$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer File: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer (raw, json) Hash identifier: Vf2KLBzy3hzKWjgkxD6kEqQ8kdqp+oImKhKUkq03fuA= Subject key identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 71637B63A0E32745A0513065CE54D871165097E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft caRepository: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 11 Feb 2025 14:38:33 +0000 Certificate not after: Tue 10 Feb 2026 14:43:33 +0000 Subordinate resources: IP: 103.180.122.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 06:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:63:7b:63:a0:e3:27:45:a0:51:30:65:ce:54:d8:71:16:50:97:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000 Validity Not Before: Feb 11 14:38:33 2025 GMT Not After : Feb 10 14:43:33 2026 GMT Subject: CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1f:1e:fa:66:32:02:5e:ab:ea:cc:ee:f8:d1: 25:16:87:3f:16:c4:69:32:d3:12:95:1c:85:ab:f6: 1a:36:8e:f0:b9:ca:55:4e:3f:52:36:6c:c0:b0:b5: 47:b5:03:b3:d9:9c:f4:49:49:fb:6a:43:b8:50:fb: a6:23:05:54:29:a1:ce:7d:98:bb:3a:5a:56:7a:cb: e0:cb:21:00:a3:8e:5f:e9:cc:6f:f7:95:83:0b:a4: 44:6e:16:5d:38:b9:5b:19:c7:2a:45:60:87:22:ac: 35:6a:2a:80:e9:a7:0b:47:47:1b:5a:97:e9:61:a2: 1d:d5:a5:19:d6:aa:22:4d:29:13:46:b9:28:9a:00: de:8c:ee:11:57:99:7e:78:e0:c6:75:f6:48:37:95: 35:e5:32:59:1a:d2:de:16:5f:f7:e7:05:df:04:fe: 9a:f1:e2:a4:2d:f3:15:0d:ec:6c:b5:b9:ef:b9:a6: d6:43:ee:ad:c7:90:dc:4e:c3:2b:87:8d:40:53:1d: c4:82:51:0d:ce:d0:71:b2:e5:23:9c:bb:af:c7:9d: a5:ba:b7:db:68:7e:27:d7:b3:b4:5a:c0:0b:c0:d4: 21:66:dc:c0:40:d3:69:d4:46:69:e1:8e:b9:ef:39: ec:32:13:77:fe:2c:b0:38:34:d9:2d:9c:c1:5e:08: 80:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.122.0/23 Signature Algorithm: sha256WithRSAEncryption 38:66:00:c2:13:58:56:0d:d9:79:28:9d:0c:9a:a3:12:8d:40: da:ad:2e:9e:c5:c3:96:14:fe:c9:11:34:f5:d1:42:68:8f:22: 9e:34:ce:8e:91:c9:4d:30:91:3c:56:14:63:66:14:b3:d4:9f: 4f:2b:33:13:90:d3:f1:98:df:04:1c:f7:fb:70:d4:48:ca:74: b7:d8:cc:59:2f:96:af:d8:b6:54:94:7b:4c:ca:3b:3c:e6:f1: 58:d5:92:e7:08:d3:1e:f6:f3:88:3b:82:9c:8f:6a:da:eb:5b: bf:c9:de:97:b4:e4:3d:f8:4a:df:c2:c1:0f:a0:58:e4:f8:ad: 90:39:d8:03:89:a2:51:4f:de:ee:5b:a9:3d:40:a4:18:2d:be: 16:ae:61:11:a1:91:71:a9:69:1e:a5:a0:fe:60:79:8d:4e:d4: 97:09:5e:39:51:71:16:1a:2f:12:22:9b:60:42:51:44:9c:49: e1:42:87:2a:b7:5d:ad:8e:ef:b9:d7:dd:4b:20:ab:9f:9a:a4: 1e:37:c9:6e:31:14:3b:0c:dc:86:89:4d:c8:11:37:f7:c8:75: 87:1f:e5:a6:2f:ac:cc:c6:7a:2f:b0:e7:9a:f5:f8:5d:e8:b6: a2:80:32:5d:fd:86:a2:2e:9f:a2:95:73:36:63:b7:ff:e7:bb: 31:98:20:71 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcWN7Y6DjJ0WgUTBlzlTYcRZQl+EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxMTE0MzgzM1oX DTI2MDIxMDE0NDMzM1owMzExMC8GA1UEAxMoRUQ3QTQ4RUFEMTBEMUZFOTdDN0VG MjNBQTZFQTJBRDY1NUJGQjBBRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN8fHvpmMgJeq+rM7vjRJRaHPxbEaTLTEpUchav2GjaO8LnKVU4/UjZswLC1 R7UDs9mc9ElJ+2pDuFD7piMFVCmhzn2YuzpaVnrL4MshAKOOX+nMb/eVgwukRG4W XTi5WxnHKkVghyKsNWoqgOmnC0dHG1qX6WGiHdWlGdaqIk0pE0a5KJoA3ozuEVeZ fnjgxnX2SDeVNeUyWRrS3hZf9+cF3wT+mvHipC3zFQ3sbLW577mm1kPurceQ3E7D K4eNQFMdxIJRDc7QcbLlI5y7r8edpbq322h+J9eztFrAC8DUIWbcwEDTadRGaeGO ue857DITd/4ssDg02S2cwV4IgHECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO16SOrRDR/pfH7yOqbqKtZVv7CvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNDMzZTM0NC1lODE5LTQ0MzgtYjhjYS0xZjU4YzNkNTI3Y2IvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M0MzNlMzQ0 LWU4MTktNDQzOC1iOGNhLTFmNThjM2Q1MjdjYi8wL0VEN0E0OEVBRDEwRDFGRTk3 QzdFRjIzQUE2RUEyQUQ2NTVCRkIwQUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFntHowDQYJKoZIhvcNAQELBQADggEBADhmAMITWFYN2XkonQyaoxKNQNqtLp7F w5YU/skRNPXRQmiPIp40zo6RyU0wkTxWFGNmFLPUn08rMxOQ0/GY3wQc9/tw1EjK dLfYzFkvlq/YtlSUe0zKOzzm8VjVkucI0x7284g7gpyPatrrW7/J3pe05D34St/C wQ+gWOT4rZA52AOJolFP3u5bqT1ApBgtvhauYRGhkXGpaR6loP5geY1O1JcJXjlR cRYaLxIim2BCUUScSeFChyq3Xa2O77nX3Usgq5+apB43yW4xFDsM3IaJTcgRN/fI dYcf5aYvrMzGei+w55r1+F3otqKAMl39hqIun6KVczZjt//nuzGYIHE= -----END CERTIFICATE-----Generated at Sun Feb 16 20:45:18 2025 by rpki-client