$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer (raw, json) Hash identifier: e143sWAPrxFBnizhZjDaQQ9OGSDcrGTCKK+WqUiIw10= Subject key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7C3025A6A6025247C7AC149561D31A9BF391EFEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft caRepository: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 14 Apr 2025 11:28:50 +0000 Certificate not after: Mon 13 Apr 2026 11:33:50 +0000 Subordinate resources: IP: 103.186.210.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:30:25:a6:a6:02:52:47:c7:ac:14:95:61:d3:1a:9b:f3:91:ef:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 14 11:28:50 2025 GMT Not After : Apr 13 11:33:50 2026 GMT Subject: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:1a:e4:61:40:a5:d3:5b:f3:78:2e:4e:14: 43:f8:98:08:2c:18:5d:1d:9d:59:fb:e7:be:17:3b: 31:0f:93:f8:17:d6:b8:c2:5c:0e:6e:57:15:bd:a6: 81:89:61:6b:ba:a6:36:82:7d:f1:e8:6f:98:90:2c: fb:01:59:ff:b6:ea:cf:44:ae:1b:fe:d5:6c:95:2b: 60:86:1a:24:30:80:99:bf:87:0f:49:b9:c7:be:99: 5e:d8:bc:4a:39:bb:39:04:1c:9b:1c:42:30:db:a0: e2:ab:48:ff:09:0c:dc:cd:5b:4d:47:ba:7f:0c:b3: 70:a2:ed:10:fd:1c:a5:b2:69:a9:38:e6:b5:e3:7e: 0f:e6:41:8f:4e:6c:73:cb:a2:eb:1f:80:26:41:23: 35:9e:70:3f:fd:2a:8a:3d:d8:63:93:69:0a:20:49: e1:78:92:4d:cb:1f:83:a7:e5:20:4d:6d:52:6a:e7: 64:f4:7b:11:de:21:cd:f7:36:b8:37:53:c7:88:4a: 30:d8:2b:16:5c:b0:38:a0:8e:a3:b8:0d:6e:57:0f: 37:c9:a4:cc:c1:28:71:c1:5d:2f:17:22:2f:6d:fc: df:2c:da:3c:7a:27:f2:44:a5:8b:45:c2:a4:68:79: 76:f4:50:13:e2:00:00:0b:18:e7:86:6f:e8:22:ef: 52:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.210.0/23 Signature Algorithm: sha256WithRSAEncryption 08:60:d0:4e:5b:1f:f0:fa:fb:f8:46:52:61:c1:3c:9d:de:56: 62:2e:ca:0f:02:30:51:34:ce:36:99:39:03:00:af:52:d9:fa: f2:13:b0:f1:62:82:4a:5b:e6:10:21:95:9c:b1:49:5e:8c:18: ff:a8:b3:15:d2:ff:88:48:4e:8f:47:f0:cc:e4:49:f4:a4:18: cd:b6:8e:fd:04:17:74:cf:76:be:bf:48:f4:fa:e3:a0:4a:5e: 9e:75:82:a0:9e:ca:58:2e:0f:a2:d6:90:63:5e:e9:46:c2:72: c2:ed:cd:60:a1:c5:89:64:43:a4:49:8b:1d:d7:f2:a2:64:c0: d4:9f:6c:75:45:6b:c2:ff:b3:c2:d5:6e:9b:1f:d5:88:68:fd: 0f:9c:ef:a5:cd:85:4e:34:c1:2f:b1:b6:61:6c:fb:1d:bb:b2: 4f:2d:99:7a:62:3c:b3:7d:ab:5d:a8:e6:2a:72:f9:de:2c:04: d5:8c:4a:a3:cd:22:8c:75:83:96:1f:27:31:7f:65:dd:29:4e: 03:51:ac:23:49:26:87:4c:ce:88:73:62:d1:d4:1c:5f:89:bd: 18:ec:e1:95:1a:99:a0:b9:40:d3:01:f2:a6:d8:db:fb:95:9d: 63:14:3c:e8:d8:a6:ff:5c:1f:1d:8e:e9:0e:d3:17:92:85:30: 67:12:ed:da -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfDAlpqYCUkfHrBSVYdMam/OR7+wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxNDExMjg1MFoX DTI2MDQxMzExMzM1MFowMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFC NUM3RkQzRUYyN0JFOEU4M0E3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPWGuRhQKXTW/N4Lk4UQ/iYCCwYXR2dWfvnvhc7MQ+T+BfWuMJcDm5XFb2m gYlha7qmNoJ98ehvmJAs+wFZ/7bqz0SuG/7VbJUrYIYaJDCAmb+HD0m5x76ZXti8 Sjm7OQQcmxxCMNug4qtI/wkM3M1bTUe6fwyzcKLtEP0cpbJpqTjmteN+D+ZBj05s c8ui6x+AJkEjNZ5wP/0qij3YY5NpCiBJ4XiSTcsfg6flIE1tUmrnZPR7Ed4hzfc2 uDdTx4hKMNgrFlywOKCOo7gNblcPN8mkzMEoccFdLxciL2383yzaPHon8kSli0XC pGh5dvRQE+IAAAsY54Zv6CLvUvMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB0hOF61s/gsfRq1x/0+8nvo6Dp7MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0ZGNlZjY1 LTVkZTMtNDEyOS1hYzI3LTc3MDZkNzI2NjAwMS8wLzFEMjEzODVFQjVCM0Y4MkM3 RDFBQjVDN0ZEM0VGMjdCRThFODNBN0IubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnutIwDQYJKoZIhvcNAQELBQADggEBAAhg0E5bH/D6+/hGUmHBPJ3eVmIuyg8C MFE0zjaZOQMAr1LZ+vITsPFigkpb5hAhlZyxSV6MGP+osxXS/4hITo9H8MzkSfSk GM22jv0EF3TPdr6/SPT646BKXp51gqCeylguD6LWkGNe6UbCcsLtzWChxYlkQ6RJ ix3X8qJkwNSfbHVFa8L/s8LVbpsf1Yho/Q+c76XNhU40wS+xtmFs+x27sk8tmXpi PLN9q12o5ipy+d4sBNWMSqPNIox1g5YfJzF/Zd0pTgNRrCNJJodMzohzYtHUHF+J vRjs4ZUamaC5QNMB8qbY2/uVnWMUPOjYpv9cHx2O6Q7TF5KFMGcS7do= -----END CERTIFICATE-----Generated at Fri Apr 25 10:36:41 2025 by rpki-client on console.sobornost.net