$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9481EF5008E46F3618B42A0945A1522D5C041511.cer File: 9481EF5008E46F3618B42A0945A1522D5C041511.cer (raw, json) Hash identifier: yIAAoj7sz6cbU2y0z4UaAF7lD4vmozBx0hYRYiIIt60= Subject key identifier: 94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E133AC222616E36117EF8FA191A370C7BB8EB18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.mft caRepository: rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Dec 2024 17:10:11 +0000 Certificate not after: Thu 04 Dec 2025 17:15:11 +0000 Subordinate resources: IP: 103.59.160.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 23:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:13:3a:c2:22:61:6e:36:11:7e:f8:fa:19:1a:37:0c:7b:b8:eb:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 5 17:10:11 2024 GMT Not After : Dec 4 17:15:11 2025 GMT Subject: CN=9481EF5008E46F3618B42A0945A1522D5C041511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:52:1c:4e:d1:1f:f3:7d:70:58:3d:48:51:10: bd:20:89:67:fe:1f:85:58:b3:54:d3:f1:cd:a3:c4: 1e:05:ad:c1:d9:c3:5d:f9:ad:7c:1c:bf:47:9e:f0: 7b:4f:58:3d:5e:4f:f2:78:ca:f1:61:ef:56:bc:32: 8c:d5:b2:22:3c:0c:a1:2e:13:f7:b8:78:2d:e5:73: 49:d3:73:b9:7c:0f:59:23:bb:7a:33:d1:68:80:a4: ab:08:37:fa:81:c7:b9:2a:91:27:1e:f5:36:f1:54: 60:5e:88:fb:e6:a3:17:92:38:ab:b2:da:92:81:0d: af:4a:f5:52:fb:f1:d2:65:40:6f:f7:49:32:a8:04: 50:1f:b0:9b:7a:40:87:49:31:56:8b:73:33:31:40: 52:a3:86:90:fc:11:61:46:26:b7:9c:d3:5f:26:07: db:ad:4f:5c:7c:c3:99:23:6b:02:a5:40:05:9c:67: d2:d9:e1:dd:ee:c2:16:75:64:b5:1f:0a:39:3a:78: f0:59:b9:61:c8:6e:80:3f:49:64:ae:57:c8:07:72: 48:a3:7a:4c:fd:a5:d3:ef:ae:b3:0f:1d:b8:d5:48: a4:b9:46:0e:6a:3c:9a:44:6a:be:fc:7f:79:f6:63: 01:d9:8f:75:23:10:0c:f9:41:72:d2:25:86:8b:b4: 99:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.59.160.0/23 Signature Algorithm: sha256WithRSAEncryption 09:d0:a9:ac:1e:72:a9:84:ad:8d:41:51:4d:02:d0:07:62:02: c9:5a:a4:88:93:32:ac:46:28:a6:90:e6:74:c0:c2:fc:dd:3f: 6f:94:95:e2:50:a8:ba:51:24:8c:95:95:24:1a:df:79:74:30: b0:55:2e:9f:f5:ab:77:50:92:8f:05:f7:58:b0:ad:e2:7f:4e: 82:5f:1b:a0:5e:37:27:6d:e2:19:d4:53:17:65:e4:3c:02:33: 68:ee:f7:47:6f:28:89:15:45:f7:8d:d3:66:16:06:87:43:14: 30:1b:50:2a:2f:5d:e3:72:82:ba:15:e0:f1:f4:59:e6:2f:fb: 93:7c:43:38:36:0f:8c:83:90:a8:5f:c0:da:6a:34:a8:5b:2d: 20:9f:23:5a:2c:68:bf:07:42:88:e8:5f:89:97:05:d0:d1:1d: 3f:39:51:49:0b:60:a0:e2:17:21:00:80:a8:1e:c6:bf:f7:02: d2:fc:6f:70:5a:5b:8f:98:6a:cd:06:54:64:f4:32:88:46:e9: 60:45:fa:36:49:51:b2:9d:27:b4:02:8b:ef:d5:04:da:87:8b: 35:cd:75:d0:ce:85:50:43:45:fb:1d:1c:7e:62:cf:36:70:32: 7f:23:0e:3c:58:af:d1:0b:34:6e:6b:cb:eb:68:28:2e:39:82: 4e:26:4b:75 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULhM6wiJhbjYRfvj6GRo3DHu46xgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIwNTE3MTAxMVoX DTI1MTIwNDE3MTUxMVowMzExMC8GA1UEAxMoOTQ4MUVGNTAwOEU0NkYzNjE4QjQy QTA5NDVBMTUyMkQ1QzA0MTUxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKBSHE7RH/N9cFg9SFEQvSCJZ/4fhVizVNPxzaPEHgWtwdnDXfmtfBy/R57w e09YPV5P8njK8WHvVrwyjNWyIjwMoS4T97h4LeVzSdNzuXwPWSO7ejPRaICkqwg3 +oHHuSqRJx71NvFUYF6I++ajF5I4q7LakoENr0r1Uvvx0mVAb/dJMqgEUB+wm3pA h0kxVotzMzFAUqOGkPwRYUYmt5zTXyYH261PXHzDmSNrAqVABZxn0tnh3e7CFnVk tR8KOTp48Fm5YchugD9JZK5XyAdySKN6TP2l0++usw8duNVIpLlGDmo8mkRqvvx/ efZjAdmPdSMQDPlBctIlhou0mTMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJSB71AI5G82GLQqCUWhUi1cBBURMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZGJkM2E1MC04MzJlLTQxMjctOTRlMS00OGFjZTE2NGNmMjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkYmQzYTUw LTgzMmUtNDEyNy05NGUxLTQ4YWNlMTY0Y2YyNi8wLzk0ODFFRjUwMDhFNDZGMzYx OEI0MkEwOTQ1QTE1MjJENUMwNDE1MTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnO6AwDQYJKoZIhvcNAQELBQADggEBAAnQqawecqmErY1BUU0C0AdiAslapIiT MqxGKKaQ5nTAwvzdP2+UleJQqLpRJIyVlSQa33l0MLBVLp/1q3dQko8F91iwreJ/ ToJfG6BeNydt4hnUUxdl5DwCM2ju90dvKIkVRfeN02YWBodDFDAbUCovXeNygroV 4PH0WeYv+5N8Qzg2D4yDkKhfwNpqNKhbLSCfI1osaL8HQojoX4mXBdDRHT85UUkL YKDiFyEAgKgexr/3AtL8b3BaW4+Yas0GVGT0MohG6WBF+jZJUbKdJ7QCi+/VBNqH izXNddDOhVBDRfsdHH5izzZwMn8jDjxYr9ELNG5ry+toKC45gk4mS3U= -----END CERTIFICATE-----Generated at Wed May 14 01:08:49 2025 by rpki-client