$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer File: 9A635D422743AA8C31CA82C7F503B95FFB64A4DF.cer (raw, json) Hash identifier: yS3UP5DElfl5gqOO2LzblcnXShNiInRKKI+Cyz1mrsk= Subject key identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0D6A98EC8B3ADDFC5EA5149C40E967F88DCA146D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft caRepository: rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 11 Jan 2025 14:31:51 +0000 Certificate not after: Sat 10 Jan 2026 14:36:51 +0000 Subordinate resources: IP: 103.26.128.0/22 IP: 2401:1340::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:6a:98:ec:8b:3a:dd:fc:5e:a5:14:9c:40:e9:67:f8:8d:ca:14:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 11 14:31:51 2025 GMT Not After : Jan 10 14:36:51 2026 GMT Subject: CN=9A635D422743AA8C31CA82C7F503B95FFB64A4DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:18:bd:ea:99:47:ed:86:f5:47:43:99:8c:a2: ed:7a:59:ea:6c:a4:1b:dd:22:93:24:af:cd:75:cf: cb:a9:72:9e:ba:ad:c3:ee:43:33:9f:60:b8:b8:68: 29:29:09:29:f2:ee:24:cd:a5:6a:b6:c9:fd:92:45: 03:23:1d:df:ea:f9:ec:97:78:1d:07:59:24:42:df: bb:b5:ef:3c:19:ad:a7:46:62:f0:2c:72:ad:3c:cd: 63:f4:d4:6b:b5:c4:07:f9:d2:c0:fd:68:b3:40:f3: 25:6c:29:c1:50:21:66:a4:92:cd:e6:1b:f4:ca:78: 00:d4:73:2b:d0:17:cf:5b:e2:57:2a:18:e3:f6:5e: 1f:94:39:14:03:13:36:e6:1c:e6:70:7e:9e:f0:c3: fd:49:f1:24:20:55:8e:02:f2:42:0c:32:10:a9:d6: 0a:52:83:0c:d4:93:fe:69:8a:0a:d7:b8:3d:77:ce: b7:7e:14:36:09:4b:53:82:66:54:52:75:08:f8:fd: be:17:5c:b6:cc:70:72:4f:8b:3f:8b:ba:ba:43:53: 2f:f8:d1:63:31:ce:b7:bb:a0:28:c0:8d:48:d6:b3: 96:eb:38:8d:d1:9d:4a:e8:bb:37:9f:0b:58:94:1a: a2:4d:ae:4b:00:f6:09:e7:de:79:5a:af:1c:72:59: a6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:63:5D:42:27:43:AA:8C:31:CA:82:C7:F5:03:B9:5F:FB:64:A4:DF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5da32967-d558-4a34-be8e-64ef4cfc04e3/0/9A635D422743AA8C31CA82C7F503B95FFB64A4DF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.26.128.0/22 IPv6: 2401:1340::/32 Signature Algorithm: sha256WithRSAEncryption 43:17:50:63:e9:3b:b2:a5:e2:5f:fb:d0:cc:3a:09:a8:11:be: 82:79:9f:33:d6:e1:2c:5d:32:c3:3e:83:02:65:e3:62:8e:83: c4:15:a0:d8:4a:70:b6:28:14:3d:f6:22:4e:6f:31:cd:a5:a0: 24:68:87:29:cd:5f:40:21:06:a4:f7:ab:ca:84:74:6f:72:72: 33:b4:b0:90:97:e2:ba:83:c4:8a:d1:46:2e:08:0c:3b:35:43: 1d:8b:1e:dc:b0:01:d3:84:fc:51:6b:a7:26:b9:a0:66:36:24: 98:0f:fb:23:a2:5b:a1:b8:6f:c6:7f:74:97:4c:39:08:15:ab: 4d:98:db:f1:58:f2:f5:19:99:00:73:22:ff:0d:9f:7b:10:14: 02:53:48:69:00:2b:50:12:4d:84:d1:9c:a4:83:cb:59:c3:3e: a7:eb:d1:23:63:21:c4:91:d5:c8:09:d2:33:a1:e6:aa:ef:0f: 2c:90:83:ca:33:ed:f0:35:11:16:0d:e0:52:db:3d:89:6e:9e: fd:dc:6c:ab:53:e6:fb:63:68:d1:c0:96:8c:80:42:45:89:d2: 8f:81:8c:10:d4:3d:09:17:18:7f:2b:f7:59:80:87:d1:4c:6a: e8:c6:cb:e0:85:42:f3:3f:76:13:93:8c:df:a9:56:0e:16:98: 0e:7e:e6:87 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUDWqY7Is63fxepRScQOln+I3KFG0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDExMTE0MzE1MVoX DTI2MDExMDE0MzY1MVowMzExMC8GA1UEAxMoOUE2MzVENDIyNzQzQUE4QzMxQ0E4 MkM3RjUwM0I5NUZGQjY0QTRERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALUYveqZR+2G9UdDmYyi7XpZ6mykG90ikySvzXXPy6lynrqtw+5DM59guLho KSkJKfLuJM2larbJ/ZJFAyMd3+r57Jd4HQdZJELfu7XvPBmtp0Zi8CxyrTzNY/TU a7XEB/nSwP1os0DzJWwpwVAhZqSSzeYb9Mp4ANRzK9AXz1viVyoY4/ZeH5Q5FAMT NuYc5nB+nvDD/UnxJCBVjgLyQgwyEKnWClKDDNST/mmKCte4PXfOt34UNglLU4Jm VFJ1CPj9vhdctsxwck+LP4u6ukNTL/jRYzHOt7ugKMCNSNazlus4jdGdSui7N58L WJQaok2uSwD2CefeeVqvHHJZppkCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJpjXUInQ6qMMcqCx/UDuV/7ZKTfMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZGEzMjk2Ny1kNTU4LTRhMzQtYmU4ZS02NGVmNGNmYzA0ZTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkYTMyOTY3 LWQ1NTgtNGEzNC1iZThlLTY0ZWY0Y2ZjMDRlMy8wLzlBNjM1RDQyMjc0M0FBOEMz MUNBODJDN0Y1MDNCOTVGRkI2NEE0REYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnGoAwDQQCAAIwBwMFACQBE0AwDQYJKoZIhvcNAQELBQADggEBAEMXUGPpO7Kl 4l/70Mw6CagRvoJ5nzPW4SxdMsM+gwJl42KOg8QVoNhKcLYoFD32Ik5vMc2loCRo hynNX0AhBqT3q8qEdG9ycjO0sJCX4rqDxIrRRi4IDDs1Qx2LHtywAdOE/FFrpya5 oGY2JJgP+yOiW6G4b8Z/dJdMOQgVq02Y2/FY8vUZmQBzIv8Nn3sQFAJTSGkAK1AS TYTRnKSDy1nDPqfr0SNjIcSR1cgJ0jOh5qrvDyyQg8oz7fA1ERYN4FLbPYlunv3c bKtT5vtjaNHAloyAQkWJ0o+BjBDUPQkXGH8r91mAh9FMaujGy+CFQvM/dhOTjN+p Vg4WmA5+5oc= -----END CERTIFICATE-----Generated at Sat Apr 5 06:29:50 2025 by rpki-client