$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer File: 371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.cer (raw, json) Hash identifier: ufROr3T4jjbOK1QuQdMNKPyXiOEG+QgRtf2L6LVY6EE= Subject key identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6F238C39D7DC013089B344D8DB10D4CF8494B347 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft caRepository: rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 25 May 2025 11:56:02 +0000 Certificate not after: Sun 24 May 2026 12:01:02 +0000 Subordinate resources: IP: 103.231.112.0/22 IP: 202.8.28.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:23:8c:39:d7:dc:01:30:89:b3:44:d8:db:10:d4:cf:84:94:b3:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 25 11:56:02 2025 GMT Not After : May 24 12:01:02 2026 GMT Subject: CN=371967DFBD203A2FD44E88F786D9F0F0C88E4BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:db:ef:a3:2c:2a:0f:53:77:11:cf:2e:17:17: da:17:b4:5b:d7:ff:63:63:28:4a:82:ac:64:80:94: 4b:6b:dd:8d:74:5a:24:cf:92:a6:68:b2:64:c8:76: fd:1a:29:af:28:82:bb:3e:b4:08:ec:7e:9b:c4:68: 1b:51:f7:01:cc:79:6d:56:90:1e:8b:17:e6:4c:47: 86:19:98:a8:f1:9e:e1:43:8b:22:52:b6:17:18:eb: 09:53:1a:60:6d:79:08:1b:46:dd:0f:54:32:c1:26: b2:80:c5:76:b7:41:9a:24:0f:84:60:fe:44:dd:85: 29:39:75:44:d5:60:2b:39:91:0f:3a:ea:80:f4:04: 4f:00:97:8b:77:6f:3c:76:03:69:54:f0:42:5a:aa: e9:e2:55:1f:29:b7:60:5f:30:cc:95:02:6b:10:eb: e1:00:2b:45:fd:42:f3:83:5d:da:0c:86:e5:f4:bb: 02:1a:fb:05:a7:04:c4:ba:b1:9e:26:d9:6c:d3:c2: 10:c8:ce:99:5e:f9:df:4e:df:bf:df:00:50:4f:cb: d8:86:3e:30:26:b5:7b:80:89:8d:dd:6a:78:8e:70: af:7c:ff:bd:a2:f3:7a:29:ad:5e:13:5e:92:e7:38: 57:b9:de:22:37:12:20:ce:dd:76:83:27:5b:7e:72: e8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:19:67:DF:BD:20:3A:2F:D4:4E:88:F7:86:D9:F0:F0:C8:8E:4B:A9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/deb8b889-3b3d-4ef5-ad70-5b1045eff393/0/371967DFBD203A2FD44E88F786D9F0F0C88E4BA9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.231.112.0/22 202.8.28.0/23 Signature Algorithm: sha256WithRSAEncryption 56:19:40:95:ec:92:24:95:21:18:e2:8e:bd:29:95:82:b9:da: 84:2c:50:58:24:61:f7:1b:0f:6e:24:26:cc:54:8b:ae:b6:a6: 6b:10:47:ec:95:76:15:20:b2:d4:c1:70:7f:7c:b3:1e:a5:8b: 58:69:08:74:3f:5e:e7:24:db:1d:fe:b9:62:66:47:74:c0:6d: 1f:59:64:12:9b:c7:68:b3:a1:97:b1:98:18:98:a8:ac:ad:f3: de:1f:57:52:58:89:55:ff:ff:b7:98:eb:48:d3:8e:28:84:4e: 33:4b:e4:15:be:3b:5c:fd:44:5d:41:f6:da:43:36:41:3a:b1: ff:5d:38:ea:f7:e8:a7:64:1f:f5:dd:15:2c:ea:8b:6c:00:bc: 17:07:fa:a3:3b:d9:0c:59:9b:cb:36:08:45:e5:7e:b1:f4:cc: 7b:29:ee:be:85:30:bd:ee:4d:cf:91:12:f6:c7:47:54:df:b5: f3:85:3d:14:5c:40:e9:59:ed:c3:2e:4a:09:b2:f8:32:f7:26: 16:4d:86:d4:bc:c2:2d:47:91:3b:80:46:e8:3c:1c:1d:85:5d: d5:22:4e:8a:9a:af:c7:a0:5f:53:4c:db:fd:a3:1e:71:3c:94: 81:71:6f:f1:c4:49:8e:3c:af:50:d1:13:f9:da:e3:a9:b2:bb: 9b:d1:da:2b -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUbyOMOdfcATCJs0TY2xDUz4SUs0cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUyNTExNTYwMloX DTI2MDUyNDEyMDEwMlowMzExMC8GA1UEAxMoMzcxOTY3REZCRDIwM0EyRkQ0NEU4 OEY3ODZEOUYwRjBDODhFNEJBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMvb76MsKg9TdxHPLhcX2he0W9f/Y2MoSoKsZICUS2vdjXRaJM+SpmiyZMh2 /RopryiCuz60COx+m8RoG1H3Acx5bVaQHosX5kxHhhmYqPGe4UOLIlK2FxjrCVMa YG15CBtG3Q9UMsEmsoDFdrdBmiQPhGD+RN2FKTl1RNVgKzmRDzrqgPQETwCXi3dv PHYDaVTwQlqq6eJVHym3YF8wzJUCaxDr4QArRf1C84Nd2gyG5fS7Ahr7BacExLqx nibZbNPCEMjOmV75307fv98AUE/L2IY+MCa1e4CJjd1qeI5wr3z/vaLzeimtXhNe kuc4V7neIjcSIM7ddoMnW35y6OcCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDcZZ9+9IDov1E6I94bZ8PDIjkupMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZWI4Yjg4OS0zYjNkLTRlZjUtYWQ3MC01YjEwNDVlZmYzOTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlYjhiODg5 LTNiM2QtNGVmNS1hZDcwLTViMTA0NWVmZjM5My8wLzM3MTk2N0RGQkQyMDNBMkZE NDRFODhGNzg2RDlGMEYwQzg4RTRCQTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAJn53ADBAHKCBwwDQYJKoZIhvcNAQELBQADggEBAFYZQJXskiSVIRjijr0plYK5 2oQsUFgkYfcbD24kJsxUi662pmsQR+yVdhUgstTBcH98sx6li1hpCHQ/Xuck2x3+ uWJmR3TAbR9ZZBKbx2izoZexmBiYqKyt894fV1JYiVX//7eY60jTjiiETjNL5BW+ O1z9RF1B9tpDNkE6sf9dOOr36KdkH/XdFSzqi2wAvBcH+qM72QxZm8s2CEXlfrH0 zHsp7r6FML3uTc+REvbHR1TftfOFPRRcQOlZ7cMuSgmy+DL3JhZNhtS8wi1HkTuA Rug8HB2FXdUiToqar8egX1NM2/2jHnE8lIFxb/HESY48r1DRE/na46myu5vR2is= -----END CERTIFICATE-----Generated at Tue Jun 3 23:11:02 2025 by rpki-client