$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer File: 1F56B4FADE1163027086547FBCB424EDF45191FD.cer (raw, json) Hash identifier: X63h9Z/csi8tHEvI2ajURgvKzkaY7vO9RBNev3QMxZQ= Subject key identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2793EF72F9DBD2F5FE64CA0020108634363810AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft caRepository: rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 17 Apr 2025 12:18:01 +0000 Certificate not after: Thu 16 Apr 2026 12:23:01 +0000 Subordinate resources: IP: 103.136.4.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:93:ef:72:f9:db:d2:f5:fe:64:ca:00:20:10:86:34:36:38:10:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 17 12:18:01 2025 GMT Not After : Apr 16 12:23:01 2026 GMT Subject: CN=1F56B4FADE1163027086547FBCB424EDF45191FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:90:9c:e7:4e:f6:3c:c1:62:33:1f:b5:7b:f2: 4d:78:1e:2c:d8:94:ec:09:b1:67:70:dc:b1:d3:55: 60:b6:5c:19:78:79:ee:ff:2b:fb:41:65:cb:e0:dc: 22:2a:84:3b:86:dc:9a:9e:db:20:a9:81:45:59:b5: 50:4c:7c:8e:8a:7c:1b:e0:b3:67:13:a1:e3:67:77: 39:c5:ea:fd:e6:92:f5:2c:61:93:57:c2:42:29:7a: 9a:a7:62:20:31:ff:96:a2:10:e9:c3:09:25:32:8b: 43:34:79:fb:47:7d:35:98:cf:af:11:e0:d8:fb:d4: 49:10:6d:98:b0:be:ef:5e:2b:42:4e:49:14:55:d5: 19:11:12:4a:13:da:fc:72:21:09:60:0f:f0:05:7a: 99:6b:da:23:4f:63:89:bd:bd:64:21:c2:d6:eb:63: ab:9e:70:70:ee:75:79:c4:4f:43:27:69:19:c1:3b: 34:b4:6c:96:04:46:0c:61:55:6d:50:b2:39:c6:99: 24:86:6c:d4:db:5c:fd:8d:b3:e5:b6:08:c8:0b:6a: d3:75:8f:24:25:4c:9e:87:2c:0b:3a:1f:f7:17:a7: 6a:6d:80:9c:2f:69:38:aa:8d:93:ce:9f:ef:99:9b: 62:9e:8e:da:80:c9:67:8d:fc:f8:28:3f:63:4d:c9: 3c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.4.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:58:d8:9d:c4:f3:23:72:05:18:18:5f:ad:85:ff:29:79:5d: 5b:6e:12:cd:86:c6:9e:2d:ee:65:31:46:a6:50:0c:f6:41:4e: d6:8f:37:61:d4:e7:a2:f4:fb:e9:5a:80:31:f6:f4:db:62:a3: 54:62:ef:a9:8c:75:80:d6:3b:5b:cb:7b:9e:ae:3e:8b:aa:13: 8c:10:5d:e8:6d:17:af:51:a3:93:a0:a7:d3:09:e0:99:b7:ae: 5b:7c:63:e6:51:ac:85:77:17:f3:50:9f:03:77:01:75:32:03: a4:c6:df:6d:32:3d:2b:ec:e8:dc:36:cb:1e:bd:62:1a:b2:da: 34:e7:21:6b:f1:fd:6c:06:a2:8f:4d:01:12:8d:6a:ab:76:e5: d1:4e:68:47:2b:60:d4:ed:79:87:04:ea:89:a6:8e:52:90:8c: 82:ac:5b:dd:e3:35:2f:b1:41:e4:70:f8:67:df:5b:10:f0:64: c8:89:4e:46:e8:11:ed:d7:90:de:c8:08:d4:a9:f5:5a:2b:b7: c3:73:90:6e:36:17:1f:74:8b:9a:8d:44:33:9e:9e:bd:01:3c: c7:01:3a:96:57:51:8c:0a:2b:2a:de:ee:43:32:e6:2f:14:b3: 9e:ac:52:7b:3d:90:a1:a3:43:a9:91:4f:ea:99:33:23:66:79: 71:4b:c6:d4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJ5Pvcvnb0vX+ZMoAIBCGNDY4EKowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxNzEyMTgwMVoX DTI2MDQxNjEyMjMwMVowMzExMC8GA1UEAxMoMUY1NkI0RkFERTExNjMwMjcwODY1 NDdGQkNCNDI0RURGNDUxOTFGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAP6QnOdO9jzBYjMftXvyTXgeLNiU7AmxZ3DcsdNVYLZcGXh57v8r+0Fly+Dc IiqEO4bcmp7bIKmBRVm1UEx8jop8G+CzZxOh42d3OcXq/eaS9Sxhk1fCQil6mqdi IDH/lqIQ6cMJJTKLQzR5+0d9NZjPrxHg2PvUSRBtmLC+714rQk5JFFXVGRESShPa /HIhCWAP8AV6mWvaI09jib29ZCHC1utjq55wcO51ecRPQydpGcE7NLRslgRGDGFV bVCyOcaZJIZs1Ntc/Y2z5bYIyAtq03WPJCVMnocsCzof9xenam2AnC9pOKqNk86f 75mbYp6O2oDJZ438+Cg/Y03JPCUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB9WtPreEWMCcIZUf7y0JO30UZH9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hYzQ1YzIyYy0yNzViLTQyOTUtYjQ1My02MGE3ODNiOWM0MmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjNDVjMjJj LTI3NWItNDI5NS1iNDUzLTYwYTc4M2I5YzQyYS8wLzFGNTZCNEZBREUxMTYzMDI3 MDg2NTQ3RkJDQjQyNEVERjQ1MTkxRkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJniAQwDQYJKoZIhvcNAQELBQADggEBAC5Y2J3E8yNyBRgYX62F/yl5XVtuEs2G xp4t7mUxRqZQDPZBTtaPN2HU56L0++lagDH29Ntio1Ri76mMdYDWO1vLe56uPouq E4wQXehtF69Ro5Ogp9MJ4Jm3rlt8Y+ZRrIV3F/NQnwN3AXUyA6TG320yPSvs6Nw2 yx69Yhqy2jTnIWvx/WwGoo9NARKNaqt25dFOaEcrYNTteYcE6ommjlKQjIKsW93j NS+xQeRw+GffWxDwZMiJTkboEe3XkN7ICNSp9Vort8NzkG42Fx90i5qNRDOenr0B PMcBOpZXUYwKKyre7kMy5i8Us56sUns9kKGjQ6mRT+qZMyNmeXFLxtQ= -----END CERTIFICATE-----Generated at Tue May 6 22:30:42 2025 by rpki-client