$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer File: C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer (raw, json) Hash identifier: ht83AvF4j9KkDfCTRFhEHTI4J9Z21zbnNjyiuJDg8y8= Subject key identifier: C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1F1EEEF921C68B019353E91EA2293CC0FE11F978 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft caRepository: rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 27 Mar 2025 03:03:22 +0000 Certificate not after: Thu 26 Mar 2026 03:08:22 +0000 Subordinate resources: IP: 103.105.114.0/23 IP: 2001:df3:7700::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 10:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:1e:ee:f9:21:c6:8b:01:93:53:e9:1e:a2:29:3c:c0:fe:11:f9:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Mar 27 03:03:22 2025 GMT Not After : Mar 26 03:08:22 2026 GMT Subject: CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f6:d3:c4:f7:b7:4f:37:1d:8b:1d:81:38:0a: 29:6e:18:53:5c:4e:2f:6a:e5:d9:97:2a:7d:e1:d7: 91:93:85:5d:65:bf:a9:6a:15:b4:51:1d:2d:5d:f5: 32:06:e7:12:e9:a2:9a:52:57:42:ff:f6:a9:8f:43: 14:52:5c:2e:52:32:26:a0:84:b0:1f:6a:84:87:01: a5:68:df:61:2d:b4:37:79:8b:b3:cc:cb:b8:9e:49: 61:76:2c:b7:16:67:dd:49:3d:b7:f7:85:e5:4b:f0: 36:70:45:ed:90:04:1e:0a:a1:14:38:6b:7a:95:00: 10:ed:6c:ef:89:bd:6e:d3:ad:b0:39:9f:3e:bc:ef: 99:b1:99:ae:e7:e7:32:8c:81:e7:a2:90:12:e6:0e: c5:25:e6:ca:a3:5e:a7:2b:0b:e7:3d:73:87:53:d5: fc:2f:43:02:4c:51:c6:31:4c:45:e1:dc:11:93:cb: e1:11:ca:ec:22:d3:c1:87:e3:4e:d5:ca:17:c2:6d: 83:40:42:aa:72:91:f7:e8:d8:2a:a1:97:14:65:ca: ca:af:95:ab:ef:70:e9:b0:2a:cb:ee:6a:ae:e7:7d: 62:2d:57:eb:f6:40:d0:9f:7a:8c:c9:84:19:4a:29: fa:6e:04:5a:c4:6a:ba:1a:e8:12:d8:0b:6e:d1:da: b2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.114.0/23 IPv6: 2001:df3:7700::/48 Signature Algorithm: sha256WithRSAEncryption 4b:e2:7f:f0:15:80:cd:01:d9:c2:8e:7d:8c:0a:a4:c0:de:17: 94:e2:75:9b:77:28:7c:df:f9:81:bd:8a:d6:72:b4:47:c5:7f: 38:b8:d5:ab:69:f3:75:67:d3:5a:1b:8b:e3:c9:1b:c1:d1:77: ae:3a:75:8d:73:9e:40:cb:81:82:12:b9:ef:87:06:b2:e7:1c: 1a:a3:0b:37:03:b2:9c:ca:af:16:d9:24:04:b5:a1:a1:d2:1a: ee:bb:8e:91:8c:00:5c:3d:34:d6:ec:51:30:77:fc:2a:f4:7c: 5a:0b:e0:6c:46:0b:81:5c:15:2e:13:dc:c3:10:b6:0c:e6:9e: 73:98:29:33:e4:c8:4b:17:59:ae:d9:57:eb:8a:17:37:f9:fc: cf:e9:03:b5:8b:bd:57:bb:49:33:74:4e:b9:45:71:ba:fa:63: 7b:27:45:57:83:e4:b4:56:ab:57:51:9d:d0:bd:44:fe:d2:2b: 49:ef:b2:d1:ed:cf:a4:cc:72:e8:f0:2b:58:f1:13:22:a2:08: 51:2c:60:b4:f1:d8:17:ea:2a:5c:cf:32:2f:a1:28:ff:86:ab: eb:4b:f9:e7:7a:a3:c7:a6:48:b5:71:6f:f4:d8:f8:e5:c1:1a: ce:5a:33:53:ef:26:1b:35:12:d6:5c:fa:fb:39:ba:7d:78:0a: 51:e6:a2:b8 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUHx7u+SHGiwGTU+keoik8wP4R+XgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMyNzAzMDMyMloX DTI2MDMyNjAzMDgyMlowMzExMC8GA1UEAxMoQzI3NTlDODQ5MENCQzc1NzM3MTA3 OEQyQ0E2MDRENkZGOEVFNEMxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3208T3t083HYsdgTgKKW4YU1xOL2rl2ZcqfeHXkZOFXWW/qWoVtFEdLV31 MgbnEumimlJXQv/2qY9DFFJcLlIyJqCEsB9qhIcBpWjfYS20N3mLs8zLuJ5JYXYs txZn3Uk9t/eF5UvwNnBF7ZAEHgqhFDhrepUAEO1s74m9btOtsDmfPrzvmbGZrufn MoyB56KQEuYOxSXmyqNepysL5z1zh1PV/C9DAkxRxjFMReHcEZPL4RHK7CLTwYfj TtXKF8Jtg0BCqnKR9+jYKqGXFGXKyq+Vq+9w6bAqy+5qrud9Yi1X6/ZA0J96jMmE GUop+m4EWsRquhroEtgLbtHaspsCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMJ1nISQy8dXNxB40spgTW/47kwZMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mZTcxNmRlYS02NTM2LTRkNmUtYjU0Yi1iZjdmNzNjZjZiOTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZlNzE2ZGVh LTY1MzYtNGQ2ZS1iNTRiLWJmN2Y3M2NmNmI5NC8wL0MyNzU5Qzg0OTBDQkM3NTcz NzEwNzhEMkNBNjA0RDZGRjhFRTRDMTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnaXIwDwQCAAIwCQMHACABDfN3ADANBgkqhkiG9w0BAQsFAAOCAQEAS+J/8BWA zQHZwo59jAqkwN4XlOJ1m3cofN/5gb2K1nK0R8V/OLjVq2nzdWfTWhuL48kbwdF3 rjp1jXOeQMuBghK574cGsuccGqMLNwOynMqvFtkkBLWhodIa7ruOkYwAXD001uxR MHf8KvR8WgvgbEYLgVwVLhPcwxC2DOaec5gpM+TISxdZrtlX64oXN/n8z+kDtYu9 V7tJM3ROuUVxuvpjeydFV4PktFarV1Gd0L1E/tIrSe+y0e3PpMxy6PArWPETIqII USxgtPHYF+oqXM8yL6Eo/4ar60v553qjx6ZItXFv9Nj45cEazlozU+8mGzUS1lz6 +zm6fXgKUeaiuA== -----END CERTIFICATE-----Generated at Sun Apr 6 11:57:14 2025 by rpki-client