$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1259FE91D21610D4BA487C60C804F66EB6591CA8.cer File: 1259FE91D21610D4BA487C60C804F66EB6591CA8.cer (raw, json) Hash identifier: B1Ot5ATCr+XoXOBW27s22AigzZcyB3SwjMFFSbNJSEs= Subject key identifier: 12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2D21326E25F18649C03ECFE667DBFC564BFFE9E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft caRepository: rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 12 Jul 2025 07:51:57 +0000 Certificate not after: Sat 11 Jul 2026 07:56:57 +0000 Subordinate resources: IP: 103.78.44.0/23 IP: 2001:df6:a00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:21:32:6e:25:f1:86:49:c0:3e:cf:e6:67:db:fc:56:4b:ff:e9:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 12 07:51:57 2025 GMT Not After : Jul 11 07:56:57 2026 GMT Subject: CN=1259FE91D21610D4BA487C60C804F66EB6591CA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:6e:68:dc:d3:05:ff:1d:fd:bf:7e:5d:10: 4d:4a:2e:a6:a0:82:06:6d:ab:8a:13:a0:72:77:69: a7:39:0c:66:57:e1:84:ff:1e:9e:ed:23:39:93:b7: 75:b8:e2:40:00:51:6f:ea:33:69:75:a7:ca:02:0c: 04:09:5e:9b:9f:d7:7d:76:e1:57:e1:ad:82:fe:0e: dc:e3:94:7c:26:fd:8d:0e:c0:ac:7b:4b:6d:6b:c5: 2a:d7:ed:93:0f:07:f9:ad:b5:2d:44:b9:bb:dd:cb: e8:3d:c7:1e:22:bc:a6:f0:86:cd:c2:7e:cd:03:02: a7:02:a3:79:a4:48:8a:8f:61:a1:16:fa:f4:06:dc: 7d:97:71:74:62:b5:7c:1f:4c:ab:20:10:1a:96:14: 00:05:33:4a:64:e2:8e:d9:28:55:54:2a:10:d9:b1: b0:54:f5:a8:4f:5c:65:54:36:d9:f6:13:50:f6:4f: 35:42:21:76:e4:7e:ec:cf:a7:8f:1d:69:41:5f:dc: 17:29:c7:cc:a6:d2:79:af:61:59:a5:2a:74:26:67: 72:1f:6a:bc:d1:9e:98:7d:89:92:5f:b9:2f:8d:19: 01:f3:0b:19:30:6b:21:6d:8b:cf:de:aa:90:9e:22: 3d:c5:e5:69:f7:78:9e:37:e9:cb:e2:82:c1:a4:92: 47:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 12:59:FE:91:D2:16:10:D4:BA:48:7C:60:C8:04:F6:6E:B6:59:1C:A8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2c909737-1564-46ca-9009-8d28a56e98ee/0/1259FE91D21610D4BA487C60C804F66EB6591CA8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.78.44.0/23 IPv6: 2001:df6:a00::/48 Signature Algorithm: sha256WithRSAEncryption 5f:73:b0:91:59:31:21:21:f9:ef:d5:51:c3:47:df:92:82:51: ac:a0:3e:24:f4:f1:93:42:7d:22:31:97:c6:de:9d:f7:5b:e3: 13:34:53:06:a1:0f:bf:a7:cd:e9:71:77:cc:8f:49:56:82:4b: 54:d9:ad:f7:9a:f7:04:a2:06:46:bb:d7:67:4f:47:d8:c2:94: dd:41:2d:96:85:30:03:aa:7b:32:f5:85:d1:6e:4b:48:f4:1a: 53:b6:c3:83:3c:36:53:67:25:18:71:85:6e:cd:ab:d4:54:14: 30:0a:8e:35:d5:f8:d3:10:42:8e:35:46:a4:e9:f2:b1:28:38: 79:5f:8f:4b:b3:39:f0:5b:93:81:4d:f0:bd:18:e8:2c:a5:fb: 4f:ea:12:51:b3:63:d9:48:3b:69:ca:d3:d6:d9:40:5d:a9:e2: 17:4d:3b:a3:71:f1:0c:53:b8:7c:82:75:43:be:61:d1:c5:78: 2a:76:45:41:be:41:fe:04:61:48:07:3a:7d:ee:3f:4c:47:ef: f6:d4:3c:a7:51:54:f4:68:13:8b:18:e7:62:ab:39:f6:1d:ed: c1:7c:02:85:a7:45:6c:da:d5:2c:84:77:20:a4:fd:4a:23:54: e5:52:7e:72:4c:c6:1a:64:d8:65:a4:52:53:dc:57:82:6b:2b: b8:ae:85:c8 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIULSEybiXxhknAPs/mZ9v8Vkv/6eQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxMjA3NTE1N1oX DTI2MDcxMTA3NTY1N1owMzExMC8GA1UEAxMoMTI1OUZFOTFEMjE2MTBENEJBNDg3 QzYwQzgwNEY2NkVCNjU5MUNBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+Sbmjc0wX/Hf2/fl0QTUoupqCCBm2rihOgcndppzkMZlfhhP8enu0jOZO3 dbjiQABRb+ozaXWnygIMBAlem5/XfXbhV+Gtgv4O3OOUfCb9jQ7ArHtLbWvFKtft kw8H+a21LUS5u93L6D3HHiK8pvCGzcJ+zQMCpwKjeaRIio9hoRb69AbcfZdxdGK1 fB9MqyAQGpYUAAUzSmTijtkoVVQqENmxsFT1qE9cZVQ22fYTUPZPNUIhduR+7M+n jx1pQV/cFynHzKbSea9hWaUqdCZnch9qvNGemH2Jkl+5L40ZAfMLGTBrIW2Lz96q kJ4iPcXlafd4njfpy+KCwaSSR6MCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBJZ/pHSFhDUukh8YMgE9m62WRyoMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYzkwOTczNy0xNTY0LTQ2Y2EtOTAwOS04ZDI4YTU2ZTk4ZWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjOTA5NzM3 LTE1NjQtNDZjYS05MDA5LThkMjhhNTZlOThlZS8wLzEyNTlGRTkxRDIxNjEwRDRC QTQ4N0M2MEM4MDRGNjZFQjY1OTFDQTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnTiwwDwQCAAIwCQMHACABDfYKADANBgkqhkiG9w0BAQsFAAOCAQEAX3OwkVkx ISH579VRw0ffkoJRrKA+JPTxk0J9IjGXxt6d91vjEzRTBqEPv6fN6XF3zI9JVoJL VNmt95r3BKIGRrvXZ09H2MKU3UEtloUwA6p7MvWF0W5LSPQaU7bDgzw2U2clGHGF bs2r1FQUMAqONdX40xBCjjVGpOnysSg4eV+PS7M58FuTgU3wvRjoLKX7T+oSUbNj 2Ug7acrT1tlAXaniF007o3HxDFO4fIJ1Q75h0cV4KnZFQb5B/gRhSAc6fe4/TEfv 9tQ8p1FU9GgTixjnYqs59h3twXwChadFbNrVLIR3IKT9SiNU5VJ+ckzGGmTYZaRS U9xXgmsruK6FyA== -----END CERTIFICATE-----Generated at Sun Jul 20 17:27:26 2025 by rpki-client