$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F490341241E1B1C7D170AB872CA39A68309B3F3B.cer File: F490341241E1B1C7D170AB872CA39A68309B3F3B.cer (raw, json) Hash identifier: KBZracB5UZ8x2SbNPSeoaqmHPlyeSN/TwKZK9R8kZ+8= Subject key identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 101C4014412A0D9206A26612417A1356284927AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft caRepository: rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 19:01:34 +0000 Certificate not after: Tue 02 Jun 2026 19:06:34 +0000 Subordinate resources: IP: 182.255.0.0/21 IP: 2001:df0:b5::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 00:16:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1c:40:14:41:2a:0d:92:06:a2:66:12:41:7a:13:56:28:49:27:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 19:01:34 2025 GMT Not After : Jun 2 19:06:34 2026 GMT Subject: CN=F490341241E1B1C7D170AB872CA39A68309B3F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:67:11:a1:fa:80:54:51:a5:06:ef:89:22:c4: 8d:2a:7e:62:7b:62:28:36:63:2e:a2:2d:d3:6f:b9: 91:f2:ec:1d:48:b1:33:c2:e0:33:88:44:ba:49:de: e8:2f:6b:61:0c:d8:d6:0a:50:9c:81:80:2c:59:4f: 3f:d6:cb:38:29:e7:a2:0e:ea:74:60:84:d7:0b:41: bd:23:73:f6:cb:83:a9:df:0a:9b:8c:b7:37:2f:d9: 06:76:e9:09:3e:19:82:06:7d:2b:b7:bb:65:59:54: f2:9b:a5:16:a7:a7:9d:39:dd:ec:4d:b4:25:74:89: fd:52:e4:35:0e:d3:ee:97:9f:29:10:8f:71:07:8a: 7d:b4:20:85:f6:2d:a8:5a:fb:38:ad:5f:e1:45:80: ba:b7:56:1d:52:30:01:48:42:e1:a7:f2:42:6d:7e: 16:34:e0:76:ea:cb:90:85:67:8e:fa:c2:65:cb:8a: ee:86:b5:35:66:95:27:47:63:99:e4:45:78:41:52: 71:6c:a0:61:88:6f:b0:0b:ba:ad:ea:d2:bb:64:76: 2b:62:bf:6f:49:6d:08:d0:5c:0a:52:c5:69:7a:c9: 49:71:e1:3a:3f:b1:69:45:33:61:9c:3f:fb:bf:2d: f6:0a:4d:78:8d:db:ab:b0:a4:49:6d:c8:ec:af:75: 82:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F4:90:34:12:41:E1:B1:C7:D1:70:AB:87:2C:A3:9A:68:30:9B:3F:3B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ae86b092-527d-488f-a9f7-24797d9774cb/0/F490341241E1B1C7D170AB872CA39A68309B3F3B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.255.0.0/21 IPv6: 2001:df0:b5::/48 Signature Algorithm: sha256WithRSAEncryption 40:44:15:9d:ba:55:46:e1:b6:43:2e:50:b4:5b:57:86:64:65: ee:bb:16:08:ab:d6:25:07:be:f5:04:a6:5b:b9:e4:ef:b3:dc: 84:a0:14:24:72:85:f3:5f:e9:1b:ba:e4:5e:ef:7b:1c:67:b1: 1f:6f:bf:41:08:f8:4c:8e:a1:0f:35:4b:4f:b5:99:13:f0:b0: ad:33:8e:8d:18:f9:bd:9c:50:85:53:b2:61:a7:d3:aa:bc:06: 0a:d6:a3:a3:39:a6:bc:d4:18:9a:44:13:46:3b:65:2b:19:cd: 70:bf:aa:4e:65:eb:f3:bf:cf:9f:91:c3:40:fe:23:4e:85:83: 4a:68:13:d8:e6:f3:a1:23:fc:21:c6:9a:d3:7f:92:d4:b0:8d: 2b:19:76:08:07:2e:ad:9a:65:5c:98:ec:25:b3:cc:ee:6f:52: 62:7c:0b:b0:c6:c5:c5:cd:9d:91:11:79:4d:fa:70:fc:e6:de: 08:aa:d1:72:7e:e7:0b:86:b1:7c:22:3d:bd:be:4a:d3:e0:ba: 9a:25:19:f3:74:5a:46:7a:da:1c:b1:10:ca:95:9f:0e:05:17: 7e:35:f2:11:f9:1b:62:b1:dc:6e:e6:5e:cf:a8:31:0d:62:b4: fc:2f:e3:84:d7:e3:ab:4c:e4:25:59:f2:38:ce:6f:a7:44:c9: a6:16:0d:ac -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUEBxAFEEqDZIGomYSQXoTVihJJ6owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzE5MDEzNFoX DTI2MDYwMjE5MDYzNFowMzExMC8GA1UEAxMoRjQ5MDM0MTI0MUUxQjFDN0QxNzBB Qjg3MkNBMzlBNjgzMDlCM0YzQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJtnEaH6gFRRpQbviSLEjSp+YntiKDZjLqIt02+5kfLsHUixM8LgM4hEukne 6C9rYQzY1gpQnIGALFlPP9bLOCnnog7qdGCE1wtBvSNz9suDqd8Km4y3Ny/ZBnbp CT4ZggZ9K7e7ZVlU8pulFqennTnd7E20JXSJ/VLkNQ7T7pefKRCPcQeKfbQghfYt qFr7OK1f4UWAurdWHVIwAUhC4afyQm1+FjTgdurLkIVnjvrCZcuK7oa1NWaVJ0dj meRFeEFScWygYYhvsAu6rerSu2R2K2K/b0ltCNBcClLFaXrJSXHhOj+xaUUzYZw/ +78t9gpNeI3bq7CkSW3I7K91gqcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPSQNBJB4bHH0XCrhyyjmmgwmz87MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZTg2YjA5Mi01MjdkLTQ4OGYtYTlmNy0yNDc5N2Q5Nzc0Y2IvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlODZiMDky LTUyN2QtNDg4Zi1hOWY3LTI0Nzk3ZDk3NzRjYi8wL0Y0OTAzNDEyNDFFMUIxQzdE MTcwQUI4NzJDQTM5QTY4MzA5QjNGM0IubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAO2/wAwDwQCAAIwCQMHACABDfAAtTANBgkqhkiG9w0BAQsFAAOCAQEAQEQVnbpV RuG2Qy5QtFtXhmRl7rsWCKvWJQe+9QSmW7nk77PchKAUJHKF81/pG7rkXu97HGex H2+/QQj4TI6hDzVLT7WZE/CwrTOOjRj5vZxQhVOyYafTqrwGCtajozmmvNQYmkQT RjtlKxnNcL+qTmXr87/Pn5HDQP4jToWDSmgT2ObzoSP8Icaa03+S1LCNKxl2CAcu rZplXJjsJbPM7m9SYnwLsMbFxc2dkRF5Tfpw/ObeCKrRcn7nC4axfCI9vb5K0+C6 miUZ83RaRnraHLEQypWfDgUXfjXyEfkbYrHcbuZez6gxDWK0/C/jhNfjq0zkJVny OM5vp0TJphYNrA== -----END CERTIFICATE-----Generated at Fri Jun 20 19:11:42 2025 by rpki-client