$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer File: C0CDF72A73FE200131853E0EE6A9B33708242F09.cer (raw, json) Hash identifier: 9/YQ6qE8WuHV7EQksuu9G2oNnKgWN6+BHw+VAwmh32Q= Subject key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 49C27D0BCC6EB784F6C2BACFEFADBDCEEEBA1D65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft caRepository: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 12 Feb 2025 04:42:43 +0000 Certificate not after: Wed 11 Feb 2026 04:47:43 +0000 Subordinate resources: IP: 103.90.62.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c2:7d:0b:cc:6e:b7:84:f6:c2:ba:cf:ef:ad:bd:ce:ee:ba:1d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 12 04:42:43 2025 GMT Not After : Feb 11 04:47:43 2026 GMT Subject: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c2:9e:54:7d:3c:99:93:68:c9:a4:42:f4:5e: e6:63:69:6f:3c:5c:1b:41:83:17:ec:42:19:98:bb: 53:25:d7:ad:8c:f5:b0:70:2c:85:77:32:e1:e5:3e: 5f:ce:db:b7:7e:9d:48:40:75:5c:00:64:d9:48:a2: 24:8a:83:f0:3b:46:55:fb:dc:cc:b5:96:ba:63:28: d4:15:6b:7e:19:5e:2c:5a:13:44:3a:97:7f:c9:48: 42:20:da:e6:29:7e:ce:2a:b4:6d:c6:27:4f:e4:d5: 17:eb:f9:b9:0d:38:98:4d:8f:18:90:c7:5f:e7:5b: 74:3c:e6:6a:a8:a4:85:c8:dd:ec:50:7e:39:d5:fc: 9b:ac:bb:59:6a:00:40:79:51:2a:8e:c1:9d:99:7f: df:a2:a3:a5:01:cf:9d:6f:fd:cf:59:50:63:df:01: 65:5b:0f:49:10:cf:15:80:2c:fa:c7:4e:12:ff:b1: 7e:03:8d:61:7c:00:ae:b0:fd:1d:01:c0:77:3d:9e: 38:3c:40:8f:6a:ea:37:df:44:03:3e:09:b6:35:f6: ee:94:c1:d0:56:7c:cb:04:33:32:89:08:cc:da:bb: 82:5f:7b:ae:33:38:60:40:43:ec:ba:0c:7e:53:40: 06:18:ea:ed:46:54:7f:87:37:67:c9:2f:2f:45:e4: c5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.90.62.0/23 Signature Algorithm: sha256WithRSAEncryption 93:c2:5f:62:43:70:c6:ba:76:b0:aa:84:ae:a9:a2:d0:25:56: 3f:3b:67:0c:a8:68:a2:44:97:0a:92:1c:33:70:40:0d:45:b1: e5:13:6d:61:67:b8:82:81:18:01:6a:34:ea:d4:ed:ae:e0:78: 2e:7e:67:b3:50:65:ff:d9:7c:43:61:38:bc:ff:16:46:41:6a: 05:d6:f7:a8:6a:f6:00:6e:b9:0a:c9:c4:e1:07:bd:62:cc:9b: ea:55:74:27:09:c8:31:15:9d:4b:54:82:8a:91:45:b7:61:aa: 49:c0:99:29:0d:66:eb:fc:25:67:8b:29:96:bf:a2:03:ef:e8: 5a:cb:62:6b:1b:1a:0a:cf:ba:dc:d9:bd:86:29:ac:95:15:bc: 52:15:e8:27:c4:ab:be:fa:a0:d5:bf:df:0a:b5:8d:69:f9:e0: ea:22:65:28:eb:6f:1d:10:4e:c0:13:43:00:f4:2a:ee:c3:c7: 3f:72:62:7a:72:b3:48:60:6c:91:2b:e8:59:20:80:73:2c:52: 4b:fa:81:4b:20:94:aa:8a:d7:27:00:22:bb:59:f2:68:94:5c: 81:07:4a:0b:40:a2:dd:3b:06:7a:f6:1a:e8:dd:68:36:28:08: 7e:27:24:ec:af:9e:b4:70:f1:3f:78:3f:24:3e:31:cf:aa:1c: f8:64:dc:b0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUScJ9C8xut4T2wrrP7629zu66HWUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxMjA0NDI0M1oX DTI2MDIxMTA0NDc0M1owMzExMC8GA1UEAxMoQzBDREY3MkE3M0ZFMjAwMTMxODUz RTBFRTZBOUIzMzcwODI0MkYwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ/CnlR9PJmTaMmkQvRe5mNpbzxcG0GDF+xCGZi7UyXXrYz1sHAshXcy4eU+ X87bt36dSEB1XABk2UiiJIqD8DtGVfvczLWWumMo1BVrfhleLFoTRDqXf8lIQiDa 5il+ziq0bcYnT+TVF+v5uQ04mE2PGJDHX+dbdDzmaqikhcjd7FB+OdX8m6y7WWoA QHlRKo7BnZl/36KjpQHPnW/9z1lQY98BZVsPSRDPFYAs+sdOEv+xfgONYXwArrD9 HQHAdz2eODxAj2rqN99EAz4JtjX27pTB0FZ8ywQzMokIzNq7gl97rjM4YEBD7LoM flNABhjq7UZUf4c3Z8kvL0XkxXsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMDN9ypz/iABMYU+DuapszcIJC8JMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mYzc1NDdmYy00OGQ0LTQxNjktYWUzMy1jYjQ1NGQ2ZDhiOTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjNzU0N2Zj LTQ4ZDQtNDE2OS1hZTMzLWNiNDU0ZDZkOGI5Mi8wL0MwQ0RGNzJBNzNGRTIwMDEz MTg1M0UwRUU2QTlCMzM3MDgyNDJGMDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnWj4wDQYJKoZIhvcNAQELBQADggEBAJPCX2JDcMa6drCqhK6potAlVj87Zwyo aKJElwqSHDNwQA1FseUTbWFnuIKBGAFqNOrU7a7geC5+Z7NQZf/ZfENhOLz/FkZB agXW96hq9gBuuQrJxOEHvWLMm+pVdCcJyDEVnUtUgoqRRbdhqknAmSkNZuv8JWeL KZa/ogPv6FrLYmsbGgrPutzZvYYprJUVvFIV6CfEq776oNW/3wq1jWn54OoiZSjr bx0QTsATQwD0Ku7Dxz9yYnpys0hgbJEr6FkggHMsUkv6gUsglKqK1ycAIrtZ8miU XIEHSgtAot07Bnr2GujdaDYoCH4nJOyvnrRw8T94PyQ+Mc+qHPhk3LA= -----END CERTIFICATE-----Generated at Sat Apr 5 10:28:07 2025 by rpki-client