$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/50A2EED432F4BC38B22EB315635CF701DA108F7E.cer File: 50A2EED432F4BC38B22EB315635CF701DA108F7E.cer (raw, json) Hash identifier: CjyhC/WE7XbSfEfvaMAdRzzqeSFMDcTZU6xPb1wCfZE= Subject key identifier: 50:A2:EE:D4:32:F4:BC:38:B2:2E:B3:15:63:5C:F7:01:DA:10:8F:7E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4CA8A6883245D4D0E4C931D2C9D340C2D6071FFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.mft caRepository: rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 21 Mar 2025 15:10:52 +0000 Certificate not after: Fri 20 Mar 2026 15:15:52 +0000 Subordinate resources: IP: 103.169.12.0/23 IP: 2407:a140::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 10:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:a8:a6:88:32:45:d4:d0:e4:c9:31:d2:c9:d3:40:c2:d6:07:1f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Mar 21 15:10:52 2025 GMT Not After : Mar 20 15:15:52 2026 GMT Subject: CN=50A2EED432F4BC38B22EB315635CF701DA108F7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3d:59:a9:a9:9f:ca:90:dd:31:e5:ca:94:4b: ad:67:c8:a2:37:24:92:2e:b5:21:68:81:f7:76:41: 8e:b0:81:cc:25:f4:84:e5:11:c4:31:9b:f2:74:5b: ba:7b:36:ac:de:8f:43:6b:ac:17:7f:46:a7:a6:52: fa:f6:b1:bb:98:ac:8d:e7:eb:2b:ee:7a:9e:22:4e: 71:7f:5d:70:88:1d:2c:8e:ee:10:83:cd:ff:e9:2b: d4:c3:00:35:b0:b0:cd:3b:9e:54:f5:52:3f:d7:83: e6:6e:2a:c4:5e:5b:d8:26:2e:87:34:93:c2:09:c1: aa:0f:4c:43:6e:76:a7:67:d7:33:4d:b2:69:26:a8: c8:0b:c6:32:59:e6:87:99:b6:56:ae:1f:f6:06:6d: 17:62:35:70:72:74:48:d8:1c:58:91:b5:2c:ce:a5: c4:39:26:8b:11:f5:a5:01:10:ee:b0:ae:4c:10:2b: 3f:e8:a1:e6:ca:ca:5d:44:a7:1a:1b:2a:a1:87:cc: a1:43:0c:2d:44:78:36:00:d7:1f:30:15:6b:2f:b7: f8:9f:b1:ad:43:a2:6c:b3:2d:03:99:3c:50:cb:40: 0d:96:81:9f:28:90:12:08:38:79:02:ed:fd:8d:f1: d6:ed:f5:1e:24:10:a8:95:81:53:e4:88:0d:f0:55: aa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 50:A2:EE:D4:32:F4:BC:38:B2:2E:B3:15:63:5C:F7:01:DA:10:8F:7E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.12.0/23 IPv6: 2407:a140::/32 Signature Algorithm: sha256WithRSAEncryption 30:01:05:9b:41:4b:85:9b:f0:e4:f4:04:a6:c1:6f:d1:0a:8b: b8:31:69:86:dc:9e:ec:01:69:33:37:91:f5:5b:6d:bd:e2:d0: 60:ea:bd:07:6a:cb:54:fb:b5:66:e3:6a:93:d4:c7:93:b8:a2: 02:c1:9a:62:e7:6c:1f:42:49:5b:45:f7:89:e9:8b:32:5a:35: b3:26:72:8a:f6:ea:4d:8a:30:ce:8c:fe:6a:36:38:41:60:b2: 75:85:40:79:a3:b3:e3:31:e3:14:6a:79:51:c3:d6:c6:44:c9: de:fb:19:2c:50:ea:c0:35:bd:93:75:7c:b5:b7:fb:f1:95:71: 25:9e:9e:06:49:80:68:34:83:5e:d1:59:39:52:12:fb:3c:4c: 7b:84:df:49:a8:82:79:49:0b:70:03:1c:c3:5d:33:3b:18:57: eb:04:8b:25:2d:41:64:78:ed:37:8f:17:13:b8:79:a5:30:49: ce:ad:0e:42:f4:c5:2a:d5:6e:0e:86:d2:be:33:fe:4a:21:62: 44:d5:78:1d:50:a7:6d:fc:a8:b9:6a:ab:3d:44:fe:fd:81:db: 7e:3d:44:c9:4b:fd:a9:94:80:71:ee:2f:c1:29:05:ba:19:d2: 57:11:78:97:3d:a8:9f:1f:db:cc:0a:1c:90:5a:30:e5:21:52: e5:b8:61:1a -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUTKimiDJF1NDkyTHSydNAwtYHH/swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMyMTE1MTA1MloX DTI2MDMyMDE1MTU1MlowMzExMC8GA1UEAxMoNTBBMkVFRDQzMkY0QkMzOEIyMkVC MzE1NjM1Q0Y3MDFEQTEwOEY3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOw9Wampn8qQ3THlypRLrWfIojckki61IWiB93ZBjrCBzCX0hOURxDGb8nRb uns2rN6PQ2usF39Gp6ZS+vaxu5isjefrK+56niJOcX9dcIgdLI7uEIPN/+kr1MMA NbCwzTueVPVSP9eD5m4qxF5b2CYuhzSTwgnBqg9MQ252p2fXM02yaSaoyAvGMlnm h5m2Vq4f9gZtF2I1cHJ0SNgcWJG1LM6lxDkmixH1pQEQ7rCuTBArP+ih5srKXUSn GhsqoYfMoUMMLUR4NgDXHzAVay+3+J+xrUOibLMtA5k8UMtADZaBnyiQEgg4eQLt /Y3x1u31HiQQqJWBU+SIDfBVqi0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFCi7tQy9Lw4si6zFWNc9wHaEI9+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lZWI3OGY2OC1jN2NiLTQ1MmYtOTZiNS1jNDFkNjUzNzIwMjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYjc4ZjY4 LWM3Y2ItNDUyZi05NmI1LWM0MWQ2NTM3MjAyMS8wLzUwQTJFRUQ0MzJGNEJDMzhC MjJFQjMxNTYzNUNGNzAxREExMDhGN0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnqQwwDQQCAAIwBwMFACQHoUAwDQYJKoZIhvcNAQELBQADggEBADABBZtBS4Wb 8OT0BKbBb9EKi7gxaYbcnuwBaTM3kfVbbb3i0GDqvQdqy1T7tWbjapPUx5O4ogLB mmLnbB9CSVtF94npizJaNbMmcor26k2KMM6M/mo2OEFgsnWFQHmjs+Mx4xRqeVHD 1sZEyd77GSxQ6sA1vZN1fLW3+/GVcSWengZJgGg0g17RWTlSEvs8THuE30mognlJ C3ADHMNdMzsYV+sEiyUtQWR47TePFxO4eaUwSc6tDkL0xSrVbg6G0r4z/kohYkTV eB1Qp238qLlqqz1E/v2B2349RMlL/amUgHHuL8EpBboZ0lcReJc9qJ8f28wKHJBa MOUhUuW4YRo= -----END CERTIFICATE-----Generated at Sun Apr 6 11:52:04 2025 by rpki-client