$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/33EF8ED81E12A39E325D47325D8FDA76CC497040.cer File: 33EF8ED81E12A39E325D47325D8FDA76CC497040.cer (raw, json) Hash identifier: luQoDH8PQ8I87RQBE42/dxDGYOniQ8zhVnKHda93pD4= Subject key identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5087059285EA3A45506709F33A3293204EA63DD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft caRepository: rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 07 May 2025 21:33:11 +0000 Certificate not after: Wed 06 May 2026 21:38:11 +0000 Subordinate resources: IP: 103.188.168.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:87:05:92:85:ea:3a:45:50:67:09:f3:3a:32:93:20:4e:a6:3d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 7 21:33:11 2025 GMT Not After : May 6 21:38:11 2026 GMT Subject: CN=33EF8ED81E12A39E325D47325D8FDA76CC497040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:70:93:f3:58:00:93:f3:b3:7e:11:32:dd: 9a:e5:5b:6a:26:99:3a:2c:de:a3:33:ef:b7:c4:c8: 74:f9:6b:c9:9d:18:94:e4:d6:a1:94:c1:70:b1:4e: 6b:53:95:92:2c:dd:da:8c:c0:9f:6e:42:d4:27:d1: c0:7e:cf:8e:68:6d:27:a2:16:bc:02:fb:cf:45:96: f9:9a:fa:5c:8c:9e:0d:ff:6b:64:06:6f:7a:79:e4: 67:7c:07:74:ee:c2:da:49:83:4d:3b:08:67:51:f9: be:4f:1e:3a:10:25:16:7a:02:c1:f8:99:7a:d2:a0: 43:a4:91:cd:25:e8:9b:e7:21:b2:72:a0:fd:4a:aa: 63:42:de:16:7e:c3:af:de:08:e1:a3:b7:52:27:db: d0:3e:8d:22:f1:88:92:40:1b:7c:3b:4c:45:5e:d4: be:a8:b6:cc:c9:f0:15:e0:6d:4e:f0:ba:80:6f:14: 92:90:29:71:0f:cc:3d:b0:c7:6e:9e:be:36:a4:7a: 2b:08:80:49:36:6b:bd:af:e9:db:b5:72:ab:52:1b: b8:47:e5:ca:b8:1a:1f:f4:27:ef:b5:32:dc:52:53: 93:2f:b7:40:b8:c5:6c:1b:03:e4:44:50:2f:be:8a: da:f2:6f:3c:c0:54:70:2c:74:07:d8:ce:dc:01:9f: 53:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:EF:8E:D8:1E:12:A3:9E:32:5D:47:32:5D:8F:DA:76:CC:49:70:40 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/03ade9c0-cde1-47f0-9cd2-4a57bdde14e8/0/33EF8ED81E12A39E325D47325D8FDA76CC497040.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.168.0/23 Signature Algorithm: sha256WithRSAEncryption 88:de:d6:34:d1:54:37:61:bf:4f:a4:af:c2:a6:e1:3a:f2:1c: 46:87:e7:84:e2:ef:3a:9e:5d:ad:c2:ce:57:03:1f:28:3b:06: 3c:40:2d:23:85:c0:05:42:03:14:9d:d1:9a:c0:85:ba:f1:c4: 37:71:a7:36:09:ca:dc:c1:4f:3c:46:1e:b3:ef:21:4a:6f:50: 7d:4c:c4:0b:14:6c:ef:aa:0d:1e:91:66:e2:a4:a3:fc:f0:86: c9:6a:89:71:e0:b9:7d:a5:91:db:5f:53:fb:56:70:4b:08:5b: 59:c2:73:b4:74:44:7f:d9:68:3a:14:27:ab:e5:78:aa:fa:69: 40:b6:19:78:81:50:f2:0e:0b:2a:07:f3:66:c1:7c:71:bc:0a: 87:f6:c9:e9:a3:38:f9:b6:4d:d4:9a:6b:3f:89:45:67:bd:2a: c9:71:db:46:29:d9:c6:7a:c9:05:2e:33:0a:a7:92:af:0d:70: f6:17:f2:b9:97:87:7e:f3:f1:90:14:82:b3:eb:06:e7:ab:83: 6a:58:23:ae:b2:b1:75:e8:4b:c4:e5:5a:5b:7b:cb:a9:e3:f6: bd:20:a6:47:e0:2a:fa:2f:69:4f:87:c8:d2:19:e1:a0:d5:4f: 07:74:c0:60:4f:a8:cc:d5:ac:0a:24:1f:06:1d:cf:e7:95:e5: 7a:0f:0a:49 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUIcFkoXqOkVQZwnzOjKTIE6mPdcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUwNzIxMzMxMVoX DTI2MDUwNjIxMzgxMVowMzExMC8GA1UEAxMoMzNFRjhFRDgxRTEyQTM5RTMyNUQ0 NzMyNUQ4RkRBNzZDQzQ5NzA0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8acJPzWACT87N+ETLdmuVbaiaZOizeozPvt8TIdPlryZ0YlOTWoZTBcLFO a1OVkizd2ozAn25C1CfRwH7PjmhtJ6IWvAL7z0WW+Zr6XIyeDf9rZAZvennkZ3wH dO7C2kmDTTsIZ1H5vk8eOhAlFnoCwfiZetKgQ6SRzSXom+chsnKg/UqqY0LeFn7D r94I4aO3Uifb0D6NIvGIkkAbfDtMRV7Uvqi2zMnwFeBtTvC6gG8UkpApcQ/MPbDH bp6+NqR6KwiASTZrva/p27Vyq1IbuEflyrgaH/Qn77Uy3FJTky+3QLjFbBsD5ERQ L76K2vJvPMBUcCx0B9jO3AGfU6kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDPvjtgeEqOeMl1HMl2P2nbMSXBAMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wM2FkZTljMC1jZGUxLTQ3ZjAtOWNkMi00YTU3YmRkZTE0ZTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAzYWRlOWMw LWNkZTEtNDdmMC05Y2QyLTRhNTdiZGRlMTRlOC8wLzMzRUY4RUQ4MUUxMkEzOUUz MjVENDczMjVEOEZEQTc2Q0M0OTcwNDAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvKgwDQYJKoZIhvcNAQELBQADggEBAIje1jTRVDdhv0+kr8Km4TryHEaH54Ti 7zqeXa3CzlcDHyg7BjxALSOFwAVCAxSd0ZrAhbrxxDdxpzYJytzBTzxGHrPvIUpv UH1MxAsUbO+qDR6RZuKko/zwhslqiXHguX2lkdtfU/tWcEsIW1nCc7R0RH/ZaDoU J6vleKr6aUC2GXiBUPIOCyoH82bBfHG8Cof2yemjOPm2TdSaaz+JRWe9Kslx20Yp 2cZ6yQUuMwqnkq8NcPYX8rmXh37z8ZAUgrPrBuerg2pYI66ysXXoS8TlWlt7y6nj 9r0gpkfgKvovaU+HyNIZ4aDVTwd0wGBPqMzVrAokHwYdz+eV5XoPCkk= -----END CERTIFICATE-----Generated at Sun May 11 09:39:58 2025 by rpki-client