$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer File: CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer (raw, json) Hash identifier: gdUvDcyWsflwjIZm9F9VRTtwLt1/8u2EkcLDKz9HVLU= Subject key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 205B707DD9995923FA6C324023070C9614ACE020 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft caRepository: rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 20 Jan 2025 11:39:51 +0000 Certificate not after: Mon 19 Jan 2026 11:44:51 +0000 Subordinate resources: IP: 103.170.100.0/23 IP: 2407:c6c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:5b:70:7d:d9:99:59:23:fa:6c:32:40:23:07:0c:96:14:ac:e0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 20 11:39:51 2025 GMT Not After : Jan 19 11:44:51 2026 GMT Subject: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:f4:0b:fb:f4:87:33:32:a5:05:90:13:4e: f7:1a:d8:68:38:5a:fd:fa:36:22:e2:d9:27:2c:86: d8:52:3f:d6:54:96:64:db:5f:4d:ea:0d:58:b3:0c: 91:e8:a9:85:93:44:98:31:c1:da:a2:96:0c:d7:1c: c5:67:f4:b5:47:11:96:f6:68:a3:06:bb:ba:f1:b8: 8d:2b:e4:e8:2c:49:fd:dd:e7:7a:9d:40:01:12:3d: fa:0d:d6:f1:b9:3c:16:00:29:10:1b:a3:0b:57:f9: 6b:f1:14:17:f8:68:47:df:86:cf:d9:82:33:09:1a: b7:b0:b8:b0:3b:8c:af:7c:77:d4:1e:62:34:76:9a: bf:79:fd:99:6c:63:82:19:50:ab:3f:b4:51:e8:e2: 25:55:52:9d:69:cb:b7:c1:b3:c1:ab:6c:ac:82:c4: 8b:4a:ec:c3:cf:f1:55:3b:89:d1:35:44:18:f5:9c: ba:ea:bf:ea:80:aa:41:f7:5c:c7:85:da:ff:fc:be: 0c:17:4a:25:c9:b5:07:5f:dd:0d:8c:2a:fe:84:38: 41:5f:9d:18:f8:25:4e:a6:9e:3f:54:15:7b:f7:61: e6:67:f4:a2:d6:77:da:5a:55:8a:cb:31:9d:c9:37: f7:c4:6b:58:44:53:12:3c:4e:ed:93:03:44:e4:d4: 71:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.100.0/23 IPv6: 2407:c6c0::/32 Signature Algorithm: sha256WithRSAEncryption 30:09:2c:d9:16:3a:57:72:5d:b9:05:a1:4a:78:e6:3e:de:b9: 34:17:a9:15:88:69:26:d8:dc:26:3f:20:34:97:99:43:7a:1e: f6:03:f0:ef:29:a2:20:58:a5:af:74:eb:37:04:f8:fe:6c:41: 1a:55:a9:95:df:15:24:e5:61:43:c3:89:77:05:78:d3:75:84: aa:83:10:53:ef:55:a1:bb:9f:30:7f:d4:6b:88:c0:a5:b9:86: 46:64:b4:25:93:40:64:ca:ff:a3:80:56:37:aa:ae:56:47:31: 9d:ef:61:9f:93:60:03:6a:5d:bc:e4:f5:9e:5c:78:d9:21:3a: c5:94:17:79:73:0c:24:29:f4:06:ba:75:9a:9f:b2:ac:2b:0b: 92:12:bc:eb:48:4e:62:45:f0:5b:40:2d:0e:a3:61:02:1f:ac: eb:26:7f:1f:83:56:28:af:76:80:62:bc:0a:db:76:57:58:0f: 38:66:0a:a5:af:d7:31:5f:77:92:13:47:a7:27:94:80:93:cf: 48:69:ec:75:f9:b9:4b:96:26:ff:fd:6a:e2:28:67:c3:72:27: ed:f7:81:3a:e4:94:5d:d5:d9:93:9a:e4:b5:25:8e:3b:c0:b0: cd:cb:15:3f:c1:75:17:73:df:1e:fa:85:67:fb:41:e9:8f:ee: a0:a6:4f:72 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUIFtwfdmZWSP6bDJAIwcMlhSs4CAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEyMDExMzk1MVoX DTI2MDExOTExNDQ1MVowMzExMC8GA1UEAxMoQ0VDNUZFMTgzQTM5MTA1QzlFMjcw MkNDMkJGMDg5MUZDMzVFMUU0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ9G9Av79IczMqUFkBNO9xrYaDha/fo2IuLZJyyG2FI/1lSWZNtfTeoNWLMM keiphZNEmDHB2qKWDNccxWf0tUcRlvZoowa7uvG4jSvk6CxJ/d3nep1AARI9+g3W 8bk8FgApEBujC1f5a/EUF/hoR9+Gz9mCMwkat7C4sDuMr3x31B5iNHaav3n9mWxj ghlQqz+0UejiJVVSnWnLt8GzwatsrILEi0rsw8/xVTuJ0TVEGPWcuuq/6oCqQfdc x4Xa//y+DBdKJcm1B1/dDYwq/oQ4QV+dGPglTqaeP1QVe/dh5mf0otZ32lpVissx nck398RrWERTEjxO7ZMDROTUcakCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM7F/hg6ORBcnicCzCvwiR/DXh5PMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81NjFjZjc3Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU2MWNmNzc3 LThhZGYtNGVmMS04ZDZmLTk4NjJjNTU2MjBlYS8wL0NFQzVGRTE4M0EzOTEwNUM5 RTI3MDJDQzJCRjA4OTFGQzM1RTFFNEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnqmQwDQQCAAIwBwMFACQHxsAwDQYJKoZIhvcNAQELBQADggEBADAJLNkWOldy XbkFoUp45j7euTQXqRWIaSbY3CY/IDSXmUN6HvYD8O8poiBYpa906zcE+P5sQRpV qZXfFSTlYUPDiXcFeNN1hKqDEFPvVaG7nzB/1GuIwKW5hkZktCWTQGTK/6OAVjeq rlZHMZ3vYZ+TYANqXbzk9Z5ceNkhOsWUF3lzDCQp9Aa6dZqfsqwrC5ISvOtITmJF 8FtALQ6jYQIfrOsmfx+DViivdoBivArbdldYDzhmCqWv1zFfd5ITR6cnlICTz0hp 7HX5uUuWJv/9auIoZ8NyJ+33gTrklF3V2ZOa5LUljjvAsM3LFT/BdRdz3x76hWf7 QemP7qCmT3I= -----END CERTIFICATE-----Generated at Sun Feb 16 20:53:37 2025 by rpki-client