$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer File: 428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer (raw, json) Hash identifier: btE7kuVYq8PK5VEluxeU5qLjraxPLZ2W/AuK78H8oh0= Subject key identifier: 42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7E9AF21EF282E17EBFA7984B4F808E9A6E05142F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft caRepository: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Jul 2024 18:01:13 +0000 Certificate not after: Mon 30 Jun 2025 18:06:13 +0000 Subordinate resources: IP: 27.111.32.0/19 IP: 43.229.204.0/22 IP: 103.245.180.0/22 IP: 119.235.16.0/20 IP: 202.129.184.0/21 IP: 2403:2e00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:9a:f2:1e:f2:82:e1:7e:bf:a7:98:4b:4f:80:8e:9a:6e:05:14:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jul 1 18:01:13 2024 GMT Not After : Jun 30 18:06:13 2025 GMT Subject: CN=428AA4240E741F27E3A21EFC29D45F0AECC7FE96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fe:1e:b0:16:31:2a:24:3f:c4:ed:5f:62:58: ff:9a:31:22:73:3a:ff:56:26:7a:ff:d5:e6:5c:e9: 0d:65:e4:cf:54:59:79:fc:7a:57:29:94:02:41:ad: 8d:ce:ee:a6:a1:da:e4:2c:5b:d5:ce:bd:ee:dd:88: b1:94:f1:bc:02:80:a3:c4:f7:09:13:7e:c5:93:7b: 8c:9f:c9:4e:48:aa:17:c3:67:f1:08:28:f0:79:0f: ad:ef:13:12:c1:f2:17:b4:78:97:f8:42:fc:24:8d: 0d:ef:e6:ff:7a:53:50:6e:96:1f:81:b9:ad:33:e0: 7b:02:2c:3a:f4:f3:1e:14:71:f2:4a:5c:82:31:df: 30:93:38:63:5a:0a:9d:42:76:ed:54:fc:59:48:af: d8:98:4f:3f:e5:e5:6a:df:38:cb:1d:fe:c9:22:6e: 3f:14:55:98:70:cd:6a:cc:53:33:34:80:35:25:fa: ac:86:6b:07:c4:2f:c2:29:86:0e:a2:71:5e:58:77: 64:ba:f9:3f:d1:4c:73:93:f9:ba:24:0b:f0:4c:8c: cd:fb:5d:86:2a:a6:5f:2d:90:b7:b5:2d:a0:18:1a: f8:4f:1f:7d:bd:9a:72:ad:50:02:2a:79:1b:84:c2: 37:c7:9f:b4:95:4f:e5:fb:db:5c:da:8c:6f:12:6c: e5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.111.32.0/19 43.229.204.0/22 103.245.180.0/22 119.235.16.0/20 202.129.184.0/21 IPv6: 2403:2e00::/32 Signature Algorithm: sha256WithRSAEncryption 71:b1:46:2b:f9:f3:d2:ed:6e:7d:6d:fe:db:cc:d1:43:85:27: a2:f3:68:4b:c7:45:17:4e:49:b9:c5:01:96:56:6b:3a:6b:3c: e9:2d:8b:49:34:87:97:f5:7b:cf:7c:30:15:c7:ef:9a:7a:25: 12:27:87:16:94:c0:a9:bc:a1:d5:26:e9:58:84:00:20:56:a2: ee:c0:21:dd:cd:16:bf:fb:b6:92:47:bf:01:81:67:22:fa:e3: 17:76:83:65:4e:6f:9b:3e:7c:d7:6e:65:86:35:5c:54:4d:79: a0:5f:43:32:13:ee:7f:ea:00:20:0f:97:d1:39:38:65:58:51: 15:56:f4:12:15:2a:1d:c0:e2:b1:68:45:13:cf:cc:cb:bd:06: 37:84:b0:9a:d5:69:52:46:08:66:57:41:df:0a:08:7d:27:93: 19:83:93:e2:cf:c1:d6:1d:ca:c8:8c:18:1a:19:d4:19:af:3c: 16:5a:df:57:9f:14:a7:65:56:d5:aa:e4:f5:ae:da:07:3c:0a: 62:c5:e3:76:d8:95:da:60:4a:8f:f9:42:97:af:7b:db:6c:9d: c1:3a:c9:0e:e7:25:3c:57:5f:dd:ba:21:9d:c3:f9:d8:70:6f: 8d:91:2d:5a:1d:64:6a:7a:18:3a:65:f5:4b:82:8b:a2:f6:8c: 59:7f:8a:a6 -----BEGIN CERTIFICATE----- MIIF7DCCBNSgAwIBAgIUfpryHvKC4X6/p5hLT4COmm4FFC8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDcwMTE4MDExM1oX DTI1MDYzMDE4MDYxM1owMzExMC8GA1UEAxMoNDI4QUE0MjQwRTc0MUYyN0UzQTIx RUZDMjlENDVGMEFFQ0M3RkU5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANP+HrAWMSokP8TtX2JY/5oxInM6/1Ymev/V5lzpDWXkz1RZefx6VymUAkGt jc7upqHa5Cxb1c697t2IsZTxvAKAo8T3CRN+xZN7jJ/JTkiqF8Nn8Qgo8HkPre8T EsHyF7R4l/hC/CSNDe/m/3pTUG6WH4G5rTPgewIsOvTzHhRx8kpcgjHfMJM4Y1oK nUJ27VT8WUiv2JhPP+Xlat84yx3+ySJuPxRVmHDNasxTMzSANSX6rIZrB8QvwimG DqJxXlh3ZLr5P9FMc5P5uiQL8EyMzftdhiqmXy2Qt7UtoBga+E8ffb2acq1QAip5 G4TCN8eftJVP5fvbXNqMbxJs5WECAwEAAaOCAt8wggLbMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEKKpCQOdB8n46Ie/CnUXwrsx/6WMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NDNlMmU2Ny1hMTcxLTRkOWUtYTkzNS00MDY5MDJiMWUxM2IvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0M2UyZTY3 LWExNzEtNGQ5ZS1hOTM1LTQwNjkwMmIxZTEzYi8wLzQyOEFBNDI0MEU3NDFGMjdF M0EyMUVGQzI5RDQ1RjBBRUNDN0ZFOTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4D BAUbbyADBAIr5cwDBAJn9bQDBAR36xADBAPKgbgwDQQCAAIwBwMFACQDLgAwDQYJ KoZIhvcNAQELBQADggEBAHGxRiv589Ltbn1t/tvM0UOFJ6LzaEvHRRdOSbnFAZZW azprPOkti0k0h5f1e898MBXH75p6JRInhxaUwKm8odUm6ViEACBWou7AId3NFr/7 tpJHvwGBZyL64xd2g2VOb5s+fNduZYY1XFRNeaBfQzIT7n/qACAPl9E5OGVYURVW 9BIVKh3A4rFoRRPPzMu9BjeEsJrVaVJGCGZXQd8KCH0nkxmDk+LPwdYdysiMGBoZ 1BmvPBZa31efFKdlVtWq5PWu2gc8CmLF43bYldpgSo/5Qpeve9tsncE6yQ7nJTxX X926IZ3D+dhwb42RLVodZGp6GDpl9UuCi6L2jFl/iqY= -----END CERTIFICATE-----Generated at Sun Feb 16 20:58:18 2025 by rpki-client