$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/279F9ED4B08F2103C13392D95636C445577A6339.cer File: 279F9ED4B08F2103C13392D95636C445577A6339.cer (raw, json) Hash identifier: XHkIimllVWj6P0heRcavuEKqkAxyfipshS/QEfVY4AM= Subject key identifier: 27:9F:9E:D4:B0:8F:21:03:C1:33:92:D9:56:36:C4:45:57:7A:63:39 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 68DAE959C862D79B78D711BA7493AC7E95EACD0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/279F9ED4B08F2103C13392D95636C445577A6339.mft caRepository: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 07 Jan 2025 13:48:28 +0000 Certificate not after: Tue 06 Jan 2026 13:53:28 +0000 Subordinate resources: IP: 103.120.40.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 21:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:da:e9:59:c8:62:d7:9b:78:d7:11:ba:74:93:ac:7e:95:ea:cd:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 7 13:48:28 2025 GMT Not After : Jan 6 13:53:28 2026 GMT Subject: CN=279F9ED4B08F2103C13392D95636C445577A6339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1d:03:ef:ea:e8:c7:6d:32:f8:a2:91:44:2e: 56:0b:53:e2:0b:ea:7e:3b:69:36:9e:ff:6b:0c:c4: 9c:23:0f:be:17:80:06:ed:5d:31:e1:99:07:ab:8c: 8f:ea:55:40:9f:26:ca:e7:03:a9:59:ac:d1:b6:88: 34:62:2e:37:48:3a:cf:24:7a:17:cb:86:c2:c0:b8: 05:8f:49:aa:36:cb:18:d1:ec:8f:4b:89:e4:d4:41: 8d:98:0f:43:15:55:27:a8:da:ce:26:05:3a:b6:3d: e6:aa:2d:f8:32:9a:8a:c2:ab:12:42:41:24:38:83: 7c:1e:67:0f:46:fa:00:23:ee:79:86:d7:63:f2:18: 88:f6:7d:1d:ba:fb:fc:b4:2a:6a:12:72:cb:04:b3: d3:1a:21:40:82:a4:f8:24:4f:f7:fa:b3:8a:04:b0: 19:70:3c:f9:e2:51:df:52:5c:30:ea:89:c5:60:d0: 98:cc:f5:eb:b8:49:0a:2a:80:1d:e8:54:de:19:11: 2f:af:8d:15:0b:88:cd:89:95:51:d7:84:88:ac:de: 52:27:ce:62:02:8f:24:44:be:76:20:60:0e:93:25: 8c:3f:03:2c:ba:93:3a:46:e1:b8:4e:2a:a6:0d:9b: 57:58:62:12:50:db:8e:c0:b7:ba:ad:e4:c2:8f:25: a9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 27:9F:9E:D4:B0:8F:21:03:C1:33:92:D9:56:36:C4:45:57:7A:63:39 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/1/279F9ED4B08F2103C13392D95636C445577A6339.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.40.0/24 Signature Algorithm: sha256WithRSAEncryption 67:1a:33:38:97:9c:77:ca:c4:1d:cf:27:46:02:52:4c:a8:bf: 32:14:2e:6c:fa:68:ba:2e:76:b1:b6:f1:06:0a:30:bb:5c:d0: 61:a1:2c:2f:66:7f:4c:a4:55:dd:17:da:e0:94:f8:69:47:dc: 7a:f2:ca:63:48:a5:e5:1e:ac:49:d4:4d:d0:b6:74:fc:9e:6f: 58:85:4b:b0:30:23:47:74:60:77:f0:1e:6b:35:29:94:ac:48: 06:65:b9:de:3f:8b:2e:2f:db:92:83:4c:fd:d6:18:e8:44:62: ec:5a:71:33:9f:1c:d7:bd:9b:98:79:55:6b:b2:3a:2b:02:c1: 37:4e:c4:97:c8:82:51:29:32:5c:96:c4:82:79:1b:1a:dc:30: b4:53:f9:69:38:7a:6f:ae:05:71:c8:70:c8:af:98:cd:d3:68: 50:d7:2f:ca:ad:c6:36:fe:9f:14:7d:51:00:b8:91:fc:36:e4: 30:d1:25:7e:9b:da:c8:d2:91:43:54:d2:7c:f6:4b:f3:9d:18: 80:cd:75:0d:68:a9:c3:8f:ff:10:b3:40:4b:55:32:8f:d7:31: 8e:77:e2:f9:37:e1:c3:7d:e4:37:51:f7:63:48:08:38:49:bd: 66:65:19:b9:67:b3:c3:e6:3a:3d:e3:05:37:96:b4:cf:5b:d4: 8a:00:4f:cb -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUaNrpWchi15t41xG6dJOsfpXqzQ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEwNzEzNDgyOFoX DTI2MDEwNjEzNTMyOFowMzExMC8GA1UEAxMoMjc5RjlFRDRCMDhGMjEwM0MxMzM5 MkQ5NTYzNkM0NDU1NzdBNjMzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEdA+/q6MdtMviikUQuVgtT4gvqfjtpNp7/awzEnCMPvheABu1dMeGZB6uM j+pVQJ8myucDqVms0baINGIuN0g6zyR6F8uGwsC4BY9JqjbLGNHsj0uJ5NRBjZgP QxVVJ6jaziYFOrY95qot+DKaisKrEkJBJDiDfB5nD0b6ACPueYbXY/IYiPZ9Hbr7 /LQqahJyywSz0xohQIKk+CRP9/qzigSwGXA8+eJR31JcMOqJxWDQmMz167hJCiqA HehU3hkRL6+NFQuIzYmVUdeEiKzeUifOYgKPJES+diBgDpMljD8DLLqTOkbhuE4q pg2bV1hiElDbjsC3uq3kwo8lqbMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCefntSwjyEDwTOS2VY2xEVXemM5MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wYmI4ZTYxMi03YmIzLTQ4ZGUtOTY5ZC03MWI0NWY0NmExNjEvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBiYjhlNjEy LTdiYjMtNDhkZS05NjlkLTcxYjQ1ZjQ2YTE2MS8xLzI3OUY5RUQ0QjA4RjIxMDND MTMzOTJEOTU2MzZDNDQ1NTc3QTYzMzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABneCgwDQYJKoZIhvcNAQELBQADggEBAGcaMziXnHfKxB3PJ0YCUkyovzIULmz6 aLoudrG28QYKMLtc0GGhLC9mf0ykVd0X2uCU+GlH3HryymNIpeUerEnUTdC2dPye b1iFS7AwI0d0YHfwHms1KZSsSAZlud4/iy4v25KDTP3WGOhEYuxacTOfHNe9m5h5 VWuyOisCwTdOxJfIglEpMlyWxIJ5GxrcMLRT+Wk4em+uBXHIcMivmM3TaFDXL8qt xjb+nxR9UQC4kfw25DDRJX6b2sjSkUNU0nz2S/OdGIDNdQ1oqcOP/xCzQEtVMo/X MY534vk34cN95DdR92NICDhJvWZlGblns8PmOj3jBTeWtM9b1IoAT8s= -----END CERTIFICATE-----Generated at Sun May 11 22:18:38 2025 by rpki-client