$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer File: D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.cer (raw, json) Hash identifier: K3KFVQV2TS+lIuoZ8kpfOH4KlEFuJec5xVnYDLu6eyU= Subject key identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2C4676558B983CD1FA36634B7573E82966EC1FE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft caRepository: rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 17 Feb 2025 09:47:42 +0000 Certificate not after: Mon 16 Feb 2026 09:52:42 +0000 Subordinate resources: IP: 103.130.116.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:46:76:55:8b:98:3c:d1:fa:36:63:4b:75:73:e8:29:66:ec:1f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 17 09:47:42 2025 GMT Not After : Feb 16 09:52:42 2026 GMT Subject: CN=D947E8BEAE01A6710E324CD416D3282ADDFBBFE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:b6:b9:9b:14:1b:57:b5:ec:4c:e9:52:eb: 60:b1:7d:ad:51:75:89:ef:5a:48:06:e5:90:3a:03: 50:60:d8:31:f4:a1:30:0d:05:90:33:4a:d5:bb:24: b7:e4:e3:24:84:e2:f1:9d:f4:45:a0:7f:30:c1:c0: f5:61:70:71:97:0f:ff:b5:f5:83:ea:e8:74:8e:4b: e3:c1:f8:36:70:3a:af:f0:3a:e2:39:4e:29:93:7c: f5:83:cf:47:a4:fb:9e:1d:ad:01:ff:ac:7a:9a:a3: ec:09:a6:6b:66:79:b3:b5:ad:77:7a:7a:95:87:0e: d3:c2:22:34:3a:de:3c:7a:f4:1e:69:71:aa:14:32: 61:bb:ef:cd:df:de:f3:99:9f:ad:9d:77:13:f5:97: 89:bf:84:f4:b6:51:cf:a8:77:10:4e:65:e1:98:5f: a2:4a:af:c1:41:68:58:80:63:6a:13:97:c1:41:a3: 0a:cb:e0:60:e7:45:4c:64:d9:5e:10:b3:f5:e2:d2: d7:9c:4e:8f:1a:e4:97:a0:cf:64:5c:52:40:0a:6d: e6:55:b0:56:13:c2:aa:0c:0e:05:3b:57:4a:19:ac: 64:c1:ed:9c:04:c0:73:53:10:30:3b:50:15:09:48: 91:42:46:e9:68:01:e5:13:e5:1e:ea:94:45:c8:35: ff:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D9:47:E8:BE:AE:01:A6:71:0E:32:4C:D4:16:D3:28:2A:DD:FB:BF:E9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cffdc2b7-f305-4e07-aac5-469e9113b0b4/0/D947E8BEAE01A6710E324CD416D3282ADDFBBFE9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.116.0/23 Signature Algorithm: sha256WithRSAEncryption 39:a8:d4:e0:28:2e:57:6f:72:3f:b5:f5:d5:ae:f0:f0:71:ba: c2:f7:38:eb:1d:1c:ce:c2:03:04:3e:a9:6e:14:f9:20:26:fd: b1:56:80:c8:ba:84:46:b2:46:c7:26:9f:53:30:11:3b:04:41: 55:53:83:49:20:33:3e:42:24:e9:1f:a3:4e:3e:56:45:f8:5c: ea:5f:e5:55:1b:97:dd:f6:1b:c8:54:af:93:54:06:27:1b:ed: ad:04:4d:f7:9c:d5:77:7d:74:8a:55:2c:59:40:ba:83:d7:65: e3:fa:33:31:90:cd:ee:53:6f:2f:40:46:13:09:7a:81:4c:08: ff:11:32:2f:06:9e:13:3e:20:04:01:bd:28:22:47:1d:9e:b7: 09:8d:7b:10:09:cf:c3:32:29:bb:91:e2:eb:0e:18:a2:01:44: 1b:45:a0:b3:1d:69:b9:95:26:6b:f5:ad:74:bf:bb:b5:83:96: 98:9a:01:82:69:27:18:f5:25:7a:63:4e:d9:68:f4:7c:82:ac: fb:69:2d:99:e1:f2:0e:50:fc:4c:bf:e1:47:a5:f0:e4:25:83: 7d:c2:ce:ae:23:6f:c6:b9:c5:48:b9:07:29:2f:bf:85:55:2f: d8:5b:e9:26:31:3a:f9:da:4e:13:f6:51:89:bf:7b:71:9f:f8: 20:90:75:f2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULEZ2VYuYPNH6NmNLdXPoKWbsH+IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxNzA5NDc0MloX DTI2MDIxNjA5NTI0MlowMzExMC8GA1UEAxMoRDk0N0U4QkVBRTAxQTY3MTBFMzI0 Q0Q0MTZEMzI4MkFEREZCQkZFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMnPtrmbFBtXtexM6VLrYLF9rVF1ie9aSAblkDoDUGDYMfShMA0FkDNK1bsk t+TjJITi8Z30RaB/MMHA9WFwcZcP/7X1g+rodI5L48H4NnA6r/A64jlOKZN89YPP R6T7nh2tAf+sepqj7Amma2Z5s7Wtd3p6lYcO08IiNDrePHr0HmlxqhQyYbvvzd/e 85mfrZ13E/WXib+E9LZRz6h3EE5l4ZhfokqvwUFoWIBjahOXwUGjCsvgYOdFTGTZ XhCz9eLS15xOjxrkl6DPZFxSQApt5lWwVhPCqgwOBTtXShmsZMHtnATAc1MQMDtQ FQlIkUJG6WgB5RPlHuqURcg1/0cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNlH6L6uAaZxDjJM1BbTKCrd+7/pMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jZmZkYzJiNy1mMzA1LTRlMDctYWFjNS00NjllOTExM2IwYjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmZmRjMmI3 LWYzMDUtNGUwNy1hYWM1LTQ2OWU5MTEzYjBiNC8wL0Q5NDdFOEJFQUUwMUE2NzEw RTMyNENENDE2RDMyODJBRERGQkJGRTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFngnQwDQYJKoZIhvcNAQELBQADggEBADmo1OAoLldvcj+19dWu8PBxusL3OOsd HM7CAwQ+qW4U+SAm/bFWgMi6hEayRscmn1MwETsEQVVTg0kgMz5CJOkfo04+VkX4 XOpf5VUbl932G8hUr5NUBicb7a0ETfec1Xd9dIpVLFlAuoPXZeP6MzGQze5Tby9A RhMJeoFMCP8RMi8GnhM+IAQBvSgiRx2etwmNexAJz8MyKbuR4usOGKIBRBtFoLMd abmVJmv1rXS/u7WDlpiaAYJpJxj1JXpjTtlo9HyCrPtpLZnh8g5Q/Ey/4Uel8OQl g33Czq4jb8a5xUi5Bykvv4VVL9hb6SYxOvnaThP2UYm/e3Gf+CCQdfI= -----END CERTIFICATE-----Generated at Sat Apr 5 08:49:55 2025 by rpki-client