$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer (raw, json) Hash identifier: otU30lFf3jRgFS5lDinMqlxj+2oN+V20SfMww7fnqhM= Subject key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 71DD26B2CCB0FD354402B57983E5581AE768FFF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft caRepository: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 14 Feb 2025 06:41:21 +0000 Certificate not after: Fri 13 Feb 2026 06:46:21 +0000 Subordinate resources: IP: 103.152.242.0/23 IP: 2407:7240::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:dd:26:b2:cc:b0:fd:35:44:02:b5:79:83:e5:58:1a:e7:68:ff:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 14 06:41:21 2025 GMT Not After : Feb 13 06:46:21 2026 GMT Subject: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:b6:45:7a:30:96:ca:89:4e:95:84:09:34: 1d:a6:b6:3b:a0:d2:e4:52:8f:ba:ab:27:47:e8:74: f7:b1:3e:e0:e4:89:1c:c2:21:e0:b6:bc:48:84:42: 3c:6f:aa:c1:f7:af:fa:99:90:6b:53:9c:9f:3d:1e: 81:cf:4f:7c:b2:d1:41:77:17:15:63:40:ab:b9:c2: 32:43:a6:68:c4:b6:5f:4b:4c:a0:29:3c:99:12:15: 3a:6d:e0:f1:8b:50:92:db:af:4c:9e:94:58:79:8b: c8:f7:37:c4:63:58:d2:65:1d:1c:7f:52:55:31:4b: c5:ed:5b:a6:ea:e8:a3:4e:32:0b:51:87:3c:09:e3: ef:8b:30:56:0a:c8:6d:cc:78:45:5f:0d:f6:a4:8f: cf:a1:18:4a:2d:a9:a5:85:0c:cd:a9:4b:d9:e7:93: 9d:b2:a7:bf:fb:7b:e8:1a:68:a1:67:dd:89:53:63: 8d:c5:ee:02:3c:1e:a1:a3:62:70:b9:6b:c0:2f:40: 48:e4:a2:be:96:7a:01:fb:e2:31:e7:a3:85:90:ca: 61:7b:32:10:36:15:bd:3c:3f:a3:ac:b9:03:a0:3e: 98:da:ae:6c:0f:b9:a4:2d:7d:09:40:7b:97:7d:d6: 40:67:2d:3b:1f:96:26:4e:56:03:64:77:eb:2f:89: 3f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.242.0/23 IPv6: 2407:7240::/32 Signature Algorithm: sha256WithRSAEncryption 48:38:83:e8:43:e2:87:e3:c3:03:a2:55:32:2c:73:5d:0a:31: 53:33:e6:fa:89:9b:49:ea:19:c8:99:d4:ae:73:eb:c2:60:81: dd:e6:90:a7:0b:4d:db:2c:da:3b:bd:68:fb:22:d9:68:c0:46: 19:d3:9b:e1:c3:04:a1:9e:b0:72:f6:42:89:57:a3:b7:de:37: c9:e4:2d:bb:b1:ca:40:1b:c3:51:a8:c5:92:4a:2d:56:cf:73: e6:31:6b:d4:e4:64:af:03:e1:d1:fd:41:0e:e9:76:6e:86:35: fc:fa:f0:58:5d:ff:f3:8a:b6:27:00:01:79:f8:26:d7:67:01: b0:57:75:78:4e:e5:12:2b:2f:be:23:a8:ee:19:0d:a2:48:7d: 74:b6:68:89:2a:6d:e7:7a:8e:8b:82:5b:d9:bb:fe:8c:dc:87: 7d:9f:bf:9f:5a:84:a1:1f:2b:f0:f8:a2:f4:42:a2:a2:f9:1d: 8b:41:f6:9e:15:49:db:6e:ae:85:67:c6:ff:cd:df:6a:e7:3b: 1c:3e:ac:0a:29:19:d5:0f:f1:1f:d6:13:59:c1:ca:fa:d2:61: fb:f1:61:38:8a:34:03:8b:d2:6c:54:97:26:ea:93:65:7f:e9: 0f:43:54:b0:80:15:7b:47:f6:e9:7c:ca:2f:8d:07:06:c6:49: 82:49:44:02 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUcd0mssyw/TVEArV5g+VYGudo//QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxNDA2NDEyMVoX DTI2MDIxMzA2NDYyMVowMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFE NEFDOTlDNEFCREZEQ0RCQjQwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmftkV6MJbKiU6VhAk0Haa2O6DS5FKPuqsnR+h097E+4OSJHMIh4La8SIRC PG+qwfev+pmQa1Ocnz0egc9PfLLRQXcXFWNAq7nCMkOmaMS2X0tMoCk8mRIVOm3g 8YtQktuvTJ6UWHmLyPc3xGNY0mUdHH9SVTFLxe1bpuroo04yC1GHPAnj74swVgrI bcx4RV8N9qSPz6EYSi2ppYUMzalL2eeTnbKnv/t76BpooWfdiVNjjcXuAjweoaNi cLlrwC9ASOSivpZ6AfviMeejhZDKYXsyEDYVvTw/o6y5A6A+mNqubA+5pC19CUB7 l33WQGctOx+WJk5WA2R36y+JP10CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDFJiKefKlItLtHUrJnEq9/c27QAMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0YmE2Nzc4 LWIxNmQtNGJhOC05ODRmLTM0ZTQxOWZjOWM0OS8wLzMxNDk4OEE3OUYyQTUyMkQy RUQxRDRBQzk5QzRBQkRGRENEQkI0MDAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnmPIwDQQCAAIwBwMFACQHckAwDQYJKoZIhvcNAQELBQADggEBAEg4g+hD4ofj wwOiVTIsc10KMVMz5vqJm0nqGciZ1K5z68Jggd3mkKcLTdss2ju9aPsi2WjARhnT m+HDBKGesHL2QolXo7feN8nkLbuxykAbw1GoxZJKLVbPc+Yxa9TkZK8D4dH9QQ7p dm6GNfz68Fhd//OKticAAXn4JtdnAbBXdXhO5RIrL74jqO4ZDaJIfXS2aIkqbed6 jouCW9m7/ozch32fv59ahKEfK/D4ovRCoqL5HYtB9p4VSdturoVnxv/N32rnOxw+ rAopGdUP8R/WE1nByvrSYfvxYTiKNAOL0mxUlybqk2V/6Q9DVLCAFXtH9ul8yi+N BwbGSYJJRAI= -----END CERTIFICATE-----Generated at Sun Feb 16 20:46:09 2025 by rpki-client