$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/35526D55C5F4431129EA7CE9304705CE395693D9.cer File: 35526D55C5F4431129EA7CE9304705CE395693D9.cer (raw, json) Hash identifier: dYF1Z4vsInvY7UIwO/jAsoaHZneFVkWUEzgk4l+1jso= Subject key identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 299415A95358D9068FC1426578951510932A1261 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft caRepository: rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 22 Jan 2025 15:11:55 +0000 Certificate not after: Wed 21 Jan 2026 15:16:55 +0000 Subordinate resources: IP: 103.40.120.0/22 IP: 2403:cb80::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:94:15:a9:53:58:d9:06:8f:c1:42:65:78:95:15:10:93:2a:12:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 22 15:11:55 2025 GMT Not After : Jan 21 15:16:55 2026 GMT Subject: CN=35526D55C5F4431129EA7CE9304705CE395693D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:c5:81:f8:f6:eb:b7:22:f2:a8:1f:8c:7f: 79:03:52:9b:78:cd:0b:af:c7:90:1d:d6:7f:ba:90: 2f:d0:e5:56:09:3c:9a:61:e2:f7:a2:02:c4:37:3b: b2:d8:41:2a:f5:bc:4c:92:8f:a9:a0:42:c6:58:ec: b6:b0:8b:da:1f:dd:2c:17:a1:04:4f:35:a3:20:2e: 42:e5:c6:a3:0f:b3:1d:9a:84:19:55:82:05:e5:24: 69:0b:e5:67:fe:d1:e1:b2:a7:30:8d:fe:bc:28:5f: 6d:93:ad:35:1a:24:f8:37:02:05:66:bc:95:a4:d8: e2:42:cc:8f:e0:bd:10:22:c1:08:fe:19:33:ec:01: 77:3d:f0:d9:73:1e:20:6b:06:d2:89:e8:08:be:cd: 33:f3:44:4b:1e:64:b4:16:df:3a:05:5e:a2:11:e3: 8c:de:48:59:4a:80:22:cb:c3:fb:dd:5e:ce:da:ff: 58:e7:b4:d3:1a:a5:d5:23:82:7d:a1:ff:99:67:93: 86:09:69:3e:09:48:01:f0:b9:85:7f:ac:79:4f:d1: 8f:7a:33:8b:62:80:86:03:43:a4:71:72:a7:1e:08: 98:a0:c1:19:35:a1:fb:3c:7f:86:89:a7:6b:30:33: cd:ec:a7:e2:08:3c:bf:75:dc:ba:e1:52:94:01:b2: 03:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:52:6D:55:C5:F4:43:11:29:EA:7C:E9:30:47:05:CE:39:56:93:D9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b4b0bf5b-456d-4e62-9f48-6192149d52c2/0/35526D55C5F4431129EA7CE9304705CE395693D9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.40.120.0/22 IPv6: 2403:cb80::/32 Signature Algorithm: sha256WithRSAEncryption 95:5f:c0:14:49:66:06:35:14:56:7c:50:93:2c:9f:6c:34:60: b6:3e:81:a0:34:88:46:65:f9:5e:34:ed:86:f6:16:f4:52:8e: 3f:56:eb:dc:57:50:5f:4a:94:d7:8f:a0:11:31:5c:1f:ac:9a: d5:1a:d5:36:c0:9f:2d:a7:7a:7a:b6:cd:f2:3e:6e:a1:86:cd: 83:bf:2e:f3:0a:b4:f7:a3:c4:b0:12:16:3e:28:cd:1b:7b:e3: 1d:c9:bd:cc:4d:c1:20:16:7f:08:62:85:b8:58:07:e7:09:af: d5:e8:f7:05:1a:36:6e:29:34:d2:27:51:25:5f:7b:62:c0:2b: 9f:9a:17:8b:8a:71:c5:69:2f:e0:c3:41:c2:9c:78:1f:d4:4d: 89:92:1c:df:a2:9c:7c:37:ac:65:a7:d5:28:5d:34:56:93:0c: 7e:65:fa:3a:30:86:2a:08:22:78:0d:44:af:01:86:62:44:22: ff:e0:c2:b1:d6:20:4c:89:7b:a8:77:7f:af:c9:fa:32:ee:d7: 14:c0:f8:ad:fa:5c:4b:62:2b:57:2d:c6:8b:d4:a3:57:5e:30: 48:7d:02:b2:d6:79:df:9d:6f:e1:6d:7b:d1:5a:02:99:f5:f1: 71:7d:21:ce:b7:d5:b3:6f:5d:56:98:c5:6b:b6:8b:1a:b4:7a: bb:79:ae:2e -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUKZQVqVNY2QaPwUJleJUVEJMqEmEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEyMjE1MTE1NVoX DTI2MDEyMTE1MTY1NVowMzExMC8GA1UEAxMoMzU1MjZENTVDNUY0NDMxMTI5RUE3 Q0U5MzA0NzA1Q0UzOTU2OTNEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPwxYH49uu3IvKoH4x/eQNSm3jNC6/HkB3Wf7qQL9DlVgk8mmHi96ICxDc7 sthBKvW8TJKPqaBCxljstrCL2h/dLBehBE81oyAuQuXGow+zHZqEGVWCBeUkaQvl Z/7R4bKnMI3+vChfbZOtNRok+DcCBWa8laTY4kLMj+C9ECLBCP4ZM+wBdz3w2XMe IGsG0onoCL7NM/NESx5ktBbfOgVeohHjjN5IWUqAIsvD+91eztr/WOe00xql1SOC faH/mWeThglpPglIAfC5hX+seU/Rj3ozi2KAhgNDpHFypx4ImKDBGTWh+zx/homn azAzzeyn4gg8v3XcuuFSlAGyAxMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDVSbVXF9EMRKep86TBHBc45VpPZMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNGIwYmY1Yi00NTZkLTRlNjItOWY0OC02MTkyMTQ5ZDUyYzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0YjBiZjVi LTQ1NmQtNGU2Mi05ZjQ4LTYxOTIxNDlkNTJjMi8wLzM1NTI2RDU1QzVGNDQzMTEy OUVBN0NFOTMwNDcwNUNFMzk1NjkzRDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnKHgwDQQCAAIwBwMFACQDy4AwDQYJKoZIhvcNAQELBQADggEBAJVfwBRJZgY1 FFZ8UJMsn2w0YLY+gaA0iEZl+V407Yb2FvRSjj9W69xXUF9KlNePoBExXB+smtUa 1TbAny2nenq2zfI+bqGGzYO/LvMKtPejxLASFj4ozRt74x3JvcxNwSAWfwhihbhY B+cJr9Xo9wUaNm4pNNInUSVfe2LAK5+aF4uKccVpL+DDQcKceB/UTYmSHN+inHw3 rGWn1ShdNFaTDH5l+jowhioIIngNRK8BhmJEIv/gwrHWIEyJe6h3f6/J+jLu1xTA +K36XEtiK1ctxovUo1deMEh9ArLWed+db+Fte9FaApn18XF9Ic631bNvXVaYxWu2 ixq0ert5ri4= -----END CERTIFICATE-----Generated at Sat Apr 5 10:30:34 2025 by rpki-client