subject: CN=25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:f2:7e:30:80:7c:06:a2:32:2f:4b:2a:a0: 1e:10:a1:fd:38:06:8c:47:39:d8:cf:f4:f4:b7:d3: c1:9e:4f:ba:1a:32:57:f1:b6:57:ee:c4:d6:13:15: c2:aa:47:bd:fe:58:c6:12:e0:03:07:7f:17:f2:62: 8a:43:d0:91:6a:50:9b:90:3a:a1:81:05:b4:25:b0: e7:27:1d:1d:4a:a6:29:60:ce:ae:95:d8:a0:51:8a: 02:e9:b1:ee:d5:6f:76:6e:bb:3e:a1:09:2d:90:39: 39:3b:18:e9:36:6a:f8:e2:5f:11:7d:d4:11:d4:b2: 8b:b0:24:8c:cc:03:09:e1:04:93:01:c6:ce:b5:21: 0a:a8:a9:5d:88:37:8f:cd:d4:43:a1:ed:68:8f:3b: c1:88:74:19:18:e4:62:6b:8e:5a:59:e0:bb:3f:c1: 4c:a4:7d:34:7b:38:48:b2:41:30:69:a7:f1:b0:2a: 20:d9:a5:bc:a8:67:7e:dc:f6:0e:fa:e9:6f:55:65: 5c:e9:cb:87:da:67:58:40:fe:b7:cc:2d:e7:e7:a0: 22:7d:e2:5f:27:14:8c:c1:6c:2b:b6:f3:f4:b0:c1: 0b:a9:1a:b4:aa:41:76:0d:f0:01:95:c4:d2:db:fe: f1:bc:c9:72:e0:cd:93:16:86:5b:c9:c6:5b:6a:33: 86:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:DF:F1:C9:9D:CD:F1:9F:3A:4B:9E:D3:6F:D3:3B:AA:50:1B:87:E3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/398eeb38-7746-4899-9a10-7980f8b90532/0/25DFF1C99DCDF19F3A4B9ED36FD33BAA501B87E3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.96.0/24 103.189.229.0/24 Signature Algorithm: sha256WithRSAEncryption 11:df:c7:5b:4f:78:09:13:3e:5c:44:b8:9b:59:bf:35:84:fc: 34:b5:b4:7c:f1:d7:3d:ca:ea:6c:e9:8e:00:db:8e:7e:ce:6d: c6:4b:ae:1e:26:10:d5:10:d2:61:5d:d4:26:4e:9c:4b:46:e6: 7d:9d:19:99:45:c0:5f:5d:61:51:ff:55:94:ec:02:bd:6f:4c: f0:2e:6a:0d:6b:3a:74:c7:a2:80:73:a3:e4:72:d1:90:28:b0: 24:a7:f0:fd:46:e0:1f:41:5e:83:e5:02:5b:b2:85:04:83:23: 94:9e:c6:11:28:10:cf:e3:b6:17:0a:68:b5:99:d3:b8:38:b9: a4:fc:44:0b:85:4c:4e:b5:ed:b5:aa:73:f1:91:d3:3d:e3:fa: 40:ef:d5:af:de:9c:42:84:1d:ef:5f:c7:2e:d0:9d:91:6c:54: 7c:36:89:14:64:4a:a1:35:2c:fb:88:1b:d2:d3:d8:d6:a5:43: 69:24:dd:94:2d:64:1d:a4:89:a0:e6:1f:fe:44:5b:5f:be:0a: b9:ac:b3:f2:5b:19:5f:17:98:5f:85:5c:86:50:1e:d2:50:4e: 29:6d:cd:9b:86:10:c7:e4:21:93:1c:dd:33:1f:70:30:66:ed: b4:68:72:4f:a4:eb:56:c7:f9:c0:9c:e0:e9:f3:58:96:cc:c4: 3b:74:e7:01 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUOtPuc5MmzZV72iCXU4QORUqWpJswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDUwMTExMjk1NFoX DTI1MDQzMDExMzQ1NFowMzExMC8GA1UEAxMoMjVERkYxQzk5RENERjE5RjNBNEI5 RUQzNkZEMzNCQUE1MDFCODdFMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMIo8n4wgHwGojIvSyqgHhCh/TgGjEc52M/09LfTwZ5PuhoyV/G2V+7E1hMV wqpHvf5YxhLgAwd/F/JiikPQkWpQm5A6oYEFtCWw5ycdHUqmKWDOrpXYoFGKAumx 7tVvdm67PqEJLZA5OTsY6TZq+OJfEX3UEdSyi7AkjMwDCeEEkwHGzrUhCqipXYg3 j83UQ6HtaI87wYh0GRjkYmuOWlnguz/BTKR9NHs4SLJBMGmn8bAqINmlvKhnftz2 Dvrpb1VlXOnLh9pnWED+t8wt5+egIn3iXycUjMFsK7bz9LDBC6katKpBdg3wAZXE 0tv+8bzJcuDNkxaGW8nGW2ozhp8CAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCXf8cmdzfGfOkue02/TO6pQG4fjMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zOThlZWIzOC03NzQ2LTQ4OTktOWExMC03OTgwZjhiOTA1MzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM5OGVlYjM4 LTc3NDYtNDg5OS05YTEwLTc5ODBmOGI5MDUzMi8wLzI1REZGMUM5OURDREYxOUYz QTRCOUVEMzZGRDMzQkFBNTAxQjg3RTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABnrGADBABnveUwDQYJKoZIhvcNAQELBQADggEBABHfx1tPeAkTPlxEuJtZvzWE /DS1tHzx1z3K6mzpjgDbjn7ObcZLrh4mENUQ0mFd1CZOnEtG5n2dGZlFwF9dYVH/ VZTsAr1vTPAuag1rOnTHooBzo+Ry0ZAosCSn8P1G4B9BXoPlAluyhQSDI5SexhEo EM/jthcKaLWZ07g4uaT8RAuFTE617bWqc/GR0z3j+kDv1a/enEKEHe9fxy7QnZFs VHw2iRRkSqE1LPuIG9LT2NalQ2kk3ZQtZB2kiaDmH/5EW1++Crmss/JbGV8XmF+F XIZQHtJQTiltzZuGEMfkIZMc3TMfcDBm7bRock+k61bH+cCc4OnzWJbMxDt05wE= -----END CERTIFICATE-----Generated at Mon Nov 25 13:01:46 2024 by rpki-client on console-fra.rpki-client.org