$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer File: 9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer (raw, json) Hash identifier: Pm+oWrmuTvprzgu/No/cfKqpqZ+R8Hsig+phQnRA09E= Subject key identifier: 93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7CA27D5CF49AFF871D2336CB1B212D3F66A504E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft caRepository: rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 30 Jan 2025 04:01:44 +0000 Certificate not after: Thu 29 Jan 2026 04:06:44 +0000 Subordinate resources: IP: 103.155.190.0/23 IP: 2406:7540::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a2:7d:5c:f4:9a:ff:87:1d:23:36:cb:1b:21:2d:3f:66:a5:04:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 30 04:01:44 2025 GMT Not After : Jan 29 04:06:44 2026 GMT Subject: CN=9310C473EC1219DDC9911827F2B8ADB9372D55A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c3:36:04:2b:23:20:f8:f9:2a:87:a1:b4:a1: fa:7a:7e:0b:32:7f:d1:86:68:24:5b:89:b6:b2:63: 42:65:5e:f4:13:8e:34:7f:9b:bf:be:72:f9:30:aa: ea:9b:44:0c:12:d7:0e:e7:d3:df:7c:2e:cc:6e:3b: 6f:40:77:f6:42:09:e1:05:ca:9d:cd:62:d5:af:f5: b1:a2:af:c2:7a:77:0c:89:91:12:e6:a9:bf:40:7a: 99:d0:a2:6e:3d:42:d0:4c:79:a7:8b:8d:f6:b3:1f: c1:e0:af:f8:5d:35:f0:fd:f3:7d:76:a8:d2:f7:72: a2:c7:77:a7:32:a0:6c:58:69:22:da:86:ab:49:f6: fb:6c:df:57:c4:10:2a:f2:0f:ef:65:30:13:e3:68: 2a:6a:98:ef:07:a8:ca:f1:51:bc:ba:fa:25:99:1f: f2:35:13:67:88:a0:39:e3:2d:f7:35:76:f3:2f:df: fb:10:fd:96:21:c7:65:15:e3:fe:59:78:1b:20:1b: 39:05:31:05:dc:12:f8:5f:05:35:78:1a:06:3a:0d: 85:25:d1:45:35:1a:a8:b4:84:3c:c5:8a:11:fb:cb: ca:4d:5c:6c:41:3b:d3:c6:3e:da:a6:de:cf:14:0d: 05:50:c4:85:8e:b3:84:37:44:8f:cb:f9:e2:af:ec: e9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.190.0/23 IPv6: 2406:7540::/32 Signature Algorithm: sha256WithRSAEncryption 85:34:9b:c4:c5:2a:05:1f:36:bc:b0:da:97:a3:72:3b:2a:30: d3:d6:d0:24:3f:c3:8e:09:07:61:81:ab:52:89:66:a6:19:6f: 69:c4:2b:91:c8:5a:1b:1c:6f:61:15:cc:24:9c:b4:68:d2:a4: 97:c8:ec:3e:5f:ed:f6:f7:cb:c5:43:91:1f:b9:ad:5d:11:52: 9e:80:97:13:dd:42:d3:df:2e:cc:37:64:99:5e:61:15:98:d5: f6:1a:a9:a7:46:08:08:c1:2e:59:7e:83:ca:b5:5c:d6:cf:5e: 2d:3d:eb:62:45:7b:ad:93:ff:52:31:b4:7a:07:d1:10:84:de: 22:c7:8c:20:65:97:1a:1a:73:9e:d1:64:a8:87:a3:86:db:e3: 2f:52:1a:60:df:fe:34:ce:65:a0:24:4f:73:31:c7:eb:1c:2d: 8b:a2:1e:5a:12:a3:08:e1:3c:8c:6b:bf:97:74:38:af:d5:43: cc:fc:04:22:ac:73:9c:35:8d:e9:1e:4a:61:04:73:4c:8c:f8: a1:cc:e3:9b:36:a9:18:b3:1d:55:d4:ea:15:0f:d4:f1:11:8f: 08:48:e6:c2:90:bc:51:db:e4:46:0e:3e:37:39:68:26:38:7e: 15:1c:35:7b:1f:31:33:11:5b:d6:8b:10:02:74:b4:d8:75:c0: 01:8c:d2:ea -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUfKJ9XPSa/4cdIzbLGyEtP2alBOIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEzMDA0MDE0NFoX DTI2MDEyOTA0MDY0NFowMzExMC8GA1UEAxMoOTMxMEM0NzNFQzEyMTlEREM5OTEx ODI3RjJCOEFEQjkzNzJENTVBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOTDNgQrIyD4+SqHobSh+np+CzJ/0YZoJFuJtrJjQmVe9BOONH+bv75y+TCq 6ptEDBLXDufT33wuzG47b0B39kIJ4QXKnc1i1a/1saKvwnp3DImREuapv0B6mdCi bj1C0Ex5p4uN9rMfweCv+F018P3zfXao0vdyosd3pzKgbFhpItqGq0n2+2zfV8QQ KvIP72UwE+NoKmqY7weoyvFRvLr6JZkf8jUTZ4igOeMt9zV28y/f+xD9liHHZRXj /ll4GyAbOQUxBdwS+F8FNXgaBjoNhSXRRTUaqLSEPMWKEfvLyk1cbEE708Y+2qbe zxQNBVDEhY6zhDdEj8v54q/s6SUCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJMQxHPsEhndyZEYJ/K4rbk3LVWlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ODE5Y2RkZi02ZGQ5LTRkOWMtYjUzOC04Yjc2YjdjOWNlNjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc4MTljZGRm LTZkZDktNGQ5Yy1iNTM4LThiNzZiN2M5Y2U2MS8wLzkzMTBDNDczRUMxMjE5RERD OTkxMTgyN0YyQjhBREI5MzcyRDU1QTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnm74wDQQCAAIwBwMFACQGdUAwDQYJKoZIhvcNAQELBQADggEBAIU0m8TFKgUf Nryw2pejcjsqMNPW0CQ/w44JB2GBq1KJZqYZb2nEK5HIWhscb2EVzCSctGjSpJfI 7D5f7fb3y8VDkR+5rV0RUp6AlxPdQtPfLsw3ZJleYRWY1fYaqadGCAjBLll+g8q1 XNbPXi0962JFe62T/1IxtHoH0RCE3iLHjCBllxoac57RZKiHo4bb4y9SGmDf/jTO ZaAkT3Mxx+scLYuiHloSowjhPIxrv5d0OK/VQ8z8BCKsc5w1jekeSmEEc0yM+KHM 45s2qRizHVXU6hUP1PERjwhI5sKQvFHb5EYOPjc5aCY4fhUcNXsfMTMRW9aLEAJ0 tNh1wAGM0uo= -----END CERTIFICATE-----Generated at Sat Apr 5 10:18:11 2025 by rpki-client