$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer File: C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer (raw, json) Hash identifier: hcgy+MM3tITnEe9yyJxWpx+gJAUKvRH+ts3j7UGf8Bs= Subject key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6733986026F860C5F7ACAB8DDDE6DD712F638CB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft caRepository: rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Dec 2024 04:29:26 +0000 Certificate not after: Tue 16 Dec 2025 04:34:26 +0000 Subordinate resources: IP: 103.174.13.0/24 IP: 103.178.83.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:33:98:60:26:f8:60:c5:f7:ac:ab:8d:dd:e6:dd:71:2f:63:8c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 17 04:29:26 2024 GMT Not After : Dec 16 04:34:26 2025 GMT Subject: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3d:7c:c5:12:f0:5f:09:d0:e6:4d:54:5f:79: 10:55:62:1d:3a:04:7d:d4:d0:07:e0:81:55:6e:17: 58:e4:e1:71:4c:6b:57:13:83:2a:c4:b1:69:94:2c: fe:fb:ff:d9:44:bf:d9:c1:e6:0a:44:7f:89:cf:1e: 27:12:4f:8a:ac:75:cb:92:b8:c1:ca:39:e1:99:c3: 63:ee:bc:d1:a2:cc:89:ff:a9:a8:20:35:36:5a:55: f7:65:05:da:b4:6b:6f:df:67:1a:39:94:12:b7:c4: a8:63:96:f8:a1:fb:e2:19:8f:57:7a:4f:7e:33:b1: 8c:5a:f6:5f:ee:5c:cd:43:dd:3c:b1:7d:04:64:ce: f0:7a:77:18:c1:72:35:af:c6:25:97:94:d3:e9:1a: a1:fb:ac:41:d7:87:03:90:12:7b:92:35:e4:69:47: 98:97:bc:56:b5:4c:cf:83:c1:7c:23:c4:f9:ad:bb: 11:0b:db:ab:14:e4:b8:43:7c:5f:62:73:e3:dd:49: 0d:32:b6:e6:2d:6c:6d:ab:60:1a:d9:7d:78:c7:0b: 1e:ca:83:98:20:0f:84:13:20:2b:e9:63:1d:ed:27: 27:47:30:fa:8a:3b:a9:8d:1a:39:e6:fe:4e:22:77: 71:14:9a:c8:ab:1f:ba:38:30:d5:42:0c:d3:50:44: 4d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.13.0/24 103.178.83.0/24 Signature Algorithm: sha256WithRSAEncryption 32:2a:f6:dd:73:cd:cb:e9:92:e1:4d:6c:b4:4a:1f:75:1f:b2: c9:25:76:c0:62:a2:28:a2:8f:63:d5:64:c4:eb:17:a6:ae:46: 4d:08:ae:87:22:8c:fd:ed:8b:83:42:07:c0:ae:ab:55:00:d0: b6:ca:2f:a2:31:c0:5e:5c:68:dc:44:f4:61:f6:48:3b:95:72: e7:f8:ee:7f:cd:62:05:00:d6:37:18:92:44:e1:5b:05:4c:27: 24:6a:ad:71:61:49:3e:75:2c:2b:a4:45:f1:17:91:d3:90:14: 08:38:57:b6:88:70:bc:2f:1c:61:92:ea:79:57:cc:99:32:1e: c2:ff:19:41:b1:66:ad:6b:e5:61:ce:cf:c3:6a:86:f8:8b:56: a8:13:c6:2f:8c:8b:1a:65:37:29:f9:69:73:e0:ba:31:74:4b: 7e:69:4d:db:5c:d8:40:bc:e9:92:80:53:05:a9:9e:02:a1:1d: 9a:49:06:a4:1c:56:bd:4b:d8:2a:a7:72:34:59:fa:89:75:3d: 82:e5:a7:7f:5c:04:94:0e:e2:f6:69:46:09:9f:b9:0e:14:1c: 74:9e:28:39:5a:77:32:18:a7:9e:db:96:e4:b4:3d:c5:44:9d: fa:c5:b2:d7:6f:03:78:fc:e1:4e:8e:9f:0c:d5:a5:e0:25:45: 38:4a:55:9c -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUZzOYYCb4YMX3rKuN3ebdcS9jjLIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxNzA0MjkyNloX DTI1MTIxNjA0MzQyNlowMzExMC8GA1UEAxMoQzc4NEM4RUU2RjdDRTNDODQ3RkNC RDFDQ0RGMjMyNzIwMEVGNUM3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKc9fMUS8F8J0OZNVF95EFViHToEfdTQB+CBVW4XWOThcUxrVxODKsSxaZQs /vv/2US/2cHmCkR/ic8eJxJPiqx1y5K4wco54ZnDY+680aLMif+pqCA1NlpV92UF 2rRrb99nGjmUErfEqGOW+KH74hmPV3pPfjOxjFr2X+5czUPdPLF9BGTO8Hp3GMFy Na/GJZeU0+kaofusQdeHA5ASe5I15GlHmJe8VrVMz4PBfCPE+a27EQvbqxTkuEN8 X2Jz491JDTK25i1sbatgGtl9eMcLHsqDmCAPhBMgK+ljHe0nJ0cw+oo7qY0aOeb+ TiJ3cRSayKsfujgw1UIM01BETQkCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMeEyO5vfOPIR/y9HM3yMnIA71xwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZmRlMWYwZS0yMzFmLTQ0Y2UtOTBjMy0zMmFjZGY5ZDI2YzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlmZGUxZjBl LTIzMWYtNDRjZS05MGMzLTMyYWNkZjlkMjZjMC8wL0M3ODRDOEVFNkY3Q0UzQzg0 N0ZDQkQxQ0NERjIzMjcyMDBFRjVDNzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABnrg0DBABnslMwDQYJKoZIhvcNAQELBQADggEBADIq9t1zzcvpkuFNbLRKH3Uf sskldsBioiiij2PVZMTrF6auRk0IrocijP3ti4NCB8Cuq1UA0LbKL6IxwF5caNxE 9GH2SDuVcuf47n/NYgUA1jcYkkThWwVMJyRqrXFhST51LCukRfEXkdOQFAg4V7aI cLwvHGGS6nlXzJkyHsL/GUGxZq1r5WHOz8NqhviLVqgTxi+MixplNyn5aXPgujF0 S35pTdtc2EC86ZKAUwWpngKhHZpJBqQcVr1L2CqncjRZ+ol1PYLlp39cBJQO4vZp RgmfuQ4UHHSeKDladzIYp57bluS0PcVEnfrFstdvA3j84U6OnwzVpeAlRThKVZw= -----END CERTIFICATE-----Generated at Sat Apr 5 06:20:08 2025 by rpki-client