$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer (raw, json) Hash identifier: GOXdrd8feP0kxvowEAm/SdSldAUJv0ROz+eyQNzvysA= Subject key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2D39360087846FE02872AB8FB08DC4DDA2F7B4FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft caRepository: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 28 Mar 2025 10:48:36 +0000 Certificate not after: Fri 27 Mar 2026 10:53:36 +0000 Subordinate resources: IP: 103.173.128.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:39:36:00:87:84:6f:e0:28:72:ab:8f:b0:8d:c4:dd:a2:f7:b4:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 28 10:48:36 2025 GMT Not After : Mar 27 10:53:36 2026 GMT Subject: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:5d:44:a1:53:10:32:24:bc:c1:ff:59:70: e2:af:01:fd:8e:b7:62:7c:3e:4a:44:bb:b5:81:1c: 4c:b7:c0:98:9f:f3:4d:e4:a7:08:44:0a:2b:75:df: 5e:b0:be:b2:ec:67:82:16:c7:cc:c3:1a:8c:a5:74: 34:74:f6:6a:e3:dd:54:77:2e:07:ea:3f:e3:68:77: 57:d9:3f:6a:e0:1f:be:50:f4:74:6a:be:14:55:4a: bd:32:4f:a8:6e:12:98:49:43:d9:02:eb:cb:fb:45: 06:f3:d4:c3:90:33:bf:11:b3:bc:d1:40:87:95:16: b8:cb:33:92:ea:a6:91:c7:f8:a2:22:8b:f2:cc:b7: 40:23:37:64:07:44:07:53:dd:19:5d:10:5a:53:91: f1:b5:05:8c:dd:08:a5:b5:c1:42:f2:20:9a:09:b9: 0c:3b:c0:49:ce:b3:63:61:30:a0:65:17:90:c0:c4: f3:bb:24:17:34:11:c0:f2:dc:6e:07:b2:24:33:45: 30:96:f7:99:3b:a2:26:42:ba:5d:66:4d:db:b8:db: 1c:6f:5e:3b:2b:dd:a4:14:df:b9:7f:53:54:a5:7c: cb:a5:bc:b9:72:43:88:b2:9e:21:9b:48:99:7e:80: 98:da:08:00:f4:bb:af:0c:e7:e0:d4:25:64:e7:eb: 6d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.128.0/23 Signature Algorithm: sha256WithRSAEncryption 50:17:2e:95:70:b5:86:04:33:de:6d:6f:46:bd:4a:9a:d1:50: f2:5a:f0:3a:b5:3f:73:49:ec:be:ea:20:2a:cf:31:56:2f:15: d9:24:c9:ac:23:fb:58:5b:df:bd:7e:ab:90:6f:ad:ce:3c:e1: 22:3a:8f:9c:9d:bd:be:a5:85:5d:29:f3:62:b3:bc:f5:f0:9d: e6:03:fc:99:7b:8d:4d:d4:55:ff:ac:6f:c4:91:7f:16:a1:40: 91:5e:dd:75:e8:0c:5d:ea:e2:14:84:1d:e6:5c:73:9a:96:07: 92:71:03:8c:a5:c9:ef:bd:ae:55:85:9a:c2:1a:2a:d2:32:b5: f5:d3:49:df:6c:3f:e6:f3:9d:63:8f:af:ef:f3:c8:74:77:dc: 0e:44:34:85:93:2f:7e:64:21:a1:65:4a:1d:b4:26:d8:34:39: 2b:5f:37:3b:cb:9c:8a:7d:35:1c:a6:16:3d:da:d8:55:88:ad: b7:6b:01:03:d5:6c:65:db:86:9d:17:0a:eb:da:66:dd:90:bb: 1a:f3:ee:ce:03:87:55:41:11:29:ec:13:d5:f6:82:04:18:c3: b5:bc:3b:03:7d:69:f9:a9:71:ae:d4:ce:82:bf:c1:96:84:b5: 10:19:3c:ff:cd:41:c3:82:88:1b:a9:e1:c7:94:bf:77:80:bb: a4:76:bc:0a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULTk2AIeEb+AocquPsI3E3aL3tP0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMyODEwNDgzNloX DTI2MDMyNzEwNTMzNlowMzExMC8GA1UEAxMoNEE4QjZBMzM5NTYxMkNEMzNEQThC M0MzODFENkVEQ0ZBNEE0NUExRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRrXUShUxAyJLzB/1lw4q8B/Y63Ynw+SkS7tYEcTLfAmJ/zTeSnCEQKK3Xf XrC+suxnghbHzMMajKV0NHT2auPdVHcuB+o/42h3V9k/auAfvlD0dGq+FFVKvTJP qG4SmElD2QLry/tFBvPUw5AzvxGzvNFAh5UWuMszkuqmkcf4oiKL8sy3QCM3ZAdE B1PdGV0QWlOR8bUFjN0IpbXBQvIgmgm5DDvASc6zY2EwoGUXkMDE87skFzQRwPLc bgeyJDNFMJb3mTuiJkK6XWZN27jbHG9eOyvdpBTfuX9TVKV8y6W8uXJDiLKeIZtI mX6AmNoIAPS7rwzn4NQlZOfrbYcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEqLajOVYSzTPaizw4HW7c+kpFofMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81OWEzN2FlYy02M2MyLTQ1ZDEtOTZhZS1kYTE2ZDEwMThiMGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5YTM3YWVj LTYzYzItNDVkMS05NmFlLWRhMTZkMTAxOGIwZi8wLzRBOEI2QTMzOTU2MTJDRDMz REE4QjNDMzgxRDZFRENGQTRBNDVBMUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrYAwDQYJKoZIhvcNAQELBQADggEBAFAXLpVwtYYEM95tb0a9SprRUPJa8Dq1 P3NJ7L7qICrPMVYvFdkkyawj+1hb371+q5Bvrc484SI6j5ydvb6lhV0p82KzvPXw neYD/Jl7jU3UVf+sb8SRfxahQJFe3XXoDF3q4hSEHeZcc5qWB5JxA4ylye+9rlWF msIaKtIytfXTSd9sP+bznWOPr+/zyHR33A5ENIWTL35kIaFlSh20Jtg0OStfNzvL nIp9NRymFj3a2FWIrbdrAQPVbGXbhp0XCuvaZt2Quxrz7s4Dh1VBESnsE9X2ggQY w7W8OwN9afmpca7UzoK/wZaEtRAZPP/NQcOCiBup4ceUv3eAu6R2vAo= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:13 2025 by rpki-client on console.sobornost.net