$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.cer (raw, json) Hash identifier: hfjpS2tQYbAKUtVO/m8kd7yS0pNLUjiyXBdZWo39cyQ= Subject key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 91E6E860ED946D6B2CE53B02C3CB7359369FF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft caRepository: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 19 Mar 2025 04:17:48 +0000 Certificate not after: Wed 18 Mar 2026 04:22:48 +0000 Subordinate resources: IP: 103.7.226.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 12:13:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91:e6:e8:60:ed:94:6d:6b:2c:e5:3b:02:c3:cb:73:59:36:9f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 19 04:17:48 2025 GMT Not After : Mar 18 04:22:48 2026 GMT Subject: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:03:6a:04:eb:e4:87:25:90:fd:10:a5:e8:5d: 40:e5:df:01:88:7c:41:fa:05:2c:44:84:a4:a6:24: d3:9d:8f:b6:15:3c:e4:7f:fe:14:d0:69:0f:7b:98: 84:69:b1:c9:06:b8:9a:90:fa:68:22:a8:da:d7:74: 5e:55:e9:aa:19:cd:c3:c1:bd:ff:d8:e3:20:cc:5d: 1d:5d:af:cd:d1:39:9b:5f:40:ba:28:22:73:31:19: b6:ad:60:98:27:d2:a0:d8:51:1f:1a:30:54:36:ac: 66:fb:5c:1e:6c:22:7c:0c:24:e0:72:d5:12:82:ad: e1:3c:94:21:13:1f:8c:82:43:9f:11:2a:99:36:b5: 05:47:f8:e6:ca:f9:2c:91:2e:40:5a:dd:21:82:62: f9:33:03:3f:b7:6f:e2:de:a7:39:34:7b:56:23:03: ba:ad:e8:0a:1f:fb:1c:eb:9d:91:6b:66:7d:57:f5: 53:d0:48:7d:5f:22:12:93:90:23:30:c3:e5:95:45: b4:6a:5e:5d:20:83:15:c6:88:96:84:ec:53:7a:5b: 0e:b9:42:7e:c0:ca:4c:a2:55:29:b3:4a:11:e3:a1: 5a:6f:b7:1d:4f:6e:94:78:dd:e5:91:51:c5:58:65: 71:7c:e6:8d:c2:7a:98:fc:49:d5:e2:c5:40:5c:8d: 9c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.7.226.0/23 Signature Algorithm: sha256WithRSAEncryption 81:a1:cb:9c:e1:98:6b:ef:f8:09:f9:02:f5:51:4a:18:d7:10: 47:07:d7:6a:b0:46:3c:80:34:d6:cc:bc:c2:40:fd:48:99:ad: d1:82:12:bf:eb:fd:9d:ea:a9:fd:c7:36:fe:4d:5f:20:b6:29: 6e:55:e6:11:c9:cd:06:13:fb:51:68:9c:75:bd:9e:88:a0:84: 98:0c:08:56:fc:c0:6c:a2:63:9f:28:7f:3c:b5:d1:d0:c6:e0: 72:30:d6:4b:01:f2:09:2d:62:46:8e:3c:4c:98:83:c2:28:06: 32:46:97:80:bd:50:86:cb:9a:53:69:4b:79:a9:1b:81:89:04: a9:2e:8a:24:6b:58:23:a3:a4:c3:b2:9d:dd:a6:03:cb:44:fd: d1:95:47:68:32:b9:58:3c:8d:3b:b8:7c:84:36:42:9e:2c:4b: 6f:76:49:63:8f:3a:7f:37:d8:81:4d:5c:6d:c7:19:46:83:72: 08:4c:ac:04:9f:e2:ac:34:2b:cf:73:ba:be:08:8c:b5:af:dc: 4b:d6:93:44:dd:f9:4c:4a:a3:15:9e:9c:e4:e9:e9:2c:9e:e6: 78:d5:6c:b2:4b:07:e3:a2:ac:e2:9d:79:26:08:a6:36:15:38: c9:27:71:c1:e2:7a:41:a8:c4:ca:28:8b:95:67:77:8a:46:0d: 36:4e:73:2f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAJHm6GDtlG1rLOU7AsPLc1k2n/UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMxOTA0MTc0OFoX DTI2MDMxODA0MjI0OFowMzExMC8GA1UEAxMoNzU0QUU1NzFFMzQzMkIyMEU3ODA0 NUJFN0IyQzk5RTM5RTBGMTg3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUDagTr5IclkP0QpehdQOXfAYh8QfoFLESEpKYk052PthU85H/+FNBpD3uY hGmxyQa4mpD6aCKo2td0XlXpqhnNw8G9/9jjIMxdHV2vzdE5m19AuigiczEZtq1g mCfSoNhRHxowVDasZvtcHmwifAwk4HLVEoKt4TyUIRMfjIJDnxEqmTa1BUf45sr5 LJEuQFrdIYJi+TMDP7dv4t6nOTR7ViMDuq3oCh/7HOudkWtmfVf1U9BIfV8iEpOQ IzDD5ZVFtGpeXSCDFcaIloTsU3pbDrlCfsDKTKJVKbNKEeOhWm+3HU9ulHjd5ZFR xVhlcXzmjcJ6mPxJ1eLFQFyNnAMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHVK5XHjQysg54BFvnssmeOeDxhzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hNjM1OGRkYS0wZmYxLTRmNmEtYmI2Ni02MGY0Y2EwNGM0OTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2MzU4ZGRh LTBmZjEtNGY2YS1iYjY2LTYwZjRjYTA0YzQ5MC8wLzc1NEFFNTcxRTM0MzJCMjBF NzgwNDVCRTdCMkM5OUUzOUUwRjE4NzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnB+IwDQYJKoZIhvcNAQELBQADggEBAIGhy5zhmGvv+An5AvVRShjXEEcH12qw RjyANNbMvMJA/UiZrdGCEr/r/Z3qqf3HNv5NXyC2KW5V5hHJzQYT+1FonHW9noig hJgMCFb8wGyiY58ofzy10dDG4HIw1ksB8gktYkaOPEyYg8IoBjJGl4C9UIbLmlNp S3mpG4GJBKkuiiRrWCOjpMOynd2mA8tE/dGVR2gyuVg8jTu4fIQ2Qp4sS292SWOP On832IFNXG3HGUaDcghMrASf4qw0K89zur4IjLWv3EvWk0Td+UxKoxWenOTp6Sye 5njVbLJLB+OirOKdeSYIpjYVOMknccHiekGoxMooi5Vnd4pGDTZOcy8= -----END CERTIFICATE-----Generated at Tue Apr 22 06:12:16 2025 by rpki-client