$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer File: 4DF3DB3DA21D0022202130736E4CCB048C1D5158.cer (raw, json) Hash identifier: 6IihJCP/EyddpU86i0nKSxqeeXpgfzb/Cmjj9YryDP4= Subject key identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 09759EC6C7D98243BA7FE123B59CE21108A0FAB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft caRepository: rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 11 Jul 2025 10:33:45 +0000 Certificate not after: Fri 10 Jul 2026 10:38:45 +0000 Subordinate resources: IP: 2404:97c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:75:9e:c6:c7:d9:82:43:ba:7f:e1:23:b5:9c:e2:11:08:a0:fa:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 11 10:33:45 2025 GMT Not After : Jul 10 10:38:45 2026 GMT Subject: CN=4DF3DB3DA21D0022202130736E4CCB048C1D5158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ee:8c:c0:8c:c4:0a:8f:22:e2:5f:ab:e9:71: bf:a4:1c:23:09:a5:e2:ec:b7:4e:50:88:0c:d1:ce: a0:f6:d9:50:eb:14:ab:aa:73:0b:60:b7:49:d8:bd: d8:f3:01:ee:c0:3b:eb:54:34:c7:f8:24:dd:97:67: 79:52:a1:55:8d:20:20:a8:84:ce:2b:f0:e3:01:b3: 21:4f:c9:d3:ea:50:ae:40:6e:1a:15:88:7b:72:11: b3:93:12:52:30:14:12:f8:18:15:bf:b6:df:01:78: 2b:c6:a6:63:10:f5:38:d4:0b:3f:a5:a7:e1:30:d0: dd:59:31:ea:aa:2e:21:c5:8c:d0:d3:ad:95:ca:ec: 0e:64:40:a4:87:8f:c9:cb:cb:05:33:e6:47:f8:e2: 84:8b:e1:a2:0b:c6:4d:a9:89:b2:4c:c5:64:87:5c: e2:3e:f2:0c:4b:e6:c5:50:d9:ac:54:62:03:01:df: 1b:a4:d0:af:9e:75:2c:7e:9e:37:27:27:f5:bc:1b: 74:58:6d:1b:0b:ea:10:a8:01:8a:70:d1:91:0a:16: 77:ce:ef:89:71:37:4d:6e:1b:d1:01:aa:d4:57:3a: fd:40:50:5a:6c:a9:85:ed:13:89:2e:30:e2:71:3c: b7:68:e4:87:00:c2:0c:35:48:55:3c:ba:34:e2:a0: 5c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4D:F3:DB:3D:A2:1D:00:22:20:21:30:73:6E:4C:CB:04:8C:1D:51:58 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/1/4DF3DB3DA21D0022202130736E4CCB048C1D5158.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:97c0::/32 Signature Algorithm: sha256WithRSAEncryption 96:26:13:6c:44:e4:cc:e1:03:a5:95:8c:f7:04:54:ca:23:08: 88:bb:fa:ee:b6:0c:55:4c:b2:89:c6:dd:75:52:22:ea:64:83: 22:16:4e:5f:46:ac:a4:57:28:ba:17:ff:de:a2:82:9f:a6:01: cc:71:e7:7e:c6:90:45:6a:0c:6f:d7:20:20:27:a5:5c:ec:f7: f0:25:c6:d8:b3:14:17:5a:f3:8a:0d:78:c0:cf:c6:9d:e0:0e: fe:28:8b:68:17:85:aa:99:b9:b8:e4:c7:55:08:ab:79:99:56: 2f:8a:79:0d:93:45:ea:04:ae:39:0f:63:af:90:25:0c:d3:19: 0c:27:5e:3e:3c:4c:90:1b:d5:86:00:21:bf:9f:b5:43:41:1d: 1b:48:68:e6:44:3d:9f:c0:9b:22:14:76:44:a0:45:29:64:12: 17:f7:b7:23:a3:45:98:61:61:73:1f:c5:5d:7d:92:ff:fa:68: b9:92:bf:11:bd:80:9a:0a:51:49:2b:36:7b:2f:fe:9a:1c:cd: 67:da:3e:bf:8c:d7:a3:a5:c2:e4:44:7d:5b:46:23:38:74:42: a8:db:9c:f9:b1:4c:f3:fc:d5:3a:1d:36:b6:9e:ff:71:58:9e: e3:51:a1:ef:7f:50:2e:90:79:d6:fe:ac:53:62:b4:78:45:56: cd:89:c1:0c -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUCXWexsfZgkO6f+EjtZziEQig+rMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxMTEwMzM0NVoX DTI2MDcxMDEwMzg0NVowMzExMC8GA1UEAxMoNERGM0RCM0RBMjFEMDAyMjIwMjEz MDczNkU0Q0NCMDQ4QzFENTE1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrujMCMxAqPIuJfq+lxv6QcIwml4uy3TlCIDNHOoPbZUOsUq6pzC2C3Sdi9 2PMB7sA761Q0x/gk3ZdneVKhVY0gIKiEzivw4wGzIU/J0+pQrkBuGhWIe3IRs5MS UjAUEvgYFb+23wF4K8amYxD1ONQLP6Wn4TDQ3Vkx6qouIcWM0NOtlcrsDmRApIeP ycvLBTPmR/jihIvhogvGTamJskzFZIdc4j7yDEvmxVDZrFRiAwHfG6TQr551LH6e Nycn9bwbdFhtGwvqEKgBinDRkQoWd87viXE3TW4b0QGq1Fc6/UBQWmyphe0TiS4w 4nE8t2jkhwDCDDVIVTy6NOKgXFECAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE3z2z2iHQAiICEwc25MywSMHVFYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZGVkNTgxMS1iZTUwLTRjYWEtOWY5Ni02M2QzNzIwMzExZGUvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZWQ1ODEx LWJlNTAtNGNhYS05Zjk2LTYzZDM3MjAzMTFkZS8xLzRERjNEQjNEQTIxRDAwMjIy MDIxMzA3MzZFNENDQjA0OEMxRDUxNTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkBJfAMA0GCSqGSIb3DQEBCwUAA4IBAQCWJhNsROTM4QOllYz3BFTKIwiIu/ru tgxVTLKJxt11UiLqZIMiFk5fRqykVyi6F//eooKfpgHMced+xpBFagxv1yAgJ6Vc 7PfwJcbYsxQXWvOKDXjAz8ad4A7+KItoF4Wqmbm45MdVCKt5mVYvinkNk0XqBK45 D2OvkCUM0xkMJ14+PEyQG9WGACG/n7VDQR0bSGjmRD2fwJsiFHZEoEUpZBIX97cj o0WYYWFzH8VdfZL/+mi5kr8RvYCaClFJKzZ7L/6aHM1n2j6/jNejpcLkRH1bRiM4 dEKo25z5sUzz/NU6HTa2nv9xWJ7jUaHvf1AukHnW/qxTYrR4RVbNicEM -----END CERTIFICATE-----Generated at Sun Jul 20 17:30:10 2025 by rpki-client