$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer File: 29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.cer (raw, json) Hash identifier: Xr42qxj5tWoyn6Tn2V+bkvunqgjKmo1mr+LBM+Wku2g= Subject key identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 53EAF9C3668B15244A1B56AD32273AE50A4E1302 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft caRepository: rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 03 May 2025 00:56:20 +0000 Certificate not after: Sat 02 May 2026 01:01:20 +0000 Subordinate resources: IP: 27.124.74.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ea:f9:c3:66:8b:15:24:4a:1b:56:ad:32:27:3a:e5:0a:4e:13:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 3 00:56:20 2025 GMT Not After : May 2 01:01:20 2026 GMT Subject: CN=29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:71:7e:24:68:6c:34:08:aa:6d:0a:62:aa:ba: 45:47:31:de:e5:6b:dd:25:e3:8d:aa:68:bb:d2:68: 68:da:9e:11:05:32:a6:93:3a:8f:77:29:c5:f4:89: 7a:c1:16:ed:c0:2a:35:f2:1a:ba:84:ec:56:53:ed: f6:26:dc:c4:d1:92:40:d6:0e:49:e1:37:ba:80:e6: 54:f1:62:37:5e:ba:cb:8b:78:6c:ca:e0:2b:84:c5: 6f:aa:42:c9:42:39:27:e4:90:ad:7c:d0:9e:d1:c6: 48:3c:0d:ed:05:26:a4:a3:45:26:bf:9c:34:02:73: cc:43:4e:a6:7e:fe:f7:bf:91:fc:97:cb:db:c0:c5: a2:0d:5d:f6:36:4c:4c:94:2f:7b:20:cd:6b:1e:77: 23:6b:f2:c5:84:ca:72:a4:04:44:5e:7f:cc:a4:c9: 68:58:f4:88:fb:21:fc:ba:fa:89:96:93:a4:4d:b2: 3f:88:e1:f5:dd:4d:14:27:81:22:0d:8c:ab:79:31: 8f:44:da:57:c1:19:02:69:76:f3:d0:de:03:4d:0c: fd:95:c7:1f:94:5d:79:c7:88:07:b0:52:5f:dc:f2: d5:5b:fe:e2:9a:4b:7c:3b:83:af:d0:84:fb:47:59: df:9f:fd:02:83:59:1a:6e:62:46:e2:01:d9:07:ae: ae:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:C0:64:0D:D9:07:6D:C0:4C:F8:A3:90:EA:73:DF:C0:E0:E7:CF:9A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4daf9f0f-4fb1-40c0-b380-59a38dbc9a16/0/29C0640DD9076DC04CF8A390EA73DFC0E0E7CF9A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.124.74.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:a1:ab:20:aa:46:25:41:0b:dc:dc:c7:5c:c5:81:5d:33:da: e8:03:53:2e:6b:a2:e5:4a:7c:e3:26:87:c0:44:d3:ee:4d:2c: eb:6b:b1:56:db:b8:a8:91:9a:67:1c:fc:45:85:fb:00:35:97: 0a:0e:02:5a:3b:45:42:3d:c6:98:ee:81:90:06:3d:ac:13:78: 07:9d:05:aa:c0:dc:eb:88:a9:db:a5:96:c9:39:a3:0c:45:7b: ba:38:cc:f1:82:49:85:80:ab:d2:01:1a:7d:58:1e:c2:8f:0e: ab:c5:da:d8:2f:80:5c:60:12:26:2d:f6:62:ab:c5:0b:15:69: b6:8f:ad:f0:d3:56:d2:4f:cd:81:04:bd:e9:7d:43:75:87:24: 70:3c:cf:d7:be:0d:d0:7a:4a:62:20:d1:6c:16:90:02:cc:aa: 48:6d:16:6a:9d:d5:af:06:8c:a7:d6:68:88:36:9b:1a:6a:34: e2:4b:4e:ec:71:b7:48:d8:ba:58:d9:45:e8:33:09:c8:0e:ef: b5:b3:17:45:72:2d:70:d3:fe:53:89:39:e4:0d:77:3c:9d:d9: e6:87:b8:73:71:42:be:65:57:d4:84:d4:b5:96:2e:43:a4:53: 7b:b6:02:18:08:b4:f0:b7:13:c0:a4:36:67:e6:73:47:1d:45: 89:aa:7e:d1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUU+r5w2aLFSRKG1atMic65QpOEwIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUwMzAwNTYyMFoX DTI2MDUwMjAxMDEyMFowMzExMC8GA1UEAxMoMjlDMDY0MEREOTA3NkRDMDRDRjhB MzkwRUE3M0RGQzBFMEU3Q0Y5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9xfiRobDQIqm0KYqq6RUcx3uVr3SXjjapou9JoaNqeEQUyppM6j3cpxfSJ esEW7cAqNfIauoTsVlPt9ibcxNGSQNYOSeE3uoDmVPFiN166y4t4bMrgK4TFb6pC yUI5J+SQrXzQntHGSDwN7QUmpKNFJr+cNAJzzENOpn7+97+R/JfL28DFog1d9jZM TJQveyDNax53I2vyxYTKcqQERF5/zKTJaFj0iPsh/Lr6iZaTpE2yP4jh9d1NFCeB Ig2Mq3kxj0TaV8EZAml289DeA00M/ZXHH5RdeceIB7BSX9zy1Vv+4ppLfDuDr9CE +0dZ35/9AoNZGm5iRuIB2QeurnMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCnAZA3ZB23ATPijkOpz38Dg58+aMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZGFmOWYwZi00ZmIxLTQwYzAtYjM4MC01OWEzOGRiYzlhMTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkYWY5ZjBm LTRmYjEtNDBjMC1iMzgwLTU5YTM4ZGJjOWExNi8wLzI5QzA2NDBERDkwNzZEQzA0 Q0Y4QTM5MEVBNzNERkMwRTBFN0NGOUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAEbfEowDQYJKoZIhvcNAQELBQADggEBAAqhqyCqRiVBC9zcx1zFgV0z2ugDUy5r ouVKfOMmh8BE0+5NLOtrsVbbuKiRmmcc/EWF+wA1lwoOAlo7RUI9xpjugZAGPawT eAedBarA3OuIqdullsk5owxFe7o4zPGCSYWAq9IBGn1YHsKPDqvF2tgvgFxgEiYt 9mKrxQsVabaPrfDTVtJPzYEEvel9Q3WHJHA8z9e+DdB6SmIg0WwWkALMqkhtFmqd 1a8GjKfWaIg2mxpqNOJLTuxxt0jYuljZRegzCcgO77WzF0VyLXDT/lOJOeQNdzyd 2eaHuHNxQr5lV9SE1LWWLkOkU3u2AhgItPC3E8CkNmfmc0cdRYmqftE= -----END CERTIFICATE-----Generated at Sat May 10 22:28:13 2025 by rpki-client