$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E0B1DDE4FA587276778B8ED650B682C82290CC74.cer File: E0B1DDE4FA587276778B8ED650B682C82290CC74.cer (raw, json) Hash identifier: 29Ys5G76Nbp8EcY54DjpiGrhoT7vZn5teC8ElLgm3Dk= Subject key identifier: E0:B1:DD:E4:FA:58:72:76:77:8B:8E:D6:50:B6:82:C8:22:90:CC:74 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2B7389B1DB562BC693C5743CF29D8B8A30085259 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.mft caRepository: rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 03 Mar 2025 14:17:44 +0000 Certificate not after: Mon 02 Mar 2026 14:22:44 +0000 Subordinate resources: IP: 103.176.68.0/24 IP: 103.176.121.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:73:89:b1:db:56:2b:c6:93:c5:74:3c:f2:9d:8b:8a:30:08:52:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Mar 3 14:17:44 2025 GMT Not After : Mar 2 14:22:44 2026 GMT Subject: CN=E0B1DDE4FA587276778B8ED650B682C82290CC74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:87:71:56:3e:f8:71:e9:17:0e:ae:85:ea: bf:c1:f2:be:30:e9:d8:32:55:48:36:e3:80:b2:7d: ff:5b:11:26:9a:91:e9:8a:b4:0e:00:6b:92:df:8c: b7:ab:5b:9c:27:c4:35:b2:6d:73:9b:e0:c2:3d:63: e9:19:fc:ff:29:ba:ae:2f:6d:56:0e:2b:b3:3f:e3: e9:8f:59:f4:e1:9a:c1:4b:05:bb:cc:10:65:04:76: f0:d4:a6:02:8d:8e:7a:08:4b:f2:81:06:dc:75:38: ba:ff:f7:a7:df:3b:74:b2:25:19:5a:78:8c:58:6b: 15:05:88:c8:8f:78:a6:69:d9:45:fb:43:89:22:d0: 52:31:1f:3b:83:a8:9d:55:d6:2e:8f:60:7a:25:30: 35:a5:2f:ee:78:b4:7b:79:c0:fc:84:30:98:91:dc: 68:70:96:d9:dc:75:e4:be:01:06:d9:90:68:51:43: 09:5c:89:e9:45:07:06:c7:8e:99:86:d8:10:f2:00: 26:ac:12:cc:ed:8a:d3:13:14:13:09:a8:b1:d7:90: c1:d0:d2:27:0b:6e:ac:4f:22:b3:45:38:ce:cf:ef: 23:ac:a0:ff:4d:45:71:15:ee:b5:36:19:3c:c6:f9: 90:1d:db:25:23:0e:d3:76:32:76:1b:48:b3:25:09: 4d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:B1:DD:E4:FA:58:72:76:77:8B:8E:D6:50:B6:82:C8:22:90:CC:74 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5951dfee-a75b-4420-a755-2c7358baf7d3/0/E0B1DDE4FA587276778B8ED650B682C82290CC74.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.68.0/24 103.176.121.0/24 Signature Algorithm: sha256WithRSAEncryption 63:91:ef:c9:35:3f:0f:ae:fc:06:97:b5:f5:18:b9:ad:40:56: 35:4c:55:10:2b:96:11:e8:53:71:bf:19:0e:7e:83:93:4b:5c: 01:94:bb:e8:0d:a1:af:81:b5:7a:5a:2b:0e:60:8f:9f:3f:8c: 97:ee:cb:4f:9c:2d:62:94:55:9f:f6:5e:bb:54:3d:d9:8a:ef: 44:83:a0:1f:1f:ca:2c:f9:90:e3:12:62:a8:0c:76:c4:9d:bd: f4:d5:e9:0c:bc:e4:a1:76:80:1d:90:e5:bd:7d:83:c0:75:0d: 5b:53:64:20:3f:76:40:ed:62:78:cf:92:fe:55:81:b0:eb:9a: 33:a2:07:dd:23:22:e8:96:51:3f:99:49:5f:b7:fd:95:ea:ea: 32:2d:6f:0b:7f:c4:1f:fc:d4:63:c3:e5:ab:d8:7d:9d:6f:08: 9a:0b:94:e3:18:c7:a3:95:b2:bc:a2:00:b7:82:d8:9f:da:42: 07:55:bb:f8:73:48:6c:82:b0:ba:2e:83:a8:9b:f3:ce:9f:b5: c8:0d:01:a9:ff:a0:96:0a:a2:b8:80:db:c1:29:ea:08:6d:71: b8:85:ac:57:28:99:b4:01:d9:89:72:4c:f4:e6:7a:d5:b0:71: 2c:df:d7:a7:1c:52:aa:2f:0f:14:cb:76:33:09:52:dc:60:c9: 5c:f8:64:0a -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUK3OJsdtWK8aTxXQ88p2LijAIUlkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMwMzE0MTc0NFoX DTI2MDMwMjE0MjI0NFowMzExMC8GA1UEAxMoRTBCMURERTRGQTU4NzI3Njc3OEI4 RUQ2NTBCNjgyQzgyMjkwQ0M3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCLh3FWPvhx6RcOroXqv8HyvjDp2DJVSDbjgLJ9/1sRJpqR6Yq0DgBrkt+M t6tbnCfENbJtc5vgwj1j6Rn8/ym6ri9tVg4rsz/j6Y9Z9OGawUsFu8wQZQR28NSm Ao2OeghL8oEG3HU4uv/3p987dLIlGVp4jFhrFQWIyI94pmnZRftDiSLQUjEfO4Oo nVXWLo9geiUwNaUv7ni0e3nA/IQwmJHcaHCW2dx15L4BBtmQaFFDCVyJ6UUHBseO mYbYEPIAJqwSzO2K0xMUEwmosdeQwdDSJwturE8is0U4zs/vI6yg/01FcRXutTYZ PMb5kB3bJSMO03YydhtIsyUJTQ0CAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOCx3eT6WHJ2d4uO1lC2gsgikMx0MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81OTUxZGZlZS1hNzViLTQ0MjAtYTc1NS0yYzczNThiYWY3ZDMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5NTFkZmVl LWE3NWItNDQyMC1hNzU1LTJjNzM1OGJhZjdkMy8wL0UwQjFEREU0RkE1ODcyNzY3 NzhCOEVENjUwQjY4MkM4MjI5MENDNzQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABnsEQDBABnsHkwDQYJKoZIhvcNAQELBQADggEBAGOR78k1Pw+u/AaXtfUYua1A VjVMVRArlhHoU3G/GQ5+g5NLXAGUu+gNoa+BtXpaKw5gj58/jJfuy0+cLWKUVZ/2 XrtUPdmK70SDoB8fyiz5kOMSYqgMdsSdvfTV6Qy85KF2gB2Q5b19g8B1DVtTZCA/ dkDtYnjPkv5VgbDrmjOiB90jIuiWUT+ZSV+3/ZXq6jItbwt/xB/81GPD5avYfZ1v CJoLlOMYx6OVsryiALeC2J/aQgdVu/hzSGyCsLoug6ib886ftcgNAan/oJYKoriA 28Ep6ghtcbiFrFcombQB2YlyTPTmetWwcSzf16ccUqovDxTLdjMJUtxgyVz4ZAo= -----END CERTIFICATE-----Generated at Sat Apr 5 10:36:50 2025 by rpki-client