$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer File: 17D02B116D4BBA651245CBC7CCC30A5927A744E4.cer (raw, json) Hash identifier: itQ6qooIb4rwgR/9OnZI7HQbyP+caYXSTBACh320deE= Subject key identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6A9FB5AF80FBC343CA8ED337C202327942F54FAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft caRepository: rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 14 Jul 2025 02:56:19 +0000 Certificate not after: Mon 13 Jul 2026 03:01:19 +0000 Subordinate resources: IP: 103.47.132.0/22 IP: 2402:8780::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:9f:b5:af:80:fb:c3:43:ca:8e:d3:37:c2:02:32:79:42:f5:4f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 14 02:56:19 2025 GMT Not After : Jul 13 03:01:19 2026 GMT Subject: CN=17D02B116D4BBA651245CBC7CCC30A5927A744E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:fe:87:b4:f9:97:78:c1:bf:09:9b:af:06:4c: 9d:33:fb:ba:18:7a:9b:d4:63:44:22:26:7a:3a:55: 08:4d:1d:07:0c:64:67:92:aa:d8:df:fe:92:28:55: 50:89:9a:a5:35:ae:ab:19:68:59:38:c1:e9:33:08: d8:15:3a:45:fc:9b:7a:61:12:18:9e:05:98:10:b3: ff:cc:c4:64:55:b4:6f:4b:9b:98:97:8a:2d:5a:66: 5f:12:68:68:b2:58:c0:a0:38:ae:c5:9d:26:9b:80: 33:9a:0f:15:38:c9:06:3e:78:1d:02:e2:99:0f:f7: a0:f3:95:44:c0:e0:ce:16:83:76:e0:cb:08:2b:68: 6d:82:3d:03:06:d9:28:ab:48:b6:12:02:fe:bf:08: cc:31:4d:1a:c8:32:0a:69:7e:01:85:37:90:f9:fc: 42:e6:29:b3:0d:7b:a1:f0:0f:bf:78:65:62:40:74: 57:f1:7d:99:f4:b3:7f:c9:0b:0e:3f:55:49:54:1d: aa:0b:c4:5e:a6:87:9a:d1:6f:6b:67:a9:d1:be:73: 14:47:20:6f:28:dc:7d:89:6c:76:71:87:5f:3f:dc: fc:6a:c1:96:2f:b6:80:a2:dc:c1:89:12:b5:a7:1c: ec:6f:ef:bf:69:5a:72:f4:18:a4:9b:07:71:f2:73: f9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:D0:2B:11:6D:4B:BA:65:12:45:CB:C7:CC:C3:0A:59:27:A7:44:E4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3bbb2734-e5fa-40eb-8598-b7cd101343ca/0/17D02B116D4BBA651245CBC7CCC30A5927A744E4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.47.132.0/22 IPv6: 2402:8780::/32 Signature Algorithm: sha256WithRSAEncryption 49:31:36:b7:cf:4e:22:3f:48:c7:fe:11:f3:a6:b2:26:88:11: 84:2a:bd:ec:b7:d6:1e:ef:c2:74:f1:09:2b:2d:e5:3f:f1:a3: e1:d2:7f:23:04:4f:9d:20:dc:91:ba:34:35:67:1a:6e:ef:e0: 37:30:c3:84:6c:a3:aa:5c:81:20:22:60:27:75:66:89:91:88: c3:14:73:7f:51:83:59:0d:7d:e6:45:ee:e0:20:cf:76:e1:79: 0e:3a:8a:cf:86:c3:e4:6b:87:e9:f1:72:38:21:da:41:51:5c: 5a:a7:dc:7d:70:7f:56:76:91:7e:78:42:95:66:0e:e4:5c:19: eb:eb:93:7f:e0:d8:ff:3e:7b:15:b7:15:a1:ae:5f:72:23:0c: d9:6e:bc:8a:4c:b5:75:62:3f:77:02:78:4a:6d:0b:27:e2:2c: 5f:30:93:85:a2:27:08:74:c5:c4:96:41:1e:9b:24:cb:d2:85: aa:32:fb:82:42:51:e6:85:19:de:58:67:95:03:dc:b7:7f:8d: 38:d6:c5:18:fb:43:d8:86:80:82:29:f4:73:ac:78:5b:35:0f: d7:90:83:19:d1:18:c3:63:c2:52:ac:76:1e:d0:59:81:b5:01: cb:d5:b8:f4:f0:73:02:e6:39:2c:e2:86:b5:37:1c:be:10:b2: bb:03:e0:87 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUap+1r4D7w0PKjtM3wgIyeUL1T68wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxNDAyNTYxOVoX DTI2MDcxMzAzMDExOVowMzExMC8GA1UEAxMoMTdEMDJCMTE2RDRCQkE2NTEyNDVD QkM3Q0NDMzBBNTkyN0E3NDRFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPT+h7T5l3jBvwmbrwZMnTP7uhh6m9RjRCImejpVCE0dBwxkZ5Kq2N/+kihV UImapTWuqxloWTjB6TMI2BU6RfybemESGJ4FmBCz/8zEZFW0b0ubmJeKLVpmXxJo aLJYwKA4rsWdJpuAM5oPFTjJBj54HQLimQ/3oPOVRMDgzhaDduDLCCtobYI9AwbZ KKtIthIC/r8IzDFNGsgyCml+AYU3kPn8QuYpsw17ofAPv3hlYkB0V/F9mfSzf8kL Dj9VSVQdqgvEXqaHmtFva2ep0b5zFEcgbyjcfYlsdnGHXz/c/GrBli+2gKLcwYkS tacc7G/vv2lacvQYpJsHcfJz+eECAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBfQKxFtS7plEkXLx8zDClknp0TkMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zYmJiMjczNC1lNWZhLTQwZWItODU5OC1iN2NkMTAxMzQzY2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiYmIyNzM0 LWU1ZmEtNDBlYi04NTk4LWI3Y2QxMDEzNDNjYS8wLzE3RDAyQjExNkQ0QkJBNjUx MjQ1Q0JDN0NDQzMwQTU5MjdBNzQ0RTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnL4QwDQQCAAIwBwMFACQCh4AwDQYJKoZIhvcNAQELBQADggEBAEkxNrfPTiI/ SMf+EfOmsiaIEYQqvey31h7vwnTxCSst5T/xo+HSfyMET50g3JG6NDVnGm7v4Dcw w4Rso6pcgSAiYCd1ZomRiMMUc39Rg1kNfeZF7uAgz3bheQ46is+Gw+Rrh+nxcjgh 2kFRXFqn3H1wf1Z2kX54QpVmDuRcGevrk3/g2P8+exW3FaGuX3IjDNluvIpMtXVi P3cCeEptCyfiLF8wk4WiJwh0xcSWQR6bJMvShaoy+4JCUeaFGd5YZ5UD3Ld/jTjW xRj7Q9iGgIIp9HOseFs1D9eQgxnRGMNjwlKsdh7QWYG1AcvVuPTwcwLmOSzihrU3 HL4QsrsD4Ic= -----END CERTIFICATE-----Generated at Mon Jul 21 02:26:31 2025 by rpki-client