$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer File: 381455361E726B6ECCDAF271673BD59B1555336E.cer (raw, json) Hash identifier: 8NTp9GH7FWbVLWtm9xp8noztlTVc9mxDZoVgwgQnfGM= Subject key identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 612672CEDC91F37B76ED907BB0DF11B57F02897D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft caRepository: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 07 Apr 2025 05:14:58 +0000 Certificate not after: Mon 06 Apr 2026 05:19:58 +0000 Subordinate resources: IP: 103.151.162.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:26:72:ce:dc:91:f3:7b:76:ed:90:7b:b0:df:11:b5:7f:02:89:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 7 05:14:58 2025 GMT Not After : Apr 6 05:19:58 2026 GMT Subject: CN=381455361E726B6ECCDAF271673BD59B1555336E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:63:af:65:a1:af:8b:c4:6c:4c:3f:b0:c2:ac: d6:86:aa:d8:07:1d:2b:78:7d:6f:37:84:bc:0e:44: 86:01:53:04:db:36:6d:d0:fc:62:25:09:0b:96:72: 81:83:7c:aa:13:85:dc:39:1f:d1:5b:22:bb:72:47: bb:a1:23:2e:78:8c:6a:18:1f:5a:c5:ef:d2:96:35: eb:a4:84:fa:b5:6c:fd:7b:24:eb:7f:20:9f:29:8c: 16:f8:7d:3b:00:12:04:7a:0d:f0:3e:48:8f:1d:9a: 13:fd:bf:6e:5a:d7:9a:dc:c2:87:62:ed:9b:47:30: fe:43:36:88:ef:6e:a1:24:88:bd:fc:f9:52:ae:e7: 10:85:ff:51:ec:72:15:bf:6b:2a:f1:d5:63:a7:f0: 4d:77:4c:ae:30:89:09:1f:94:35:d8:63:bc:63:16: 97:12:2f:c3:5f:53:f8:ce:f6:6e:9d:92:74:3e:26: c1:72:08:b5:d3:81:0b:a7:d1:ae:21:ac:47:36:c6: 1b:4e:a6:d9:aa:01:8a:db:5c:a4:3e:f2:ea:05:c4: c5:a1:d2:e9:fa:ed:d5:1e:6b:7f:96:95:6b:92:a8: 1e:07:af:1a:25:12:4e:e1:5c:f5:a1:08:a5:aa:09: 33:50:58:d7:bc:75:5c:5c:fa:15:ad:08:de:15:1f: 17:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.162.0/23 Signature Algorithm: sha256WithRSAEncryption 46:ef:d6:80:6b:c6:c7:29:1c:6c:e1:b3:53:1c:26:19:1b:34: 0d:df:73:c7:a2:a3:4e:75:67:51:58:96:57:31:f4:15:5b:8f: ed:56:6d:27:a2:95:29:22:c5:cc:f6:30:24:57:38:17:d0:46: 93:54:e5:be:82:47:e8:75:c4:fa:30:44:7d:c6:9d:f3:18:bb: 5e:10:76:c5:14:8e:7c:1e:83:30:dc:ec:6a:b9:d1:13:6a:5d: 6c:34:9c:7c:d7:f6:cb:fd:0c:9d:70:06:66:a0:6b:60:da:bf: e4:aa:4e:34:41:71:e2:ef:c4:76:a2:f1:9c:00:35:6a:eb:55: c3:49:b9:ec:63:84:b8:5c:1f:83:d3:1d:66:16:f9:21:e2:57: 7d:dd:2a:ab:ce:c9:71:42:6b:68:51:eb:59:9b:75:35:92:cc: 46:47:64:a8:20:5f:91:fa:cf:6b:3c:41:03:dd:09:8f:8e:c4: fb:cf:d6:73:71:3c:f2:e1:3c:6a:1b:02:4a:9f:60:84:38:ca: c1:29:c6:a5:3a:e1:d7:eb:c6:16:ed:9d:b1:af:2d:e5:47:54: cb:c5:1d:ea:11:dc:82:cc:86:a5:4d:5b:6a:bc:d8:1a:94:e8: 3a:e2:fb:3c:02:09:4e:63:00:11:f8:d7:76:1a:63:59:ff:ed: 2c:85:92:17 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYSZyztyR83t27ZB7sN8RtX8CiX0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQwNzA1MTQ1OFoX DTI2MDQwNjA1MTk1OFowMzExMC8GA1UEAxMoMzgxNDU1MzYxRTcyNkI2RUNDREFG MjcxNjczQkQ1OUIxNTU1MzM2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJpjr2Whr4vEbEw/sMKs1oaq2AcdK3h9bzeEvA5EhgFTBNs2bdD8YiUJC5Zy gYN8qhOF3Dkf0Vsiu3JHu6EjLniMahgfWsXv0pY166SE+rVs/Xsk638gnymMFvh9 OwASBHoN8D5Ijx2aE/2/blrXmtzCh2Ltm0cw/kM2iO9uoSSIvfz5Uq7nEIX/Uexy Fb9rKvHVY6fwTXdMrjCJCR+UNdhjvGMWlxIvw19T+M72bp2SdD4mwXIItdOBC6fR riGsRzbGG06m2aoBittcpD7y6gXExaHS6frt1R5rf5aVa5KoHgevGiUSTuFc9aEI paoJM1BY17x1XFz6Fa0I3hUfF08CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDgUVTYecmtuzNrycWc71ZsVVTNuMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYzE5ODc0Yy1hNmIyLTRiMGItOWNjNi01NTlhNGU3Y2Q5NWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMTk4NzRj LWE2YjItNGIwYi05Y2M2LTU1OWE0ZTdjZDk1YS8wLzM4MTQ1NTM2MUU3MjZCNkVD Q0RBRjI3MTY3M0JENTlCMTU1NTMzNkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnl6IwDQYJKoZIhvcNAQELBQADggEBAEbv1oBrxscpHGzhs1McJhkbNA3fc8ei o051Z1FYllcx9BVbj+1WbSeilSkixcz2MCRXOBfQRpNU5b6CR+h1xPowRH3GnfMY u14QdsUUjnwegzDc7Gq50RNqXWw0nHzX9sv9DJ1wBmaga2Dav+SqTjRBceLvxHai 8ZwANWrrVcNJuexjhLhcH4PTHWYW+SHiV33dKqvOyXFCa2hR61mbdTWSzEZHZKgg X5H6z2s8QQPdCY+OxPvP1nNxPPLhPGobAkqfYIQ4ysEpxqU64dfrxhbtnbGvLeVH VMvFHeoR3ILMhqVNW2q82BqU6Dri+zwCCU5jABH413YaY1n/7SyFkhc= -----END CERTIFICATE-----Generated at Sun May 11 09:35:16 2025 by rpki-client