$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer File: 4FA812FE6A4A85F790CB2740EF08836883716912.cer (raw, json) Hash identifier: m4WUvMJpEP0/qKaYdqWRX8KBUa+nP6fgEJGEF09wYuo= Subject key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5527049DDB352B79C896E8A98546DC3939CBCDFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft caRepository: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 12 Jul 2025 09:17:57 +0000 Certificate not after: Sat 11 Jul 2026 09:22:57 +0000 Subordinate resources: IP: 103.90.196.0/22 IP: 175.106.16.0/22 IP: 2400:8b80::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:27:04:9d:db:35:2b:79:c8:96:e8:a9:85:46:dc:39:39:cb:cd:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 12 09:17:57 2025 GMT Not After : Jul 11 09:22:57 2026 GMT Subject: CN=4FA812FE6A4A85F790CB2740EF08836883716912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:34:0f:1c:35:cb:52:e8:ce:f8:44:aa:7e:d0: 4a:e5:02:e7:a7:4f:68:0f:01:79:e8:a2:5c:f1:ce: c7:e0:e5:08:b2:cf:50:a3:00:a8:76:9b:b8:a7:09: b2:ea:08:11:b5:f7:31:0c:7a:68:d8:a1:a7:0e:cf: 0a:8e:57:32:24:42:1d:ef:2f:cd:f1:b7:55:c0:72: be:6f:b2:2d:97:92:1f:d5:d2:84:13:75:cd:e8:d7: ba:1f:3a:98:61:79:3a:c5:c9:91:2f:ce:21:c0:21: 76:02:67:2e:ca:6a:bd:56:cc:b5:a7:e8:a4:4f:d0: 3f:b2:86:ab:e9:dc:ee:a4:0a:62:19:4b:09:19:c6: f8:e7:6a:e7:90:05:ac:4a:0a:b0:32:85:6f:5e:aa: f3:57:ba:aa:c6:08:f3:b7:0c:8c:da:bf:52:c7:2c: f5:07:a3:36:bd:50:ca:d4:92:24:62:56:69:f4:af: 34:14:5e:9a:62:ba:a5:d8:bd:a2:2c:02:fa:9c:d5: cd:60:3c:f7:6f:28:ae:d9:c3:51:78:b6:04:ca:0e: 54:0c:78:c3:3e:ee:04:30:74:73:69:1b:a0:41:83: 47:35:11:d1:09:d0:f3:b9:05:61:3b:3e:37:8b:90: cc:27:02:f7:31:d4:a2:f4:19:6a:c7:03:1b:46:e7: 98:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.90.196.0/22 175.106.16.0/22 IPv6: 2400:8b80::/32 Signature Algorithm: sha256WithRSAEncryption 4d:20:e2:f3:e9:87:b2:e8:d7:0d:1f:0b:a3:91:7c:eb:26:45: 07:3a:d2:9d:e4:f3:d5:d5:19:c9:3a:d3:b4:ab:5f:e7:50:d1: 02:e9:c2:44:1d:b3:d7:e5:d3:38:f5:7c:3b:03:a7:27:61:e4: 84:a3:38:8d:44:e4:f9:62:ee:e4:9d:b5:c7:2c:78:37:32:53: 45:3c:33:e9:45:09:c7:d3:25:c9:78:69:ba:c5:7c:7d:2f:25: d2:7b:4c:40:6a:74:72:f3:c9:30:3e:1d:bb:a0:6e:9c:c3:79: 31:8b:20:25:fe:b0:33:79:c5:53:16:34:5e:dd:db:2f:da:91: 10:c9:57:12:d3:58:d7:ba:28:8c:46:4b:aa:34:74:b3:8a:57: c4:0c:f0:b7:03:99:81:e8:33:6f:de:02:c6:9d:b0:13:8e:42: dd:b8:8c:d9:d3:22:54:c6:93:ea:7c:0f:41:8f:cc:2a:2e:3c: 1a:c4:ff:d8:cd:56:6b:2a:5c:62:30:5e:eb:eb:58:4f:3b:52: 60:5c:18:a5:7f:cc:17:ae:9e:1c:3d:69:db:46:66:6c:8d:10: 8b:6a:ea:9e:18:3b:11:15:6a:bb:ae:4a:97:91:a1:e9:54:a5: 47:fa:37:23:35:18:0f:cc:1c:ae:70:41:d2:ff:28:64:4a:e5: f7:15:8f:07 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUVScEnds1K3nIluiphUbcOTnLzfwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxMjA5MTc1N1oX DTI2MDcxMTA5MjI1N1owMzExMC8GA1UEAxMoNEZBODEyRkU2QTRBODVGNzkwQ0Iy NzQwRUYwODgzNjg4MzcxNjkxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANk0Dxw1y1LozvhEqn7QSuUC56dPaA8BeeiiXPHOx+DlCLLPUKMAqHabuKcJ suoIEbX3MQx6aNihpw7PCo5XMiRCHe8vzfG3VcByvm+yLZeSH9XShBN1zejXuh86 mGF5OsXJkS/OIcAhdgJnLspqvVbMtafopE/QP7KGq+nc7qQKYhlLCRnG+Odq55AF rEoKsDKFb16q81e6qsYI87cMjNq/Uscs9QejNr1QytSSJGJWafSvNBRemmK6pdi9 oiwC+pzVzWA8928ortnDUXi2BMoOVAx4wz7uBDB0c2kboEGDRzUR0QnQ87kFYTs+ N4uQzCcC9zHUovQZascDG0bnmOkCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE+oEv5qSoX3kMsnQO8Ig2iDcWkSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNGQxMDhmNy0wOGIyLTQwOWYtOGE3MC1hOWM2N2FlNWVkMjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0ZDEwOGY3 LTA4YjItNDA5Zi04YTcwLWE5YzY3YWU1ZWQyMi8wLzRGQTgxMkZFNkE0QTg1Rjc5 MENCMjc0MEVGMDg4MzY4ODM3MTY5MTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAJnWsQDBAKvahAwDQQCAAIwBwMFACQAi4AwDQYJKoZIhvcNAQELBQADggEBAE0g 4vPph7Lo1w0fC6ORfOsmRQc60p3k89XVGck607SrX+dQ0QLpwkQds9fl0zj1fDsD pydh5ISjOI1E5Pli7uSdtccseDcyU0U8M+lFCcfTJcl4abrFfH0vJdJ7TEBqdHLz yTA+HbugbpzDeTGLICX+sDN5xVMWNF7d2y/akRDJVxLTWNe6KIxGS6o0dLOKV8QM 8LcDmYHoM2/eAsadsBOOQt24jNnTIlTGk+p8D0GPzCouPBrE/9jNVmsqXGIwXuvr WE87UmBcGKV/zBeunhw9adtGZmyNEItq6p4YOxEVaruuSpeRoelUpUf6NyM1GA/M HK5wQdL/KGRK5fcVjwc= -----END CERTIFICATE-----Generated at Sun Jul 20 18:54:40 2025 by rpki-client