$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer File: B877CD1C542C3DE2CBB8EF151F179B857E9376E4.cer (raw, json) Hash identifier: F0F2RhksxTBpzhUl9uXc8q8PzMTjTh89ojY8GdX6Mgc= Subject key identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4327CF7EA423043516010A755C35FAFDAB60CCB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft caRepository: rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 26 Mar 2025 16:20:32 +0000 Certificate not after: Wed 25 Mar 2026 16:25:32 +0000 Subordinate resources: IP: 61.29.252.0/23 IP: 103.130.198.0/23 IP: 117.103.116.0/24 IP: 160.20.222.0/24 IP: 2407:14c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:27:cf:7e:a4:23:04:35:16:01:0a:75:5c:35:fa:fd:ab:60:cc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Mar 26 16:20:32 2025 GMT Not After : Mar 25 16:25:32 2026 GMT Subject: CN=B877CD1C542C3DE2CBB8EF151F179B857E9376E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bb:7c:05:4b:9c:56:b1:d0:04:b6:63:90:c0: 24:ea:42:22:cf:2d:83:91:72:38:6b:c6:18:a9:6a: 02:dc:d8:07:f4:b4:be:a6:f7:32:14:7b:fe:e8:d0: 29:09:7d:b4:b2:85:9b:c8:09:96:4f:9b:44:e1:aa: 4b:18:c4:ec:be:93:4e:01:0a:47:30:9f:73:28:61: a1:db:05:32:d5:cf:9c:46:63:c8:8c:30:c2:7e:61: 6d:1b:d3:2f:a0:53:d5:b6:e3:df:5f:45:0e:c4:ae: d1:aa:f2:b2:9d:b4:06:cb:b2:50:99:ae:a8:aa:e1: 1c:2b:42:92:7e:d6:8f:11:38:8e:58:15:03:d2:d7: 30:fd:f5:2e:ef:5d:cc:d4:54:ed:fe:75:17:e0:20: bd:83:05:ec:b4:d2:41:31:ab:6c:45:d6:9c:e8:0e: 15:8b:e0:70:bd:40:44:6d:f4:05:e8:36:11:1e:d5: 12:3b:69:eb:e9:5a:75:8c:b1:66:ec:b9:77:b8:35: c1:01:be:f3:7c:0f:f3:a4:42:b0:32:e2:7d:10:9d: 8c:c5:f2:3d:e2:05:dc:35:8d:cf:57:7a:27:ca:b4: 81:7f:62:b9:9d:38:be:8e:4d:f9:f5:1d:8c:85:e6: 75:92:36:3a:5e:53:43:35:94:25:ad:be:99:c1:05: e3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:77:CD:1C:54:2C:3D:E2:CB:B8:EF:15:1F:17:9B:85:7E:93:76:E4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/af6d185e-d4f4-4820-b4b6-798c307ad7e5/0/B877CD1C542C3DE2CBB8EF151F179B857E9376E4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 61.29.252.0/23 103.130.198.0/23 117.103.116.0/24 160.20.222.0/24 IPv6: 2407:14c0::/32 Signature Algorithm: sha256WithRSAEncryption 7c:51:25:ef:c6:0b:e6:5e:7d:20:92:d1:58:e5:19:57:1a:1d: a3:32:73:48:56:12:57:59:7e:e2:9e:61:ff:df:6d:13:7c:2e: da:22:a6:ee:30:cc:2a:21:e5:a7:c2:f8:db:ca:8f:57:00:c0: ca:fd:3f:b6:19:21:5d:6e:6f:91:33:f4:8d:c0:14:3b:1e:5d: 2e:0d:0e:77:54:83:c2:6b:27:22:61:e6:58:d2:f9:50:ca:7f: 83:de:55:5d:d3:1f:aa:9d:fb:f8:08:11:82:67:b8:29:ab:27: d7:91:3a:a7:41:7f:aa:b8:12:14:09:8e:cf:4f:c9:01:27:7d: 4b:71:42:e8:ec:0c:7e:84:d3:a1:ca:e7:0a:58:2f:75:61:af: 2b:5d:ae:4b:97:52:b7:13:5a:b9:77:fa:45:d2:10:48:28:ba: d6:0c:cb:20:97:d5:48:3f:4c:ba:52:f2:64:12:46:5e:df:b4: da:a5:27:a9:ae:b8:53:dc:c3:9e:41:18:02:65:9c:de:92:6b: 3b:ca:55:11:f1:41:69:64:50:df:0b:0c:68:32:95:f3:4e:2e: 4e:b9:e6:be:ad:7f:6d:bb:97:8e:95:2f:df:07:48:88:55:90: cf:91:5d:f2:dd:7d:c3:33:4d:a5:ef:d6:51:a4:35:32:52:1c: a3:6c:cb:39 -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgIUQyfPfqQjBDUWAQp1XDX6/atgzLQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMyNjE2MjAzMloX DTI2MDMyNTE2MjUzMlowMzExMC8GA1UEAxMoQjg3N0NEMUM1NDJDM0RFMkNCQjhF RjE1MUYxNzlCODU3RTkzNzZFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALW7fAVLnFax0AS2Y5DAJOpCIs8tg5FyOGvGGKlqAtzYB/S0vqb3MhR7/ujQ KQl9tLKFm8gJlk+bROGqSxjE7L6TTgEKRzCfcyhhodsFMtXPnEZjyIwwwn5hbRvT L6BT1bbj319FDsSu0arysp20BsuyUJmuqKrhHCtCkn7WjxE4jlgVA9LXMP31Lu9d zNRU7f51F+AgvYMF7LTSQTGrbEXWnOgOFYvgcL1ARG30Beg2ER7VEjtp6+ladYyx Zuy5d7g1wQG+83wP86RCsDLifRCdjMXyPeIF3DWNz1d6J8q0gX9iuZ04vo5N+fUd jIXmdZI2Ol5TQzWUJa2+mcEF4w8CAwEAAaOCAtkwggLVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLh3zRxULD3iy7jvFR8Xm4V+k3bkMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZjZkMTg1ZS1kNGY0LTQ4MjAtYjRiNi03OThjMzA3YWQ3ZTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmNmQxODVl LWQ0ZjQtNDgyMC1iNGI2LTc5OGMzMDdhZDdlNS8wL0I4NzdDRDFDNTQyQzNERTJD QkI4RUYxNTFGMTc5Qjg1N0U5Mzc2RTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgD BAE9HfwDBAFngsYDBAB1Z3QDBACgFN4wDQQCAAIwBwMFACQHFMAwDQYJKoZIhvcN AQELBQADggEBAHxRJe/GC+ZefSCS0VjlGVcaHaMyc0hWEldZfuKeYf/fbRN8Ltoi pu4wzCoh5afC+NvKj1cAwMr9P7YZIV1ub5Ez9I3AFDseXS4NDndUg8JrJyJh5ljS +VDKf4PeVV3TH6qd+/gIEYJnuCmrJ9eROqdBf6q4EhQJjs9PyQEnfUtxQujsDH6E 06HK5wpYL3VhrytdrkuXUrcTWrl3+kXSEEgoutYMyyCX1Ug/TLpS8mQSRl7ftNql J6muuFPcw55BGAJlnN6SazvKVRHxQWlkUN8LDGgylfNOLk655r6tf227l46VL98H SIhVkM+RXfLdfcMzTaXv1lGkNTJSHKNsyzk= -----END CERTIFICATE-----Generated at Sat Apr 5 10:31:53 2025 by rpki-client