$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer (raw, json) Hash identifier: 19zfXzbNKOrqe994x31x6TWvHrnjvtdpkUHXq0Jpm3o= Subject key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 653829C6741E6525A68D8CB058900EAA46E8B122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft caRepository: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 10 Jan 2025 14:31:13 +0000 Certificate not after: Fri 09 Jan 2026 14:36:13 +0000 Subordinate resources: IP: 103.184.128.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 03:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:38:29:c6:74:1e:65:25:a6:8d:8c:b0:58:90:0e:aa:46:e8:b1:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 10 14:31:13 2025 GMT Not After : Jan 9 14:36:13 2026 GMT Subject: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:9a:02:30:1b:82:bd:e7:d0:2a:a5:04:b6: 37:2d:9b:85:e2:62:0a:ec:d4:8a:fb:46:fc:8c:fe: 51:17:0d:01:d6:96:96:47:50:66:bb:14:6e:53:50: ad:a0:70:dc:de:fc:e5:9f:f2:a6:cb:65:57:f0:06: 06:88:27:21:a1:37:36:f4:83:a4:05:a0:b2:31:52: 1c:c0:ba:6e:d3:a4:a4:47:51:2a:13:2a:14:99:20: 26:aa:ce:d4:10:c4:5e:94:93:78:03:31:c1:7d:aa: 21:9a:71:f7:be:60:90:3b:b9:a1:6b:43:67:96:5e: e2:0e:4d:b9:40:d8:a7:bd:4f:ba:10:57:ad:13:c6: 17:51:15:8c:3c:e6:a6:d2:10:16:00:58:79:12:c0: 0d:da:0f:4a:2b:27:21:a4:62:1a:f1:62:97:d0:9b: 63:be:2d:63:26:d5:73:85:05:6d:4b:93:eb:33:c3: 5c:84:9e:8c:4f:4d:17:02:93:59:00:56:6a:30:c9: 18:34:06:a2:2d:ae:28:21:46:a2:9e:df:49:3c:50: 0b:ec:40:06:f0:71:e2:3e:62:83:09:e3:2b:8b:df: 70:1e:35:7d:56:04:27:f1:ab:e2:1b:a4:39:1c:50: ba:93:96:88:8b:02:41:97:13:2e:be:d8:8f:0b:d2: e6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.128.0/24 Signature Algorithm: sha256WithRSAEncryption 79:98:fa:9f:cb:30:3f:78:e4:33:0e:75:53:95:aa:8f:8b:9b: bd:c3:eb:7c:30:47:15:7f:05:0f:f4:40:bb:27:24:ae:4b:ad: 96:9b:37:5e:50:30:86:6e:1b:e2:ed:56:fa:a6:87:0f:ab:ea: 91:d3:fb:d2:54:a7:54:a0:a7:87:03:25:e8:ae:4e:16:3a:69: 92:5b:d9:e1:74:37:73:ce:96:16:7c:c1:f3:d9:e1:e4:df:ee: 2d:5f:8d:0e:b0:97:59:bd:00:81:a2:e7:93:5c:f4:92:ba:b2: 3e:f8:a1:7b:61:71:a7:f1:3b:ae:bf:a6:79:b9:64:6a:35:6d: 03:06:6a:0d:00:6b:13:83:60:a1:67:ca:5a:25:7a:81:cd:29: b3:ab:33:0f:99:1a:85:53:24:2d:db:3c:70:6a:b9:ac:d3:d9: e4:9b:42:9e:af:14:78:f3:fb:ef:93:b0:69:44:2c:cc:fc:91: 26:e6:59:5b:f8:25:28:bf:74:42:e5:d6:c5:8e:a8:0a:4b:8a: 31:51:a1:06:f2:7c:35:c3:67:06:81:a6:4f:ab:5f:17:28:b9: a8:c0:32:9c:8d:b3:87:a3:1a:2e:d5:d1:ba:bf:2c:eb:8f:fc: 3f:de:73:b0:4c:72:d4:b6:4c:01:62:f1:3f:c8:76:9e:0e:ca: 3d:7d:4f:73 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZTgpxnQeZSWmjYywWJAOqkbosSIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDExMDE0MzExM1oX DTI2MDEwOTE0MzYxM1owMzExMC8GA1UEAxMoQTMzRkY3NDk2NUE5NjA4RDlFNUMz QzJFM0VGODAyRUExRTVDRDc5NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL24mgIwG4K959AqpQS2Ny2bheJiCuzUivtG/Iz+URcNAdaWlkdQZrsUblNQ raBw3N785Z/ypstlV/AGBognIaE3NvSDpAWgsjFSHMC6btOkpEdRKhMqFJkgJqrO 1BDEXpSTeAMxwX2qIZpx975gkDu5oWtDZ5Ze4g5NuUDYp71PuhBXrRPGF1EVjDzm ptIQFgBYeRLADdoPSisnIaRiGvFil9CbY74tYybVc4UFbUuT6zPDXISejE9NFwKT WQBWajDJGDQGoi2uKCFGop7fSTxQC+xABvBx4j5igwnjK4vfcB41fVYEJ/Gr4huk ORxQupOWiIsCQZcTLr7YjwvS5l8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKM/90llqWCNnlw8Lj74AuoeXNeUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85OTNlM2QyNi00YWFmLTRlOTYtYWQ0OS01MjczZjBhNGU2ZWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5M2UzZDI2 LTRhYWYtNGU5Ni1hZDQ5LTUyNzNmMGE0ZTZlZC8wL0EzM0ZGNzQ5NjVBOTYwOEQ5 RTVDM0MyRTNFRjgwMkVBMUU1Q0Q3OTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnuIAwDQYJKoZIhvcNAQELBQADggEBAHmY+p/LMD945DMOdVOVqo+Lm73D63ww RxV/BQ/0QLsnJK5LrZabN15QMIZuG+LtVvqmhw+r6pHT+9JUp1Sgp4cDJeiuThY6 aZJb2eF0N3POlhZ8wfPZ4eTf7i1fjQ6wl1m9AIGi55Nc9JK6sj74oXthcafxO66/ pnm5ZGo1bQMGag0AaxODYKFnyloleoHNKbOrMw+ZGoVTJC3bPHBquazT2eSbQp6v FHjz+++TsGlELMz8kSbmWVv4JSi/dELl1sWOqApLijFRoQbyfDXDZwaBpk+rXxco uajAMpyNs4ejGi7V0bq/LOuP/D/ec7BMctS2TAFi8T/Idp4Oyj19T3M= -----END CERTIFICATE-----Generated at Thu May 8 00:18:06 2025 by rpki-client