$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer (raw, json) Hash identifier: 8tQKNaLFxj39L3FOLuojDEDQaAkcO5uaxJo68AJuBeI= Subject key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 07D5D331ABA76A5641702A8AFB16A1A5DB8F87D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft caRepository: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 23 May 2025 04:07:37 +0000 Certificate not after: Fri 22 May 2026 04:12:37 +0000 Subordinate resources: IP: 103.159.112.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d5:d3:31:ab:a7:6a:56:41:70:2a:8a:fb:16:a1:a5:db:8f:87:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 23 04:07:37 2025 GMT Not After : May 22 04:12:37 2026 GMT Subject: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:17:2a:f0:c0:e4:9a:4d:23:d7:78:c7:7f:51: 43:47:c5:7b:01:ee:da:0b:2f:0d:43:bd:24:da:0b: 9b:50:61:1f:2b:3c:be:5b:24:d4:7c:5c:2e:c0:21: de:41:6d:48:e5:7f:f2:29:51:59:71:aa:1c:3c:90: 5d:c0:84:bd:08:4c:62:c0:a6:e4:c9:66:ac:ab:3d: 9a:4a:f8:89:26:1e:70:06:43:47:a5:69:60:02:11: 6b:a0:9d:38:f6:0e:4f:53:bd:6a:51:55:21:e5:fb: f3:7c:ec:e3:21:d6:07:a0:76:f2:fb:59:ca:31:35: 28:34:af:61:d0:c3:d4:92:4f:91:e1:59:c8:71:b4: 9e:19:17:8f:3a:e3:95:80:70:18:64:72:31:4e:bd: 8d:70:57:e7:b9:ac:25:c7:f2:46:e2:9a:c3:6c:22: a0:58:5b:44:5f:d0:a2:0d:b6:f6:44:a9:e2:7f:16: a9:79:b1:a3:56:6f:b5:97:90:1a:9f:0c:f9:1a:43: 13:0b:5e:99:0c:87:f1:93:b9:3e:da:c4:96:38:91: 17:a7:03:dc:d0:4c:cb:1b:dd:0d:bd:eb:20:8b:0f: 24:fe:9e:e7:8f:dc:ed:70:86:de:71:10:9b:48:fc: f2:da:29:be:dc:5e:f4:51:16:79:24:74:0a:a3:7f: 2c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.112.0/23 Signature Algorithm: sha256WithRSAEncryption 03:6d:3d:30:2c:13:f6:3e:34:df:d5:8f:5d:cc:31:96:ce:81: 2f:02:01:09:f4:3f:02:0f:77:b7:93:34:7c:f2:8a:a3:ad:92: 74:d3:a0:f1:14:b6:6f:d0:8c:57:04:02:6d:83:4b:ab:ff:ec: 9c:d2:db:00:f9:e4:80:04:64:ce:13:97:7b:2f:69:76:bf:8f: 6a:82:14:70:21:f6:17:43:d8:e6:04:ea:10:31:86:8e:5e:ad: e4:ea:89:de:ea:31:54:fa:dd:1d:af:64:eb:b7:bc:3f:a1:73: c7:f7:f2:83:51:f7:57:a1:9b:c2:9d:04:47:f7:3c:ac:bc:62: 7e:7a:84:7e:d8:21:79:5e:c0:73:6f:cf:c7:f2:8a:c0:48:f9: ff:30:3f:1d:84:a7:2b:0b:d7:dd:3f:83:04:16:ee:c4:0b:5a: 60:a7:fa:77:d2:df:c2:4b:4c:da:20:41:4e:78:35:ca:fa:54: 2f:65:bc:27:6c:49:a4:da:4f:db:8b:e5:c1:9c:33:93:f9:be: e4:3c:ec:f3:1e:0b:18:8e:27:45:9b:f4:ec:d4:22:d2:4a:7d: 18:9b:0e:b1:21:c3:6b:a6:e5:3a:51:07:1a:be:92:09:a5:40: 97:14:aa:c1:ba:2f:09:1f:a0:5b:80:3c:90:a4:df:10:95:17: 8a:b0:69:e0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUB9XTMaunalZBcCqK+xahpduPh9gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUyMzA0MDczN1oX DTI2MDUyMjA0MTIzN1owMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBB RjlERDU4NDdBOThCQ0UyNkM2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPoXKvDA5JpNI9d4x39RQ0fFewHu2gsvDUO9JNoLm1BhHys8vlsk1HxcLsAh 3kFtSOV/8ilRWXGqHDyQXcCEvQhMYsCm5MlmrKs9mkr4iSYecAZDR6VpYAIRa6Cd OPYOT1O9alFVIeX783zs4yHWB6B28vtZyjE1KDSvYdDD1JJPkeFZyHG0nhkXjzrj lYBwGGRyMU69jXBX57msJcfyRuKaw2wioFhbRF/Qog229kSp4n8WqXmxo1ZvtZeQ Gp8M+RpDEwtemQyH8ZO5PtrEljiRF6cD3NBMyxvdDb3rIIsPJP6e54/c7XCG3nEQ m0j88topvtxe9FEWeSR0CqN/LNUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKAOniHukyfwWTCvndWEepi84mxmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExOThmN2Y4 LWU3MTUtNGI3OS1hZjMyLTJlNTE1NDFhMzRmZi8wL0EwMEU5RTIxRUU5MzI3RjA1 OTMwQUY5REQ1ODQ3QTk4QkNFMjZDNjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnn3AwDQYJKoZIhvcNAQELBQADggEBAANtPTAsE/Y+NN/Vj13MMZbOgS8CAQn0 PwIPd7eTNHzyiqOtknTToPEUtm/QjFcEAm2DS6v/7JzS2wD55IAEZM4Tl3svaXa/ j2qCFHAh9hdD2OYE6hAxho5ereTqid7qMVT63R2vZOu3vD+hc8f38oNR91ehm8Kd BEf3PKy8Yn56hH7YIXlewHNvz8fyisBI+f8wPx2EpysL190/gwQW7sQLWmCn+nfS 38JLTNogQU54Ncr6VC9lvCdsSaTaT9uL5cGcM5P5vuQ87PMeCxiOJ0Wb9OzUItJK fRibDrEhw2um5TpRBxq+kgmlQJcUqsG6LwkfoFuAPJCk3xCVF4qwaeA= -----END CERTIFICATE-----Generated at Tue Jun 3 23:16:51 2025 by rpki-client