$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer File: D681DB990E904642A480AE9546646329FF5D0162.cer (raw, json) Hash identifier: 86x+cg3TT9T18a1EBZv5gywx2eyh11vxMg+TInPwe0E= Subject key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 65C17311D131C5AD2DA3E89C0D7BD1348758CACE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft caRepository: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 13 Dec 2024 05:14:12 +0000 Certificate not after: Fri 12 Dec 2025 05:19:12 +0000 Subordinate resources: IP: 103.145.34.0/23 IP: 2405:77c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 20:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c1:73:11:d1:31:c5:ad:2d:a3:e8:9c:0d:7b:d1:34:87:58:ca:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Dec 13 05:14:12 2024 GMT Not After : Dec 12 05:19:12 2025 GMT Subject: CN=D681DB990E904642A480AE9546646329FF5D0162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:80:14:b5:c7:ec:85:02:5d:86:4c:24:c6: d4:16:de:a1:5b:5c:28:22:f8:71:84:8e:87:2e:4c: d4:20:bc:a5:85:5f:9b:59:45:27:e2:b0:60:01:a1: 28:eb:d4:ba:c3:a0:35:0d:12:ef:f2:2e:92:44:a2: 7a:38:15:7e:ee:fb:bf:0a:58:a2:90:b8:19:38:c2: 4c:a3:8a:c5:e4:9b:dc:e1:7f:ed:9d:35:02:23:b5: 0d:ac:90:31:80:e4:72:4f:f4:30:5f:8d:f4:20:f8: db:7f:b6:15:4b:a1:05:1b:a5:ca:db:38:26:88:9d: a9:50:ae:e7:2f:35:58:c8:af:61:b1:04:91:8c:b5: 4a:63:e9:f2:80:c0:6b:80:9c:66:0b:a2:3c:d3:c4: 60:8b:dd:84:ab:fe:f2:27:ae:10:50:48:1a:ad:14: 0e:67:af:66:6f:43:23:da:d0:38:f5:ef:8f:b6:8c: d5:bd:c0:47:c7:97:e5:15:c7:18:2e:a9:82:38:ee: 03:b6:2b:13:92:15:f5:e9:f2:f7:5c:27:69:fb:95: 02:b5:fb:36:16:df:64:83:3a:68:46:6d:c5:2f:4e: 41:49:bf:b7:1d:75:3f:be:73:23:69:84:bd:dd:cd: 26:d8:51:5d:26:fc:a5:be:c5:b9:a5:6e:59:ef:2e: da:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.145.34.0/23 IPv6: 2405:77c0::/32 Signature Algorithm: sha256WithRSAEncryption 7d:57:03:a8:20:72:32:ca:75:a3:fd:0f:8c:62:82:3c:54:59: ab:a2:69:75:55:a5:e5:44:ae:8c:e5:d3:a5:cd:96:4a:60:48: a5:0e:e2:7f:bb:e2:91:52:95:52:5b:98:9a:78:76:84:6f:84: 2e:57:8a:86:62:a2:e6:09:8e:23:bc:2c:e4:78:49:8c:95:81: f6:5b:85:f5:de:eb:57:4b:12:8a:cd:eb:20:78:d6:d0:f0:bd: ff:2a:3e:59:22:2b:6e:78:f0:b5:57:37:ac:4a:dd:64:36:20: 38:1b:a9:2b:73:b7:6f:a5:20:d3:1c:67:c3:67:98:06:2a:64: 2c:0a:b7:49:3e:a1:a7:a6:05:9d:6c:3b:db:9c:ea:92:8f:db: 9a:5b:6f:b4:67:0d:32:57:66:8b:8b:ba:a4:1f:6f:a6:16:23: d6:29:03:67:ef:e0:14:c0:b1:ad:24:03:78:b7:bb:c8:2a:0a: c8:26:ba:a4:0c:a7:13:20:26:0f:1a:52:7c:31:25:67:c2:4a: da:25:9f:19:89:91:b1:84:2c:9e:c2:98:40:6d:b7:54:0a:6b: cc:a4:58:be:51:8d:a9:d6:5a:7f:56:fb:2a:f8:f2:fb:b9:90: 43:3c:14:e1:ac:16:3e:8a:e0:89:6c:fe:1d:e4:a5:8c:fa:95: 84:68:45:c0 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUZcFzEdExxa0to+icDXvRNIdYys4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMzA1MTQxMloX DTI1MTIxMjA1MTkxMlowMzExMC8GA1UEAxMoRDY4MURCOTkwRTkwNDY0MkE0ODBB RTk1NDY2NDYzMjlGRjVEMDE2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ3CgBS1x+yFAl2GTCTG1BbeoVtcKCL4cYSOhy5M1CC8pYVfm1lFJ+KwYAGh KOvUusOgNQ0S7/IukkSiejgVfu77vwpYopC4GTjCTKOKxeSb3OF/7Z01AiO1DayQ MYDkck/0MF+N9CD423+2FUuhBRulyts4JoidqVCu5y81WMivYbEEkYy1SmPp8oDA a4CcZguiPNPEYIvdhKv+8ieuEFBIGq0UDmevZm9DI9rQOPXvj7aM1b3AR8eX5RXH GC6pgjjuA7YrE5IV9eny91wnafuVArX7NhbfZIM6aEZtxS9OQUm/tx11P75zI2mE vd3NJthRXSb8pb7FuaVuWe8u2iMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNaB25kOkEZCpICulUZkYyn/XQFiMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83OWZiZTA4OC0wZDg0LTQ3ODktYjQwNS0yNWMyZTc2OTM3ZjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5ZmJlMDg4 LTBkODQtNDc4OS1iNDA1LTI1YzJlNzY5MzdmNi8wL0Q2ODFEQjk5MEU5MDQ2NDJB NDgwQUU5NTQ2NjQ2MzI5RkY1RDAxNjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnkSIwDQQCAAIwBwMFACQFd8AwDQYJKoZIhvcNAQELBQADggEBAH1XA6ggcjLK daP9D4xigjxUWauiaXVVpeVErozl06XNlkpgSKUO4n+74pFSlVJbmJp4doRvhC5X ioZiouYJjiO8LOR4SYyVgfZbhfXe61dLEorN6yB41tDwvf8qPlkiK2548LVXN6xK 3WQ2IDgbqStzt2+lINMcZ8NnmAYqZCwKt0k+oaemBZ1sO9uc6pKP25pbb7RnDTJX ZouLuqQfb6YWI9YpA2fv4BTAsa0kA3i3u8gqCsgmuqQMpxMgJg8aUnwxJWfCStol nxmJkbGELJ7CmEBtt1QKa8ykWL5RjanWWn9W+yr48vu5kEM8FOGsFj6K4Ils/h3k pYz6lYRoRcA= -----END CERTIFICATE-----Generated at Thu Apr 24 20:37:23 2025 by rpki-client on console.sobornost.net