$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer (raw, json) Hash identifier: rebrnVFkZvwaofpTH1mHaWx89xCX+ZHgONIxrRxAb2E= Subject key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2ED5BC7A57EA7E6A6B9331255DE25795172C21BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft caRepository: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 05 Oct 2024 17:34:57 +0000 Certificate not after: Sat 04 Oct 2025 17:39:57 +0000 Subordinate resources: IP: 27.111.48.0/20 IP: 103.3.220.0/22 IP: 112.215.0.0/16 IP: 121.52.0.0/17 IP: 202.152.224.0/19 IP: 203.78.112.0/20 IP: 2400:9800::/32 IP: 2407:7600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d5:bc:7a:57:ea:7e:6a:6b:93:31:25:5d:e2:57:95:17:2c:21:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Oct 5 17:34:57 2024 GMT Not After : Oct 4 17:39:57 2025 GMT Subject: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:16:68:e6:29:b9:f1:89:54:05:9a:e1:ec: 23:bf:1a:f8:10:60:56:1a:83:1b:14:b3:1c:aa:8a: 9a:4e:b2:19:a1:49:46:fa:c4:28:61:69:18:92:4b: ee:dc:40:00:75:88:08:7e:62:70:c5:89:3b:b5:39: 6b:f4:1d:60:c4:6d:04:fd:49:76:7f:b7:a4:eb:7c: 46:02:56:61:23:03:39:88:77:3b:f3:99:93:8d:5e: e2:f1:b1:fb:4f:d3:2e:fd:3a:08:5a:53:06:18:d0: 59:de:85:f6:05:81:86:80:61:97:c0:46:8a:c1:ad: 65:9c:cf:f3:91:4c:81:de:46:67:2c:04:dc:26:9e: 67:35:a1:eb:7e:ac:b0:2f:f9:a5:de:12:12:b8:e1: a0:7c:3d:3b:83:a7:74:8c:40:61:a0:b0:8a:cd:ed: 38:e2:e4:3e:5a:b1:81:c2:ef:f9:4b:f7:5b:ae:b9: e6:23:04:bc:bd:39:38:24:30:5c:36:83:42:ac:a1: a2:c3:a6:1c:5e:ce:32:e6:83:9e:7e:2a:05:54:30: ec:89:eb:c2:ba:1b:e7:c5:65:bb:4b:1a:22:0b:38: 93:07:4b:42:74:80:d8:dd:8d:27:f0:9d:c9:cd:70: b6:2e:b9:64:3e:64:18:08:dd:92:76:70:16:93:41: 94:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.111.48.0/20 103.3.220.0/22 112.215.0.0/16 121.52.0.0/17 202.152.224.0/19 203.78.112.0/20 IPv6: 2400:9800::/32 2407:7600::/32 Signature Algorithm: sha256WithRSAEncryption 03:a0:90:e3:77:72:98:bd:4f:37:6d:0c:fb:02:93:8f:32:e3: 83:db:3d:e6:ca:d6:f2:30:bd:76:f4:74:94:41:83:8e:eb:6a: 21:06:b6:58:c4:7c:a0:81:fb:e0:8d:3a:7e:bd:53:c9:00:02: e6:15:32:47:18:91:29:13:2d:b9:75:4e:32:33:5a:5f:09:8e: 1c:bb:2b:dd:23:42:12:bf:cc:3b:fd:28:6e:e3:5f:54:1d:dd: 68:b5:41:06:ab:6e:f0:e6:42:eb:b9:55:1a:79:11:be:93:6c: 9b:a9:32:21:c7:71:67:b5:86:1f:f7:e4:73:b9:20:fb:72:92: ac:1a:c7:b5:4b:b0:52:9f:b5:26:48:6b:21:90:3f:42:3c:a3: e7:5f:35:1a:ad:14:a2:87:07:ca:9c:60:2d:8b:54:9f:d4:d5: 80:51:79:c8:1b:9c:05:b8:2d:fa:59:b8:a0:96:7f:51:06:f8: a3:62:7b:8c:e4:5a:26:09:2d:fa:df:58:cd:ba:31:7b:cc:00: d3:2e:95:56:12:4d:24:36:03:56:88:26:f6:67:5a:91:b2:a1: fe:5e:bd:81:20:15:f7:e8:20:8d:44:91:61:76:6b:69:85:d6: 8b:ef:87:56:ac:2e:52:d1:ad:8c:69:24:9a:a3:52:d0:50:21: 25:85:54:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULtW8elfqfmprkzElXeJXlRcsIbswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAwNTE3MzQ1N1oX DTI1MTAwNDE3Mzk1N1owMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5 QUMyMjExREFGRDIwOTU2ODdEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIDFmjmKbnxiVQFmuHsI78a+BBgVhqDGxSzHKqKmk6yGaFJRvrEKGFpGJJL 7txAAHWICH5icMWJO7U5a/QdYMRtBP1Jdn+3pOt8RgJWYSMDOYh3O/OZk41e4vGx +0/TLv06CFpTBhjQWd6F9gWBhoBhl8BGisGtZZzP85FMgd5GZywE3CaeZzWh636s sC/5pd4SErjhoHw9O4OndIxAYaCwis3tOOLkPlqxgcLv+Uv3W6655iMEvL05OCQw XDaDQqyhosOmHF7OMuaDnn4qBVQw7Inrwrob58Vlu0saIgs4kwdLQnSA2N2NJ/Cd yc1wti65ZD5kGAjdknZwFpNBlA0CAwEAAaOCAuswggLnMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLSTpc6/CeELw12awiEdr9IJVofaMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBh LWE0ZWMtNDlkYi1iZTg5LThkN2U3ZmMyYzIyNy8wL0I0OTNBNUNFQkYwOUUxMEJD MzVEOUFDMjIxMURBRkQyMDk1Njg3REEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwUgYIKwYBBQUHAQcBAf8EQzBBMCkEAgABMCMD BAQbbzADBAJnA9wDAwBw1wMEB3k0AAMEBcqY4AMEBMtOcDAUBAIAAjAOAwUAJACY AAMFACQHdgAwDQYJKoZIhvcNAQELBQADggEBAAOgkON3cpi9TzdtDPsCk48y44Pb PebK1vIwvXb0dJRBg47raiEGtljEfKCB++CNOn69U8kAAuYVMkcYkSkTLbl1TjIz Wl8Jjhy7K90jQhK/zDv9KG7jX1Qd3Wi1QQarbvDmQuu5VRp5Eb6TbJupMiHHcWe1 hh/35HO5IPtykqwax7VLsFKftSZIayGQP0I8o+dfNRqtFKKHB8qcYC2LVJ/U1YBR ecgbnAW4LfpZuKCWf1EG+KNie4zkWiYJLfrfWM26MXvMANMulVYSTSQ2A1aIJvZn WpGyof5evYEgFffoII1EkWF2a2mF1ovvh1asLlLRrYxpJJqjUtBQISWFVIU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:57:19 2025 by rpki-client