$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer File: A5D12164B9484E51D4BE4B03823526989B147558.cer (raw, json) Hash identifier: +N1CbdW9RgoyvYFcTKVl3vWyurhIk33QcJpi8pGGpDs= Subject key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 554896B5112393A3CCC338EAF1EABD0A2CC47DB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft caRepository: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 15 Apr 2025 01:32:39 +0000 Certificate not after: Tue 14 Apr 2026 01:37:39 +0000 Subordinate resources: IP: 103.190.76.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 10:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:48:96:b5:11:23:93:a3:cc:c3:38:ea:f1:ea:bd:0a:2c:c4:7d:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 15 01:32:39 2025 GMT Not After : Apr 14 01:37:39 2026 GMT Subject: CN=A5D12164B9484E51D4BE4B03823526989B147558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b5:18:89:aa:07:5f:c7:59:79:65:05:2c:96: 12:85:5c:51:79:50:dd:48:77:f6:49:e4:eb:ef:42: 5f:59:bc:e5:cf:3c:23:0d:5a:60:a9:8f:60:20:3b: ea:91:68:52:a4:99:51:dd:a3:31:06:0e:9d:b5:3c: 94:49:3c:0d:ed:20:c7:de:0b:db:5d:fd:f9:12:35: 5d:05:ea:c9:87:ae:62:bf:88:a8:eb:2a:62:06:b8: 96:c9:02:1a:22:58:ea:0c:2a:61:04:e9:84:5c:5d: 22:b7:d7:b0:9e:62:0b:06:5a:c0:0c:42:f1:9e:d6: 0b:93:58:28:f0:fb:70:0c:13:4d:89:5b:49:ab:5b: a5:6e:10:f9:33:9a:e1:33:d1:5f:d8:f0:c5:69:d1: 15:fc:85:cd:65:f0:9f:fc:39:40:1a:51:24:3b:87: 09:f4:ef:b4:c4:98:93:1c:38:08:ae:44:f9:45:37: 6b:22:8c:2f:37:aa:9c:c0:49:05:63:fb:e7:4a:b3: 53:ae:2d:f4:09:e5:2b:8f:69:2a:aa:18:e5:b1:1a: af:47:6f:ba:82:e0:55:ca:4d:1b:d1:95:9d:50:8f: f6:f0:50:41:16:40:0c:d5:15:a1:0a:9f:9b:7c:4b: d1:59:03:86:9f:df:3f:bf:b0:dd:c9:22:e6:60:03: 77:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.76.0/23 Signature Algorithm: sha256WithRSAEncryption 18:29:83:1b:06:93:65:2e:e3:1d:9b:ae:70:7f:62:43:42:6e: 39:6c:9b:85:ad:43:db:70:28:c3:c3:fc:2e:7c:4b:84:f8:82: 61:46:0e:87:d5:79:1f:5f:23:0e:16:f3:48:42:a8:aa:ad:b1: a6:71:35:fc:68:9b:46:3f:48:11:9e:9e:d9:5f:1f:c6:c4:0c: 67:e7:bc:76:27:3e:36:72:cb:a2:b7:c7:2a:31:b1:79:68:83: 9b:5d:94:9c:80:a9:c3:ca:83:d9:60:63:a3:6d:c6:2b:43:c2: 4d:bf:c4:2c:ab:ea:86:48:53:e6:74:0c:cb:87:7b:09:44:ff: b2:80:b4:87:d3:c9:bc:84:b5:5a:78:7f:27:06:ae:af:1a:60: c5:0e:c4:c2:23:aa:92:63:2f:d1:fc:45:67:0d:ec:80:b0:61: be:b4:0e:f6:f2:90:58:75:ae:c6:31:83:d2:15:4e:98:55:3e: de:f5:e6:50:85:5a:44:82:2c:30:1e:bc:ae:59:4c:02:83:99: ba:a5:d2:5a:f3:bb:2d:f4:00:65:ba:da:54:c1:d6:3e:41:d4: f5:55:2e:95:ca:4b:a0:4a:4b:73:27:c4:e7:3b:cf:dc:d6:aa: 19:7b:c0:e1:f7:a2:9d:b7:eb:e5:20:8e:f4:ba:0d:56:51:c5: 4f:74:ab:63 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVUiWtREjk6PMwzjq8eq9CizEfbUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxNTAxMzIzOVoX DTI2MDQxNDAxMzczOVowMzExMC8GA1UEAxMoQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0 QjAzODIzNTI2OTg5QjE0NzU1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMG1GImqB1/HWXllBSyWEoVcUXlQ3Uh39knk6+9CX1m85c88Iw1aYKmPYCA7 6pFoUqSZUd2jMQYOnbU8lEk8De0gx94L2139+RI1XQXqyYeuYr+IqOsqYga4lskC GiJY6gwqYQTphFxdIrfXsJ5iCwZawAxC8Z7WC5NYKPD7cAwTTYlbSatbpW4Q+TOa 4TPRX9jwxWnRFfyFzWXwn/w5QBpRJDuHCfTvtMSYkxw4CK5E+UU3ayKMLzeqnMBJ BWP750qzU64t9AnlK49pKqoY5bEar0dvuoLgVcpNG9GVnVCP9vBQQRZADNUVoQqf m3xL0VkDhp/fP7+w3cki5mADd9MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKXRIWS5SE5R1L5LA4I1JpibFHVYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZTJjYWNjZi0zMjdlLTQyYmQtOWIzMS0wYTg3M2QyZTY2OTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzllMmNhY2Nm LTMyN2UtNDJiZC05YjMxLTBhODczZDJlNjY5Mi8wL0E1RDEyMTY0Qjk0ODRFNTFE NEJFNEIwMzgyMzUyNjk4OUIxNDc1NTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvkwwDQYJKoZIhvcNAQELBQADggEBABgpgxsGk2Uu4x2brnB/YkNCbjlsm4Wt Q9twKMPD/C58S4T4gmFGDofVeR9fIw4W80hCqKqtsaZxNfxom0Y/SBGentlfH8bE DGfnvHYnPjZyy6K3xyoxsXlog5tdlJyAqcPKg9lgY6NtxitDwk2/xCyr6oZIU+Z0 DMuHewlE/7KAtIfTybyEtVp4fycGrq8aYMUOxMIjqpJjL9H8RWcN7ICwYb60Dvby kFh1rsYxg9IVTphVPt715lCFWkSCLDAevK5ZTAKDmbql0lrzuy30AGW62lTB1j5B 1PVVLpXKS6BKS3MnxOc7z9zWqhl7wOH3op236+UgjvS6DVZRxU90q2M= -----END CERTIFICATE-----Generated at Mon May 12 13:33:26 2025 by rpki-client