$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E377371E82C6C53C7A5796B49B085190AFB64B4C.cer File: E377371E82C6C53C7A5796B49B085190AFB64B4C.cer (raw, json) Hash identifier: vCOVNR8U0GXP5YCPHdWmizBJvs1m+6tVq2ovILjBLYc= Subject key identifier: E3:77:37:1E:82:C6:C5:3C:7A:57:96:B4:9B:08:51:90:AF:B6:4B:4C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0D673663820F525E6D2D74FF411F6081D5F52F6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft caRepository: rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 08 Jan 2025 18:39:03 +0000 Certificate not after: Wed 07 Jan 2026 18:44:03 +0000 Subordinate resources: IP: 103.89.242.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:67:36:63:82:0f:52:5e:6d:2d:74:ff:41:1f:60:81:d5:f5:2f:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Jan 8 18:39:03 2025 GMT Not After : Jan 7 18:44:03 2026 GMT Subject: CN=E377371E82C6C53C7A5796B49B085190AFB64B4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:3e:b2:e7:94:dc:ca:c1:a6:6a:73:ca:54:fb: a8:fd:7c:aa:e1:fd:38:6d:c9:ba:88:3d:35:9f:08: de:a4:47:07:f5:2c:08:2a:7a:01:ba:23:64:7f:88: 82:b0:2c:37:4c:59:bd:e3:97:bd:75:b9:a7:10:15: da:65:b0:9c:2a:18:94:e5:15:c6:3f:a6:fa:69:35: 23:c4:d2:b5:06:3f:d8:da:d4:4d:f3:10:24:6a:f3: cf:85:9d:1f:4c:f6:22:87:79:67:db:8d:5d:5a:12: bf:cb:25:24:13:6e:a4:91:ea:a5:6f:ba:25:3d:37: f9:c7:57:a9:c1:83:76:29:87:dc:ef:c0:7a:42:02: 67:f2:91:26:5e:ba:73:b6:7a:95:eb:86:89:87:6f: 3a:6d:4d:9c:59:aa:1a:ef:b3:8d:4b:a9:52:f7:79: 66:48:4b:1e:ce:14:9d:0a:a7:bc:43:49:68:5d:b7: 56:ce:d3:68:66:06:d5:4b:76:77:41:71:fd:13:bb: 56:9f:8d:17:e6:85:36:03:a7:97:85:7f:c0:75:cf: e4:e5:87:fc:3e:43:0e:f2:30:ea:6e:3e:e3:70:3e: d0:49:11:ef:c5:8e:16:0f:f1:23:9e:58:6a:61:72: 77:bf:56:0f:8b:c0:fb:16:90:21:96:97:0c:38:aa: de:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E3:77:37:1E:82:C6:C5:3C:7A:57:96:B4:9B:08:51:90:AF:B6:4B:4C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0e330876-7e68-4707-a53d-92bbfdb2f23c/0/E377371E82C6C53C7A5796B49B085190AFB64B4C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.89.242.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:55:c1:36:22:72:db:8c:bf:ad:52:b0:fd:37:59:d8:5c:0e: 17:28:1c:bf:4b:c2:8c:b6:38:b8:68:6a:96:92:bc:51:c2:16: 79:a6:57:4d:33:f1:ea:77:82:5a:a8:2f:ec:ed:51:88:38:f3: dd:ae:74:7e:51:86:4b:d2:a4:2e:86:39:a4:14:71:fd:b3:17: 3f:56:01:6e:d9:50:c3:69:52:b8:65:1a:5d:0e:28:8e:fa:fc: 08:cd:96:b3:cb:05:8f:64:2f:11:3a:79:f6:ca:5d:22:8c:7b: bf:4a:d5:43:92:05:ac:44:95:99:c7:74:0f:3d:19:d4:86:7d: 00:21:39:40:8f:bd:3a:ed:18:8a:53:61:3e:5a:63:e6:5c:d4: a4:4b:2b:5c:a8:99:ea:10:e5:18:2b:31:64:5c:09:36:f6:37: da:88:4f:1a:27:88:11:12:ca:ae:c6:98:28:e8:57:4e:09:b8: 8d:31:6b:2b:e1:79:28:34:ec:37:b4:09:02:4f:a7:a8:78:3c: 70:32:81:50:ac:f8:86:8d:fa:32:bc:56:90:5e:ba:97:5d:ec: 6c:c8:4a:f7:5a:06:87:bf:a3:f2:60:06:70:c3:d1:10:dd:12: 88:05:2c:b7:96:a7:de:ea:2b:2a:f4:f3:09:bd:96:31:0f:18: 27:9b:b5:a8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDWc2Y4IPUl5tLXT/QR9ggdX1L28wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEwODE4MzkwM1oX DTI2MDEwNzE4NDQwM1owMzExMC8GA1UEAxMoRTM3NzM3MUU4MkM2QzUzQzdBNTc5 NkI0OUIwODUxOTBBRkI2NEI0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPI+sueU3MrBpmpzylT7qP18quH9OG3Juog9NZ8I3qRHB/UsCCp6AbojZH+I grAsN0xZveOXvXW5pxAV2mWwnCoYlOUVxj+m+mk1I8TStQY/2NrUTfMQJGrzz4Wd H0z2Iod5Z9uNXVoSv8slJBNupJHqpW+6JT03+cdXqcGDdimH3O/AekICZ/KRJl66 c7Z6leuGiYdvOm1NnFmqGu+zjUupUvd5ZkhLHs4UnQqnvENJaF23Vs7TaGYG1Ut2 d0Fx/RO7Vp+NF+aFNgOnl4V/wHXP5OWH/D5DDvIw6m4+43A+0EkR78WOFg/xI55Y amFyd79WD4vA+xaQIZaXDDiq3qkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFON3Nx6CxsU8eleWtJsIUZCvtktMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZTMzMDg3Ni03ZTY4LTQ3MDctYTUzZC05MmJiZmRiMmYyM2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlMzMwODc2 LTdlNjgtNDcwNy1hNTNkLTkyYmJmZGIyZjIzYy8wL0UzNzczNzFFODJDNkM1M0M3 QTU3OTZCNDlCMDg1MTkwQUZCNjRCNEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnWfIwDQYJKoZIhvcNAQELBQADggEBAGtVwTYictuMv61SsP03WdhcDhcoHL9L woy2OLhoapaSvFHCFnmmV00z8ep3glqoL+ztUYg4892udH5RhkvSpC6GOaQUcf2z Fz9WAW7ZUMNpUrhlGl0OKI76/AjNlrPLBY9kLxE6efbKXSKMe79K1UOSBaxElZnH dA89GdSGfQAhOUCPvTrtGIpTYT5aY+Zc1KRLK1yomeoQ5RgrMWRcCTb2N9qITxon iBESyq7GmCjoV04JuI0xayvheSg07De0CQJPp6h4PHAygVCs+IaN+jK8VpBeupdd 7GzISvdaBoe/o/JgBnDD0RDdEogFLLeWp97qKyr08wm9ljEPGCebtag= -----END CERTIFICATE-----Generated at Sat Apr 5 08:42:21 2025 by rpki-client