$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer File: A8104CA9AA31459E18BB7A597857DDA711E3E7FA.cer (raw, json) Hash identifier: vkhkQfn5E9UYq6nMrRRvj2CSv1kPFwtPWUS0X7ymYGc= Subject key identifier: A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 029D32DAF3D6A828DA8ABB2F7E6EA01520B01F07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft caRepository: rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 29 Apr 2025 00:52:13 +0000 Certificate not after: Tue 28 Apr 2026 00:57:13 +0000 Subordinate resources: IP: 103.191.216.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:9d:32:da:f3:d6:a8:28:da:8a:bb:2f:7e:6e:a0:15:20:b0:1f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 29 00:52:13 2025 GMT Not After : Apr 28 00:57:13 2026 GMT Subject: CN=A8104CA9AA31459E18BB7A597857DDA711E3E7FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b6:5d:b3:e8:10:7e:19:38:58:4b:85:2c:e2: 6a:11:76:4e:38:8d:6e:f2:ba:10:ed:36:b2:34:38: 61:e1:2b:b9:fb:29:2e:c3:7a:be:0b:4c:93:0b:56: 64:19:5a:e6:09:bd:7a:82:ad:12:c6:44:8f:c4:82: 54:83:4e:2d:9a:12:fa:5b:1c:80:71:8b:a7:fb:ec: f6:26:8c:34:04:ab:90:87:3d:1a:e5:c9:6d:1f:d4: 74:c5:54:6d:08:63:9e:57:87:d5:55:47:5f:7c:c7: 45:46:38:29:11:f8:e0:14:fd:08:96:ed:9f:e4:ed: 0b:ef:82:78:cb:61:59:12:37:e1:6f:24:09:8b:20: f7:a1:21:3d:f4:5b:b0:e8:33:f7:27:c3:2c:6a:e4: 7b:e0:be:c1:66:96:7f:f4:98:5b:48:7e:22:2e:f2: 74:33:84:53:63:f3:b7:77:c7:cf:73:eb:b5:32:8e: 01:ba:8e:7c:fe:7c:2d:41:71:46:92:48:ca:97:c6: 35:b6:ef:cc:03:7a:a2:7c:50:e0:72:cd:10:24:c1: 4f:69:9d:97:aa:fe:d6:b4:28:66:70:5e:d1:15:05: d0:97:20:ea:69:53:fc:ed:71:dc:9c:be:41:0c:ab: 39:59:7b:cf:98:46:dd:73:88:c6:d3:b6:2e:29:15: be:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A8:10:4C:A9:AA:31:45:9E:18:BB:7A:59:78:57:DD:A7:11:E3:E7:FA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9e47847c-bc2c-40da-b2aa-915951428aad/0/A8104CA9AA31459E18BB7A597857DDA711E3E7FA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.216.0/23 Signature Algorithm: sha256WithRSAEncryption 33:9e:d3:41:e6:35:0a:a7:3a:b6:ae:d2:85:c7:c7:55:e6:41: 71:c7:50:ee:be:81:97:59:ba:20:23:8e:04:16:e6:4f:6c:9c: c8:dc:05:ea:9f:0c:b6:24:51:fb:d1:11:54:c5:47:45:ca:63: bf:7d:9a:09:3e:42:e8:39:57:b4:d3:4f:08:46:ab:9a:44:65: 0f:af:47:c4:d1:a2:ab:2d:03:6f:13:bd:61:12:5f:0c:1d:06: e0:a2:b5:52:d8:6e:9f:d0:b3:bf:50:d8:30:de:9b:0b:bf:fc: dd:9d:be:ef:25:1f:bf:6f:bf:1c:bd:16:b3:f8:37:39:e1:1f: c7:a7:84:b3:a0:d6:4e:35:e3:41:f8:df:54:7c:8b:cd:42:b7: 10:63:6c:32:91:a4:13:4c:6e:74:3c:4c:67:7a:dc:f4:09:26: ae:de:b0:4e:b8:e3:2b:81:ac:1e:c9:a0:d9:80:0f:7a:a2:00: 46:aa:68:50:bf:2f:9a:b2:a9:4e:9c:39:79:74:57:8d:2d:f3: ea:9d:79:39:47:78:8c:9a:d3:3b:eb:bf:c4:e7:d8:f6:7b:f4: 1c:9b:9d:b2:57:9f:63:6f:5c:c7:9f:00:fa:9f:55:72:7d:9b: fa:d9:10:d8:00:ee:3d:82:40:82:ef:49:9a:72:d3:ae:00:05: 8e:41:04:95 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAp0y2vPWqCjairsvfm6gFSCwHwcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQyOTAwNTIxM1oX DTI2MDQyODAwNTcxM1owMzExMC8GA1UEAxMoQTgxMDRDQTlBQTMxNDU5RTE4QkI3 QTU5Nzg1N0REQTcxMUUzRTdGQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK62XbPoEH4ZOFhLhSziahF2TjiNbvK6EO02sjQ4YeErufspLsN6vgtMkwtW ZBla5gm9eoKtEsZEj8SCVINOLZoS+lscgHGLp/vs9iaMNASrkIc9GuXJbR/UdMVU bQhjnleH1VVHX3zHRUY4KRH44BT9CJbtn+TtC++CeMthWRI34W8kCYsg96EhPfRb sOgz9yfDLGrke+C+wWaWf/SYW0h+Ii7ydDOEU2Pzt3fHz3PrtTKOAbqOfP58LUFx RpJIypfGNbbvzAN6onxQ4HLNECTBT2mdl6r+1rQoZnBe0RUF0Jcg6mlT/O1x3Jy+ QQyrOVl7z5hG3XOIxtO2LikVvo0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKgQTKmqMUWeGLt6WXhX3acR4+f6MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZTQ3ODQ3Yy1iYzJjLTQwZGEtYjJhYS05MTU5NTE0MjhhYWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzllNDc4NDdj LWJjMmMtNDBkYS1iMmFhLTkxNTk1MTQyOGFhZC8wL0E4MTA0Q0E5QUEzMTQ1OUUx OEJCN0E1OTc4NTdEREE3MTFFM0U3RkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnv9gwDQYJKoZIhvcNAQELBQADggEBADOe00HmNQqnOrau0oXHx1XmQXHHUO6+ gZdZuiAjjgQW5k9snMjcBeqfDLYkUfvREVTFR0XKY799mgk+Qug5V7TTTwhGq5pE ZQ+vR8TRoqstA28TvWESXwwdBuCitVLYbp/Qs79Q2DDemwu//N2dvu8lH79vvxy9 FrP4NznhH8enhLOg1k4140H431R8i81CtxBjbDKRpBNMbnQ8TGd63PQJJq7esE64 4yuBrB7JoNmAD3qiAEaqaFC/L5qyqU6cOXl0V40t8+qdeTlHeIya0zvrv8Tn2PZ7 9BybnbJXn2NvXMefAPqfVXJ9m/rZENgA7j2CQILvSZpy064ABY5BBJU= -----END CERTIFICATE-----Generated at Mon May 5 19:55:51 2025 by rpki-client