$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer File: EA364B048B6B5A81F887F07FDB60499024CE8C94.cer (raw, json) Hash identifier: Vl9VpNYxG9bmGehyA++dJZ4B1JplokZ0QfQO4l267xI= Subject key identifier: EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5E9FED1BF05030249D196E5FC096805AC08E0522 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.mft caRepository: rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 04 Dec 2024 18:32:36 +0000 Certificate not after: Wed 03 Dec 2025 18:37:36 +0000 Subordinate resources: IP: 103.121.100.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:9f:ed:1b:f0:50:30:24:9d:19:6e:5f:c0:96:80:5a:c0:8e:05:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 4 18:32:36 2024 GMT Not After : Dec 3 18:37:36 2025 GMT Subject: CN=EA364B048B6B5A81F887F07FDB60499024CE8C94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fe:ae:7f:d6:a8:41:ff:73:c3:26:77:58:30: df:b9:5e:2c:b4:67:6f:a6:de:90:1e:f4:61:85:99: d7:f3:6f:22:2e:04:f5:89:af:f6:a8:7b:ff:7b:7e: 0a:e6:0e:c9:2c:fc:9e:c9:2d:01:3d:cb:ad:85:c0: 1e:e2:0b:15:24:d8:38:0f:3a:5e:66:4e:af:c3:b9: bb:42:b4:e3:8b:98:5e:77:14:03:11:a2:a7:df:6f: d2:1d:cc:ec:ce:96:33:26:16:3e:10:24:80:2c:be: 98:43:56:52:fa:e8:82:5e:fc:70:8a:eb:5b:45:f0: 4b:cc:cb:5c:a1:23:3e:81:1f:7c:64:f8:1c:84:dc: aa:48:bb:3b:20:14:b7:90:4b:85:13:75:08:ce:f3: 66:41:e9:89:00:c7:67:be:60:26:7a:dd:0b:99:86: 14:8b:47:b6:34:09:e4:3c:18:ee:04:85:c4:62:44: b4:e0:39:76:2b:e5:82:b0:8c:cc:5f:be:ea:92:bc: 4e:05:5c:89:75:28:e8:3c:e9:3d:a0:86:81:c6:ba: e8:49:53:09:c1:c1:e4:c5:dc:14:e9:ae:1b:d3:53: d2:d3:01:8e:cd:26:1c:83:1f:9f:9a:ae:f3:23:3b: 9f:6e:b9:36:6e:d8:b0:c1:c6:46:95:e1:72:98:45: ab:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.100.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:45:20:b6:de:2c:b0:fd:f3:13:aa:40:75:5d:10:4b:45:99: 8f:0b:86:e1:f9:9f:e9:ec:91:94:74:85:d8:d3:63:6e:29:af: c4:81:d8:09:15:5f:ff:41:72:c1:01:0c:53:33:0f:f1:72:86: 77:03:21:0c:20:81:5d:62:5d:0c:e1:b3:cc:ff:bc:4c:b5:80: 2d:42:1b:a8:af:7e:e8:0a:37:06:51:e8:97:99:14:09:61:3a: 11:6f:c6:5a:00:61:51:a3:bc:7c:c4:66:84:53:58:04:1e:3b: 34:b3:83:70:1b:b4:78:32:65:30:e7:ef:a3:da:7c:49:e4:a5: a2:d5:f6:6f:6c:71:c5:51:fd:92:7a:ed:22:74:30:68:3c:ec: 8c:31:7b:ea:f2:5f:f6:38:9c:56:f4:a3:90:5f:db:52:f3:25: 1a:26:35:60:51:be:d4:c2:31:7b:6f:9b:f8:4b:88:a0:6d:4b: 3d:47:41:ec:e6:30:e1:ef:d2:bc:b3:61:ba:42:31:1c:b7:78: f1:9c:d9:e0:60:7f:b1:36:41:6d:d9:30:45:78:88:36:a2:9f: de:58:47:de:15:5a:a3:a7:50:38:c2:27:7d:8d:1b:61:b1:a8: 0b:d7:d4:0a:ab:61:8f:5a:21:20:5c:8c:03:01:fc:24:35:28: 3b:57:2c:4f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXp/tG/BQMCSdGW5fwJaAWsCOBSIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIwNDE4MzIzNloX DTI1MTIwMzE4MzczNlowMzExMC8GA1UEAxMoRUEzNjRCMDQ4QjZCNUE4MUY4ODdG MDdGREI2MDQ5OTAyNENFOEM5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANH+rn/WqEH/c8Mmd1gw37leLLRnb6bekB70YYWZ1/NvIi4E9Ymv9qh7/3t+ CuYOySz8nsktAT3LrYXAHuILFSTYOA86XmZOr8O5u0K044uYXncUAxGip99v0h3M 7M6WMyYWPhAkgCy+mENWUvrogl78cIrrW0XwS8zLXKEjPoEffGT4HITcqki7OyAU t5BLhRN1CM7zZkHpiQDHZ75gJnrdC5mGFItHtjQJ5DwY7gSFxGJEtOA5divlgrCM zF++6pK8TgVciXUo6DzpPaCGgca66ElTCcHB5MXcFOmuG9NT0tMBjs0mHIMfn5qu 8yM7n265Nm7YsMHGRpXhcphFq5kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOo2SwSLa1qB+Ifwf9tgSZAkzoyUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMTEzMjQ5Ny01OTYzLTQ3YWEtOWRlMS02Yzg0OTZhMzZlYjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxMTMyNDk3 LTU5NjMtNDdhYS05ZGUxLTZjODQ5NmEzNmViNi8wL0VBMzY0QjA0OEI2QjVBODFG ODg3RjA3RkRCNjA0OTkwMjRDRThDOTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJneWQwDQYJKoZIhvcNAQELBQADggEBADxFILbeLLD98xOqQHVdEEtFmY8LhuH5 n+nskZR0hdjTY24pr8SB2AkVX/9BcsEBDFMzD/FyhncDIQwggV1iXQzhs8z/vEy1 gC1CG6ivfugKNwZR6JeZFAlhOhFvxloAYVGjvHzEZoRTWAQeOzSzg3AbtHgyZTDn 76PafEnkpaLV9m9sccVR/ZJ67SJ0MGg87Iwxe+ryX/Y4nFb0o5Bf21LzJRomNWBR vtTCMXtvm/hLiKBtSz1HQezmMOHv0ryzYbpCMRy3ePGc2eBgf7E2QW3ZMEV4iDai n95YR94VWqOnUDjCJ32NG2GxqAvX1AqrYY9aISBcjAMB/CQ1KDtXLE8= -----END CERTIFICATE-----Generated at Sat Apr 5 06:29:21 2025 by rpki-client