$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer (raw, json) Hash identifier: +BAOyDjHBQ7d8+DMRCH4nPx5BVH6sRytBsJDbAAX0cY= Subject key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6E2F97B43151226424835A687AFBE2C6696212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft caRepository: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 07 Mar 2025 20:02:11 +0000 Certificate not after: Fri 06 Mar 2026 20:07:11 +0000 Subordinate resources: IP: 103.54.225.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 05:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:2f:97:b4:31:51:22:64:24:83:5a:68:7a:fb:e2:c6:69:62:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 7 20:02:11 2025 GMT Not After : Mar 6 20:07:11 2026 GMT Subject: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:61:ee:be:a9:52:db:b1:1f:86:2c:a2:08:96: 9e:d7:eb:a8:f0:d9:c4:12:0c:b8:b6:1e:8d:03:37: e0:3a:5b:fc:0d:da:c8:fb:b5:23:10:32:5e:73:a5: c8:ad:cc:18:b9:90:e5:c8:17:63:fd:05:09:07:99: af:32:ba:14:2e:9b:5f:ca:b8:db:2f:d1:2e:bd:c0: 75:61:b0:39:cb:68:02:22:4c:41:66:a1:db:ad:26: 92:e0:a5:6a:ee:35:92:fa:50:aa:de:9c:2a:4f:52: 82:08:8c:23:25:81:83:9f:18:10:49:44:d8:fe:fd: ec:70:62:55:9a:75:15:90:68:1e:eb:fd:9e:20:4f: 29:88:d7:4a:aa:79:d5:fc:6e:c0:16:6a:33:f6:42: 3b:76:ed:bd:c0:43:cc:ab:c6:0a:bb:b2:1e:06:6c: f5:d5:29:93:2b:f6:6c:f8:f8:10:9f:99:86:f5:5b: 91:2b:ef:f0:8a:a4:17:00:14:82:cd:be:5f:a6:45: 56:e2:6b:2b:e6:ab:3f:2d:77:a6:b2:a5:f0:8f:32: 6e:f9:a4:f6:82:fb:43:6d:57:4c:46:72:a2:6f:01: 7d:dc:03:95:52:d4:56:ca:53:30:64:59:c4:b2:74: eb:c4:58:80:15:64:8a:5b:2c:f1:b0:75:68:69:d1: 7c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.54.225.0/24 Signature Algorithm: sha256WithRSAEncryption 01:45:09:07:e0:7a:e5:f9:86:ee:0c:b4:e7:66:43:6a:35:88: 91:8c:96:ee:75:0b:81:51:a8:a9:6f:07:91:55:d2:a3:02:6a: 5b:67:40:38:34:7c:7e:5c:3a:7b:18:6f:ca:53:50:fe:44:9d: 11:92:c5:d0:13:de:76:7e:b7:69:3d:04:b4:4f:12:cb:88:d6: 62:bb:1d:7d:2d:a9:9c:71:58:d2:c6:f2:a4:fd:93:4a:5e:a6: a5:17:c5:c4:2c:67:07:bc:b7:61:0a:82:47:14:6e:d0:6a:fe: 04:b5:60:bf:d2:99:8c:b5:64:19:4e:21:85:c5:6a:d5:e5:11: 6c:84:c1:ba:4c:86:6b:8c:08:0e:42:a0:e8:0c:d5:9d:2e:8f: a2:aa:83:a3:cf:51:83:ed:d8:54:19:36:fb:be:90:1c:ed:53: 7d:2e:9a:a6:6a:00:29:2a:a3:84:ea:67:f3:c8:8c:1a:dc:64: c8:33:17:e7:11:e0:df:13:fb:36:74:98:6d:e3:e0:3f:fb:4f: 03:eb:31:15:26:44:c2:9f:1c:cc:90:d9:2e:1e:e7:82:57:84: e6:d9:65:2c:21:59:e5:15:bf:88:03:d3:0d:a8:f2:82:af:5f: 1d:2e:6d:83:23:04:15:84:39:ec:ad:77:07:aa:d0:f8:11:48: 09:fd:26:df -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgITbi+XtDFRImQkg1poevvixmliEjANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjUwMzA3MjAwMjExWhcN MjYwMzA2MjAwNzExWjAzMTEwLwYDVQQDEygxQTMyMDk5MDIzREQzMkIxQzNFRTY3 MTUxQzUwOThBQkRGQTU1RjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGHuvqlS27EfhiyiCJae1+uo8NnEEgy4th6NAzfgOlv8DdrI+7UjEDJec6XI rcwYuZDlyBdj/QUJB5mvMroULptfyrjbL9EuvcB1YbA5y2gCIkxBZqHbrSaS4KVq 7jWS+lCq3pwqT1KCCIwjJYGDnxgQSUTY/v3scGJVmnUVkGge6/2eIE8piNdKqnnV /G7AFmoz9kI7du29wEPMq8YKu7IeBmz11SmTK/Zs+PgQn5mG9VuRK+/wiqQXABSC zb5fpkVW4msr5qs/LXemsqXwjzJu+aT2gvtDbVdMRnKibwF93AOVUtRWylMwZFnE snTrxFiAFWSKWyzxsHVoadF87wIDAQABo4ICuDCCArQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUGjIJkCPdMrHD7mcVHFCYq9+lX0kwHwYDVR0jBBgwFoAUuo93 0h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIv QkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgzMzc2Qi5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvdW85 MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L2YyZTA1ZmNmLTVmMmEtNGQ1ZS1hM2YyLWQ4NDAzMmYwYzhmNy8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2Yt NWYyYS00ZDVlLWEzZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMz RUU2NzE1MUM1MDk4QUJERkE1NUY0OS5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGc24TANBgkqhkiG9w0BAQsFAAOCAQEAAUUJB+B65fmG7gy052ZDajWIkYyW7nUL gVGoqW8HkVXSowJqW2dAODR8flw6exhvylNQ/kSdEZLF0BPedn63aT0EtE8Sy4jW YrsdfS2pnHFY0sbypP2TSl6mpRfFxCxnB7y3YQqCRxRu0Gr+BLVgv9KZjLVkGU4h hcVq1eURbITBukyGa4wIDkKg6AzVnS6PoqqDo89Rg+3YVBk2+76QHO1TfS6apmoA KSqjhOpn88iMGtxkyDMX5xHg3xP7NnSYbePgP/tPA+sxFSZEwp8czJDZLh7ngleE 5tllLCFZ5RW/iAPTDajygq9fHS5tgyMEFYQ57K13B6rQ+BFICf0m3w== -----END CERTIFICATE-----Generated at Sun Apr 27 05:32:56 2025 by rpki-client on console.sobornost.net