$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B197F427572524588487CFDB163A9E512FAE4DF2.cer File: B197F427572524588487CFDB163A9E512FAE4DF2.cer (raw, json) Hash identifier: bNlsJJQYWp9LuMDESXsYGlCihAV2S2JWTm6TCYbWE8c= Subject key identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 50C4CE292DAD497D1F2748ABA53D3928DA0B8272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft caRepository: rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 27 Jan 2025 15:02:52 +0000 Certificate not after: Mon 26 Jan 2026 15:07:52 +0000 Subordinate resources: IP: 103.153.246.0/23 IP: 2406:4ec0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:c4:ce:29:2d:ad:49:7d:1f:27:48:ab:a5:3d:39:28:da:0b:82:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 27 15:02:52 2025 GMT Not After : Jan 26 15:07:52 2026 GMT Subject: CN=B197F427572524588487CFDB163A9E512FAE4DF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:41:07:b5:35:be:95:d5:bb:49:9c:15:26:1c: bb:5c:b1:dc:a1:94:45:68:9b:d8:4a:10:d6:ac:dd: c5:13:70:fc:9d:2d:86:7f:62:17:da:c5:93:7b:df: e3:06:e0:99:9b:fe:bd:8a:81:52:fd:bf:b4:4b:7f: 9c:38:0f:b4:ac:e3:a9:bf:3d:de:1d:cb:7c:45:d2: 55:23:46:93:06:ce:8f:7c:ef:75:be:80:03:86:20: 08:78:6c:93:00:d9:96:7c:ca:b9:04:e6:01:a9:59: 28:61:d7:80:67:f8:1a:36:9f:e4:fe:98:b8:93:f9: 3e:8f:da:f3:f4:4b:49:9c:56:15:7c:6d:70:be:c4: 77:0f:e2:c6:32:5a:e9:4a:ad:e4:fb:37:b5:f3:b6: 3f:1f:2f:85:a0:70:00:52:13:c4:5f:fd:0b:bc:bf: b2:64:98:02:7e:b7:00:6f:95:e6:b8:1b:a7:16:3f: 5e:f2:f6:b2:1b:0f:33:97:8b:34:b5:d2:35:fa:55: b7:54:a1:8a:3c:0d:b9:47:21:8a:15:a7:20:2f:87: 31:32:7f:17:0e:11:6b:a2:91:a7:dd:7d:4e:2c:1a: 07:47:5f:4c:ae:e3:47:98:a3:d1:8a:09:a2:81:02: af:9a:f5:b6:48:31:8a:8a:e1:7a:47:a5:a4:a9:7d: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:97:F4:27:57:25:24:58:84:87:CF:DB:16:3A:9E:51:2F:AE:4D:F2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8dcf4067-a69d-4908-bee8-b4655bdc15f8/0/B197F427572524588487CFDB163A9E512FAE4DF2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.246.0/23 IPv6: 2406:4ec0::/32 Signature Algorithm: sha256WithRSAEncryption 7f:ee:0b:48:7d:1c:7a:c4:51:3f:7d:1b:a8:ac:4e:3c:3e:c1: b8:e9:0f:02:08:f2:d7:95:ff:3d:68:22:5d:f9:f1:46:0d:1c: ec:f5:37:d5:46:aa:97:60:94:96:e3:ae:8a:40:48:c1:51:43: e6:e3:65:77:06:6a:d4:66:6a:3a:22:0f:81:c6:6a:1a:a2:a9: 1e:23:60:2f:65:c6:57:e9:9d:b0:ad:18:7b:a0:24:e2:94:ae: 79:eb:6d:eb:85:23:ba:15:70:00:dd:d1:6a:cd:14:8b:98:34: e9:60:8b:b3:e3:29:74:3a:d3:40:1e:f4:00:7b:1c:d0:30:e3: c9:e8:4a:36:e6:d1:eb:ec:ce:6c:8f:61:b7:9e:bd:d5:f5:3a: b0:99:b0:37:29:fc:d8:6f:1b:92:05:d4:77:35:97:20:e0:d3: 92:4f:16:50:d0:8a:eb:0e:9a:b0:2d:71:ce:24:6b:71:f8:0e: 5c:41:4b:4c:e6:1d:c6:b9:04:b1:82:8c:a2:6e:fa:da:08:8e: 09:19:3f:b4:e4:12:d0:d4:f2:91:a4:ad:15:a1:a2:c9:f6:2c: 2d:cd:78:e7:fc:cc:2f:a7:85:20:64:d2:fc:d0:cb:50:9d:97: 16:89:23:af:39:c3:20:00:3a:71:b1:7c:19:ac:0d:aa:44:b4: ee:98:7e:01 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUUMTOKS2tSX0fJ0irpT05KNoLgnIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEyNzE1MDI1MloX DTI2MDEyNjE1MDc1MlowMzExMC8GA1UEAxMoQjE5N0Y0Mjc1NzI1MjQ1ODg0ODdD RkRCMTYzQTlFNTEyRkFFNERGMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9BB7U1vpXVu0mcFSYcu1yx3KGURWib2EoQ1qzdxRNw/J0thn9iF9rFk3vf 4wbgmZv+vYqBUv2/tEt/nDgPtKzjqb893h3LfEXSVSNGkwbOj3zvdb6AA4YgCHhs kwDZlnzKuQTmAalZKGHXgGf4Gjaf5P6YuJP5Po/a8/RLSZxWFXxtcL7Edw/ixjJa 6Uqt5Ps3tfO2Px8vhaBwAFITxF/9C7y/smSYAn63AG+V5rgbpxY/XvL2shsPM5eL NLXSNfpVt1ShijwNuUchihWnIC+HMTJ/Fw4Ra6KRp919TiwaB0dfTK7jR5ij0YoJ ooECr5r1tkgxiorhekelpKl9apsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLGX9CdXJSRYhIfP2xY6nlEvrk3yMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84ZGNmNDA2Ny1hNjlkLTQ5MDgtYmVlOC1iNDY1NWJkYzE1ZjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkY2Y0MDY3 LWE2OWQtNDkwOC1iZWU4LWI0NjU1YmRjMTVmOC8wL0IxOTdGNDI3NTcyNTI0NTg4 NDg3Q0ZEQjE2M0E5RTUxMkZBRTRERjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnmfYwDQQCAAIwBwMFACQGTsAwDQYJKoZIhvcNAQELBQADggEBAH/uC0h9HHrE UT99G6isTjw+wbjpDwII8teV/z1oIl358UYNHOz1N9VGqpdglJbjropASMFRQ+bj ZXcGatRmajoiD4HGahqiqR4jYC9lxlfpnbCtGHugJOKUrnnrbeuFI7oVcADd0WrN FIuYNOlgi7PjKXQ600Ae9AB7HNAw48noSjbm0evszmyPYbeevdX1OrCZsDcp/Nhv G5IF1Hc1lyDg05JPFlDQiusOmrAtcc4ka3H4DlxBS0zmHca5BLGCjKJu+toIjgkZ P7TkEtDU8pGkrRWhosn2LC3NeOf8zC+nhSBk0vzQy1CdlxaJI685wyAAOnGxfBms DapEtO6YfgE= -----END CERTIFICATE-----Generated at Sat Apr 5 10:07:51 2025 by rpki-client