$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A6A73303D7FB4B926766F1EA71A883290C724BC9.cer File: A6A73303D7FB4B926766F1EA71A883290C724BC9.cer (raw, json) Hash identifier: fCX46X0Gand0/sBsKKNy5hBqpmbkSBGa4FKP1btuq84= Subject key identifier: A6:A7:33:03:D7:FB:4B:92:67:66:F1:EA:71:A8:83:29:0C:72:4B:C9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 63ACDDA41AB5681C5A9F5F7FD7B12CBE34B42DD7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/A6A73303D7FB4B926766F1EA71A883290C724BC9.mft caRepository: rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 10 Feb 2025 17:18:47 +0000 Certificate not after: Mon 09 Feb 2026 17:23:47 +0000 Subordinate resources: IP: 103.18.44.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 00:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ac:dd:a4:1a:b5:68:1c:5a:9f:5f:7f:d7:b1:2c:be:34:b4:2d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 10 17:18:47 2025 GMT Not After : Feb 9 17:23:47 2026 GMT Subject: CN=A6A73303D7FB4B926766F1EA71A883290C724BC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ef:46:cb:60:6d:d6:f4:c5:8f:98:bb:a5:14: f6:c1:e1:83:44:c8:d0:e1:93:7e:aa:a9:9c:47:8b: 6f:6f:f0:27:3d:54:e7:de:cb:6f:c3:3c:36:ef:6b: f1:87:6a:95:95:31:5b:d0:8e:5f:8b:b1:5d:a2:96: 06:1c:7d:75:88:f4:96:20:7f:16:6f:de:b0:cd:58: 63:ef:d1:97:e2:9d:b1:48:18:86:30:64:6f:d0:a7: bb:2d:04:b0:e0:19:cc:49:cb:d0:cf:cf:0c:bc:cb: b4:56:60:d1:65:08:6b:74:84:df:4c:f5:4c:89:b0: df:4b:23:dc:61:4c:a0:f1:b1:b5:0c:79:b8:ae:92: 89:7f:9e:19:c7:62:94:ca:a0:5a:64:df:fb:c4:3f: fe:26:e7:15:5b:1c:4c:51:b2:40:52:ca:56:01:12: fd:a8:dc:13:0e:69:95:f4:b8:e1:54:6f:51:cc:1d: 5a:f1:10:b4:96:7c:78:61:ac:8b:c0:31:d4:68:a0: 6b:f3:60:03:cd:e3:76:0d:89:73:07:a3:66:33:56: 06:f6:9c:28:b0:a6:80:e7:9b:91:ef:41:70:55:0c: 7f:ff:0b:c8:eb:a8:6b:61:2e:93:7d:3a:d3:f8:c6: ae:2c:53:68:a3:70:3c:61:a6:3e:8e:73:40:24:e5: eb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:A7:33:03:D7:FB:4B:92:67:66:F1:EA:71:A8:83:29:0C:72:4B:C9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/A6A73303D7FB4B926766F1EA71A883290C724BC9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.18.44.0/23 Signature Algorithm: sha256WithRSAEncryption 99:6d:19:dc:ea:e9:fe:86:f2:23:50:cc:43:fe:8f:6f:72:b5: 99:f3:03:14:74:3e:71:cc:a6:04:8f:0a:be:a9:17:cd:d9:be: e9:f4:4f:f0:e5:d4:5a:55:1e:d3:29:f8:4a:8e:b0:d8:c2:f0: 7c:39:e4:30:93:ad:df:90:80:51:b7:58:03:4d:a8:e5:55:51: 68:35:58:10:d6:ce:d3:8f:ed:04:72:a7:24:71:e1:96:fe:b4: 81:2c:c7:22:43:07:b7:af:4b:3c:01:f6:5f:6c:d1:c3:99:47: 2e:07:2e:f2:d1:ab:e1:79:5d:32:f5:56:04:f4:f1:fb:a1:0e: 90:51:a2:90:da:13:cd:db:fb:b5:33:c2:55:7d:3f:bf:6d:4c: 77:df:2b:34:32:46:e5:82:fa:f1:f4:e1:dc:a4:77:36:13:b6: 53:2a:da:01:24:6f:b8:c2:e0:3f:f7:bd:e3:2c:47:9f:ae:b0: c0:22:62:fd:29:af:2e:53:3e:3f:1c:dc:38:2f:2f:56:cf:5a: a2:6d:cf:7d:d0:4d:34:9a:45:4e:cb:00:30:3f:53:0f:8e:c7: a7:18:04:cf:3f:bf:61:fd:72:26:31:38:af:46:c5:b0:6c:81: 31:95:fb:b1:dd:8b:51:f4:8d:c3:69:19:00:06:cb:cd:f1:46: 3f:82:e4:da -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUY6zdpBq1aBxan19/17EsvjS0LdcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxMDE3MTg0N1oX DTI2MDIwOTE3MjM0N1owMzExMC8GA1UEAxMoQTZBNzMzMDNEN0ZCNEI5MjY3NjZG MUVBNzFBODgzMjkwQzcyNEJDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMDvRstgbdb0xY+Yu6UU9sHhg0TI0OGTfqqpnEeLb2/wJz1U597Lb8M8Nu9r 8YdqlZUxW9COX4uxXaKWBhx9dYj0liB/Fm/esM1YY+/Rl+KdsUgYhjBkb9Cnuy0E sOAZzEnL0M/PDLzLtFZg0WUIa3SE30z1TImw30sj3GFMoPGxtQx5uK6SiX+eGcdi lMqgWmTf+8Q//ibnFVscTFGyQFLKVgES/ajcEw5plfS44VRvUcwdWvEQtJZ8eGGs i8Ax1Giga/NgA83jdg2JcwejZjNWBvacKLCmgOebke9BcFUMf/8LyOuoa2Euk306 0/jGrixTaKNwPGGmPo5zQCTl66cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKanMwPX+0uSZ2bx6nGogykMckvJMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xYjY0ZDhjMS1jNzE0LTQ1OTItOGZjNS1lMzkyZWJmZjFlOTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiNjRkOGMx LWM3MTQtNDU5Mi04ZmM1LWUzOTJlYmZmMWU5OC8wL0E2QTczMzAzRDdGQjRCOTI2 NzY2RjFFQTcxQTg4MzI5MEM3MjRCQzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnEiwwDQYJKoZIhvcNAQELBQADggEBAJltGdzq6f6G8iNQzEP+j29ytZnzAxR0 PnHMpgSPCr6pF83Zvun0T/Dl1FpVHtMp+EqOsNjC8Hw55DCTrd+QgFG3WANNqOVV UWg1WBDWztOP7QRypyRx4Zb+tIEsxyJDB7evSzwB9l9s0cOZRy4HLvLRq+F5XTL1 VgT08fuhDpBRopDaE83b+7UzwlV9P79tTHffKzQyRuWC+vH04dykdzYTtlMq2gEk b7jC4D/3veMsR5+usMAiYv0pry5TPj8c3DgvL1bPWqJtz33QTTSaRU7LADA/Uw+O x6cYBM8/v2H9ciYxOK9GxbBsgTGV+7Hdi1H0jcNpGQAGy83xRj+C5No= -----END CERTIFICATE-----Generated at Fri Apr 25 17:11:56 2025 by rpki-client on console.sobornost.net