$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer File: 30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.cer (raw, json) Hash identifier: hrmGgOEStsU/S9IchQxWHrbttgil02avBevsTmvG8WI= Subject key identifier: 30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 32DDCB74FF046ED659380DDB63EA7F89E4B4751E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft caRepository: rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 22 Jan 2025 20:47:33 +0000 Certificate not after: Wed 21 Jan 2026 20:52:33 +0000 Subordinate resources: IP: 103.107.18.0/23 IP: 2001:df3:bd00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:dd:cb:74:ff:04:6e:d6:59:38:0d:db:63:ea:7f:89:e4:b4:75:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 22 20:47:33 2025 GMT Not After : Jan 21 20:52:33 2026 GMT Subject: CN=30FC12E903AE0EE87BD1A1E58A062C8026A0CE51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5a:a9:f4:9b:c0:e8:0d:93:8e:46:a7:22:55: 99:8e:73:4e:dc:28:12:52:dc:9b:c5:4d:a8:37:12: 66:95:6c:57:3a:01:b8:8c:fc:bb:e5:e5:3c:6b:c6: 47:7d:82:7d:0d:bd:0a:9b:58:25:c2:12:ce:5f:5b: b7:81:f3:15:1b:6f:7c:0b:b6:9d:67:66:79:b9:b4: 6e:f7:08:e2:7f:9f:52:67:cf:51:9b:8a:97:1a:81: ff:ca:80:96:b1:39:c6:1b:e2:ea:a5:c3:74:59:17: ac:c8:42:9d:24:bc:91:61:08:95:ed:b8:15:bb:96: e9:81:76:c4:dc:50:6f:0d:84:db:96:0b:58:1a:b5: f4:2b:68:83:f8:6b:dd:1c:a3:f5:49:ca:7c:08:cc: 97:28:f8:de:00:c1:be:70:c8:71:c7:f0:3a:29:b7: ad:b7:44:38:38:6e:a5:81:d4:bb:3f:6d:13:b6:e2: 9d:a7:69:36:2b:71:b0:34:7b:bb:8f:6b:25:07:e3: 1d:19:c1:d2:27:21:ee:1c:aa:1f:35:3d:7a:04:4c: 21:79:9e:aa:cf:95:f3:ad:92:f7:de:92:42:28:7f: 81:13:2c:d9:b6:9f:a2:bb:4c:63:00:73:40:50:ab: 82:5f:80:77:98:99:03:7f:e4:4b:8d:22:b6:d4:28: 67:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:FC:12:E9:03:AE:0E:E8:7B:D1:A1:E5:8A:06:2C:80:26:A0:CE:51 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4711c110-7ab1-4a39-b9ca-3a9b0e81bcf5/0/30FC12E903AE0EE87BD1A1E58A062C8026A0CE51.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.18.0/23 IPv6: 2001:df3:bd00::/48 Signature Algorithm: sha256WithRSAEncryption 42:f0:14:9d:c9:2d:96:1d:a2:71:2b:17:ce:9d:4f:97:4b:75: 8e:1a:82:f0:ae:56:da:d5:af:91:4d:dd:83:96:06:12:45:91: f7:e9:98:1e:59:6c:81:5c:fb:fa:cd:b7:f0:06:6a:ce:03:6b: 1b:ff:36:84:5f:df:24:13:f3:ee:6a:72:a3:fb:07:30:6e:3c: d5:db:ce:ea:11:67:8e:70:d7:ea:75:13:16:96:be:91:45:4f: 37:58:7a:d4:cc:42:82:13:3f:6d:db:86:91:26:9b:16:37:71: 28:56:c4:16:42:95:ec:14:96:4b:38:ef:20:b6:7c:42:1a:51: a4:da:fe:c1:39:eb:70:6a:e1:c7:b6:eb:d7:77:53:fc:7a:42: 70:06:7b:a9:7a:26:d5:4b:0b:2f:5c:c7:fb:72:26:aa:86:cb: 79:c6:b3:15:b1:b1:d4:10:bf:9d:64:e5:ba:61:61:cf:62:29: a1:2b:2f:ef:4c:56:52:b6:e1:bd:85:28:19:9d:f8:47:54:8c: d0:48:92:c3:3b:7d:e9:56:13:92:b1:db:5c:57:f9:4c:83:27: 12:ef:6f:83:bf:28:85:48:f4:7d:c9:fa:6b:c3:65:a5:f5:3e: 1f:49:92:4e:5f:38:db:c9:a5:00:2b:9e:06:e3:7b:ad:9a:28: 31:c8:3b:fc -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUMt3LdP8EbtZZOA3bY+p/ieS0dR4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDEyMjIwNDczM1oX DTI2MDEyMTIwNTIzM1owMzExMC8GA1UEAxMoMzBGQzEyRTkwM0FFMEVFODdCRDFB MUU1OEEwNjJDODAyNkEwQ0U1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOpaqfSbwOgNk45GpyJVmY5zTtwoElLcm8VNqDcSZpVsVzoBuIz8u+XlPGvG R32CfQ29CptYJcISzl9bt4HzFRtvfAu2nWdmebm0bvcI4n+fUmfPUZuKlxqB/8qA lrE5xhvi6qXDdFkXrMhCnSS8kWEIle24FbuW6YF2xNxQbw2E25YLWBq19Ctog/hr 3Ryj9UnKfAjMlyj43gDBvnDIccfwOim3rbdEODhupYHUuz9tE7binadpNitxsDR7 u49rJQfjHRnB0ich7hyqHzU9egRMIXmeqs+V862S996SQih/gRMs2bafortMYwBz QFCrgl+Ad5iZA3/kS40ittQoZ3MCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDD8EukDrg7oe9Gh5YoGLIAmoM5RMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NzExYzExMC03YWIxLTRhMzktYjljYS0zYTliMGU4MWJjZjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3MTFjMTEw LTdhYjEtNGEzOS1iOWNhLTNhOWIwZTgxYmNmNS8wLzMwRkMxMkU5MDNBRTBFRTg3 QkQxQTFFNThBMDYyQzgwMjZBMENFNTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnaxIwDwQCAAIwCQMHACABDfO9ADANBgkqhkiG9w0BAQsFAAOCAQEAQvAUnckt lh2icSsXzp1Pl0t1jhqC8K5W2tWvkU3dg5YGEkWR9+mYHllsgVz7+s238AZqzgNr G/82hF/fJBPz7mpyo/sHMG481dvO6hFnjnDX6nUTFpa+kUVPN1h61MxCghM/bduG kSabFjdxKFbEFkKV7BSWSzjvILZ8QhpRpNr+wTnrcGrhx7br13dT/HpCcAZ7qXom 1UsLL1zH+3ImqobLecazFbGx1BC/nWTlumFhz2IpoSsv70xWUrbhvYUoGZ34R1SM 0EiSwzt96VYTkrHbXFf5TIMnEu9vg78ohUj0fcn6a8NlpfU+H0mSTl8428mlACue BuN7rZooMcg7/A== -----END CERTIFICATE-----Generated at Sat Apr 26 06:13:35 2025 by rpki-client on console.sobornost.net