$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer File: 428173DF58B0C16D8FB92F81F342D6017FB0CECA.cer (raw, json) Hash identifier: xa8Ou3ef/0bWiIUN42D/ut9ZUKOCMjWY0P+VeXtH/mQ= Subject key identifier: 42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 74999CF3F0229171F147F1EEDC15CF30B90DEBC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft caRepository: rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 11 Jul 2025 01:50:31 +0000 Certificate not after: Fri 10 Jul 2026 01:55:31 +0000 Subordinate resources: IP: 103.191.39.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:99:9c:f3:f0:22:91:71:f1:47:f1:ee:dc:15:cf:30:b9:0d:eb:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 11 01:50:31 2025 GMT Not After : Jul 10 01:55:31 2026 GMT Subject: CN=428173DF58B0C16D8FB92F81F342D6017FB0CECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8c:29:ce:e9:a8:6b:04:cf:8c:72:99:aa:c6: d4:a1:83:1e:4b:79:c0:65:3d:f2:f0:9b:e3:a4:33: a0:f9:b0:34:23:6d:dd:e6:96:ae:e2:96:43:be:6d: 1b:62:f3:7e:19:81:db:bb:6b:9d:17:2a:12:93:2e: a0:cd:97:1f:fa:e9:19:61:75:b2:d2:26:f4:f7:65: 23:02:46:de:0f:64:17:60:da:de:c9:42:1c:8f:1d: 1a:b7:b0:c1:50:5f:a9:5c:71:d1:d7:4f:f5:59:e4: 9f:52:1e:0e:a8:a6:39:14:82:02:0e:c3:41:e8:db: 51:03:f8:44:09:6f:0d:2b:5d:02:34:30:ec:5f:32: e1:15:0e:3a:f5:37:01:46:c7:9e:4c:fb:aa:83:39: ef:41:b7:33:28:56:be:17:fc:f4:b1:bf:07:11:8b: 18:89:84:0b:6d:8c:23:96:e3:29:cf:27:45:9c:e3: ee:9c:50:d9:e3:6d:82:20:dc:4f:a5:1f:9d:78:b2: ee:85:ca:ae:ac:1c:b1:51:1c:0d:c2:89:ce:a5:bf: 26:b0:99:ba:1d:03:8b:77:5d:d8:3a:3c:9f:ff:ae: dd:e3:1d:9e:11:a8:f9:e4:c3:be:e1:d4:c9:3a:47: 3f:2b:df:d1:e2:d0:a2:8c:bf:48:a8:24:96:26:7e: fc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:81:73:DF:58:B0:C1:6D:8F:B9:2F:81:F3:42:D6:01:7F:B0:CE:CA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/65f84278-e06d-4119-ba44-5c32968a8bbd/0/428173DF58B0C16D8FB92F81F342D6017FB0CECA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.39.0/24 Signature Algorithm: sha256WithRSAEncryption 08:3b:9c:7b:66:dc:58:f4:84:8d:de:15:e6:88:c2:bf:e0:eb: 0a:b8:30:cd:d5:01:60:3c:3c:ff:98:dd:57:73:58:95:91:09: 44:ff:99:ca:d5:6c:d7:9a:f2:10:b0:2e:34:7f:6b:9e:30:2f: 97:0a:fb:4c:87:9d:d0:6a:5e:e6:45:97:61:d4:a0:34:12:10: c3:8d:af:c5:c2:ef:f3:0c:1e:24:86:b1:8c:50:d7:29:9d:14: 93:67:ab:90:58:95:2d:d8:90:ea:1e:dc:db:b6:f6:f3:6c:78: 74:f1:3a:97:96:43:f2:eb:eb:ae:28:1b:91:5a:66:b8:3b:87: e4:4a:ad:31:3f:a0:55:7a:96:bc:6b:2e:29:ce:1b:27:41:b1: 3f:d2:23:a3:9f:97:3b:38:f0:74:2a:2e:81:85:a0:60:4f:59: 03:ee:73:9e:57:d7:86:39:64:f6:9f:ec:b8:a2:20:67:3b:06: de:f4:89:4b:19:8b:bc:68:a0:d8:a8:3c:f1:b2:07:16:ba:13: 10:84:69:58:c1:04:0f:f9:8e:1d:d8:c9:2d:c0:10:6c:06:93: 59:66:21:16:fb:af:d6:50:ba:36:58:77:5e:93:9b:6c:eb:12: 7b:e5:9f:dd:fc:bc:f3:75:72:6d:fa:de:f0:ae:38:07:28:8b: d4:57:3e:51 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdJmc8/AikXHxR/Hu3BXPMLkN68YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxMTAxNTAzMVoX DTI2MDcxMDAxNTUzMVowMzExMC8GA1UEAxMoNDI4MTczREY1OEIwQzE2RDhGQjky RjgxRjM0MkQ2MDE3RkIwQ0VDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANGMKc7pqGsEz4xymarG1KGDHkt5wGU98vCb46QzoPmwNCNt3eaWruKWQ75t G2LzfhmB27trnRcqEpMuoM2XH/rpGWF1stIm9PdlIwJG3g9kF2Da3slCHI8dGrew wVBfqVxx0ddP9Vnkn1IeDqimORSCAg7DQejbUQP4RAlvDStdAjQw7F8y4RUOOvU3 AUbHnkz7qoM570G3MyhWvhf89LG/BxGLGImEC22MI5bjKc8nRZzj7pxQ2eNtgiDc T6UfnXiy7oXKrqwcsVEcDcKJzqW/JrCZuh0Di3dd2Do8n/+u3eMdnhGo+eTDvuHU yTpHPyvf0eLQooy/SKgkliZ+/E8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEKBc99YsMFtj7kvgfNC1gF/sM7KMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82NWY4NDI3OC1lMDZkLTQxMTktYmE0NC01YzMyOTY4YThiYmQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1Zjg0Mjc4 LWUwNmQtNDExOS1iYTQ0LTVjMzI5NjhhOGJiZC8wLzQyODE3M0RGNThCMEMxNkQ4 RkI5MkY4MUYzNDJENjAxN0ZCMENFQ0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnvycwDQYJKoZIhvcNAQELBQADggEBAAg7nHtm3Fj0hI3eFeaIwr/g6wq4MM3V AWA8PP+Y3VdzWJWRCUT/mcrVbNea8hCwLjR/a54wL5cK+0yHndBqXuZFl2HUoDQS EMONr8XC7/MMHiSGsYxQ1ymdFJNnq5BYlS3YkOoe3Nu29vNseHTxOpeWQ/Lr664o G5FaZrg7h+RKrTE/oFV6lrxrLinOGydBsT/SI6Oflzs48HQqLoGFoGBPWQPuc55X 14Y5ZPaf7LiiIGc7Bt70iUsZi7xooNioPPGyBxa6ExCEaVjBBA/5jh3YyS3AEGwG k1lmIRb7r9ZQujZYd16Tm2zrEnvln938vPN1cm363vCuOAcoi9RXPlE= -----END CERTIFICATE-----Generated at Sun Jul 20 22:35:59 2025 by rpki-client