$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer File: 2E83B1793FA2E18A4137A66A092163F5DABD45F0.cer (raw, json) Hash identifier: TnURVhHx9IA8YC9E9EriM4Uyegl2sE5C71uWrneiovQ= Subject key identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 126452C40CEF4C59D874C5AB8FC89FCAE6ECCF0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft caRepository: rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 04 Mar 2025 21:53:45 +0000 Certificate not after: Tue 03 Mar 2026 21:58:45 +0000 Subordinate resources: IP: 103.91.32.0/22 IP: 123.253.252.0/22 IP: 2001:df0:f900::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:64:52:c4:0c:ef:4c:59:d8:74:c5:ab:8f:c8:9f:ca:e6:ec:cf:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Mar 4 21:53:45 2025 GMT Not After : Mar 3 21:58:45 2026 GMT Subject: CN=2E83B1793FA2E18A4137A66A092163F5DABD45F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:c6:10:5b:c3:34:a4:f7:fa:08:a3:14:81: 6c:5d:29:76:63:9c:cf:12:6f:2b:c8:85:ca:1a:fc: 00:d2:83:01:d3:98:c1:19:fb:ec:c5:19:fc:bc:5e: 9f:06:ac:f5:e3:75:4f:0a:c4:b8:a3:ce:95:85:16: 26:fa:8d:34:0b:61:25:52:aa:14:fc:b2:85:a9:91: bd:b8:d7:8a:e7:d3:eb:37:b1:90:75:ad:09:24:fb: 2f:10:d7:d5:d0:f6:ab:43:f6:95:4e:c0:fb:71:f3: 1e:ef:f6:84:fc:60:46:c8:47:3f:52:9b:24:9a:70: 3f:21:60:cb:83:b1:07:39:5b:9b:83:93:c6:8f:b2: 2b:00:89:2c:67:b1:b8:41:6e:b3:68:40:3f:5e:3e: 2f:35:7e:08:9d:06:0c:73:96:90:5b:6c:e4:c9:30: a9:2a:58:2e:f8:42:f9:7d:83:56:82:52:aa:60:2d: e4:68:c5:6e:85:06:7f:78:f8:bd:56:a6:02:52:ab: 11:bb:07:88:bd:88:9b:d4:94:4a:62:d7:3f:d4:a2: b2:46:0c:ba:fd:dd:85:20:b0:a7:c6:9c:ad:45:c4: 81:65:4c:9e:13:9d:45:f6:ed:cd:11:68:36:54:bb: b2:81:26:6d:0b:5f:9c:c4:58:63:9f:34:a5:34:e6: 1e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:83:B1:79:3F:A2:E1:8A:41:37:A6:6A:09:21:63:F5:DA:BD:45:F0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/caecb002-24a4-4955-a333-002fdb74553f/0/2E83B1793FA2E18A4137A66A092163F5DABD45F0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.32.0/22 123.253.252.0/22 IPv6: 2001:df0:f900::/48 Signature Algorithm: sha256WithRSAEncryption 48:7d:80:67:86:de:ad:1e:cf:f5:fb:b8:7d:41:ba:0f:0c:54: 75:bd:ea:c3:b2:c1:05:c2:de:15:4e:f0:83:d8:84:90:a9:26: f9:56:f8:34:b5:1c:3c:6f:ee:05:6e:a3:ed:f3:9a:06:85:3d: 8f:27:ef:71:0a:0d:56:cb:26:f3:18:18:d7:ba:ce:c0:67:6d: 02:12:31:05:74:8e:87:fa:cc:db:87:db:d9:3c:82:a7:b5:a6: 0e:26:8a:f5:8a:70:60:a3:3f:a6:11:a2:d7:49:fb:03:42:05: ef:d2:e4:70:27:00:2c:53:d3:2f:34:fe:b1:80:8b:36:ff:ed: 24:0a:e1:c0:38:df:98:01:1b:d1:01:4d:70:0b:9c:1e:a5:a9: b6:b4:26:99:02:30:8c:08:ec:4e:c9:d9:fc:2e:df:97:bf:a3: 55:61:2d:58:88:0e:6a:37:70:17:92:13:89:2e:5c:0b:e4:c6: a5:6c:ab:77:87:25:e5:32:ce:5c:3a:09:40:0a:b8:e6:3e:7b: 88:4c:44:c3:0c:83:94:95:a8:06:fe:8d:cf:d8:ed:a6:93:a7: 4b:8b:1a:b9:c5:75:ee:36:b3:f9:0f:9b:66:ff:ba:12:23:d3: be:07:09:83:65:1a:b8:90:2e:89:f9:1e:0c:12:ff:e2:4b:19: 72:d7:be:51 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUEmRSxAzvTFnYdMWrj8ifyubszwswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMwNDIxNTM0NVoX DTI2MDMwMzIxNTg0NVowMzExMC8GA1UEAxMoMkU4M0IxNzkzRkEyRTE4QTQxMzdB NjZBMDkyMTYzRjVEQUJENDVGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEoxhBbwzSk9/oIoxSBbF0pdmOczxJvK8iFyhr8ANKDAdOYwRn77MUZ/Lxe nwas9eN1TwrEuKPOlYUWJvqNNAthJVKqFPyyhamRvbjXiufT6zexkHWtCST7LxDX 1dD2q0P2lU7A+3HzHu/2hPxgRshHP1KbJJpwPyFgy4OxBzlbm4OTxo+yKwCJLGex uEFus2hAP14+LzV+CJ0GDHOWkFts5MkwqSpYLvhC+X2DVoJSqmAt5GjFboUGf3j4 vVamAlKrEbsHiL2Im9SUSmLXP9SiskYMuv3dhSCwp8acrUXEgWVMnhOdRfbtzRFo NlS7soEmbQtfnMRYY580pTTmHnMCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC6DsXk/ouGKQTemagkhY/XavUXwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYWVjYjAwMi0yNGE0LTQ5NTUtYTMzMy0wMDJmZGI3NDU1M2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhZWNiMDAy LTI0YTQtNDk1NS1hMzMzLTAwMmZkYjc0NTUzZi8wLzJFODNCMTc5M0ZBMkUxOEE0 MTM3QTY2QTA5MjE2M0Y1REFCRDQ1RjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BAJnWyADBAJ7/fwwDwQCAAIwCQMHACABDfD5ADANBgkqhkiG9w0BAQsFAAOCAQEA SH2AZ4berR7P9fu4fUG6DwxUdb3qw7LBBcLeFU7wg9iEkKkm+Vb4NLUcPG/uBW6j 7fOaBoU9jyfvcQoNVssm8xgY17rOwGdtAhIxBXSOh/rM24fb2TyCp7WmDiaK9Ypw YKM/phGi10n7A0IF79LkcCcALFPTLzT+sYCLNv/tJArhwDjfmAEb0QFNcAucHqWp trQmmQIwjAjsTsnZ/C7fl7+jVWEtWIgOajdwF5ITiS5cC+TGpWyrd4cl5TLOXDoJ QAq45j57iExEwwyDlJWoBv6Nz9jtppOnS4saucV17jaz+Q+bZv+6EiPTvgcJg2Ua uJAuifkeDBL/4ksZcte+UQ== -----END CERTIFICATE-----Generated at Sat Apr 5 10:39:27 2025 by rpki-client