$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer File: 9BFE3F2FE97677A590AC77278DA8666C8389D7BF.cer (raw, json) Hash identifier: zPyAoPlbylC0AQ9TH7NAs17Z4NeNnR2+Tuy6Y+L0rVU= Subject key identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6BA353587FBBA3894662FB2067E68863FF70B7E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft caRepository: rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 04 Apr 2025 04:14:21 +0000 Certificate not after: Fri 03 Apr 2026 04:19:21 +0000 Subordinate resources: IP: 103.169.194.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:a3:53:58:7f:bb:a3:89:46:62:fb:20:67:e6:88:63:ff:70:b7:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Apr 4 04:14:21 2025 GMT Not After : Apr 3 04:19:21 2026 GMT Subject: CN=9BFE3F2FE97677A590AC77278DA8666C8389D7BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:c8:85:1b:4f:da:5b:ea:79:5f:9c:19:7e: b0:4f:a7:e5:d3:f7:47:40:26:30:92:3e:dd:9c:74: 2a:64:d7:b8:b6:6c:48:26:11:9d:2b:15:01:24:a5: 4b:ea:8a:30:76:e5:ea:ea:29:95:e7:f7:26:70:03: 95:8a:8e:bd:b2:54:46:b4:d8:8a:a6:ad:29:ef:11: f3:87:e8:e4:17:63:2a:3e:31:4a:41:b3:be:97:9c: ee:45:7f:a4:cb:b6:95:b8:8b:c2:73:40:d4:41:d7: 79:e6:af:63:c1:57:e7:f2:e6:04:f0:0c:55:95:d3: 31:6f:65:02:86:ba:fe:49:b4:48:9b:b5:af:1e:e5: a3:3f:62:7f:74:c9:21:17:1f:17:8b:a0:43:10:8b: 2d:a9:0e:06:a3:27:98:38:d9:d1:85:c9:0a:52:2a: 6e:92:d9:b3:5b:6e:7f:4d:5d:f9:8a:71:d5:97:4f: 39:96:54:54:a6:34:8c:94:da:fe:3f:8c:a8:a7:50: 99:ec:c3:66:b9:fe:82:f1:c9:c3:84:f7:cd:30:15: f3:c0:b6:72:4c:7c:25:6e:e5:49:4a:90:b6:19:19: 76:a1:b9:15:90:94:23:4a:4a:66:d3:59:73:d1:a6: 49:7d:f7:ba:11:06:52:4d:61:0e:bf:2f:3d:44:ff: f1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:FE:3F:2F:E9:76:77:A5:90:AC:77:27:8D:A8:66:6C:83:89:D7:BF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/832c823d-a4b7-4005-9ab8-d3b2c8bbf763/0/9BFE3F2FE97677A590AC77278DA8666C8389D7BF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.194.0/23 Signature Algorithm: sha256WithRSAEncryption 10:c0:98:ca:33:86:68:b6:30:10:65:c4:53:45:db:49:c8:3b: f2:44:f2:05:2d:dc:84:40:82:80:af:3c:c7:28:22:82:78:cf: c4:a0:cd:1a:2c:6a:04:18:25:d2:bf:70:0a:f9:c6:fb:58:21: 78:79:fa:f9:25:bc:eb:ce:14:37:50:21:e6:9c:d5:fe:ff:a4: 4d:57:3b:38:76:e4:49:ad:32:92:7d:63:42:cf:1a:af:85:6f: 3f:13:0b:23:54:6f:0d:18:b6:25:a6:20:f1:98:86:ee:a7:17: 46:c5:6b:2f:d9:97:94:6c:16:88:1b:3e:9e:17:fa:ab:08:cb: d1:1d:8d:2d:aa:73:83:6c:50:df:f1:8d:81:2f:c2:6f:fb:1b: 2b:df:03:7b:31:74:17:f2:24:32:02:3a:e6:f4:14:83:65:86: 75:71:81:a8:0b:49:cf:a2:25:7d:e1:0c:72:e0:57:5f:5b:e6: fc:d2:9a:11:97:6f:bb:4f:29:80:d4:0e:e6:3e:bf:58:44:72: f3:61:ab:da:62:70:c9:58:29:b5:3b:ad:64:47:63:81:16:11: ef:f5:99:cf:c6:bb:98:d3:78:7d:43:c7:8d:b7:64:cf:96:33: 3d:8b:d0:3c:49:33:03:61:53:11:e2:aa:5c:fa:62:cd:4c:cf: 78:b4:4b:bb -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUa6NTWH+7o4lGYvsgZ+aIY/9wt+MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQwNDA0MTQyMVoX DTI2MDQwMzA0MTkyMVowMzExMC8GA1UEAxMoOUJGRTNGMkZFOTc2NzdBNTkwQUM3 NzI3OERBODY2NkM4Mzg5RDdCRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6nyIUbT9pb6nlfnBl+sE+n5dP3R0AmMJI+3Zx0KmTXuLZsSCYRnSsVASSl S+qKMHbl6uoplef3JnADlYqOvbJURrTYiqatKe8R84fo5BdjKj4xSkGzvpec7kV/ pMu2lbiLwnNA1EHXeeavY8FX5/LmBPAMVZXTMW9lAoa6/km0SJu1rx7loz9if3TJ IRcfF4ugQxCLLakOBqMnmDjZ0YXJClIqbpLZs1tuf01d+Ypx1ZdPOZZUVKY0jJTa /j+MqKdQmezDZrn+gvHJw4T3zTAV88C2ckx8JW7lSUqQthkZdqG5FZCUI0pKZtNZ c9GmSX33uhEGUk1hDr8vPUT/8WMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJv+Py/pdnelkKx3J42oZmyDide/MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84MzJjODIzZC1hNGI3LTQwMDUtOWFiOC1kM2IyYzhiYmY3NjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgzMmM4MjNk LWE0YjctNDAwNS05YWI4LWQzYjJjOGJiZjc2My8wLzlCRkUzRjJGRTk3Njc3QTU5 MEFDNzcyNzhEQTg2NjZDODM4OUQ3QkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqcIwDQYJKoZIhvcNAQELBQADggEBABDAmMozhmi2MBBlxFNF20nIO/JE8gUt 3IRAgoCvPMcoIoJ4z8SgzRosagQYJdK/cAr5xvtYIXh5+vklvOvOFDdQIeac1f7/ pE1XOzh25EmtMpJ9Y0LPGq+Fbz8TCyNUbw0YtiWmIPGYhu6nF0bFay/Zl5RsFogb Pp4X+qsIy9EdjS2qc4NsUN/xjYEvwm/7GyvfA3sxdBfyJDICOub0FINlhnVxgagL Sc+iJX3hDHLgV19b5vzSmhGXb7tPKYDUDuY+v1hEcvNhq9picMlYKbU7rWRHY4EW Ee/1mc/Gu5jTeH1Dx423ZM+WMz2L0DxJMwNhUxHiqlz6Ys1Mz3i0S7s= -----END CERTIFICATE-----Generated at Sat Apr 5 10:31:59 2025 by rpki-client