$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer File: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer (raw, json) Hash identifier: O6XzeGc+sdqzSF2FweQeTbSfD8RaieNWfKmltf+D2Ss= Subject key identifier: 2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3B7D199F0AB9C4D54E6EBB2420352166A2080FFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft caRepository: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 31 Oct 2024 10:09:31 +0000 Certificate not after: Thu 30 Oct 2025 10:14:31 +0000 Subordinate resources: IP: 103.225.17.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7d:19:9f:0a:b9:c4:d5:4e:6e:bb:24:20:35:21:66:a2:08:0f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Oct 31 10:09:31 2024 GMT Not After : Oct 30 10:14:31 2025 GMT Subject: CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c8:2c:f5:b7:57:1c:21:22:75:3f:be:5e:4c: 84:5b:86:8f:e2:d0:fe:f0:34:36:ce:4f:4a:c6:de: 64:bb:99:b5:80:ff:f4:63:a9:d4:16:82:b7:4f:ed: 71:a1:2b:cf:e6:c7:3f:d7:27:6a:18:8e:7a:76:a7: 60:97:88:2f:43:0c:eb:8d:ad:c9:fb:58:a7:1e:a7: df:0d:f4:82:ba:cb:6a:d1:de:51:68:18:b5:69:8e: 23:12:14:df:68:ad:0d:48:89:b7:a0:2b:02:3b:b0: c4:d3:1b:99:d0:a1:7a:bc:66:d7:e8:09:f2:cb:40: b3:c0:23:22:5d:5e:f3:7e:cf:17:f3:e0:2a:d5:10: ae:f3:a1:b1:90:3f:32:79:01:a9:d7:b4:6e:17:3f: 40:a5:91:15:e2:4f:7a:16:6d:93:51:9b:cd:ab:72: 37:2c:96:45:fe:77:79:45:01:86:da:3a:cb:c4:2e: 5d:d5:75:d2:1c:1e:c0:db:9b:12:06:84:7e:e5:53: 6d:2c:38:b2:20:d2:34:8c:52:79:f6:ff:06:69:ef: c4:be:0a:da:86:74:b3:d0:45:77:e0:0f:d0:d4:0b: 84:38:af:70:19:a7:6a:ca:91:84:a1:ca:89:db:6c: 5a:2c:59:dc:6f:22:2c:a6:7f:36:e1:ce:ac:ea:59: 74:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.225.17.0/24 Signature Algorithm: sha256WithRSAEncryption 78:7e:68:5e:3e:20:a4:b8:9b:ba:6c:16:4a:79:1d:c7:23:35: 01:b5:dd:a9:8c:3a:1b:12:d7:0d:b4:47:dd:ad:10:83:33:15: e2:d9:32:63:03:3d:80:88:4d:6c:30:35:6a:75:f2:23:2c:12: e1:86:e4:05:2f:b0:12:2c:30:1e:ed:c7:4e:e2:d0:2a:66:57: 89:37:a6:16:c0:9f:3d:af:e0:21:d6:3d:7f:cc:db:03:ed:70: d7:d2:fe:68:3b:46:87:7f:62:6b:56:f6:17:b0:e4:d2:a3:be: 63:ec:c6:0d:f5:00:bf:bd:ef:25:a3:2e:9a:21:32:59:ef:9b: 11:00:58:90:5a:04:9d:8f:33:73:6b:c4:a1:f0:19:32:f4:a8: 02:fd:3d:df:32:71:ec:94:0b:d8:c9:7c:10:a0:f7:67:72:ec: ce:b1:a9:e8:d7:49:27:4c:7a:00:5a:b7:86:89:81:5e:6e:1a: 69:31:cb:be:f4:32:48:18:b3:d8:09:d4:30:57:db:bb:4f:56: 74:c9:57:62:74:1a:79:c8:86:21:e4:00:81:a6:c5:b4:42:07: a4:f0:5e:fc:ee:9f:66:6b:80:05:65:80:1d:32:45:b9:e8:8c: 25:3c:e1:71:e4:2a:1d:cf:1f:9b:ba:cf:5f:3a:18:d8:31:5d: 9c:b0:f3:6a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUO30Znwq5xNVObrskIDUhZqIID/owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAzMTEwMDkzMVoX DTI1MTAzMDEwMTQzMVowMzExMC8GA1UEAxMoMkIwRDNENzBBMDI3QjUzQzdBRDIx N0ZFMjJDQTBFRDExMUZERjNCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN3ILPW3VxwhInU/vl5MhFuGj+LQ/vA0Ns5PSsbeZLuZtYD/9GOp1BaCt0/t caErz+bHP9cnahiOenanYJeIL0MM642tyftYpx6n3w30grrLatHeUWgYtWmOIxIU 32itDUiJt6ArAjuwxNMbmdCherxm1+gJ8stAs8AjIl1e837PF/PgKtUQrvOhsZA/ MnkBqde0bhc/QKWRFeJPehZtk1GbzatyNyyWRf53eUUBhto6y8QuXdV10hwewNub EgaEfuVTbSw4siDSNIxSefb/BmnvxL4K2oZ0s9BFd+AP0NQLhDivcBmnasqRhKHK idtsWixZ3G8iLKZ/NuHOrOpZdLUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCsNPXCgJ7U8etIX/iLKDtER/fOwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81YzcyZDNmNS1kZDUzLTRiNzQtOTQ3Yy02YmI1MTBmNGY1MDMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjNzJkM2Y1 LWRkNTMtNGI3NC05NDdjLTZiYjUxMGY0ZjUwMy8wLzJCMEQzRDcwQTAyN0I1M0M3 QUQyMTdGRTIyQ0EwRUQxMTFGREYzQjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn4REwDQYJKoZIhvcNAQELBQADggEBAHh+aF4+IKS4m7psFkp5HccjNQG13amM OhsS1w20R92tEIMzFeLZMmMDPYCITWwwNWp18iMsEuGG5AUvsBIsMB7tx07i0Cpm V4k3phbAnz2v4CHWPX/M2wPtcNfS/mg7Rod/YmtW9hew5NKjvmPsxg31AL+97yWj LpohMlnvmxEAWJBaBJ2PM3NrxKHwGTL0qAL9Pd8yceyUC9jJfBCg92dy7M6xqejX SSdMegBat4aJgV5uGmkxy770MkgYs9gJ1DBX27tPVnTJV2J0GnnIhiHkAIGmxbRC B6TwXvzun2ZrgAVlgB0yRbnojCU84XHkKh3PH5u6z186GNgxXZyw82o= -----END CERTIFICATE-----Generated at Sun Feb 16 20:52:37 2025 by rpki-client