$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer File: C94D41BEAEF4A56979753B500D992FE3CAE43727.cer (raw, json) Hash identifier: xT5c57A1Y3LSsl4tXIhjrWgJvltT3+vxuAiIecma9H8= Subject key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3466E007CAC9E48035D74DE49E4D55DA7A822EDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft caRepository: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 11 Jun 2025 08:00:13 +0000 Certificate not after: Wed 10 Jun 2026 08:05:13 +0000 Subordinate resources: IP: 103.46.8.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 02:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:66:e0:07:ca:c9:e4:80:35:d7:4d:e4:9e:4d:55:da:7a:82:2e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 11 08:00:13 2025 GMT Not After : Jun 10 08:05:13 2026 GMT Subject: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:94:3e:18:71:45:92:e4:07:09:46:b3:2e:e2: f1:a6:9c:66:45:72:91:98:65:6f:00:70:10:4f:31: 36:cd:48:04:c3:36:d6:33:c4:ce:ed:c0:4e:58:16: 39:77:13:d2:cb:17:cf:28:4c:e6:18:84:5d:b4:a2: a4:ed:cc:cd:7f:bc:40:48:ad:71:8b:1f:21:45:6e: 79:e7:b9:62:52:56:44:64:c9:43:a2:71:18:13:4f: 6a:d1:9f:c0:c4:d1:7e:be:70:3f:62:a9:57:23:61: 92:c6:7e:15:4c:5f:9b:6a:b8:72:b8:4e:3e:3b:77: fa:ca:b1:3e:4a:01:4b:5d:c1:d6:ab:f6:6c:12:5e: 87:32:9a:db:d2:51:1a:36:83:83:19:a2:ac:85:3e: 66:e1:14:3c:3d:d0:ff:2a:a4:29:31:7d:0c:42:a8: 7d:63:5c:2f:ba:4b:31:7b:18:6b:e3:76:86:fb:e0: 6f:b7:ea:86:bb:c5:a8:63:ae:49:e9:6a:fc:6e:4b: e0:ea:7f:85:96:ae:07:ac:bf:50:84:6d:49:6f:20: e9:fb:a5:63:27:e3:9d:fb:f8:dd:66:d6:72:52:9c: eb:de:74:3f:3a:67:0f:f7:4e:b9:82:8b:16:bf:e5: 94:b8:1c:23:5b:5e:cd:2c:73:b2:28:a9:d0:f6:fe: 09:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.46.8.0/23 Signature Algorithm: sha256WithRSAEncryption 19:fd:08:fa:04:29:31:42:19:26:f5:f6:9d:d2:61:cb:d8:11: a3:f3:01:56:c5:29:f0:bd:1d:31:8a:d1:54:c0:49:e3:b4:c1: c6:af:48:ee:d7:a9:2f:67:54:f3:1f:ed:17:05:e7:70:dc:ee: c7:1b:e5:06:34:65:14:2e:5e:b1:a6:56:ca:7d:2e:9e:f5:8b: 4a:50:b8:06:1a:c8:26:0e:f6:4c:eb:27:56:41:e0:4f:e0:8b: 3e:ab:4c:be:82:fe:61:76:c9:2a:7d:6e:7c:84:54:3f:7c:6f: 90:79:a1:e3:e9:4f:80:a9:cf:4b:89:25:dc:c9:f1:40:8e:53: c4:fb:cf:b6:9b:9b:8b:a4:00:a7:fe:af:ee:28:8b:7c:b8:97: 95:a4:a2:82:c4:b8:f6:2b:29:af:95:59:76:aa:37:dd:45:e6: 87:d4:e5:19:b1:c1:84:1d:0c:23:94:8e:30:5c:93:30:5d:f2: 42:af:73:cd:f1:ee:05:44:35:e0:ca:d6:7b:08:bc:08:5b:79: 36:32:28:57:c8:c2:bc:58:5f:31:5d:88:50:43:ed:9c:78:fa: 7f:51:1b:3f:59:a5:3c:a2:01:91:eb:e9:88:e4:d4:13:9e:cd: c8:97:72:61:79:b7:57:7d:21:15:51:76:da:25:89:01:83:26: f3:08:8a:1b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNGbgB8rJ5IA1103knk1V2nqCLtowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxMTA4MDAxM1oX DTI2MDYxMDA4MDUxM1owMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUz QjUwMEQ5OTJGRTNDQUU0MzcyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANOUPhhxRZLkBwlGsy7i8aacZkVykZhlbwBwEE8xNs1IBMM21jPEzu3ATlgW OXcT0ssXzyhM5hiEXbSipO3MzX+8QEitcYsfIUVueee5YlJWRGTJQ6JxGBNPatGf wMTRfr5wP2KpVyNhksZ+FUxfm2q4crhOPjt3+sqxPkoBS13B1qv2bBJehzKa29JR GjaDgxmirIU+ZuEUPD3Q/yqkKTF9DEKofWNcL7pLMXsYa+N2hvvgb7fqhrvFqGOu Selq/G5L4Op/hZauB6y/UIRtSW8g6fulYyfjnfv43WbWclKc6950PzpnD/dOuYKL Fr/llLgcI1tezSxzsiip0Pb+CYECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMlNQb6u9KVpeXU7UA2ZL+PK5DcnMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2ZDhhMGZh LTVkNGEtNDgzYi1hZjg5LTBlZjQwZGViMDVmMy8wL0M5NEQ0MUJFQUVGNEE1Njk3 OTc1M0I1MDBEOTkyRkUzQ0FFNDM3MjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnLggwDQYJKoZIhvcNAQELBQADggEBABn9CPoEKTFCGSb19p3SYcvYEaPzAVbF KfC9HTGK0VTASeO0wcavSO7XqS9nVPMf7RcF53Dc7scb5QY0ZRQuXrGmVsp9Lp71 i0pQuAYayCYO9kzrJ1ZB4E/giz6rTL6C/mF2ySp9bnyEVD98b5B5oePpT4Cpz0uJ JdzJ8UCOU8T7z7abm4ukAKf+r+4oi3y4l5WkooLEuPYrKa+VWXaqN91F5ofU5Rmx wYQdDCOUjjBckzBd8kKvc83x7gVENeDK1nsIvAhbeTYyKFfIwrxYXzFdiFBD7Zx4 +n9RGz9ZpTyiAZHr6Yjk1BOezciXcmF5t1d9IRVRdtoliQGDJvMIihs= -----END CERTIFICATE-----Generated at Tue Jun 17 23:15:14 2025 by rpki-client