$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer File: 58D7A2E054D4F6B835578031386896062B0B0CED.cer (raw, json) Hash identifier: jA1Pwe8Cn15YDcSfchr9eOuWqEDqIUGgdSOGgS2eAjY= Subject key identifier: 58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1BAA07F04D0DC673D1012D33674B8D52C404D717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft caRepository: rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 07 Jul 2025 10:18:40 +0000 Certificate not after: Mon 06 Jul 2026 10:23:40 +0000 Subordinate resources: IP: 103.98.121.0/24 IP: 103.103.175.0/24 IP: 103.103.192.0/23 IP: 2001:df2:2500::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:aa:07:f0:4d:0d:c6:73:d1:01:2d:33:67:4b:8d:52:c4:04:d7:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 7 10:18:40 2025 GMT Not After : Jul 6 10:23:40 2026 GMT Subject: CN=58D7A2E054D4F6B835578031386896062B0B0CED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:c2:09:9c:d3:d2:c7:34:19:65:84:d7:02: bf:be:40:c5:c2:8f:67:1e:16:39:fa:c4:37:84:8c: 31:92:7c:0c:3b:3f:70:7b:4d:6e:bc:f6:82:ff:f0: 23:e0:d2:67:13:0a:da:d8:c4:6e:c6:a4:93:6b:0d: cb:eb:d8:30:9c:4e:70:ce:ae:cf:cd:3e:38:ed:aa: f9:10:02:af:22:50:d9:a3:25:f0:df:0c:e4:47:c4: a4:05:cf:9c:26:2c:bc:b0:3f:a9:dd:ab:a1:eb:3e: 2b:d6:dd:33:d3:05:1e:60:7c:38:41:d2:89:8c:e2: 2e:53:8a:13:28:b8:a2:4f:51:97:73:68:65:16:f0: d7:09:f5:cb:2d:05:73:10:f9:7f:e0:09:fa:e1:b0: 1d:7b:94:9b:51:1f:bb:c5:c3:e8:f8:9e:68:a3:62: e1:5e:bf:0c:8a:53:7a:cc:21:6d:da:9d:9c:1a:8a: 58:44:20:ac:2b:8c:0c:db:ed:5d:a2:f8:0f:57:72: f3:ad:e8:99:8f:9e:0b:87:ee:13:f7:00:a3:83:b9: f2:d0:18:e5:78:01:38:96:bb:5a:7b:14:a1:24:7a: 91:73:50:b2:e0:c5:7e:13:99:49:e3:69:5d:ca:e3: 39:78:62:0a:75:24:17:51:59:74:97:c1:02:b4:db: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.121.0/24 103.103.175.0/24 103.103.192.0/23 IPv6: 2001:df2:2500::/48 Signature Algorithm: sha256WithRSAEncryption 4a:45:21:22:4d:92:0b:30:2f:9b:cc:79:84:66:d2:06:2b:03: 97:77:5e:1c:36:ea:ae:45:6e:59:14:60:40:e3:4d:ce:e9:df: 67:16:f8:51:eb:fe:7d:b0:41:97:e1:e6:de:42:a7:0c:53:7b: 8e:d9:8b:50:d0:4c:fa:ee:38:b4:fb:b3:a8:93:1e:b2:71:27: e6:35:45:28:ff:7e:a5:7d:fb:f9:7b:79:95:8e:90:c7:45:0c: 04:98:73:25:60:5a:f0:8e:d7:f2:8b:4d:53:c1:1d:59:c8:58: e8:3b:c6:d9:f5:4c:18:1f:55:c8:32:07:df:77:d6:ba:82:5c: 64:91:30:73:78:20:db:4b:34:90:d9:08:e4:6a:09:69:aa:c5: e2:c8:43:e9:6b:f6:55:52:20:99:19:f7:52:78:53:77:3d:75: 04:05:80:e5:f0:db:61:b4:83:e2:0c:f3:87:c9:55:a4:cd:31: bc:7f:1f:8c:2d:c5:c9:ab:8e:45:5e:16:b3:f2:a8:b9:f7:9c: 44:01:9c:df:3b:3f:99:a2:2a:52:d5:a9:6c:c8:80:11:2c:23: ab:a0:94:ba:c4:fa:9c:aa:17:b4:5c:dc:09:18:f4:83:26:76: 1b:aa:83:00:bf:86:40:9f:fd:f9:7f:b7:2d:61:84:02:c8:9f: e7:e2:91:71 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUG6oH8E0NxnPRAS0zZ0uNUsQE1xcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwNzEwMTg0MFoX DTI2MDcwNjEwMjM0MFowMzExMC8GA1UEAxMoNThEN0EyRTA1NEQ0RjZCODM1NTc4 MDMxMzg2ODk2MDYyQjBCMENFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALqhwgmc09LHNBllhNcCv75AxcKPZx4WOfrEN4SMMZJ8DDs/cHtNbrz2gv/w I+DSZxMK2tjEbsakk2sNy+vYMJxOcM6uz80+OO2q+RACryJQ2aMl8N8M5EfEpAXP nCYsvLA/qd2roes+K9bdM9MFHmB8OEHSiYziLlOKEyi4ok9Rl3NoZRbw1wn1yy0F cxD5f+AJ+uGwHXuUm1Efu8XD6PieaKNi4V6/DIpTeswhbdqdnBqKWEQgrCuMDNvt XaL4D1dy863omY+eC4fuE/cAo4O58tAY5XgBOJa7WnsUoSR6kXNQsuDFfhOZSeNp XcrjOXhiCnUkF1FZdJfBArTbcYUCAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFjXouBU1Pa4NVeAMTholgYrCwztMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZWJiYWRiMy05YWM4LTQ2ZGYtYWI5MS1iZjM5ZGZlZTFiZDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlYmJhZGIz LTlhYzgtNDZkZi1hYjkxLWJmMzlkZmVlMWJkMC8wLzU4RDdBMkUwNTRENEY2Qjgz NTU3ODAzMTM4Njg5NjA2MkIwQjBDRUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID BABnYnkDBABnZ68DBAFnZ8AwDwQCAAIwCQMHACABDfIlADANBgkqhkiG9w0BAQsF AAOCAQEASkUhIk2SCzAvm8x5hGbSBisDl3deHDbqrkVuWRRgQONNzunfZxb4Uev+ fbBBl+Hm3kKnDFN7jtmLUNBM+u44tPuzqJMesnEn5jVFKP9+pX37+Xt5lY6Qx0UM BJhzJWBa8I7X8otNU8EdWchY6DvG2fVMGB9VyDIH33fWuoJcZJEwc3gg20s0kNkI 5GoJaarF4shD6Wv2VVIgmRn3UnhTdz11BAWA5fDbYbSD4gzzh8lVpM0xvH8fjC3F yauORV4Ws/KoufecRAGc3zs/maIqUtWpbMiAESwjq6CUusT6nKoXtFzcCRj0gyZ2 G6qDAL+GQJ/9+X+3LWGEAsif5+KRcQ== -----END CERTIFICATE-----Generated at Sun Jul 20 18:25:30 2025 by rpki-client