$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer File: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer (raw, json) Hash identifier: E2iNjP3FJIYhHE4Z1pJEpFfYD398Vhl4PKoImlybkgM= Subject key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 49EDB806E5769335C01EAF3EE9C331690BBB7BD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft caRepository: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 07 Dec 2024 20:07:22 +0000 Certificate not after: Sat 06 Dec 2025 20:12:22 +0000 Subordinate resources: IP: 103.168.184.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ed:b8:06:e5:76:93:35:c0:1e:af:3e:e9:c3:31:69:0b:bb:7b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 7 20:07:22 2024 GMT Not After : Dec 6 20:12:22 2025 GMT Subject: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:60:9e:85:99:31:f1:d3:37:33:9b:26:bc:01: 6d:1a:d2:c5:5c:69:b3:8d:c7:d7:2e:07:34:42:22: 3e:4c:88:a1:6b:61:ca:7c:80:12:50:8b:87:1d:c5: f6:1c:5b:c2:43:c1:2f:5e:7f:60:1c:41:f7:09:9f: 91:68:63:b0:bd:fd:b4:a4:36:80:82:6e:24:66:e6: 3f:34:29:cf:fa:e2:a0:45:0e:e9:af:80:b5:61:9c: 62:a0:25:b8:0f:1e:d9:e1:2f:99:1e:0e:3c:43:fb: 62:65:5d:19:a3:5a:c2:bc:1e:91:b1:c6:6b:6a:2d: 0d:28:ac:33:52:e1:3a:81:34:a2:5b:af:76:a1:b8: b5:24:3f:69:4c:81:71:97:5c:40:4f:b7:44:55:ff: de:07:3c:21:3d:5f:49:d1:1c:bc:be:c2:4a:2e:e5: fd:f9:d9:ee:2b:9a:17:bf:69:9d:ad:51:6e:48:54: 3f:ef:b0:d1:54:d5:ec:c4:dd:f2:2e:76:7d:e2:3f: 04:2b:96:c1:2a:6c:42:4f:b4:85:41:a6:0e:69:68: 91:2b:56:3f:4b:13:81:d6:15:dc:c0:00:6d:a9:b5: f4:74:12:39:27:38:de:09:11:b6:8c:1f:fc:03:9e: 0a:f4:0f:a4:4a:89:77:13:a2:34:9f:1f:1e:5d:5e: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.184.0/23 Signature Algorithm: sha256WithRSAEncryption 37:81:56:59:59:3d:a0:ac:79:d6:b7:5c:18:73:10:2f:5d:f5: 07:da:18:2a:c3:83:58:65:34:ff:15:95:79:6d:15:e5:50:37: d0:b8:0b:00:5e:ab:d5:d5:7e:dc:0f:25:db:56:62:80:35:b9: 69:f0:41:eb:6a:fa:b7:55:88:a2:c5:9e:5e:fd:f9:8a:e4:67: 0a:c1:3a:16:c9:45:bd:91:5e:d5:09:7e:3c:c8:ad:93:00:1a: 65:51:91:87:42:f8:3c:64:20:28:c8:a2:62:b1:09:d7:5a:21: d5:ae:fe:68:62:d2:51:09:dd:6b:a0:26:da:52:c7:1f:6e:e4: 5d:31:d7:e1:d6:95:84:7f:88:93:ed:cd:c8:e4:b2:78:40:6a: 1a:ae:fb:90:c3:68:20:8b:03:e8:ba:22:84:7a:9a:f0:71:c0: 3e:84:81:ae:c9:de:54:c3:d1:80:7e:d4:05:bd:b5:4a:ba:dc: 8c:59:a2:6c:69:98:3b:10:f0:89:3c:43:8a:4d:29:6d:56:7c: a3:7a:3b:cb:e0:d9:c2:33:1d:14:ea:e3:33:38:54:97:d3:59: 43:95:bc:a3:1e:d4:18:37:d2:ce:17:34:b7:57:88:dd:51:bb: 9b:7d:9a:91:8b:7e:fd:75:e0:9d:0f:6c:e7:45:a0:a9:f8:e5: 30:a1:eb:23 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSe24BuV2kzXAHq8+6cMxaQu7e9UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIwNzIwMDcyMloX DTI1MTIwNjIwMTIyMlowMzExMC8GA1UEAxMoQjFENEY1NDk1QkU0RjlEOTk1RUE5 QzE1NDU0NjlDQTJCOTgzMzRGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPJgnoWZMfHTNzObJrwBbRrSxVxps43H1y4HNEIiPkyIoWthynyAElCLhx3F 9hxbwkPBL15/YBxB9wmfkWhjsL39tKQ2gIJuJGbmPzQpz/rioEUO6a+AtWGcYqAl uA8e2eEvmR4OPEP7YmVdGaNawrwekbHGa2otDSisM1LhOoE0oluvdqG4tSQ/aUyB cZdcQE+3RFX/3gc8IT1fSdEcvL7CSi7l/fnZ7iuaF79pna1RbkhUP++w0VTV7MTd 8i52feI/BCuWwSpsQk+0hUGmDmlokStWP0sTgdYV3MAAbam19HQSOSc43gkRtowf /AOeCvQPpEqJdxOiNJ8fHl1eJ0kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLHU9Ulb5PnZleqcFUVGnKK5gzTxMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83OGU3OGVlMC0wMDAyLTRhNjctYTczOS0zMDMzZDViNWJhNjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc4ZTc4ZWUw LTAwMDItNGE2Ny1hNzM5LTMwMzNkNWI1YmE2MS8wL0IxRDRGNTQ5NUJFNEY5RDk5 NUVBOUMxNTQ1NDY5Q0EyQjk4MzM0RjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqLgwDQYJKoZIhvcNAQELBQADggEBADeBVllZPaCseda3XBhzEC9d9QfaGCrD g1hlNP8VlXltFeVQN9C4CwBeq9XVftwPJdtWYoA1uWnwQetq+rdViKLFnl79+Yrk ZwrBOhbJRb2RXtUJfjzIrZMAGmVRkYdC+DxkICjIomKxCddaIdWu/mhi0lEJ3Wug JtpSxx9u5F0x1+HWlYR/iJPtzcjksnhAahqu+5DDaCCLA+i6IoR6mvBxwD6Ega7J 3lTD0YB+1AW9tUq63IxZomxpmDsQ8Ik8Q4pNKW1WfKN6O8vg2cIzHRTq4zM4VJfT WUOVvKMe1Bg30s4XNLdXiN1Ru5t9mpGLfv114J0PbOdFoKn45TCh6yM= -----END CERTIFICATE-----Generated at Sat Apr 5 10:39:25 2025 by rpki-client