$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer File: 2D0745D26E59440CB71FAFE996834493DA753248.cer (raw, json) Hash identifier: a2x/ZcqJav/R1E/lr3Oqeeb05qShk+NVGgg5DDx+am0= Subject key identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 02AFEC2B7900CFEADA89EB9AF096D4254309C28E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft caRepository: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Sep 2024 14:24:25 +0000 Certificate not after: Thu 04 Sep 2025 14:29:25 +0000 Subordinate resources: IP: 103.73.158.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:af:ec:2b:79:00:cf:ea:da:89:eb:9a:f0:96:d4:25:43:09:c2:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Sep 5 14:24:25 2024 GMT Not After : Sep 4 14:29:25 2025 GMT Subject: CN=2D0745D26E59440CB71FAFE996834493DA753248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:97:b0:88:fc:a3:11:f9:06:1e:60:5f:80:79: b4:cb:7d:4b:80:77:cc:29:7a:08:0c:0e:fd:62:94: c7:58:e8:f1:81:10:ca:e0:5d:a3:1c:c2:5a:87:f5: b0:c4:db:3c:ee:b3:78:4b:b3:db:7b:48:72:5f:9e: dc:60:4e:2e:a1:0d:c7:44:ea:5f:01:fd:02:cb:38: 35:97:a2:b0:75:59:13:22:9c:c8:4d:c4:c0:53:15: 6d:d6:b7:f9:7e:0c:05:d4:3d:04:1b:c9:89:52:18: 0a:ca:d4:9e:9e:1e:29:90:6c:65:3f:5f:c7:03:34: 46:1a:79:69:c7:32:05:86:1d:48:7a:59:76:0b:6e: 91:62:80:a4:9b:4a:ac:1a:35:1f:de:41:4a:8c:02: 3a:69:ac:03:00:3f:e6:78:05:0c:c4:80:a2:6e:17: 41:9d:bd:87:84:19:71:db:53:ce:92:df:a0:fb:82: b6:19:ea:2a:28:3c:59:57:20:62:43:67:a2:56:1d: b4:a0:c1:58:de:64:98:22:9a:c5:a2:c0:9c:6a:16: 09:32:2d:4f:53:92:f0:53:bc:ac:3f:0e:18:e7:7f: 17:19:db:da:9f:cd:b0:1a:88:48:b8:f7:88:bd:80: ec:2f:ab:f6:c0:a6:7b:08:bb:60:bc:d6:46:0f:87: 76:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.73.158.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:4e:05:04:b4:c2:f9:93:20:df:60:dc:02:cd:1d:9b:92:e4: e1:01:19:49:96:f6:a5:cd:1d:5e:30:ce:b5:13:8b:02:bd:51: c0:c7:21:d0:f8:bf:ec:8f:37:23:ef:a2:39:ec:7b:9a:13:90: 46:a8:50:77:54:af:80:64:8c:f0:ae:33:3e:b4:dd:7d:63:04: 4f:62:94:b7:56:4c:b3:8e:8a:f8:32:63:29:2b:be:36:b6:69: 97:34:92:f3:70:09:a7:41:3c:ef:50:e0:a0:5b:d4:c4:67:d2: e5:ad:8e:76:15:12:b7:e3:cc:ee:54:e5:68:21:15:74:a0:dd: d2:2c:47:4f:56:58:32:17:a5:c8:d7:40:62:ef:68:b3:84:43: 17:14:6c:82:2e:c7:fe:97:6d:8b:87:ea:0e:77:a2:2b:8b:5b: 17:10:7f:3c:b4:98:02:3a:27:26:fa:1b:8f:d5:9b:fb:4e:fe: 26:b0:b8:2d:42:d7:fa:d6:8f:bb:87:37:11:77:0d:60:19:d3: be:5b:c6:bb:5a:b8:f2:40:2a:9d:a8:2f:c6:5a:95:da:b9:4b: 24:b0:c0:a8:a4:c8:93:f0:4f:d3:3c:1a:61:d6:44:bf:78:e1: 3d:c9:c7:62:f1:d8:26:db:24:3f:81:36:57:51:5c:2b:98:d8: 53:e2:92:b4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAq/sK3kAz+raieua8JbUJUMJwo4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDkwNTE0MjQyNVoX DTI1MDkwNDE0MjkyNVowMzExMC8GA1UEAxMoMkQwNzQ1RDI2RTU5NDQwQ0I3MUZB RkU5OTY4MzQ0OTNEQTc1MzI0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMeXsIj8oxH5Bh5gX4B5tMt9S4B3zCl6CAwO/WKUx1jo8YEQyuBdoxzCWof1 sMTbPO6zeEuz23tIcl+e3GBOLqENx0TqXwH9Ass4NZeisHVZEyKcyE3EwFMVbda3 +X4MBdQ9BBvJiVIYCsrUnp4eKZBsZT9fxwM0Rhp5accyBYYdSHpZdgtukWKApJtK rBo1H95BSowCOmmsAwA/5ngFDMSAom4XQZ29h4QZcdtTzpLfoPuCthnqKig8WVcg YkNnolYdtKDBWN5kmCKaxaLAnGoWCTItT1OS8FO8rD8OGOd/Fxnb2p/NsBqISLj3 iL2A7C+r9sCmewi7YLzWRg+HdvUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC0HRdJuWUQMtx+v6ZaDRJPadTJIMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zYTQwNmNkYi0xNzkxLTQ3OGQtOWQyOC05ZTM3YTZmODA5Y2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNDA2Y2Ri LTE3OTEtNDc4ZC05ZDI4LTllMzdhNmY4MDljYy8wLzJEMDc0NUQyNkU1OTQ0MENC NzFGQUZFOTk2ODM0NDkzREE3NTMyNDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnSZ4wDQYJKoZIhvcNAQELBQADggEBAB9OBQS0wvmTIN9g3ALNHZuS5OEBGUmW 9qXNHV4wzrUTiwK9UcDHIdD4v+yPNyPvojnse5oTkEaoUHdUr4BkjPCuMz603X1j BE9ilLdWTLOOivgyYykrvja2aZc0kvNwCadBPO9Q4KBb1MRn0uWtjnYVErfjzO5U 5WghFXSg3dIsR09WWDIXpcjXQGLvaLOEQxcUbIIux/6XbYuH6g53oiuLWxcQfzy0 mAI6Jyb6G4/Vm/tO/iawuC1C1/rWj7uHNxF3DWAZ075bxrtauPJAKp2oL8Zaldq5 SySwwKikyJPwT9M8GmHWRL944T3Jx2Lx2CbbJD+BNldRXCuY2FPikrQ= -----END CERTIFICATE-----Generated at Sun Feb 16 20:46:21 2025 by rpki-client