$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer File: E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer (raw, json) Hash identifier: ThD3/CKx0Pm3GYiMy7Mv7tjgf3aSXGUhbQiVz8Snw68= Subject key identifier: E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 30D7DF415BD4C08842F87433193AF5BD0B0D5600 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft caRepository: rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 13 Feb 2025 08:18:04 +0000 Certificate not after: Thu 12 Feb 2026 08:23:04 +0000 Subordinate resources: IP: 103.110.34.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d7:df:41:5b:d4:c0:88:42:f8:74:33:19:3a:f5:bd:0b:0d:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 13 08:18:04 2025 GMT Not After : Feb 12 08:23:04 2026 GMT Subject: CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:5c:68:58:8f:1a:3d:4c:84:6d:e3:c9:50: 8a:fa:99:33:d0:3c:f9:79:48:b5:20:be:dc:2d:e6: c8:b6:3e:0f:03:db:49:56:8b:5f:e4:80:dc:6f:76: d5:0c:af:ca:c6:1c:9f:42:27:fc:db:73:8b:5f:9c: 2b:53:56:4c:b6:dc:04:cd:77:17:0d:74:06:73:46: 75:36:37:c0:c6:f9:20:d1:c4:ef:2c:47:a1:b4:49: ea:db:db:e9:19:3b:51:10:d1:f6:af:9f:e9:53:75: 36:0d:38:62:ca:8a:8a:54:ad:3a:ec:09:24:5b:fc: 78:fa:21:3d:60:9c:d0:88:ee:89:f9:b3:70:dc:64: 97:ad:6e:b5:ca:1b:13:48:b5:fb:d4:39:b6:58:5c: 7d:8d:65:dc:48:b8:cc:36:fa:45:68:f7:7d:f4:58: 81:4c:4a:82:9d:f7:f6:b6:e3:44:cc:94:69:93:5d: a0:91:32:9f:fa:ae:e7:4c:8d:35:e9:b3:fe:9d:4a: ba:d2:03:a2:f4:14:e7:9a:d3:72:5b:11:f2:53:10: cd:11:8f:90:75:14:b1:03:20:9e:4a:0b:43:c0:69: 19:38:cb:f3:51:95:65:ec:2f:7f:a8:34:f1:2d:33: b6:66:33:24:0b:07:45:66:8c:d0:de:62:68:c9:f5: 16:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.110.34.0/23 Signature Algorithm: sha256WithRSAEncryption 92:cd:e6:1d:dc:50:7d:1d:cf:ec:e5:87:e0:a1:15:22:5c:9a: a4:e7:ae:dc:9d:8f:6c:18:53:1f:0c:de:07:ee:7e:a2:b5:7d: 6a:69:7c:13:3f:f4:63:75:b2:26:95:b6:87:c3:d8:b1:67:5b: 26:54:47:ef:4f:88:5a:47:c3:18:a4:6a:2a:6a:b5:23:63:a7: 6d:c3:6c:1b:38:4b:f7:3d:2d:c0:f8:de:d6:45:1a:aa:ac:b9: e8:b6:e7:e4:40:18:8d:d1:a5:97:80:55:e2:89:69:74:d3:94: 0a:cb:67:ba:29:ab:7d:c9:d3:26:1d:96:76:cf:3f:bd:6e:d8: 16:e6:43:00:d6:07:07:17:65:ae:94:6b:c7:c0:dc:2f:d8:47: 7a:fb:d4:80:b0:bb:26:e5:d7:a5:b2:ac:8d:61:0e:91:91:a5: e2:b6:09:83:52:3e:da:46:7b:4a:b2:27:91:42:94:8e:35:e4: ea:9c:d4:0b:4d:75:dc:b6:ae:7c:bd:96:cd:90:3d:c4:5a:4c: e9:86:b9:99:ee:f2:8a:34:33:d0:b4:eb:b3:33:11:45:2c:82: 88:14:4c:c4:c8:43:31:11:65:ac:58:46:36:ee:02:e3:79:ba: 78:de:f2:7f:d6:e7:58:17:9b:87:48:d8:57:75:67:b3:d1:45: 2b:2d:a0:e6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMNffQVvUwIhC+HQzGTr1vQsNVgAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxMzA4MTgwNFoX DTI2MDIxMjA4MjMwNFowMzExMC8GA1UEAxMoRTFGN0U3MzlENUU5MkNFRkFBRjhE QjRGREUyNEI0MDJERjJGNUYxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOzXGhYjxo9TIRt48lQivqZM9A8+XlItSC+3C3myLY+DwPbSVaLX+SA3G92 1QyvysYcn0In/Ntzi1+cK1NWTLbcBM13Fw10BnNGdTY3wMb5INHE7yxHobRJ6tvb 6Rk7URDR9q+f6VN1Ng04YsqKilStOuwJJFv8ePohPWCc0IjuifmzcNxkl61utcob E0i1+9Q5tlhcfY1l3Ei4zDb6RWj3ffRYgUxKgp339rbjRMyUaZNdoJEyn/qu50yN Nemz/p1KutIDovQU55rTclsR8lMQzRGPkHUUsQMgnkoLQ8BpGTjL81GVZewvf6g0 8S0ztmYzJAsHRWaM0N5iaMn1FgsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOH35znV6SzvqvjbT94ktALfL18SMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NGJmMDdjZi01MGE5LTQyOGEtOTBkMi1kNDRkNmI3NjJiNTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0YmYwN2Nm LTUwYTktNDI4YS05MGQyLWQ0NGQ2Yjc2MmI1NS8wL0UxRjdFNzM5RDVFOTJDRUZB QUY4REI0RkRFMjRCNDAyREYyRjVGMTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnbiIwDQYJKoZIhvcNAQELBQADggEBAJLN5h3cUH0dz+zlh+ChFSJcmqTnrtyd j2wYUx8M3gfufqK1fWppfBM/9GN1siaVtofD2LFnWyZUR+9PiFpHwxikaipqtSNj p23DbBs4S/c9LcD43tZFGqqsuei25+RAGI3RpZeAVeKJaXTTlArLZ7opq33J0yYd lnbPP71u2BbmQwDWBwcXZa6Ua8fA3C/YR3r71ICwuybl16WyrI1hDpGRpeK2CYNS PtpGe0qyJ5FClI415Oqc1AtNddy2rny9ls2QPcRaTOmGuZnu8oo0M9C067MzEUUs gogUTMTIQzERZaxYRjbuAuN5unje8n/W51gXm4dI2Fd1Z7PRRSstoOY= -----END CERTIFICATE-----Generated at Sat Apr 5 06:27:00 2025 by rpki-client