$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/29692979765B670997413579D7BF5663C05BBD1A.cer File: 29692979765B670997413579D7BF5663C05BBD1A.cer (raw, json) Hash identifier: TawDVkgj8ouxX+4+R8+DEKQfTnPraHeFcpmuAo0ACvI= Subject key identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0F5CD91C316CF5B9F30CCAEA2C20EEB3C277A180 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft caRepository: rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 19 Dec 2024 22:48:33 +0000 Certificate not after: Thu 18 Dec 2025 22:53:33 +0000 Subordinate resources: IP: 45.251.72.0/22 IP: 103.9.124.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:5c:d9:1c:31:6c:f5:b9:f3:0c:ca:ea:2c:20:ee:b3:c2:77:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 19 22:48:33 2024 GMT Not After : Dec 18 22:53:33 2025 GMT Subject: CN=29692979765B670997413579D7BF5663C05BBD1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ad:c7:d2:7e:18:9d:58:ac:49:18:c0:3d:9d: 59:70:cd:b0:70:de:f2:1a:d3:0e:64:ca:cc:1d:03: 12:39:af:ca:9c:42:9b:cc:7a:36:f2:5d:3f:6c:1f: c6:d7:ac:bb:6e:ee:25:23:f6:21:01:af:8f:90:5e: 66:4a:28:94:ce:c2:c7:1b:e0:1f:92:48:d4:12:77: 4d:25:f8:50:cf:26:98:ed:f6:dc:70:16:73:1b:6d: d9:45:b8:46:71:d0:b9:29:25:eb:ff:e5:41:23:0a: f4:ee:dd:af:9e:a1:7a:fd:d5:10:c3:4f:33:62:52: 78:a3:e5:9e:86:3b:1a:fc:8f:d7:d4:f1:a3:5c:3a: 91:df:d4:97:17:87:0d:2c:1b:a0:da:b5:ab:24:4b: 47:80:a6:a1:1f:47:8d:ef:33:9f:6d:54:66:0d:ef: b2:21:04:61:c4:8b:b8:a1:2e:ab:49:56:4e:8a:24: 9b:dc:a1:f2:35:14:f4:9a:25:2f:1f:98:97:56:fb: ed:30:8e:15:f2:38:8a:d3:72:ff:69:23:ee:fe:37: 4a:9f:02:48:9d:eb:f3:b4:d8:3e:c7:cd:d5:98:54: 24:5b:f6:7c:af:f2:f0:91:04:95:15:25:5f:be:16: 7f:74:9b:dc:fd:e5:be:78:e0:5e:d3:1c:aa:b0:28: f5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:69:29:79:76:5B:67:09:97:41:35:79:D7:BF:56:63:C0:5B:BD:1A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3b0a11b5-9441-4cc9-a672-be9799b65520/0/29692979765B670997413579D7BF5663C05BBD1A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.251.72.0/22 103.9.124.0/22 Signature Algorithm: sha256WithRSAEncryption 16:2f:18:d9:04:2d:17:70:65:99:f7:a1:31:f3:28:1b:64:ca: 0a:4a:95:0d:ac:38:ed:7b:06:3e:28:7a:0d:2f:df:8d:97:a4: 7f:13:61:bf:0b:59:48:f7:37:84:c2:7f:ec:c4:fc:ce:b3:e4: 5a:85:ed:37:82:14:b2:7d:86:d5:16:d6:f2:79:f3:e2:91:6f: 29:f1:99:4e:d6:e8:48:89:6c:d7:2e:23:cc:33:5f:5c:8e:bf: 81:36:4e:da:fa:26:fa:b5:fb:18:45:7a:f5:fa:a3:22:bd:d8: 56:6c:27:e7:77:5a:19:6d:1b:9b:8f:d5:dd:e8:3a:ba:b5:46: 6c:61:8a:a4:08:2c:f8:27:4d:fd:bd:9a:ab:3e:ef:9a:4c:2a: 83:55:e0:d0:68:1e:02:cf:bd:83:e0:13:77:1e:55:ca:fc:06: a1:0f:b0:64:64:13:8e:ac:46:3a:1a:b8:84:36:2f:75:b9:8c: b0:4f:e8:d9:c5:b4:9e:ad:75:74:d4:1d:65:e6:4f:44:f2:6a: 22:6b:ab:9d:d1:06:3e:75:f2:62:5c:16:90:29:10:e5:3b:3f: 95:52:45:ea:a5:5a:98:7e:6a:f3:62:17:f2:a2:c1:da:de:31: 9a:26:fd:87:43:b9:91:f9:cc:2e:10:55:80:88:49:29:8d:0c: fe:0c:0e:1a -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUD1zZHDFs9bnzDMrqLCDus8J3oYAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxOTIyNDgzM1oX DTI1MTIxODIyNTMzM1owMzExMC8GA1UEAxMoMjk2OTI5Nzk3NjVCNjcwOTk3NDEz NTc5RDdCRjU2NjNDMDVCQkQxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJytx9J+GJ1YrEkYwD2dWXDNsHDe8hrTDmTKzB0DEjmvypxCm8x6NvJdP2wf xtesu27uJSP2IQGvj5BeZkoolM7CxxvgH5JI1BJ3TSX4UM8mmO323HAWcxtt2UW4 RnHQuSkl6//lQSMK9O7dr56hev3VEMNPM2JSeKPlnoY7GvyP19Txo1w6kd/UlxeH DSwboNq1qyRLR4CmoR9Hje8zn21UZg3vsiEEYcSLuKEuq0lWTookm9yh8jUU9Jol Lx+Yl1b77TCOFfI4itNy/2kj7v43Sp8CSJ3r87TYPsfN1ZhUJFv2fK/y8JEElRUl X74Wf3Sb3P3lvnjgXtMcqrAo9X0CAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFClpKXl2W2cJl0E1ede/VmPAW70aMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zYjBhMTFiNS05NDQxLTRjYzktYTY3Mi1iZTk3OTliNjU1MjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiMGExMWI1 LTk0NDEtNGNjOS1hNjcyLWJlOTc5OWI2NTUyMC8wLzI5NjkyOTc5NzY1QjY3MDk5 NzQxMzU3OUQ3QkY1NjYzQzA1QkJEMUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAIt+0gDBAJnCXwwDQYJKoZIhvcNAQELBQADggEBABYvGNkELRdwZZn3oTHzKBtk ygpKlQ2sOO17Bj4oeg0v342XpH8TYb8LWUj3N4TCf+zE/M6z5FqF7TeCFLJ9htUW 1vJ58+KRbynxmU7W6EiJbNcuI8wzX1yOv4E2Ttr6Jvq1+xhFevX6oyK92FZsJ+d3 WhltG5uP1d3oOrq1RmxhiqQILPgnTf29mqs+75pMKoNV4NBoHgLPvYPgE3ceVcr8 BqEPsGRkE46sRjoauIQ2L3W5jLBP6NnFtJ6tdXTUHWXmT0TyaiJrq53RBj518mJc FpApEOU7P5VSReqlWph+avNiF/KiwdreMZom/YdDuZH5zC4QVYCISSmNDP4MDho= -----END CERTIFICATE-----Generated at Sat Apr 5 07:06:02 2025 by rpki-client