$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer File: CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.cer (raw, json) Hash identifier: UVxg4nPxKE4m1Uk87Sbxui4zD8m8+YFL1Er5I3UQ8BA= Subject key identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 016768083989716F10EE5E66F8721639BE853443 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft caRepository: rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 00:02:07 +0000 Certificate not after: Tue 02 Jun 2026 00:07:07 +0000 Subordinate resources: IP: 103.91.44.0/22 IP: 2001:df0:fb00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 12:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:67:68:08:39:89:71:6f:10:ee:5e:66:f8:72:16:39:be:85:34:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 00:02:07 2025 GMT Not After : Jun 2 00:07:07 2026 GMT Subject: CN=CE0CD1353A42A0A99EE768F3FAF235E38F6C1189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:44:a6:fe:6d:5a:a1:bf:56:af:8b:b4:ea: cc:04:1d:1b:c5:c1:ee:a5:45:56:93:8c:07:92:e4: 36:cb:6d:fd:55:df:d4:f3:b4:3a:e6:1c:15:aa:14: 5c:96:bd:6c:fc:83:fe:d7:f8:86:7d:9f:4e:0f:a3: cb:79:1d:3d:34:aa:c5:95:c4:45:4a:26:cf:79:de: 33:65:45:4b:65:a5:ff:e2:79:d0:26:9e:fb:67:db: 91:6b:0f:7d:60:00:fe:3f:20:41:5b:5c:09:f6:a0: c1:37:84:80:99:b5:33:e7:6b:f9:25:07:f5:65:8a: 27:3d:75:d4:5c:93:63:a4:89:95:53:58:91:57:ee: 42:7f:67:db:90:24:e8:1b:2c:dc:d5:1e:22:e1:63: e7:4c:b1:ae:c6:4f:2d:e9:46:51:dd:86:6b:97:6f: 5a:ce:5d:52:7e:b3:c7:dd:12:c8:73:67:e3:ad:7f: 8b:5c:11:00:ab:67:78:be:f5:90:97:61:03:e7:3f: b5:06:c7:0e:8d:1a:60:43:fd:c8:94:3a:19:da:97: ef:e5:a4:f0:bb:45:d3:b7:a5:f4:7d:43:60:c1:d2: 10:e3:e9:cf:14:2e:f4:e2:fa:2f:ba:61:17:6a:eb: 55:f9:c1:38:e2:3a:1e:fd:fa:90:00:62:22:0f:24: 5e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:0C:D1:35:3A:42:A0:A9:9E:E7:68:F3:FA:F2:35:E3:8F:6C:11:89 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f373bc61-c5f9-4159-98bc-a0530b4dd8b4/0/CE0CD1353A42A0A99EE768F3FAF235E38F6C1189.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.44.0/22 IPv6: 2001:df0:fb00::/48 Signature Algorithm: sha256WithRSAEncryption 6c:66:7e:d5:79:0a:e2:e4:28:48:d7:c0:59:82:e2:e0:3a:e3: cc:06:84:90:c9:97:d9:9c:34:83:ba:d7:b6:9f:3b:1a:20:7e: df:88:6b:4b:ea:ca:aa:b9:1f:f7:9c:67:0e:c9:c5:d2:5f:cb: 11:15:ee:12:9e:57:ef:50:fd:c5:9b:01:93:ee:f1:b6:94:11: 6d:ca:6a:a3:54:3a:4a:a9:ab:bc:48:c5:78:a6:d0:ac:31:cd: 6d:ec:31:e9:9c:d3:a6:09:a0:52:86:ff:2a:ac:67:71:7b:c5: c0:fc:ea:be:a3:5a:09:f7:2c:a3:af:84:80:b5:f2:de:2c:a4: 3d:ba:e5:19:9f:42:78:94:cf:82:af:25:49:fb:5a:71:da:04: 8e:1c:0a:51:5a:58:98:81:ef:01:73:06:00:e1:cc:af:52:ed: 6f:a8:10:0e:ad:7f:55:cc:10:d3:6b:70:db:9f:c3:b2:c7:81: 86:ca:19:fa:f2:f5:35:a2:c7:f1:d1:bb:29:86:20:5c:ab:14: 43:d1:a9:5f:62:a2:12:81:30:02:47:c1:6d:a4:18:a3:82:aa: ea:ef:89:c7:de:aa:17:8d:81:61:a1:99:4d:6f:32:32:81:e2: 16:9d:c8:c3:7b:58:e0:e8:78:5b:d7:0f:72:9d:c4:6e:80:bb: e6:20:9e:ff -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUAWdoCDmJcW8Q7l5m+HIWOb6FNEMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzAwMDIwN1oX DTI2MDYwMjAwMDcwN1owMzExMC8GA1UEAxMoQ0UwQ0QxMzUzQTQyQTBBOTlFRTc2 OEYzRkFGMjM1RTM4RjZDMTE4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL8bRKb+bVqhv1avi7TqzAQdG8XB7qVFVpOMB5LkNstt/VXf1PO0OuYcFaoU XJa9bPyD/tf4hn2fTg+jy3kdPTSqxZXERUomz3neM2VFS2Wl/+J50Cae+2fbkWsP fWAA/j8gQVtcCfagwTeEgJm1M+dr+SUH9WWKJz111FyTY6SJlVNYkVfuQn9n25Ak 6Bss3NUeIuFj50yxrsZPLelGUd2Ga5dvWs5dUn6zx90SyHNn461/i1wRAKtneL71 kJdhA+c/tQbHDo0aYEP9yJQ6GdqX7+Wk8LtF07el9H1DYMHSEOPpzxQu9OL6L7ph F2rrVfnBOOI6Hv36kABiIg8kXgcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM4M0TU6QqCpnudo8/ryNeOPbBGJMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMzczYmM2MS1jNWY5LTQxNTktOThiYy1hMDUzMGI0ZGQ4YjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNzNiYzYx LWM1ZjktNDE1OS05OGJjLWEwNTMwYjRkZDhiNC8wL0NFMENEMTM1M0E0MkEwQTk5 RUU3NjhGM0ZBRjIzNUUzOEY2QzExODkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJnWywwDwQCAAIwCQMHACABDfD7ADANBgkqhkiG9w0BAQsFAAOCAQEAbGZ+1XkK 4uQoSNfAWYLi4DrjzAaEkMmX2Zw0g7rXtp87GiB+34hrS+rKqrkf95xnDsnF0l/L ERXuEp5X71D9xZsBk+7xtpQRbcpqo1Q6SqmrvEjFeKbQrDHNbewx6ZzTpgmgUob/ KqxncXvFwPzqvqNaCfcso6+EgLXy3iykPbrlGZ9CeJTPgq8lSftacdoEjhwKUVpY mIHvAXMGAOHMr1Ltb6gQDq1/VcwQ02tw25/DsseBhsoZ+vL1NaLH8dG7KYYgXKsU Q9GpX2KiEoEwAkfBbaQYo4Kq6u+Jx96qF42BYaGZTW8yMoHiFp3Iw3tY4Oh4W9cP cp3EboC75iCe/w== -----END CERTIFICATE-----Generated at Wed Jun 18 18:14:35 2025 by rpki-client