$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F503463BC571123F80B94A358280E0D0F9750C09.cer File: F503463BC571123F80B94A358280E0D0F9750C09.cer (raw, json) Hash identifier: MB9MMPpPHBZfRkW60EE8n3dsBopfwNU9TqVhVxin2Rs= Subject key identifier: F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 77331FE7E22584CF1239B366DB6BEAE857069BFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft caRepository: rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 30 Mar 2025 01:48:04 +0000 Certificate not after: Sun 29 Mar 2026 01:53:04 +0000 Subordinate resources: IP: 103.169.186.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 17:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:33:1f:e7:e2:25:84:cf:12:39:b3:66:db:6b:ea:e8:57:06:9b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 30 01:48:04 2025 GMT Not After : Mar 29 01:53:04 2026 GMT Subject: CN=F503463BC571123F80B94A358280E0D0F9750C09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:57:ef:f8:21:0b:92:2e:f8:40:c6:e4:28: 8e:37:87:71:e1:85:b7:e2:80:cc:05:96:e3:fc:51: bc:e5:43:84:9c:fc:0a:12:ae:2f:fa:0f:05:bc:c8: 81:77:5e:44:47:a5:ca:4a:9b:ed:3a:8d:e7:e7:34: 55:d5:cf:b4:55:ed:1d:4d:49:bd:a1:46:c1:97:0a: e3:14:15:a6:6c:ce:72:ca:49:b6:61:49:49:68:f5: 3c:a3:7a:3e:6e:63:3d:69:27:6d:d2:72:2c:ac:1f: 44:57:f1:23:af:e2:13:55:43:6f:13:88:78:85:8c: 01:d3:bb:83:e6:65:c9:ef:5d:23:31:b0:09:66:08: 1c:6f:f3:d0:0d:1d:e3:08:f8:fc:1f:64:d7:86:9e: b0:b9:0f:8d:62:5f:67:7d:e8:9c:80:c4:6d:d2:3a: 8f:cc:15:81:9e:19:1e:46:48:5a:2e:93:ef:f0:90: 64:a5:5b:bc:49:7f:68:c7:8f:19:55:ec:13:3e:43: ee:60:ae:59:ef:9c:34:47:9d:fc:53:d0:04:27:59: 1c:61:76:ce:e8:d4:03:ea:b5:5e:f0:7e:94:63:76: 3d:c7:a8:35:6c:84:bd:dc:f3:8e:2a:3d:e2:64:92: 04:05:1c:7e:40:94:1a:dc:4e:d9:fe:4b:85:64:9e: 1f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.186.0/23 Signature Algorithm: sha256WithRSAEncryption 79:1f:2b:a6:44:2f:c3:af:3f:6f:31:b6:fb:01:ca:08:55:0a: cb:af:37:c4:1e:55:5d:f8:8a:66:73:f5:6a:fc:b2:75:25:26: dc:fc:37:56:9f:69:22:ac:7b:97:2c:22:b0:82:3c:77:f9:6a: bd:97:d5:73:30:cb:7a:ad:6a:13:ac:9d:24:3e:7b:d4:c5:27: 20:b5:bc:e4:1d:ce:db:3b:b5:21:68:35:0a:8d:ab:2e:64:d6: f5:a5:64:3c:50:8d:21:f8:4e:bd:1f:6c:de:11:24:9e:9c:93: 6b:3b:7d:c4:a9:50:47:7e:02:54:b9:d7:ad:1c:45:f0:2d:7e: 20:9d:e0:b1:10:81:5f:f0:94:e0:a4:e6:88:36:cc:ae:5f:a7: 22:a3:40:49:5e:2f:65:fd:46:54:af:4a:fe:23:69:7c:a3:09: af:0d:12:b3:4b:ee:e5:a5:3a:ee:d8:74:58:6d:d8:2e:be:9d: b1:d1:30:e5:0a:b5:6c:0a:2d:ee:04:3e:f7:21:11:ea:27:db: 26:1b:5c:f2:bf:23:95:33:47:21:11:63:1a:07:b4:1e:d6:51: f7:e5:de:21:00:b1:df:40:d0:c5:4d:d1:44:6b:9f:b7:ec:a9: e4:a6:ef:40:b8:67:91:76:6e:03:5b:bb:c2:c7:f0:85:bc:04: 7e:6f:3d:2e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdzMf5+IlhM8SObNm22vq6FcGm/swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMzMDAxNDgwNFoX DTI2MDMyOTAxNTMwNFowMzExMC8GA1UEAxMoRjUwMzQ2M0JDNTcxMTIzRjgwQjk0 QTM1ODI4MEUwRDBGOTc1MEMwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKe/V+/4IQuSLvhAxuQojjeHceGFt+KAzAWW4/xRvOVDhJz8ChKuL/oPBbzI gXdeREelykqb7TqN5+c0VdXPtFXtHU1JvaFGwZcK4xQVpmzOcspJtmFJSWj1PKN6 Pm5jPWknbdJyLKwfRFfxI6/iE1VDbxOIeIWMAdO7g+Zlye9dIzGwCWYIHG/z0A0d 4wj4/B9k14aesLkPjWJfZ33onIDEbdI6j8wVgZ4ZHkZIWi6T7/CQZKVbvEl/aMeP GVXsEz5D7mCuWe+cNEed/FPQBCdZHGF2zujUA+q1XvB+lGN2PceoNWyEvdzzjio9 4mSSBAUcfkCUGtxO2f5LhWSeH7cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPUDRjvFcRI/gLlKNYKA4ND5dQwJMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mYmNkOWE3ZC1kZTM1LTQ3ZTgtOTIyOC0xMmRmYjBiOGVhYzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiY2Q5YTdk LWRlMzUtNDdlOC05MjI4LTEyZGZiMGI4ZWFjOC8wL0Y1MDM0NjNCQzU3MTEyM0Y4 MEI5NEEzNTgyODBFMEQwRjk3NTBDMDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqbowDQYJKoZIhvcNAQELBQADggEBAHkfK6ZEL8OvP28xtvsByghVCsuvN8Qe VV34imZz9Wr8snUlJtz8N1afaSKse5csIrCCPHf5ar2X1XMwy3qtahOsnSQ+e9TF JyC1vOQdzts7tSFoNQqNqy5k1vWlZDxQjSH4Tr0fbN4RJJ6ck2s7fcSpUEd+AlS5 160cRfAtfiCd4LEQgV/wlOCk5og2zK5fpyKjQEleL2X9RlSvSv4jaXyjCa8NErNL 7uWlOu7YdFht2C6+nbHRMOUKtWwKLe4EPvchEeon2yYbXPK/I5UzRyERYxoHtB7W Uffl3iEAsd9A0MVN0URrn7fsqeSm70C4Z5F2bgNbu8LH8IW8BH5vPS4= -----END CERTIFICATE-----Generated at Wed Apr 30 10:50:00 2025 by rpki-client