$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/ED4F41D4EBE684D523406475FAB471CE1B24E360.cer File: ED4F41D4EBE684D523406475FAB471CE1B24E360.cer (raw, json) Hash identifier: cZJQliVJr4uEaz5JEvP4seCKa16wYikMn8+Pm4DeOUQ= Subject key identifier: ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4B6528423D596686CA3D2B721F6542694945C1FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft caRepository: rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 02 Dec 2024 10:59:15 +0000 Certificate not after: Mon 01 Dec 2025 11:04:15 +0000 Subordinate resources: IP: 103.175.156.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 10:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:65:28:42:3d:59:66:86:ca:3d:2b:72:1f:65:42:69:49:45:c1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Dec 2 10:59:15 2024 GMT Not After : Dec 1 11:04:15 2025 GMT Subject: CN=ED4F41D4EBE684D523406475FAB471CE1B24E360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:08:5d:8e:23:b1:66:27:93:0e:2d:36:c5:3b: 08:ca:68:5f:cd:64:a1:9b:fc:72:28:f5:82:62:56: 70:ef:fd:f7:41:ad:ad:31:2f:db:d7:d6:73:fe:95: 7e:6c:1a:02:9e:17:d1:b3:dd:19:be:1e:91:64:a4: 9e:5b:51:20:d3:5b:87:13:5e:fc:d1:31:16:2d:5f: a9:45:37:33:5f:c4:9b:7d:94:35:4a:82:21:3f:aa: 9e:0b:fa:56:3e:88:fc:ae:a1:21:28:bf:80:2d:49: 26:5f:db:44:b4:09:94:f8:dc:e2:b9:d7:15:9b:6a: 12:63:a7:13:02:f7:35:ca:c7:a8:7c:dd:44:47:d8: 84:77:78:fe:44:60:02:8d:da:d5:3d:54:b5:8c:69: a8:64:37:65:b9:54:31:94:a7:70:91:06:ac:2a:3d: 09:12:5f:8a:b2:f5:20:cc:23:38:36:92:d6:e2:bd: 3c:25:aa:92:a2:b1:4b:60:3d:f6:9a:ad:76:1e:c0: d6:8c:b1:2e:dd:66:f7:c7:5a:0e:d7:3e:6c:58:6f: ac:1e:d0:c1:e1:67:db:19:73:9f:ed:f5:ae:8e:d7: f4:ab:fd:dc:20:ce:c4:3d:f7:70:2b:fb:bf:34:54: 53:8c:a0:4d:09:6e:d3:f7:35:81:b9:c1:1a:df:f4: 09:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:4F:41:D4:EB:E6:84:D5:23:40:64:75:FA:B4:71:CE:1B:24:E3:60 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/76ee7a5f-5121-4181-a635-121b6e69ad59/0/ED4F41D4EBE684D523406475FAB471CE1B24E360.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.156.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:58:d5:ed:69:ce:43:38:42:f3:59:06:26:f1:a0:4a:d4:45: 80:72:cf:76:0c:fb:e3:81:ab:60:4d:d8:c2:20:3b:6b:b0:45: 9b:e9:e1:8f:5e:9a:88:41:3e:0b:7f:bd:00:0d:4b:6f:e3:3f: 27:30:b0:40:79:43:0a:a3:57:51:e4:ca:02:4b:70:94:7c:73: 82:df:60:de:77:91:c4:1d:e5:db:43:e2:67:f3:08:d2:ec:8f: b4:72:6a:bd:e9:1e:14:f5:1c:0c:ed:29:ee:19:ac:db:cb:ff: 3c:ba:61:31:a5:7d:ef:dc:70:7f:83:ad:8a:47:24:d9:14:47: 0d:3e:ab:a5:1d:bf:45:3c:31:92:42:85:34:3f:19:85:2e:e7: c0:c8:15:88:85:14:21:8d:be:00:a9:c1:f6:75:73:b9:86:17: e3:5a:58:25:47:98:35:4f:5b:e0:ec:80:17:8d:6a:5e:e0:b6: 29:5f:9e:d4:f4:70:e9:f1:26:43:d3:7a:c2:ac:3e:9f:a1:37: 51:1f:d6:77:9f:1b:7a:6f:ac:62:b1:d8:ad:7b:43:84:f8:06: c0:e2:c4:1d:c0:b3:26:87:2e:ba:e1:0f:af:9c:b8:06:68:3c: 1c:a3:d0:81:3d:11:61:08:e3:1a:30:0e:b5:27:64:2d:3c:98: a3:65:d7:b1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUS2UoQj1ZZobKPStyH2VCaUlFwfswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIwMjEwNTkxNVoX DTI1MTIwMTExMDQxNVowMzExMC8GA1UEAxMoRUQ0RjQxRDRFQkU2ODRENTIzNDA2 NDc1RkFCNDcxQ0UxQjI0RTM2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOQIXY4jsWYnkw4tNsU7CMpoX81koZv8cij1gmJWcO/990GtrTEv29fWc/6V fmwaAp4X0bPdGb4ekWSknltRINNbhxNe/NExFi1fqUU3M1/Em32UNUqCIT+qngv6 Vj6I/K6hISi/gC1JJl/bRLQJlPjc4rnXFZtqEmOnEwL3NcrHqHzdREfYhHd4/kRg Ao3a1T1UtYxpqGQ3ZblUMZSncJEGrCo9CRJfirL1IMwjODaS1uK9PCWqkqKxS2A9 9pqtdh7A1oyxLt1m98daDtc+bFhvrB7QweFn2xlzn+31ro7X9Kv93CDOxD33cCv7 vzRUU4ygTQlu0/c1gbnBGt/0CSkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO1PQdTr5oTVI0Bkdfq0cc4bJONgMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NmVlN2E1Zi01MTIxLTQxODEtYTYzNS0xMjFiNmU2OWFkNTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2ZWU3YTVm LTUxMjEtNDE4MS1hNjM1LTEyMWI2ZTY5YWQ1OS8wL0VENEY0MUQ0RUJFNjg0RDUy MzQwNjQ3NUZBQjQ3MUNFMUIyNEUzNjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnr5wwDQYJKoZIhvcNAQELBQADggEBADtY1e1pzkM4QvNZBibxoErURYByz3YM ++OBq2BN2MIgO2uwRZvp4Y9emohBPgt/vQANS2/jPycwsEB5QwqjV1HkygJLcJR8 c4LfYN53kcQd5dtD4mfzCNLsj7Ryar3pHhT1HAztKe4ZrNvL/zy6YTGlfe/ccH+D rYpHJNkURw0+q6Udv0U8MZJChTQ/GYUu58DIFYiFFCGNvgCpwfZ1c7mGF+NaWCVH mDVPW+DsgBeNal7gtilfntT0cOnxJkPTesKsPp+hN1Ef1nefG3pvrGKx2K17Q4T4 BsDixB3AsyaHLrrhD6+cuAZoPByj0IE9EWEI4xowDrUnZC08mKNl17E= -----END CERTIFICATE-----Generated at Sun Apr 6 11:57:23 2025 by rpki-client