$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer File: C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.cer (raw, json) Hash identifier: 4OEUrYN74Ht6uRBOKyTtB6N9bj9NVQdJMDUGBLf9D5k= Subject key identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7A430AA11471070E017701BDD3398EBE1085F64B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft caRepository: rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 01 May 2025 00:17:06 +0000 Certificate not after: Thu 30 Apr 2026 00:22:06 +0000 Subordinate resources: IP: 103.168.148.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:43:0a:a1:14:71:07:0e:01:77:01:bd:d3:39:8e:be:10:85:f6:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 1 00:17:06 2025 GMT Not After : Apr 30 00:22:06 2026 GMT Subject: CN=C30A3771ECE5F762D6FA6D8728F4C0C9228631F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:9f:e6:10:eb:85:07:c9:18:15:d9:28:81: 25:8c:44:e4:49:20:2b:82:cf:a9:66:44:34:68:0e: e3:e3:17:8c:30:34:00:30:9e:ab:92:42:5f:7d:5f: eb:d7:fa:f1:d6:5b:68:5e:dd:f9:13:cc:41:0c:e2: 01:0d:55:74:0c:7e:86:f1:c2:7f:80:e6:93:66:27: 48:fe:0d:b9:e0:5b:34:3f:91:97:65:89:1c:17:77: fa:de:3f:ab:c8:b2:a5:03:c9:ee:84:bd:bf:09:b6: 4a:c9:4d:38:0b:2f:7f:ec:aa:57:ce:4b:92:9d:63: 82:af:40:a0:a2:0b:01:dc:73:3d:31:a5:9f:38:40: 8a:22:2d:b9:49:f5:78:60:17:c9:fb:46:45:12:97: 33:01:7b:e8:83:b0:4f:f5:39:97:d9:a9:00:39:bc: 90:49:7a:96:f0:11:f0:97:d0:26:f3:0e:71:69:3b: bf:a9:7e:e7:1f:4a:fb:3e:a5:3e:8f:20:b7:3f:c5: fb:83:44:dc:c3:5a:3c:9a:59:54:f7:99:95:4d:d6: 1f:1e:c9:3c:c9:92:dc:f5:63:c3:45:7b:70:a4:67: 5e:c2:95:ca:91:23:c1:55:00:65:0b:04:05:26:e5: 69:03:1a:9c:ad:ea:35:07:3d:33:ef:d4:ad:70:a6: 16:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:0A:37:71:EC:E5:F7:62:D6:FA:6D:87:28:F4:C0:C9:22:86:31:F7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3a1f6299-b155-4212-b5e1-9f5703cd0989/0/C30A3771ECE5F762D6FA6D8728F4C0C9228631F7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.148.0/24 Signature Algorithm: sha256WithRSAEncryption 27:6b:24:6a:8c:34:42:65:a8:b7:45:09:d8:5a:29:63:49:7f: 71:14:d8:96:c4:f8:b1:a8:f8:b8:50:79:b3:63:71:0a:2a:96: 84:a1:09:ab:2f:0d:43:49:bf:1f:cb:f6:e7:c8:06:28:c2:cf: 19:66:78:82:1a:33:0b:ca:f7:0b:ff:4d:71:04:74:a1:7b:a1: 5a:1e:c6:ab:56:ac:e6:32:2a:c0:75:85:9b:fe:d4:27:38:26: 14:85:3d:73:99:d4:fa:ae:80:f0:8b:3c:55:00:86:41:33:83: 13:53:62:b2:e5:ab:52:1f:f9:35:35:b2:b0:b3:de:d8:b0:81: 21:78:3d:95:f9:97:1f:31:ee:4c:fa:7f:97:5e:ac:8b:04:8c: 99:02:2b:82:c7:b8:3f:37:c8:f7:7c:80:94:85:26:ea:30:b1: c9:f7:1a:aa:e0:e9:07:ec:e5:96:54:46:44:61:6e:fd:2b:01: e2:52:ea:f0:de:20:f3:5d:12:c2:09:42:f4:e9:dc:65:8b:43: 2b:0d:59:c8:3d:86:37:37:75:d0:57:09:68:be:e6:29:40:43: 35:32:e8:5f:49:0b:82:3c:09:96:6d:76:b9:85:52:ff:9a:f2: 74:88:b2:cd:71:e3:23:5e:d3:c7:34:f8:80:f7:4c:e1:45:9d: 7c:04:71:50 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUekMKoRRxBw4BdwG90zmOvhCF9kswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUwMTAwMTcwNloX DTI2MDQzMDAwMjIwNlowMzExMC8GA1UEAxMoQzMwQTM3NzFFQ0U1Rjc2MkQ2RkE2 RDg3MjhGNEMwQzkyMjg2MzFGNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANP4n+YQ64UHyRgV2SiBJYxE5EkgK4LPqWZENGgO4+MXjDA0ADCeq5JCX31f 69f68dZbaF7d+RPMQQziAQ1VdAx+hvHCf4Dmk2YnSP4NueBbND+Rl2WJHBd3+t4/ q8iypQPJ7oS9vwm2SslNOAsvf+yqV85Lkp1jgq9AoKILAdxzPTGlnzhAiiItuUn1 eGAXyftGRRKXMwF76IOwT/U5l9mpADm8kEl6lvAR8JfQJvMOcWk7v6l+5x9K+z6l Po8gtz/F+4NE3MNaPJpZVPeZlU3WHx7JPMmS3PVjw0V7cKRnXsKVypEjwVUAZQsE BSblaQManK3qNQc9M+/UrXCmFgMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMMKN3Hs5fdi1vpthyj0wMkihjH3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zYTFmNjI5OS1iMTU1LTQyMTItYjVlMS05ZjU3MDNjZDA5ODkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhMWY2Mjk5 LWIxNTUtNDIxMi1iNWUxLTlmNTcwM2NkMDk4OS8wL0MzMEEzNzcxRUNFNUY3NjJE NkZBNkQ4NzI4RjRDMEM5MjI4NjMxRjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnqJQwDQYJKoZIhvcNAQELBQADggEBACdrJGqMNEJlqLdFCdhaKWNJf3EU2JbE +LGo+LhQebNjcQoqloShCasvDUNJvx/L9ufIBijCzxlmeIIaMwvK9wv/TXEEdKF7 oVoexqtWrOYyKsB1hZv+1Cc4JhSFPXOZ1PqugPCLPFUAhkEzgxNTYrLlq1If+TU1 srCz3tiwgSF4PZX5lx8x7kz6f5derIsEjJkCK4LHuD83yPd8gJSFJuowscn3Gqrg 6Qfs5ZZURkRhbv0rAeJS6vDeIPNdEsIJQvTp3GWLQysNWcg9hjc3ddBXCWi+5ilA QzUy6F9JC4I8CZZtdrmFUv+a8nSIss1x4yNe08c0+ID3TOFFnXwEcVA= -----END CERTIFICATE-----Generated at Tue May 6 09:54:18 2025 by rpki-client