$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer File: E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer (raw, json) Hash identifier: wSGsKtw7Sh6Obedm9bWqPuq1AOj0bDeojMPWYVoDUrA= Subject key identifier: E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 72574DED9B46B4D28A60E3EE7CAB9E2AB4AE0350 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft caRepository: rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 17:49:13 +0000 Certificate not after: Tue 02 Jun 2026 17:54:13 +0000 Subordinate resources: IP: 103.153.2.0/23 IP: 2001:df4:2680::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:57:4d:ed:9b:46:b4:d2:8a:60:e3:ee:7c:ab:9e:2a:b4:ae:03:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 17:49:13 2025 GMT Not After : Jun 2 17:54:13 2026 GMT Subject: CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:b3:f8:8f:dd:ae:c8:83:37:8a:33:6b:d9: af:eb:3a:3c:59:ae:ab:bd:4f:42:f1:6d:9f:4a:2c: e8:fd:46:98:a9:e4:e7:2f:a4:2a:95:c4:b3:19:5e: 5e:7f:99:36:d3:51:8e:25:20:05:ab:af:c4:93:08: 50:98:6a:e2:5f:b1:47:63:a8:5f:58:50:c0:79:de: df:21:3a:95:5b:94:68:7b:9b:f9:03:d5:55:43:6c: 83:c8:4c:2c:17:9c:d0:49:70:6f:de:ff:b9:1b:56: 28:0f:3c:7f:fa:fd:84:fa:1b:14:45:14:f2:b0:62: 36:90:82:91:44:03:f6:dc:bf:11:3e:5c:6c:33:59: 02:ef:96:1f:7a:a7:0d:74:88:d6:5f:03:68:ec:9b: cb:02:e5:5a:4d:71:7d:88:a2:6a:54:7e:38:55:d2: cc:bd:42:94:f0:8a:e3:04:59:49:1d:5d:0b:cf:6e: e5:90:2e:8d:9b:f1:2b:b0:b5:8f:a0:16:21:10:dc: ea:f4:22:47:a1:41:7f:f4:e9:36:c6:9f:5b:cd:e3: b1:5d:eb:49:e9:8e:14:e7:34:2a:6f:b2:98:58:1e: e0:21:39:4e:e3:57:11:4e:32:c8:f3:6b:83:64:ef: 7a:aa:39:7b:d1:67:9a:1e:1f:b5:04:54:f0:40:4c: 39:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.2.0/23 IPv6: 2001:df4:2680::/48 Signature Algorithm: sha256WithRSAEncryption 3f:f6:00:18:76:ce:c5:8d:fd:bc:38:fb:da:5b:20:b4:d7:4b: d7:87:09:ea:07:4d:5c:20:30:89:f2:6b:73:1d:40:f3:62:6b: 11:07:82:ee:55:6a:ce:e7:24:35:97:2f:9e:f4:43:7f:7a:c0: a4:bd:2a:a8:c5:61:49:4c:79:02:27:f5:c1:ac:63:cf:11:77: 12:b5:12:38:82:b2:80:c7:61:2e:0d:8d:1b:ed:7a:ad:af:fa: 54:4d:77:49:7b:fb:9e:ba:2c:31:bd:94:2e:b2:52:7d:ca:66: 6d:cf:3a:60:6d:c8:16:e9:d4:dd:0f:56:be:7d:95:6c:8d:14: 35:2f:36:8f:14:c5:09:14:73:8d:18:30:42:13:fc:31:8b:d7: 68:b6:06:fb:7b:e6:b8:34:3c:bb:88:32:4d:f0:20:c8:a7:f1: a6:9e:fd:95:6f:98:04:09:ba:9c:91:b9:b3:ad:4c:69:bc:7f: 3f:dd:ed:07:98:4b:10:e7:29:06:67:d3:40:b6:fc:ff:8b:63: 8f:89:e1:22:70:d4:5b:c2:59:76:63:0a:7c:c4:df:46:2a:08: 57:61:c8:25:27:bd:f0:22:a3:e7:85:28:23:15:7e:33:f0:1d: 08:c3:f8:e3:ae:88:8f:88:00:bc:da:b3:97:25:ff:3b:54:83: 14:08:16:85 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUcldN7ZtGtNKKYOPufKueKrSuA1AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzE3NDkxM1oX DTI2MDYwMjE3NTQxM1owMzExMC8GA1UEAxMoRTIyNkI0RkE4NDJEQ0U2QzM4NjQ0 OUYxNEY4QzIxQ0ZEODBDRjk3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZ3s/iP3a7IgzeKM2vZr+s6PFmuq71PQvFtn0os6P1GmKnk5y+kKpXEsxle Xn+ZNtNRjiUgBauvxJMIUJhq4l+xR2OoX1hQwHne3yE6lVuUaHub+QPVVUNsg8hM LBec0Elwb97/uRtWKA88f/r9hPobFEUU8rBiNpCCkUQD9ty/ET5cbDNZAu+WH3qn DXSI1l8DaOybywLlWk1xfYiialR+OFXSzL1ClPCK4wRZSR1dC89u5ZAujZvxK7C1 j6AWIRDc6vQiR6FBf/TpNsafW83jsV3rSemOFOc0Km+ymFge4CE5TuNXEU4yyPNr g2Tveqo5e9Fnmh4ftQRU8EBMORECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOImtPqELc5sOGRJ8U+MIc/YDPl3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYmMxYWI3MS05MWQwLTRmMGItYmIyOS1jYmI3ZDM1ZTc0YmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViYzFhYjcx LTkxZDAtNGYwYi1iYjI5LWNiYjdkMzVlNzRiYS8wL0UyMjZCNEZBODQyRENFNkMz ODY0NDlGMTRGOEMyMUNGRDgwQ0Y5NzcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnmQIwDwQCAAIwCQMHACABDfQmgDANBgkqhkiG9w0BAQsFAAOCAQEAP/YAGHbO xY39vDj72lsgtNdL14cJ6gdNXCAwifJrcx1A82JrEQeC7lVqzuckNZcvnvRDf3rA pL0qqMVhSUx5Aif1waxjzxF3ErUSOIKygMdhLg2NG+16ra/6VE13SXv7nrosMb2U LrJSfcpmbc86YG3IFunU3Q9Wvn2VbI0UNS82jxTFCRRzjRgwQhP8MYvXaLYG+3vm uDQ8u4gyTfAgyKfxpp79lW+YBAm6nJG5s61Mabx/P93tB5hLEOcpBmfTQLb8/4tj j4nhInDUW8JZdmMKfMTfRioIV2HIJSe98CKj54UoIxV+M/AdCMP4466Ij4gAvNqz lyX/O1SDFAgWhQ== -----END CERTIFICATE-----Generated at Sun Jun 15 14:37:06 2025 by rpki-client