$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer File: 82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer (raw, json) Hash identifier: v70Su9ZtcMpPGNvefeZqL5ilBHS5+R+5t7rrHaBfihk= Subject key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 52944FE278ED77D023185F1EE587E336C4D48A32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft caRepository: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 12 Mar 2025 11:58:51 +0000 Certificate not after: Wed 11 Mar 2026 12:03:51 +0000 Subordinate resources: IP: 103.4.0.0/22 IP: 116.90.160.0/20 IP: 122.128.24.0/21 IP: 150.107.108.0/22 IP: 202.43.160.0/20 IP: 202.78.192.0/20 IP: 203.134.232.0/21 IP: 203.173.92.0/22 IP: 2404:1b0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:94:4f:e2:78:ed:77:d0:23:18:5f:1e:e5:87:e3:36:c4:d4:8a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Mar 12 11:58:51 2025 GMT Not After : Mar 11 12:03:51 2026 GMT Subject: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:78:e4:1f:26:81:37:3b:3f:5f:5e:35:2f: 30:95:f2:ba:31:fb:59:a0:c0:f9:72:c7:b9:3c:a1: 14:b6:ca:83:2f:cc:a8:0f:2b:c5:02:ad:62:3c:6c: 46:f1:7a:79:14:86:63:5a:4e:76:25:cb:bf:0d:89: 2f:69:41:65:e3:9e:09:15:35:20:0d:e7:6a:8f:5b: f6:05:db:11:14:7b:67:09:c2:43:f6:b9:21:d8:06: 06:62:de:a8:f2:96:cc:ff:cb:dd:c3:e7:2e:36:6b: 6a:91:2b:c5:f1:6b:8f:ce:e1:b2:eb:e5:d1:4b:77: 78:98:de:30:85:9f:5d:7b:a5:69:b4:46:a0:3f:9d: c9:9b:d7:28:a9:a6:ec:9c:05:2a:86:ab:eb:d1:c2: 0e:b3:da:7f:38:5b:b6:e0:5f:08:cd:91:26:3f:81: ad:89:b2:47:f6:dd:39:72:54:a3:a5:fc:f6:46:79: df:b3:ab:f2:76:67:07:d3:91:f4:4b:bc:80:85:58: 1a:8d:79:69:9b:51:57:e7:35:cb:2f:3d:97:e0:e2: fe:e2:28:fb:33:01:8a:80:04:52:37:84:34:ba:2c: 49:fa:d8:71:57:66:5a:11:e2:3d:aa:60:12:b9:19: 4e:40:50:25:0c:f8:e3:6f:ba:1d:df:d9:a4:44:23: 97:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.0.0/22 116.90.160.0/20 122.128.24.0/21 150.107.108.0/22 202.43.160.0/20 202.78.192.0/20 203.134.232.0/21 203.173.92.0/22 IPv6: 2404:1b0::/32 Signature Algorithm: sha256WithRSAEncryption 55:54:14:d2:87:76:af:08:32:b8:c1:7e:d9:85:46:ed:c8:1a: 61:f1:f9:6a:03:bb:72:1b:b3:18:bd:87:43:96:3a:55:38:c1: 3b:6e:81:c5:48:60:05:4e:86:3a:30:7f:9d:64:4a:16:69:38: 09:7a:a9:b7:60:cf:16:bf:ef:3a:64:b0:29:0c:85:4a:ee:93: e6:ad:38:15:f0:c4:a2:39:99:d1:94:0b:a3:88:f9:c4:99:60: 03:c0:97:b6:f2:22:8d:78:87:eb:1d:f3:61:b8:76:23:7c:e4: 84:77:00:ad:ee:a7:97:fd:9e:88:f3:28:d1:92:fd:24:3e:5f: 16:9c:75:22:bc:53:2a:08:1a:bd:f7:e6:da:75:e5:70:4c:b6: 12:e1:df:ca:02:c3:20:03:43:c3:36:fc:66:31:63:2f:8a:e3: 9b:bd:40:a1:64:28:ca:04:c9:2b:cb:5a:bc:af:6f:d1:92:5b: 25:b3:60:be:8a:6d:ff:f7:82:3d:58:87:2a:09:9d:7e:00:74: c6:1f:79:80:0b:a8:83:d0:e1:52:6a:29:98:3a:0f:cb:40:69: 66:33:f1:e9:19:26:3f:f8:45:ab:e8:3f:5a:77:2b:33:db:9d: 05:6e:e1:76:32:63:4f:f9:0f:f2:72:f4:38:f6:0a:74:ab:ab: 71:73:a6:33 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIUUpRP4njtd9AjGF8e5YfjNsTUijIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMxMjExNTg1MVoX DTI2MDMxMTEyMDM1MVowMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdD RTFBQ0U5NUE1MUM2QzhBMUQ4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2AeOQfJoE3Oz9fXjUvMJXyujH7WaDA+XLHuTyhFLbKgy/MqA8rxQKtYjxs RvF6eRSGY1pOdiXLvw2JL2lBZeOeCRU1IA3nao9b9gXbERR7ZwnCQ/a5IdgGBmLe qPKWzP/L3cPnLjZrapErxfFrj87hsuvl0Ut3eJjeMIWfXXulabRGoD+dyZvXKKmm 7JwFKoar69HCDrPafzhbtuBfCM2RJj+BrYmyR/bdOXJUo6X89kZ537Or8nZnB9OR 9Eu8gIVYGo15aZtRV+c1yy89l+Di/uIo+zMBioAEUjeENLosSfrYcVdmWhHiPapg ErkZTkBQJQz442+6Hd/ZpEQjl5ECAwEAAaOCAvEwggLtMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIKIQVGlKD9DypfOGs6VpRxsih2OMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYz LTEyYjYtNGQ4Zi1hZDBiLTRjZDViNjE5NTllZi8wLzgyODg0MTUxQTUyODNGNDND QTk3Q0UxQUNFOTVBNTFDNkM4QTFEOEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwWAYIKwYBBQUHAQcBAf8ESTBHMDYEAgABMDAD BAJnBAADBAR0WqADBAN6gBgDBAKWa2wDBATKK6ADBATKTsADBAPLhugDBALLrVww DQQCAAIwBwMFACQEAbAwDQYJKoZIhvcNAQELBQADggEBAFVUFNKHdq8IMrjBftmF Ru3IGmHx+WoDu3Ibsxi9h0OWOlU4wTtugcVIYAVOhjowf51kShZpOAl6qbdgzxa/ 7zpksCkMhUruk+atOBXwxKI5mdGUC6OI+cSZYAPAl7byIo14h+sd82G4diN85IR3 AK3up5f9nojzKNGS/SQ+XxacdSK8UyoIGr335tp15XBMthLh38oCwyADQ8M2/GYx Yy+K45u9QKFkKMoEySvLWryvb9GSWyWzYL6Kbf/3gj1YhyoJnX4AdMYfeYALqIPQ 4VJqKZg6D8tAaWYz8ekZJj/4RavoP1p3KzPbnQVu4XYyY0/5D/Jy9Dj2CnSrq3Fz pjM= -----END CERTIFICATE-----Generated at Sat Apr 5 07:14:47 2025 by rpki-client