$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer (raw, json) Hash identifier: zEQKpZ9xZfTvLpii338jDq5nfvGW4QEIv/IQJXly6CU= Subject key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 268124BEFE1E233CCD01FCAE367B239D932024A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft caRepository: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 21 May 2025 19:07:02 +0000 Certificate not after: Wed 20 May 2026 19:12:02 +0000 Subordinate resources: IP: 103.160.12.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 09:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:81:24:be:fe:1e:23:3c:cd:01:fc:ae:36:7b:23:9d:93:20:24:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 21 19:07:02 2025 GMT Not After : May 20 19:12:02 2026 GMT Subject: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:89:34:f6:4b:eb:bd:92:a5:19:69:bf:dd: 59:52:5d:7c:cc:09:20:32:cd:4b:96:3f:c1:f2:c8: 35:a9:82:df:62:59:49:cb:d0:86:d1:07:11:80:9a: 29:18:93:b7:dc:36:3c:4f:45:e1:60:8d:29:b2:86: ae:9e:ef:73:2a:f3:87:0f:09:19:7d:a3:e3:57:0d: 1a:99:0d:ae:ea:2c:0e:3a:b1:37:74:c6:be:66:6c: 8e:20:47:f1:a5:00:11:c0:cd:a1:b3:e1:1e:d3:da: 67:af:b5:4b:30:0f:79:a5:a5:8c:e8:33:cb:c7:32: 43:d3:46:61:df:63:f1:a3:1d:a8:54:cd:3c:2c:cf: 8c:53:63:ba:14:8a:4c:c5:1b:22:ce:24:6a:ae:2d: a7:f2:64:ff:eb:ea:e1:da:84:85:1c:55:38:ec:5d: c1:c6:02:d7:04:82:9f:0f:64:39:c7:8c:52:68:67: cd:3f:be:42:a9:d0:b5:07:d9:8e:14:74:27:39:16: 0c:77:7e:f1:77:b7:a1:60:b2:d5:15:69:88:7f:56: 97:08:6f:d9:a7:30:7c:34:0e:58:3b:90:8d:8d:e9: 12:30:68:eb:b3:8a:b7:00:50:96:f6:d9:cf:66:31: f0:2a:7d:01:81:3a:f4:1d:cc:1a:51:c1:ad:6e:0d: 82:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.12.0/23 Signature Algorithm: sha256WithRSAEncryption 85:1b:eb:ea:d3:a3:fb:23:65:70:b9:af:6d:69:e2:0c:54:a3: 64:aa:01:d3:e0:90:7a:1e:bb:99:6d:1d:74:9f:bd:07:9e:64: 81:1a:01:e2:1c:0d:27:2d:5c:90:8a:d5:0c:2d:6e:c9:a3:ad: 7c:26:a9:06:fc:33:af:b6:81:f7:f0:70:88:a8:92:5e:52:f3: e3:ca:60:a9:41:54:e4:c3:c3:cc:38:dd:cf:22:88:ce:23:80: 2d:af:fb:8e:f8:b1:c3:7f:b8:d8:c3:30:17:c0:69:d1:c5:5c: 08:69:5b:ea:28:97:3d:1b:e1:2b:07:9c:9b:09:27:ef:c7:c0: 34:1a:3d:c6:82:6e:cf:29:36:00:54:86:ca:65:fb:69:4b:0d: ce:98:38:f7:e3:6a:dd:7b:79:fe:4e:1d:3b:33:29:3a:28:50: f6:4c:64:b3:8c:34:7d:ba:22:02:9d:21:c4:9e:d5:a4:ad:bd: 67:21:d8:02:7d:68:24:a0:18:b2:de:5e:e9:03:26:05:57:a9: 90:ca:58:82:05:d8:bc:54:87:2a:f4:b1:69:31:c3:c9:69:5e: 78:43:da:1c:c6:19:01:b0:47:18:95:d9:86:33:ca:e5:53:f7: a5:0f:8e:f9:1e:4c:ae:3c:54:7d:30:e6:5e:36:f8:a1:df:56: ee:62:8c:30 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJoEkvv4eIzzNAfyuNnsjnZMgJKYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUyMTE5MDcwMloX DTI2MDUyMDE5MTIwMlowMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2 MTk2MDFFMEY2NDg4Q0I4RkQ1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMY6iTT2S+u9kqUZab/dWVJdfMwJIDLNS5Y/wfLINamC32JZScvQhtEHEYCa KRiTt9w2PE9F4WCNKbKGrp7vcyrzhw8JGX2j41cNGpkNruosDjqxN3TGvmZsjiBH 8aUAEcDNobPhHtPaZ6+1SzAPeaWljOgzy8cyQ9NGYd9j8aMdqFTNPCzPjFNjuhSK TMUbIs4kaq4tp/Jk/+vq4dqEhRxVOOxdwcYC1wSCnw9kOceMUmhnzT++QqnQtQfZ jhR0JzkWDHd+8Xe3oWCy1RVpiH9Wlwhv2acwfDQOWDuQjY3pEjBo67OKtwBQlvbZ z2Yx8Cp9AYE69B3MGlHBrW4Ngh0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCyyHvM2tqtGQORhlgHg9kiMuP1SMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I0YzZmNzcw LTY4NmEtNDVlZi04ZGZiLTBjM2E4N2QzZDhkYS8wLzJDQjIxRUYzMzZCNkFCNDY0 MEU0NjE5NjAxRTBGNjQ4OENCOEZENTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnoAwwDQYJKoZIhvcNAQELBQADggEBAIUb6+rTo/sjZXC5r21p4gxUo2SqAdPg kHoeu5ltHXSfvQeeZIEaAeIcDSctXJCK1QwtbsmjrXwmqQb8M6+2gffwcIiokl5S 8+PKYKlBVOTDw8w43c8iiM4jgC2v+474scN/uNjDMBfAadHFXAhpW+oolz0b4SsH nJsJJ+/HwDQaPcaCbs8pNgBUhspl+2lLDc6YOPfjat17ef5OHTszKTooUPZMZLOM NH26IgKdIcSe1aStvWch2AJ9aCSgGLLeXukDJgVXqZDKWIIF2LxUhyr0sWkxw8lp XnhD2hzGGQGwRxiV2YYzyuVT96UPjvkeTK48VH0w5l42+KHfVu5ijDA= -----END CERTIFICATE-----Generated at Sun Nov 2 04:49:50 2025 by rpki-client