$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer (raw, json) Hash identifier: ywotBRtL6fCsnYZbW3H2s9ZmdjWf6HrKm0FeoeHSFXE= Subject key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5F5F86476D302C267A0F06F2D459CF36536C2480 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft caRepository: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 08 May 2025 18:52:33 +0000 Certificate not after: Thu 07 May 2026 18:57:33 +0000 Subordinate resources: IP: 103.172.172.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5f:86:47:6d:30:2c:26:7a:0f:06:f2:d4:59:cf:36:53:6c:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 8 18:52:33 2025 GMT Not After : May 7 18:57:33 2026 GMT Subject: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a0:c8:e6:c1:91:50:49:11:3d:fa:7c:a7:28: c2:c7:c1:b3:59:02:de:0a:5b:e0:df:f6:43:d0:eb: 5a:68:7a:07:c4:6a:6e:c5:fa:eb:c5:78:34:55:37: 62:ea:5f:51:30:f2:e2:99:af:28:0d:22:d1:de:ff: 6b:ad:f1:9f:c3:c8:39:31:20:53:35:39:3f:52:35: 06:1d:e7:51:da:c9:86:de:20:66:5d:df:50:f6:00: 76:ae:e0:6e:48:66:73:7f:99:e1:01:0a:df:e6:2f: de:dc:98:86:25:ca:b9:43:f9:e2:e7:29:51:41:b9: a3:65:a3:1b:20:63:00:72:42:1e:63:fd:83:fc:fd: 34:14:5d:81:a6:16:89:82:2b:2a:0e:19:92:c7:16: 00:b4:52:15:c4:d4:bf:28:14:20:e6:0a:21:1d:3f: 66:3e:fa:ae:54:e0:b6:e8:38:92:f3:66:93:80:0f: 01:f8:69:c4:85:26:34:7f:c1:70:54:e7:ba:87:f8: 00:eb:d3:27:b8:3a:31:9a:7b:51:d5:30:57:ab:f8: 1b:7b:c0:ea:6d:98:d4:d1:ae:69:96:a8:17:d3:99: c1:c2:68:30:00:f9:ef:51:e8:5f:a9:6e:6a:80:f8: cd:29:0a:02:b3:04:f6:81:76:c7:b9:3e:a5:c9:d8: 7a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.172.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:66:c0:0f:23:8e:14:66:e9:67:a4:50:6f:78:92:d1:d4:19: 62:fa:d1:a9:1b:4d:68:e6:be:2c:1c:01:4c:84:e9:7f:af:09: c3:ef:ed:0e:bd:a6:01:80:f3:09:4f:51:90:52:ce:77:39:06: ad:68:cb:4c:c8:b2:65:97:05:84:b3:41:b7:d1:d0:2e:18:8c: 69:37:88:6f:22:0f:3d:d0:32:ca:9f:5c:14:17:4f:c2:49:94: 66:f7:82:55:25:f8:e5:33:60:aa:9c:7e:99:e1:de:bc:9c:23: f8:fd:57:d8:09:58:38:d7:aa:3b:ca:7c:fc:30:14:e8:d2:e2: 48:d6:84:c5:69:61:3a:5c:57:6b:ac:95:eb:8e:93:7b:c7:b4: ea:48:8f:6d:86:95:e3:f8:c9:99:65:da:91:a0:b0:a9:7d:35: c9:92:e0:56:69:08:d8:75:d0:95:9b:03:0a:3c:f5:99:42:5e: 40:2b:9a:e9:44:1d:14:0d:05:f7:aa:1b:6b:b5:62:3e:c2:c9: 01:df:e0:6c:e9:b9:19:80:e6:ad:d3:82:47:3b:42:f1:9e:29: 7b:50:8d:88:02:83:f9:eb:29:cd:d0:2a:2c:f2:16:9f:2f:10: 22:ea:08:8e:bc:cf:a3:1f:35:9f:49:3e:6a:da:48:6e:64:1b: 79:ad:af:40 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUX1+GR20wLCZ6Dwby1FnPNlNsJIAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUwODE4NTIzM1oX DTI2MDUwNzE4NTczM1owMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZB MUIyMkEyOTNDQjkxRjQ2NUFBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJqgyObBkVBJET36fKcowsfBs1kC3gpb4N/2Q9DrWmh6B8RqbsX668V4NFU3 YupfUTDy4pmvKA0i0d7/a63xn8PIOTEgUzU5P1I1Bh3nUdrJht4gZl3fUPYAdq7g bkhmc3+Z4QEK3+Yv3tyYhiXKuUP54ucpUUG5o2WjGyBjAHJCHmP9g/z9NBRdgaYW iYIrKg4ZkscWALRSFcTUvygUIOYKIR0/Zj76rlTgtug4kvNmk4APAfhpxIUmNH/B cFTnuof4AOvTJ7g6MZp7UdUwV6v4G3vA6m2Y1NGuaZaoF9OZwcJoMAD571HoX6lu aoD4zSkKArME9oF2x7k+pcnYejECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIjhKIf/TBvdMbahsiopPLkfRlqpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg0ZGE0MTVi LTVmMTctNDYwMi05YmQ5LWZkODRhYzJjYWU4Ni8xLzg4RTEyODg3RkY0QzFCREQz MUI2QTFCMjJBMjkzQ0I5MUY0NjVBQTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnrKwwDQYJKoZIhvcNAQELBQADggEBADtmwA8jjhRm6WekUG94ktHUGWL60akb TWjmviwcAUyE6X+vCcPv7Q69pgGA8wlPUZBSznc5Bq1oy0zIsmWXBYSzQbfR0C4Y jGk3iG8iDz3QMsqfXBQXT8JJlGb3glUl+OUzYKqcfpnh3rycI/j9V9gJWDjXqjvK fPwwFOjS4kjWhMVpYTpcV2usleuOk3vHtOpIj22GleP4yZll2pGgsKl9NcmS4FZp CNh10JWbAwo89ZlCXkArmulEHRQNBfeqG2u1Yj7CyQHf4GzpuRmA5q3Tgkc7QvGe KXtQjYgCg/nrKc3QKizyFp8vECLqCI68z6MfNZ9JPmraSG5kG3mtr0A= -----END CERTIFICATE-----Generated at Thu May 15 00:02:08 2025 by rpki-client