$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2985976A4B3081770748882703E16497964D05A6.cer File: 2985976A4B3081770748882703E16497964D05A6.cer (raw, json) Hash identifier: aYpuuYD4aK0+DpwvApAEaRg4LLgFyMGmbXKXAAzSe0Q= Subject key identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6985C34AF6DEF3BC28136F5EF131AA24244FF43D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft caRepository: rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 04 Jun 2025 00:29:38 +0000 Certificate not after: Wed 03 Jun 2026 00:34:38 +0000 Subordinate resources: IP: 103.197.92.0/22 IP: 2403:80::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:85:c3:4a:f6:de:f3:bc:28:13:6f:5e:f1:31:aa:24:24:4f:f4:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 4 00:29:38 2025 GMT Not After : Jun 3 00:34:38 2026 GMT Subject: CN=2985976A4B3081770748882703E16497964D05A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ce:39:a4:a5:ed:b9:fc:ad:34:9e:94:a2:96: c6:6d:07:41:54:e1:0a:9a:75:61:3d:5c:76:b9:74: 8d:b3:f4:2e:74:45:70:9b:c0:ae:ae:ae:d6:6d:c8: 23:6b:f9:fb:31:6f:a1:c0:1c:36:f1:85:95:b7:8a: a8:c9:9e:37:6d:b8:54:f4:dd:ed:2a:13:90:89:cd: 97:0f:af:c8:e0:1d:ea:08:c7:2c:bd:e0:e6:6b:9a: 4e:e4:72:95:04:93:7e:ca:e5:13:fc:e6:00:66:0b: 18:6b:46:b9:26:b3:11:a4:b4:6e:8b:8b:48:bd:98: c1:08:59:43:14:43:7f:bd:1f:50:ec:c5:42:53:fb: 7f:c5:3f:66:2a:b5:78:6b:1e:db:c6:4a:dc:f2:1f: 39:31:60:7d:e2:8b:96:5d:2e:2a:e7:e0:ea:b1:85: 34:94:fe:de:b4:c8:2b:4d:50:37:77:49:bb:91:ed: 42:d3:63:e0:bd:1b:2c:51:61:74:b2:76:9b:c1:0d: 03:6e:86:72:9e:0b:ff:00:ec:aa:ff:1f:cf:2c:52: 9d:82:56:59:e3:3b:e2:c6:97:f4:be:bb:bd:28:d0: d7:0b:b3:97:89:6e:79:8f:70:12:de:4c:b3:db:da: b8:fb:ca:48:34:f9:bc:1c:a3:dd:64:fb:af:b1:f5: 05:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:85:97:6A:4B:30:81:77:07:48:88:27:03:E1:64:97:96:4D:05:A6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3ed100df-0441-4381-a3fa-587db9e9c2f0/0/2985976A4B3081770748882703E16497964D05A6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.197.92.0/22 IPv6: 2403:80::/32 Signature Algorithm: sha256WithRSAEncryption 88:ff:b3:e8:2a:e1:8f:4d:4b:8d:82:b7:3c:c6:d6:98:44:ac: 63:60:39:88:8c:3c:d9:27:8b:ec:09:1b:3f:b3:59:dd:ba:27: 3f:fb:e2:bd:2b:8b:95:b7:c4:6f:89:08:2e:d4:fa:43:06:00: 79:66:0a:57:5f:a9:0d:14:9d:92:dc:49:36:f0:74:92:71:71: 7d:32:e2:6c:16:8f:9b:f5:6e:4f:ec:76:86:9a:36:a8:2f:b2: 25:12:58:26:80:7a:31:3f:0d:b5:56:4f:01:ae:37:31:d1:d5: 43:b2:10:d4:21:8d:d2:d9:9a:74:cb:4e:41:02:02:61:d9:c0: e0:f3:e9:03:3e:d6:4d:f0:1f:1a:43:80:f7:5f:e5:7c:9a:05: 14:7c:8f:08:98:98:85:13:19:32:63:ff:aa:ce:cc:66:68:95: f3:68:78:c0:d6:51:ba:b7:33:d2:f2:e5:10:1c:7e:a7:81:c5: c3:9d:02:93:c6:f5:08:49:17:b5:fe:f6:c4:0f:f8:d5:40:8c: 77:e5:8c:82:ee:d1:77:17:47:37:c5:b7:4f:bb:7d:60:bf:94: d3:b6:2c:ef:8c:1a:86:f4:9a:87:4d:54:6a:6f:51:88:99:bc: 35:5e:27:01:d0:bd:ba:97:83:3c:f8:3e:7b:d3:d7:b2:6b:a1: 87:f5:1a:53 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUaYXDSvbe87woE29e8TGqJCRP9D0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwNDAwMjkzOFoX DTI2MDYwMzAwMzQzOFowMzExMC8GA1UEAxMoMjk4NTk3NkE0QjMwODE3NzA3NDg4 ODI3MDNFMTY0OTc5NjREMDVBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOPOOaSl7bn8rTSelKKWxm0HQVThCpp1YT1cdrl0jbP0LnRFcJvArq6u1m3I I2v5+zFvocAcNvGFlbeKqMmeN224VPTd7SoTkInNlw+vyOAd6gjHLL3g5muaTuRy lQSTfsrlE/zmAGYLGGtGuSazEaS0bouLSL2YwQhZQxRDf70fUOzFQlP7f8U/Ziq1 eGse28ZK3PIfOTFgfeKLll0uKufg6rGFNJT+3rTIK01QN3dJu5HtQtNj4L0bLFFh dLJ2m8ENA26Gcp4L/wDsqv8fzyxSnYJWWeM74saX9L67vSjQ1wuzl4lueY9wEt5M s9vauPvKSDT5vByj3WT7r7H1BbcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCmFl2pLMIF3B0iIJwPhZJeWTQWmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZWQxMDBkZi0wNDQxLTQzODEtYTNmYS01ODdkYjllOWMyZjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNlZDEwMGRm LTA0NDEtNDM4MS1hM2ZhLTU4N2RiOWU5YzJmMC8wLzI5ODU5NzZBNEIzMDgxNzcw NzQ4ODgyNzAzRTE2NDk3OTY0RDA1QTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnxVwwDQQCAAIwBwMFACQDAIAwDQYJKoZIhvcNAQELBQADggEBAIj/s+gq4Y9N S42CtzzG1phErGNgOYiMPNkni+wJGz+zWd26Jz/74r0ri5W3xG+JCC7U+kMGAHlm CldfqQ0UnZLcSTbwdJJxcX0y4mwWj5v1bk/sdoaaNqgvsiUSWCaAejE/DbVWTwGu NzHR1UOyENQhjdLZmnTLTkECAmHZwODz6QM+1k3wHxpDgPdf5XyaBRR8jwiYmIUT GTJj/6rOzGZolfNoeMDWUbq3M9Ly5RAcfqeBxcOdApPG9QhJF7X+9sQP+NVAjHfl jILu0XcXRzfFt0+7fWC/lNO2LO+MGob0modNVGpvUYiZvDVeJwHQvbqXgzz4PnvT 17JroYf1GlM= -----END CERTIFICATE-----Generated at Sun Jul 20 18:59:46 2025 by rpki-client