$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer (raw, json) Hash identifier: LgxeNAmDr/Qqm08E6oUYT6ez78PeLkQJzE/nGZ8NA30= Subject key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4DC650B44FF2E4C3C1414FBAFD9DE77ADAC6CD84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft caRepository: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 08 Oct 2024 00:47:59 +0000 Certificate not after: Tue 07 Oct 2025 00:52:59 +0000 Subordinate resources: IP: 103.35.154.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c6:50:b4:4f:f2:e4:c3:c1:41:4f:ba:fd:9d:e7:7a:da:c6:cd:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Oct 8 00:47:59 2024 GMT Not After : Oct 7 00:52:59 2025 GMT Subject: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f9:28:cd:65:11:dd:21:68:4a:1f:fe:6c:51: 93:a9:64:b7:f0:ad:eb:ae:80:23:3f:e4:d9:14:55: 2f:99:72:35:fc:a1:1a:4b:d4:44:3e:c7:ed:cf:b9: 62:e7:e2:4d:f2:ac:b7:56:61:99:0a:87:20:95:9a: 4b:43:84:ca:52:7b:5c:32:fc:eb:1a:1a:b9:f4:88: 3a:ee:7b:11:4c:e1:4c:0f:97:1c:f1:63:fb:5f:c7: ea:ad:a6:f3:7e:b2:0a:9e:e4:94:23:00:27:24:fe: 6e:a2:57:d8:8e:a4:93:2a:cc:32:cb:e4:28:ec:86: a8:0b:4f:90:1c:ae:5a:09:c2:d9:fb:dd:d6:f8:c1: 69:95:17:9e:e3:03:61:a4:e7:64:1f:bc:49:f7:39: 29:51:12:6c:fa:3d:9a:fc:c6:2d:5d:5f:b2:68:df: 8b:9c:dc:c7:bd:a2:95:62:f4:71:95:d8:2c:41:36: df:6d:50:29:2f:2c:0e:f0:71:d6:84:36:c2:9e:61: cc:9b:9b:8b:28:72:0d:9a:04:16:e9:f6:3f:0d:39: 6a:50:4b:d2:00:db:62:60:60:89:69:28:75:7b:f5: 32:b9:bf:7e:78:0c:4f:fb:e1:54:d9:bf:6c:ec:ba: 3f:e2:b4:8f:2c:f7:02:48:4c:c1:c2:eb:8a:6e:75: 9b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.35.154.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:5b:c6:c7:ba:ec:13:9a:3f:97:31:2b:a3:23:ca:da:af:d9: 9b:a6:6d:8a:db:59:ce:a6:48:df:7f:4f:37:98:7b:31:34:6c: 43:d8:75:a4:10:8c:86:28:85:f7:15:3a:1d:ce:49:bc:22:33: a0:d7:1f:c6:3d:b8:bd:91:bd:b2:ee:72:1d:a7:98:f8:7e:f6: 6a:9c:96:48:7a:4c:03:ff:0a:0c:05:40:6a:7a:86:b9:f5:23: 7c:e4:7d:9e:f4:4a:e3:84:9e:b9:3c:3f:2e:c4:03:b0:fe:7f: 1e:92:0e:3a:3a:b0:bc:6d:ca:fe:58:5c:c7:85:a3:75:1e:c1: b9:e7:ed:7a:f3:d5:d1:28:fd:de:72:c4:d4:2c:7c:f8:1c:00: 06:9d:2c:9d:60:af:0e:db:87:63:ef:3b:bc:75:53:ed:c2:dd: 2d:f7:4b:c4:80:5c:73:ee:16:d7:1e:32:7a:2d:4a:69:62:f2: 3f:73:03:10:cb:d1:96:71:22:f0:43:ed:13:c2:27:66:de:72: a2:a4:a7:38:1b:6c:58:49:6b:8a:18:97:4b:28:bd:49:47:5f: be:d7:2e:2a:55:9c:ed:64:fe:93:05:4f:61:d4:c6:20:0a:68: f3:16:0f:36:d6:5f:f8:c2:f3:3c:01:ed:44:40:35:f9:66:e1: 86:7f:cb:0e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTcZQtE/y5MPBQU+6/Z3netrGzYQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTAwODAwNDc1OVoX DTI1MTAwNzAwNTI1OVowMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQy RjYzQTdFMDg4MEIzNUY2ODM3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKP5KM1lEd0haEof/mxRk6lkt/Ct666AIz/k2RRVL5lyNfyhGkvURD7H7c+5 YufiTfKst1ZhmQqHIJWaS0OEylJ7XDL86xoaufSIOu57EUzhTA+XHPFj+1/H6q2m 836yCp7klCMAJyT+bqJX2I6kkyrMMsvkKOyGqAtPkByuWgnC2fvd1vjBaZUXnuMD YaTnZB+8Sfc5KVESbPo9mvzGLV1fsmjfi5zcx72ilWL0cZXYLEE2321QKS8sDvBx 1oQ2wp5hzJubiyhyDZoEFun2Pw05alBL0gDbYmBgiWkodXv1Mrm/fngMT/vhVNm/ bOy6P+K0jyz3AkhMwcLrim51mwECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNDR3ZIlMh4dTR0vY6fgiAs19oN+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyOTMyOWNm LTMxMjMtNGNlMC1hNjg3LTBhMDNjZDc1ODczOC8wL0QwRDFERDkyMjUzMjFFMUQ0 RDFEMkY2M0E3RTA4ODBCMzVGNjgzN0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnI5owDQYJKoZIhvcNAQELBQADggEBAFtbxse67BOaP5cxK6Mjytqv2ZumbYrb Wc6mSN9/TzeYezE0bEPYdaQQjIYohfcVOh3OSbwiM6DXH8Y9uL2RvbLuch2nmPh+ 9mqclkh6TAP/CgwFQGp6hrn1I3zkfZ70SuOEnrk8Py7EA7D+fx6SDjo6sLxtyv5Y XMeFo3Uewbnn7Xrz1dEo/d5yxNQsfPgcAAadLJ1grw7bh2PvO7x1U+3C3S33S8SA XHPuFtceMnotSmli8j9zAxDL0ZZxIvBD7RPCJ2becqKkpzgbbFhJa4oYl0sovUlH X77XLipVnO1k/pMFT2HUxiAKaPMWDzbWX/jC8zwB7URANflm4YZ/yw4= -----END CERTIFICATE-----Generated at Sun Feb 16 20:42:36 2025 by rpki-client