$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer File: 782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer (raw, json) Hash identifier: rnVbu7lNW9xtUo2HdrE/oZIVKca5nCCDzlaEOC4/Ylg= Subject key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5857BDA1CE72B28B95A9B96934BD8163D55678F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft caRepository: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 21 Mar 2025 18:37:45 +0000 Certificate not after: Fri 20 Mar 2026 18:42:45 +0000 Subordinate resources: IP: 103.21.216.0/22 IP: 202.77.96.0/19 IP: 202.137.0.0 -- 202.137.23.255 IP: 2405:100::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:57:bd:a1:ce:72:b2:8b:95:a9:b9:69:34:bd:81:63:d5:56:78:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 21 18:37:45 2025 GMT Not After : Mar 20 18:42:45 2026 GMT Subject: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:34:28:3f:64:39:f9:48:46:97:ea:20:93:0e: f5:bf:37:88:04:33:f1:89:62:e2:51:cb:c8:05:53: 64:0d:bb:85:77:b9:e8:eb:fd:7b:29:72:8a:70:f5: e7:b3:49:b2:73:c7:2d:2a:78:d4:37:14:b8:26:17: 3e:eb:93:95:f1:4f:d9:6c:a7:6d:0c:0a:12:74:d1: b3:c1:a7:da:7e:2c:ff:86:36:17:1b:9d:58:e3:08: 9c:c8:e9:31:2e:26:9e:b0:d0:d2:7c:3e:3d:ab:ff: 39:d7:f0:23:22:3d:e8:ec:34:4b:92:d8:93:66:47: 01:a3:db:d2:dc:72:63:32:91:a6:9b:f2:45:19:d3: 79:20:5e:5d:d5:9c:ff:27:5d:40:04:48:6f:89:19: 77:8f:40:c2:35:37:70:1e:cd:b0:02:3f:9b:8e:29: 48:f1:58:36:74:9c:ec:98:1c:6b:0b:6b:63:c6:38: 26:cd:d2:79:97:58:4c:64:7b:b6:5a:15:91:ab:dc: af:5a:ca:e2:20:26:17:d2:7f:58:d9:2e:a6:18:04: 7a:dc:0d:d7:d7:4c:df:30:66:ef:ee:02:2b:05:7e: b5:d7:d9:41:a2:af:f6:b9:c8:45:3e:b0:99:ed:ec: e4:4b:14:b3:5a:68:f2:69:a9:86:86:9a:bf:e6:88: ab:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.216.0/22 202.77.96.0/19 202.137.0.0-202.137.23.255 IPv6: 2405:100::/32 Signature Algorithm: sha256WithRSAEncryption 2d:a5:39:9b:fb:5a:f2:74:13:8a:de:14:41:01:22:59:09:e8: 3e:29:f8:77:0e:fc:41:45:1d:19:d8:8a:e6:58:14:f7:c2:c6: 64:1f:26:95:23:9a:a0:28:72:a5:cc:75:c2:0a:23:66:ac:38: 9f:97:9a:f9:ed:ee:ad:de:62:09:52:73:6a:4c:e3:a1:8d:e8: 04:a5:0c:e4:98:60:69:6c:de:40:61:e7:e3:2f:fe:d4:d2:9d: b8:f5:63:ca:52:68:29:ee:9e:b2:3f:2e:59:d3:17:da:68:b3: 16:38:b8:7b:56:f3:e4:bd:61:b5:5a:00:7d:87:ab:7a:84:20: 81:bb:1b:c5:92:a3:14:4b:36:4e:7b:17:f2:2d:65:cf:ec:be: 49:e6:63:74:75:ce:7d:0f:73:59:4e:54:42:86:81:79:ba:eb: f2:3b:a6:30:8b:5d:ab:fd:a4:4c:f4:90:27:62:f3:41:5b:92: 4d:d3:9d:ed:19:a4:2e:59:01:4c:4a:28:9c:6b:1e:c1:b7:fb: 6d:bf:58:05:09:c2:3b:74:62:49:46:4c:d4:fc:52:2e:f9:dc: 53:f2:67:c2:e0:07:95:b7:6c:c6:7c:67:45:2c:02:1a:17:58: 6b:66:25:ba:60:96:4c:4f:92:2d:87:ad:62:2c:4e:ac:34:48: ff:ed:05:59 -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgIUWFe9oc5ysouVqblpNL2BY9VWePgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMyMTE4Mzc0NVoX DTI2MDMyMDE4NDI0NVowMzExMC8GA1UEAxMoNzgyNjM3QjU4QjhFMDdFQzY0QTBG QUFFMTc2OUFGMTdBRjA5OTlFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK80KD9kOflIRpfqIJMO9b83iAQz8Yli4lHLyAVTZA27hXe56Ov9eylyinD1 57NJsnPHLSp41DcUuCYXPuuTlfFP2WynbQwKEnTRs8Gn2n4s/4Y2FxudWOMInMjp MS4mnrDQ0nw+Pav/OdfwIyI96Ow0S5LYk2ZHAaPb0txyYzKRppvyRRnTeSBeXdWc /yddQARIb4kZd49AwjU3cB7NsAI/m44pSPFYNnSc7JgcawtrY8Y4Js3SeZdYTGR7 tloVkavcr1rK4iAmF9J/WNkuphgEetwN19dM3zBm7+4CKwV+tdfZQaKv9rnIRT6w me3s5EsUs1po8mmphoaav+aIqyUCAwEAAaOCAtowggLWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHgmN7WLjgfsZKD6rhdprxevCZnnMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83OWMwNWVlMy03ZmM4LTQ0MDctYjJjMC1jYjQwYmZjZmI4NjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5YzA1ZWUz LTdmYzgtNDQwNy1iMmMwLWNiNDBiZmNmYjg2Ni8wLzc4MjYzN0I1OEI4RTA3RUM2 NEEwRkFBRTE3NjlBRjE3QUYwOTk5RTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQQYIKwYBBQUHAQcBAf8EMjAwMB8EAgABMBkD BAJnFdgDBAXKTWAwCwMDAMqJAwQDyokQMA0EAgACMAcDBQAkBQEAMA0GCSqGSIb3 DQEBCwUAA4IBAQAtpTmb+1rydBOK3hRBASJZCeg+Kfh3DvxBRR0Z2IrmWBT3wsZk HyaVI5qgKHKlzHXCCiNmrDifl5r57e6t3mIJUnNqTOOhjegEpQzkmGBpbN5AYefj L/7U0p249WPKUmgp7p6yPy5Z0xfaaLMWOLh7VvPkvWG1WgB9h6t6hCCBuxvFkqMU SzZOexfyLWXP7L5J5mN0dc59D3NZTlRChoF5uuvyO6Ywi12r/aRM9JAnYvNBW5JN 053tGaQuWQFMSiicax7Bt/ttv1gFCcI7dGJJRkzU/FIu+dxT8mfC4AeVt2zGfGdF LAIaF1hrZiW6YJZMT5Ith61iLE6sNEj/7QVZ -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:15 2025 by rpki-client on console.sobornost.net