$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer File: B392381083372148D0977D0066CFF38FD5A32CDB.cer (raw, json) Hash identifier: ykq7UjIl9Y23/wJ3pN5rdVs9FtvdenyE0zcYqQeYdyY= Subject key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4D2951F9F47F9DCE98FF0C28864F91E3373282E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft caRepository: rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 07 Jan 2025 23:14:32 +0000 Certificate not after: Tue 06 Jan 2026 23:19:32 +0000 Subordinate resources: IP: 103.185.82.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:29:51:f9:f4:7f:9d:ce:98:ff:0c:28:86:4f:91:e3:37:32:82:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 7 23:14:32 2025 GMT Not After : Jan 6 23:19:32 2026 GMT Subject: CN=B392381083372148D0977D0066CFF38FD5A32CDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:3d:28:b4:9b:46:2a:a1:89:ec:d4:9d:d8: e3:0e:5e:4e:e7:d6:af:de:00:cc:de:07:71:c8:b6: d4:fc:e0:02:27:75:f5:f7:08:a4:af:13:48:53:ad: 7f:fd:bd:ba:06:8d:d3:c8:c1:9e:cd:62:f1:c7:91: 78:5e:73:44:c9:92:c0:c1:61:88:87:b4:4b:43:04: 92:ec:4b:a1:8c:1c:72:65:9e:55:f7:26:66:01:d1: e1:1f:02:8a:f4:d8:ac:14:bd:f3:a4:6d:30:ec:64: 1f:53:27:c5:a4:1b:4f:aa:4d:3a:63:1b:78:20:f3: b5:56:b4:d9:55:10:e9:f0:b7:b6:62:71:e0:5c:39: 0c:14:1b:86:d6:85:87:a5:5b:35:b7:bb:c0:db:04: 99:a7:dd:48:2b:a2:27:f4:af:5b:dd:82:32:69:f7: 23:a0:ae:87:17:21:a7:f6:bf:af:f9:c1:47:28:36: 8e:e9:29:ee:a8:78:12:0e:04:f6:38:53:7b:43:58: 7c:d6:db:e3:7b:8e:4d:21:91:89:a7:dd:f2:a0:dc: e0:96:47:7a:20:84:e9:2a:57:54:7d:1d:70:57:99: bd:46:98:b6:44:5d:93:0e:9f:b0:a9:15:b4:f4:7f: 68:c7:01:9b:44:48:bf:d1:72:d9:d4:eb:ff:18:25: a6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.185.82.0/23 Signature Algorithm: sha256WithRSAEncryption 21:b0:16:50:6b:b7:b8:91:57:58:54:63:a6:14:63:7c:09:c9: 8d:22:38:0a:83:9a:d4:94:e5:fd:dd:22:6d:33:8a:9e:f9:92: d4:d4:56:19:84:fd:a4:cf:b8:9b:6b:86:a4:09:9e:01:20:4c: d2:e7:b7:9e:35:da:4d:c2:10:85:30:38:f8:8f:3f:01:0b:83: e6:ee:6a:70:b2:72:0c:18:56:53:16:db:a8:3e:e5:42:bc:38: af:f8:de:7d:a9:31:e8:9d:4d:9c:73:55:08:62:98:4f:25:bd: 12:a6:70:57:43:ee:3b:ea:f6:be:6a:00:80:e3:bf:1c:62:4c: 63:9a:9c:6c:13:47:36:e1:fd:a0:30:fa:cb:46:5a:b4:a4:eb: e5:40:e9:50:63:2d:fd:b4:fd:84:b9:82:e8:4b:93:3b:c5:07: b9:3c:58:80:2f:ea:54:a6:b9:b2:c3:34:7a:69:e6:ab:92:1a: 82:14:b1:eb:f5:a0:a1:73:1f:3f:13:33:df:ad:04:31:88:ee: df:5f:d1:30:87:f2:3a:0a:56:b1:fa:b6:b4:c0:d6:fb:53:6d: 2a:29:2a:e3:b4:74:04:56:a0:6f:66:a2:68:49:0c:1f:d5:f9: 82:6a:46:f1:7a:a7:39:b7:63:be:67:0f:fd:bb:b8:80:d2:55: 77:87:89:cc -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTSlR+fR/nc6Y/wwohk+R4zcyguEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEwNzIzMTQzMloX DTI2MDEwNjIzMTkzMlowMzExMC8GA1UEAxMoQjM5MjM4MTA4MzM3MjE0OEQwOTc3 RDAwNjZDRkYzOEZENUEzMkNEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMNFPSi0m0YqoYns1J3Y4w5eTufWr94AzN4Hcci21PzgAid19fcIpK8TSFOt f/29ugaN08jBns1i8ceReF5zRMmSwMFhiIe0S0MEkuxLoYwccmWeVfcmZgHR4R8C ivTYrBS986RtMOxkH1MnxaQbT6pNOmMbeCDztVa02VUQ6fC3tmJx4Fw5DBQbhtaF h6VbNbe7wNsEmafdSCuiJ/SvW92CMmn3I6Cuhxchp/a/r/nBRyg2jukp7qh4Eg4E 9jhTe0NYfNbb43uOTSGRiafd8qDc4JZHeiCE6SpXVH0dcFeZvUaYtkRdkw6fsKkV tPR/aMcBm0RIv9Fy2dTr/xglpncCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLOSOBCDNyFI0Jd9AGbP84/VoyzbMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81YmYyY2YwMy1mOWY5LTRiY2EtOGMyYy02MDczMjgwZGZlYTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViZjJjZjAz LWY5ZjktNGJjYS04YzJjLTYwNzMyODBkZmVhOC8wL0IzOTIzODEwODMzNzIxNDhE MDk3N0QwMDY2Q0ZGMzhGRDVBMzJDREIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnuVIwDQYJKoZIhvcNAQELBQADggEBACGwFlBrt7iRV1hUY6YUY3wJyY0iOAqD mtSU5f3dIm0zip75ktTUVhmE/aTPuJtrhqQJngEgTNLnt5412k3CEIUwOPiPPwEL g+buanCycgwYVlMW26g+5UK8OK/43n2pMeidTZxzVQhimE8lvRKmcFdD7jvq9r5q AIDjvxxiTGOanGwTRzbh/aAw+stGWrSk6+VA6VBjLf20/YS5guhLkzvFB7k8WIAv 6lSmubLDNHpp5quSGoIUsev1oKFzHz8TM9+tBDGI7t9f0TCH8joKVrH6trTA1vtT bSopKuO0dARWoG9momhJDB/V+YJqRvF6pzm3Y75nD/27uIDSVXeHicw= -----END CERTIFICATE-----Generated at Sun Feb 16 21:02:45 2025 by rpki-client