$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer File: 285A5330FE006D3660B306BEE40EC7FEABA96574.cer (raw, json) Hash identifier: Tr2n21sywKcZub6saNfBj4zhpB6GUZ6Z+dC946R8rJM= Subject key identifier: 28:5A:53:30:FE:00:6D:36:60:B3:06:BE:E4:0E:C7:FE:AB:A9:65:74 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4E3C154D11277D8E5FA6F41DD795207ED5CB3793 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft caRepository: rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 25 Apr 2025 13:15:54 +0000 Certificate not after: Fri 24 Apr 2026 13:20:54 +0000 Subordinate resources: IP: 103.191.129.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3c:15:4d:11:27:7d:8e:5f:a6:f4:1d:d7:95:20:7e:d5:cb:37:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 25 13:15:54 2025 GMT Not After : Apr 24 13:20:54 2026 GMT Subject: CN=285A5330FE006D3660B306BEE40EC7FEABA96574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:de:63:b7:89:97:c8:c5:93:40:14:2f:d8:b6: 53:ea:ea:e1:62:b3:a8:4b:66:d0:61:26:b4:ed:3c: 76:77:4f:d7:da:3d:4c:3a:9a:b3:9e:a4:cd:8e:a3: ac:94:69:3c:a7:26:37:e2:36:7d:01:73:e1:9a:29: ef:7d:db:10:17:3d:2b:ec:d9:24:27:78:4d:63:8b: 35:0c:b6:71:97:69:10:84:08:1c:2c:65:9f:37:d9: 4b:3e:f6:81:8e:67:6d:44:d9:cb:48:53:09:eb:0a: 73:01:6a:45:01:57:8e:a7:d9:d1:ec:be:ee:1c:f3: 87:34:82:18:bf:21:31:b0:7f:c8:a8:bd:bc:f9:e4: 15:c3:31:14:85:ec:ec:7f:10:bb:e5:04:1f:f1:de: 78:c5:3b:12:9d:02:e0:f5:42:37:70:a6:e0:02:08: 95:eb:43:6c:4a:c6:a5:3f:7e:48:d4:eb:22:44:f0: e8:88:21:f7:dd:b5:25:b6:b1:cb:ad:d9:e2:0c:92: d1:3c:87:60:08:be:4b:8e:c3:d7:49:b8:5f:27:e0: 15:12:f8:3c:90:ba:9c:33:7b:15:3d:63:46:cc:28: ca:a1:b9:bb:95:d2:22:dd:a7:d0:0c:2e:b0:b8:76: ff:98:32:98:31:16:9f:e9:28:fc:26:f5:af:3b:a9: 27:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:5A:53:30:FE:00:6D:36:60:B3:06:BE:E4:0E:C7:FE:AB:A9:65:74 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.129.0/24 Signature Algorithm: sha256WithRSAEncryption 48:41:88:81:cc:fd:09:d3:fe:ed:47:69:5e:92:4b:bd:23:53: 47:83:1a:98:6d:94:29:fb:ca:f9:65:a7:15:57:ef:47:d6:f0: 9e:4e:a7:aa:b2:3c:6a:e4:98:83:6e:14:99:6b:fb:be:d8:23: 59:17:b7:2b:ef:68:86:8f:9a:32:b7:c4:cb:36:cc:1a:02:c0: 04:d2:89:18:08:ae:33:f1:11:af:05:66:9a:4c:40:44:cf:7b: c7:8b:d0:f5:ea:f5:83:53:ff:98:ff:18:d7:2d:72:cf:2a:2c: e4:ff:ed:27:8c:61:51:7d:c1:91:b1:90:81:e4:f9:46:bb:ab: 8b:85:f6:76:8a:47:a5:cc:7a:e8:20:60:0a:1a:93:34:26:52: ba:ba:34:86:01:4f:52:75:c9:ec:a5:4c:cd:4e:9a:7b:c2:cd: 9d:23:31:b8:4e:53:70:e4:a2:b6:e9:5d:09:6a:08:0e:2d:5d: 73:c0:e0:9b:e3:f3:c9:ae:9e:32:b5:34:f6:3c:5b:35:d3:44: 25:05:c1:f0:e4:23:fb:5f:7a:69:95:10:77:3b:e0:7e:30:e8: 42:8a:f7:75:27:37:cc:fe:f8:51:85:60:13:77:1e:2d:62:b7: 97:49:44:86:4a:a8:0f:88:a3:c8:70:66:61:10:cb:5e:ca:3d: d7:98:81:6f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTjwVTREnfY5fpvQd15UgftXLN5MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQyNTEzMTU1NFoX DTI2MDQyNDEzMjA1NFowMzExMC8GA1UEAxMoMjg1QTUzMzBGRTAwNkQzNjYwQjMw NkJFRTQwRUM3RkVBQkE5NjU3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ7eY7eJl8jFk0AUL9i2U+rq4WKzqEtm0GEmtO08dndP19o9TDqas56kzY6j rJRpPKcmN+I2fQFz4Zop733bEBc9K+zZJCd4TWOLNQy2cZdpEIQIHCxlnzfZSz72 gY5nbUTZy0hTCesKcwFqRQFXjqfZ0ey+7hzzhzSCGL8hMbB/yKi9vPnkFcMxFIXs 7H8Qu+UEH/HeeMU7Ep0C4PVCN3Cm4AIIletDbErGpT9+SNTrIkTw6Igh9921Jbax y63Z4gyS0TyHYAi+S47D10m4XyfgFRL4PJC6nDN7FT1jRswoyqG5u5XSIt2n0Awu sLh2/5gymDEWn+ko/Cb1rzupJ4ECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFChaUzD+AG02YLMGvuQOx/6rqWV0MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84YWQzMzc3MC1mMTUxLTQzZjMtOTU2OS02YTI3ZDc1MDQyNDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhZDMzNzcw LWYxNTEtNDNmMy05NTY5LTZhMjdkNzUwNDI0MC8wLzI4NUE1MzMwRkUwMDZEMzY2 MEIzMDZCRUU0MEVDN0ZFQUJBOTY1NzQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnv4EwDQYJKoZIhvcNAQELBQADggEBAEhBiIHM/QnT/u1HaV6SS70jU0eDGpht lCn7yvllpxVX70fW8J5Op6qyPGrkmINuFJlr+77YI1kXtyvvaIaPmjK3xMs2zBoC wATSiRgIrjPxEa8FZppMQETPe8eL0PXq9YNT/5j/GNctcs8qLOT/7SeMYVF9wZGx kIHk+Ua7q4uF9naKR6XMeuggYAoakzQmUrq6NIYBT1J1yeylTM1OmnvCzZ0jMbhO U3DkorbpXQlqCA4tXXPA4Jvj88munjK1NPY8WzXTRCUFwfDkI/tfemmVEHc74H4w 6EKK93UnN8z++FGFYBN3Hi1it5dJRIZKqA+Io8hwZmEQy17KPdeYgW8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:28:47 2025 by rpki-client