$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer File: 0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.cer (raw, json) Hash identifier: MRyTwKSBxcnMj2AVysMkKg9qeo3HIV5wf56g3EJXQfw= Subject key identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4D115543D7E4EAE7A8A83802185E8B48DE7F09FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft caRepository: rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 03 Jul 2025 17:52:33 +0000 Certificate not after: Thu 02 Jul 2026 17:57:33 +0000 Subordinate resources: IP: 103.13.6.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:11:55:43:d7:e4:ea:e7:a8:a8:38:02:18:5e:8b:48:de:7f:09:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 3 17:52:33 2025 GMT Not After : Jul 2 17:57:33 2026 GMT Subject: CN=0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:32:ef:20:cb:4f:5d:f8:25:ab:1f:4c:d4: 54:e8:19:a2:05:81:f7:6e:88:27:dc:05:4d:fd:ba: a7:2c:6f:94:7f:ca:59:56:3b:22:5a:04:ec:cd:99: da:5f:43:d2:c0:23:e6:47:c9:79:27:ce:fc:c2:41: 18:f5:e8:f2:5f:81:ed:74:ca:19:0d:b1:e0:75:4e: c1:25:12:a3:d2:44:47:f5:51:1a:48:3d:74:9d:d5: d4:32:61:c3:7a:e4:2d:6b:84:cd:8c:62:49:6b:3c: 6c:32:a1:92:79:8d:6e:2d:e3:52:ab:65:ce:a8:3f: 1e:5c:82:2b:0f:c6:d9:86:78:9d:88:da:a9:cb:ca: 6f:c7:17:41:66:20:9f:36:51:08:cb:ea:7d:18:9e: ed:54:f1:cf:6c:45:d8:3f:80:51:65:c2:c4:66:24: 16:ef:00:b7:cc:31:e6:a7:75:8d:39:3f:f8:b4:fd: 48:0d:fe:07:33:3b:71:79:27:15:d5:26:14:16:b5: 2b:35:23:ca:cb:41:5b:47:e2:9f:16:bd:6c:68:75: 07:29:c6:ac:bd:93:d0:5b:62:5d:9f:c6:bf:9e:88: e0:5e:79:1f:fb:fa:ef:88:23:05:84:53:0c:d7:cf: b5:dc:ac:08:58:5b:66:46:74:92:89:f9:c9:a5:b0: e3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:D4:44:E0:C0:8D:92:E3:2B:05:4B:F7:F4:78:3A:27:E0:B0:AD:CB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/46506e72-8b87-4701-a360-aebe25848f71/0/0CD444E0C08D92E32B054BF7F4783A27E0B0ADCB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.13.6.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:73:02:c4:8c:11:cf:46:93:35:f0:9b:e2:6b:b0:8f:ab:40: 94:b6:c1:25:79:5f:0d:12:b2:d1:55:5d:41:ed:fd:b1:76:45: 38:7c:90:5b:8b:c3:08:f4:58:93:b6:e3:a1:a5:ce:fb:a8:b4: b1:3e:f8:85:14:de:7d:a2:49:8d:ce:0f:0d:ce:5d:86:5c:ca: 1e:b0:5a:e9:ce:9a:24:00:3c:45:38:24:88:17:96:4c:4a:dd: 4a:03:f5:35:13:04:f9:13:ef:c7:19:3f:f8:76:17:1f:00:77: 7d:ec:60:23:a7:63:c5:7f:00:5b:12:7b:91:2b:8d:18:4a:a6: d2:37:65:de:c5:ab:0d:6d:00:9d:67:d7:b2:e3:97:a7:15:19: 3c:4e:3a:55:ab:81:77:c8:04:2a:00:73:bd:ae:3a:e4:44:75: 7c:6b:ac:e1:22:81:c1:58:97:b3:e1:c3:8f:45:05:e0:d4:18: a6:75:ce:75:e4:53:4b:3e:ec:1f:2f:04:5b:49:22:d6:c8:84: 5f:36:6f:c9:39:a5:9c:f0:23:ea:f2:4b:66:9a:8b:90:f4:4e: e5:c2:e2:e6:54:0a:31:69:9f:e3:c0:1c:84:49:0e:c9:2f:19: d1:51:b7:d8:70:5c:f6:93:82:1b:b0:9b:ca:0f:36:54:3c:c7: 43:4a:ec:29 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTRFVQ9fk6ueoqDgCGF6LSN5/Cf8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwMzE3NTIzM1oX DTI2MDcwMjE3NTczM1owMzExMC8GA1UEAxMoMENENDQ0RTBDMDhEOTJFMzJCMDU0 QkY3RjQ3ODNBMjdFMEIwQURDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXLMu8gy09d+CWrH0zUVOgZogWB926IJ9wFTf26pyxvlH/KWVY7IloE7M2Z 2l9D0sAj5kfJeSfO/MJBGPXo8l+B7XTKGQ2x4HVOwSUSo9JER/VRGkg9dJ3V1DJh w3rkLWuEzYxiSWs8bDKhknmNbi3jUqtlzqg/HlyCKw/G2YZ4nYjaqcvKb8cXQWYg nzZRCMvqfRie7VTxz2xF2D+AUWXCxGYkFu8At8wx5qd1jTk/+LT9SA3+BzM7cXkn FdUmFBa1KzUjystBW0finxa9bGh1BynGrL2T0FtiXZ/Gv56I4F55H/v674gjBYRT DNfPtdysCFhbZkZ0kon5yaWw4wsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAzURODAjZLjKwVL9/R4OifgsK3LMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NjUwNmU3Mi04Yjg3LTQ3MDEtYTM2MC1hZWJlMjU4NDhmNzEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ2NTA2ZTcy LThiODctNDcwMS1hMzYwLWFlYmUyNTg0OGY3MS8wLzBDRDQ0NEUwQzA4RDkyRTMy QjA1NEJGN0Y0NzgzQTI3RTBCMEFEQ0IubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnDQYwDQYJKoZIhvcNAQELBQADggEBAA9zAsSMEc9GkzXwm+JrsI+rQJS2wSV5 Xw0SstFVXUHt/bF2RTh8kFuLwwj0WJO246GlzvuotLE++IUU3n2iSY3ODw3OXYZc yh6wWunOmiQAPEU4JIgXlkxK3UoD9TUTBPkT78cZP/h2Fx8Ad33sYCOnY8V/AFsS e5ErjRhKptI3Zd7Fqw1tAJ1n17Ljl6cVGTxOOlWrgXfIBCoAc72uOuREdXxrrOEi gcFYl7Phw49FBeDUGKZ1znXkU0s+7B8vBFtJItbIhF82b8k5pZzwI+ryS2aai5D0 TuXC4uZUCjFpn+PAHIRJDskvGdFRt9hwXPaTghuwm8oPNlQ8x0NK7Ck= -----END CERTIFICATE-----Generated at Sun Jul 20 22:33:50 2025 by rpki-client