$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer File: BF97329188204CAD55AEC0D48286FAC81B806C71.cer (raw, json) Hash identifier: ipxRPjpZhgZ7iZNoZZA4rZqadhgkJ9kOXq7TFvksN64= Subject key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6A8C8859A0381F8EE1E80380DD919966F7DC55AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft caRepository: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 02:19:24 +0000 Certificate not after: Fri 06 Mar 2026 02:24:24 +0000 Subordinate resources: IP: 103.57.8.0/22 IP: 103.191.157.0/24 IP: 117.102.160.0/22 IP: 175.184.248.0/22 IP: 2001:df2:a440::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:8c:88:59:a0:38:1f:8e:e1:e8:03:80:dd:91:99:66:f7:dc:55:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Mar 7 02:19:24 2025 GMT Not After : Mar 6 02:24:24 2026 GMT Subject: CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:ce:28:31:18:db:19:13:b6:c1:21:28:7e: 13:9e:e2:a5:3f:28:22:1d:7e:37:ac:e8:cc:fb:9b: f4:07:b4:a0:f1:41:44:48:a4:1b:41:b2:e7:6a:9f: 45:b8:09:45:5f:23:d2:13:35:75:bf:b2:55:c2:c4: 63:bd:bc:c7:76:c6:38:10:ee:c4:42:8f:48:06:e0: 46:83:8d:15:a3:ca:5b:aa:1e:50:24:6e:3b:c2:24: b3:f7:22:a1:f0:d3:aa:41:f1:c2:6e:1b:87:3e:12: 3a:a2:1c:2a:a0:d5:d8:68:3b:d1:c3:de:1c:71:63: ee:fa:79:ae:81:db:3a:c5:0b:32:05:ae:8e:cc:d0: d6:ac:4d:1e:5e:8d:3f:b4:71:09:39:6d:b1:a3:38: 1e:fd:00:4e:75:ae:5e:2b:26:0c:0c:28:65:df:82: 45:0e:7f:09:ba:43:01:87:0d:af:0c:d4:03:62:cf: 16:b1:ae:43:a8:47:ff:09:5e:1c:85:c3:c1:e2:65: 70:fd:07:48:b6:19:2b:b9:7b:62:21:98:b5:e8:94: 87:39:a1:db:2c:86:d4:da:b9:90:26:83:39:65:f1: 2f:d4:ba:ce:ee:d6:2d:48:24:c9:eb:ea:6f:fd:ed: dd:4c:06:42:02:87:4a:cd:af:69:a9:02:d6:df:60: 49:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.57.8.0/22 103.191.157.0/24 117.102.160.0/22 175.184.248.0/22 IPv6: 2001:df2:a440::/48 Signature Algorithm: sha256WithRSAEncryption 52:d2:96:2c:66:47:95:97:3a:70:a6:a2:67:6a:b9:19:ed:a5: db:37:4c:d2:06:70:24:c0:c7:c3:f2:3d:12:ca:06:d9:49:3e: ee:14:7a:9a:50:21:0e:35:08:f1:a6:0a:a2:cd:24:a1:29:79: b0:cc:ed:03:77:08:df:00:a4:63:6c:37:9e:11:1a:28:d5:eb: fc:e1:56:3e:47:67:f6:84:b9:12:7c:16:df:8e:7e:fa:ad:ab: bd:c4:d6:97:04:bc:54:54:e1:65:7d:c5:be:fd:23:26:d6:33: 53:8b:39:4f:15:15:76:6f:a0:25:05:89:b3:9a:30:53:7b:1d: 3e:df:59:77:49:ee:c3:8a:40:38:71:a4:fc:8f:dd:d1:12:48: dd:37:b1:1f:f1:49:ab:ba:c2:8e:f5:01:85:20:ab:a8:0d:b8: a5:62:1e:b8:cf:39:ee:d6:73:94:72:2a:23:1d:c2:a0:8b:6c: 21:fa:95:88:f7:85:86:39:c3:45:07:98:c6:8e:47:6c:96:0b: 1e:1e:8f:37:e8:e7:52:8c:25:ea:07:78:c6:55:79:f9:47:6c: 69:64:44:ff:33:90:67:87:87:ad:cb:ca:df:22:f7:04:7b:23: e3:64:75:b4:4d:cb:d4:9c:b9:7c:46:e5:3d:99:66:28:1d:cd: 4e:0c:e2:1f -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgIUaoyIWaA4H47h6AOA3ZGZZvfcVa8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMwNzAyMTkyNFoX DTI2MDMwNjAyMjQyNFowMzExMC8GA1UEAxMoQkY5NzMyOTE4ODIwNENBRDU1QUVD MEQ0ODI4NkZBQzgxQjgwNkM3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwwzigxGNsZE7bBISh+E57ipT8oIh1+N6zozPub9Ae0oPFBREikG0Gy52qf RbgJRV8j0hM1db+yVcLEY728x3bGOBDuxEKPSAbgRoONFaPKW6oeUCRuO8Iks/ci ofDTqkHxwm4bhz4SOqIcKqDV2Gg70cPeHHFj7vp5roHbOsULMgWujszQ1qxNHl6N P7RxCTltsaM4Hv0ATnWuXismDAwoZd+CRQ5/CbpDAYcNrwzUA2LPFrGuQ6hH/wle HIXDweJlcP0HSLYZK7l7YiGYteiUhzmh2yyG1Nq5kCaDOWXxL9S6zu7WLUgkyevq b/3t3UwGQgKHSs2vaakC1t9gSesCAwEAAaOCAtswggLXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL+XMpGIIEytVa7A1IKG+sgbgGxxMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMjljY2ViNi1hNGU3LTRlODItODhiZS1iYjk2OTdiZDFkMDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyOWNjZWI2 LWE0ZTctNGU4Mi04OGJlLWJiOTY5N2JkMWQwMS8wL0JGOTczMjkxODgyMDRDQUQ1 NUFFQzBENDgyODZGQUM4MUI4MDZDNzEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQgYIKwYBBQUHAQcBAf8EMzAxMB4EAgABMBgD BAJnOQgDBABnv50DBAJ1ZqADBAKvuPgwDwQCAAIwCQMHACABDfKkQDANBgkqhkiG 9w0BAQsFAAOCAQEAUtKWLGZHlZc6cKaiZ2q5Ge2l2zdM0gZwJMDHw/I9EsoG2Uk+ 7hR6mlAhDjUI8aYKos0koSl5sMztA3cI3wCkY2w3nhEaKNXr/OFWPkdn9oS5EnwW 345++q2rvcTWlwS8VFThZX3Fvv0jJtYzU4s5TxUVdm+gJQWJs5owU3sdPt9Zd0nu w4pAOHGk/I/d0RJI3TexH/FJq7rCjvUBhSCrqA24pWIeuM857tZzlHIqIx3CoIts IfqViPeFhjnDRQeYxo5HbJYLHh6PN+jnUowl6gd4xlV5+UdsaWRE/zOQZ4eHrcvK 3yL3BHsj42R1tE3L1Jy5fEblPZlmKB3NTgziHw== -----END CERTIFICATE-----Generated at Sat Apr 5 10:15:33 2025 by rpki-client