$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7DF6602C113DDEE922AA019C74EF4283764A4695.cer File: 7DF6602C113DDEE922AA019C74EF4283764A4695.cer (raw, json) Hash identifier: uXG0pQU9d40695fMeTLaLTXlNlDQGRC078rGdyqNLj4= Subject key identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6C66AB9E8818EF4324831708B28253BA296F6989 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft caRepository: rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 15 Jul 2025 01:01:05 +0000 Certificate not after: Tue 14 Jul 2026 01:06:05 +0000 Subordinate resources: IP: 43.252.8.0/22 IP: 103.24.104.0/22 IP: 175.106.8.0/21 IP: 2406:b900::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:66:ab:9e:88:18:ef:43:24:83:17:08:b2:82:53:ba:29:6f:69:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 15 01:01:05 2025 GMT Not After : Jul 14 01:06:05 2026 GMT Subject: CN=7DF6602C113DDEE922AA019C74EF4283764A4695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e1:e3:91:be:65:f2:2f:10:f7:1d:2e:76:ef: da:ae:fa:51:1d:ef:10:60:80:b1:3b:b1:6b:bd:bd: 34:05:29:58:77:3f:4b:fe:86:9b:ec:0e:6c:f7:d2: d2:73:d4:5c:19:15:3b:07:3d:55:b2:66:a8:61:54: 7e:20:3f:05:bd:01:81:c5:a0:9d:b7:11:6d:00:5d: bf:fc:a8:5f:dd:06:e7:17:b9:1c:aa:19:1c:a6:64: 78:f9:b8:9d:fc:db:c4:05:64:6f:4f:0a:75:2f:dd: 51:69:ff:50:e5:1a:17:f4:92:1b:cd:d1:fa:ae:fd: e7:ac:de:66:81:29:7c:29:0a:73:68:ef:a8:3d:0d: 30:69:ed:60:30:bc:15:94:49:1e:fa:6e:76:4d:74: f0:f1:44:6e:0a:bd:51:d5:d4:5a:aa:2b:be:72:5d: 7f:97:66:ad:47:c9:11:8c:36:a8:c6:03:66:6f:97: 59:16:11:bc:f4:f6:d2:60:37:9d:49:75:84:d6:76: 3c:aa:11:54:be:ab:42:f1:fc:eb:8d:3d:a3:6c:d8: 23:95:bb:d3:f5:2e:33:71:e8:b8:df:8b:44:79:d6: 68:91:19:fb:3b:04:83:ac:32:35:4d:26:79:5b:23: 48:5e:d6:05:99:8d:7a:f3:37:a1:45:23:32:f1:61: b9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:F6:60:2C:11:3D:DE:E9:22:AA:01:9C:74:EF:42:83:76:4A:46:95 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/00a985b0-e17a-421b-9655-03245a01aef8/0/7DF6602C113DDEE922AA019C74EF4283764A4695.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.8.0/22 103.24.104.0/22 175.106.8.0/21 IPv6: 2406:b900::/32 Signature Algorithm: sha256WithRSAEncryption 43:ba:96:83:35:f4:67:e0:89:e0:ce:e7:84:0f:45:e8:e5:15: e1:ed:dc:1a:1e:ef:5d:d2:e5:63:87:71:61:34:51:a1:8c:69: 94:08:c2:ea:e9:c0:5e:cd:22:7e:7b:61:4e:e1:4d:b1:35:80: 50:7d:10:07:98:8e:bf:ce:e7:69:c4:6f:bc:68:e0:e6:d2:87: 56:de:96:7a:fd:ec:55:a6:71:bb:78:d3:d3:d1:19:cc:66:a2: f7:89:ef:0d:ac:2a:a3:65:dc:b3:87:69:21:79:99:f3:4d:58: ce:23:d0:29:3e:2c:98:00:dd:a8:a8:a1:de:18:78:20:7f:54: 36:c0:0c:ae:5c:28:01:73:d4:c1:c4:3f:23:c1:46:91:be:b7: 27:12:bd:c6:f0:df:36:b6:ef:b8:2a:d4:9f:34:02:d7:ef:dd: cb:df:6c:9a:d1:94:14:24:03:78:a6:fd:9f:ca:46:b7:03:b5: 5e:2b:87:e6:81:af:88:ec:66:dc:5d:e2:43:d0:45:14:c0:2a: 6e:a2:b1:c5:d2:8a:46:16:5c:4b:66:98:ea:89:9b:33:90:ca: a7:d3:ad:c0:93:b8:5d:fb:15:08:04:c4:07:e6:8c:2f:09:e0: 2e:16:ce:5d:e8:c8:43:8a:34:07:49:e9:72:2a:4e:ab:0a:91: 49:c4:3b:0c -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUbGarnogY70MkgxcIsoJTuilvaYkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxNTAxMDEwNVoX DTI2MDcxNDAxMDYwNVowMzExMC8GA1UEAxMoN0RGNjYwMkMxMTNEREVFOTIyQUEw MTlDNzRFRjQyODM3NjRBNDY5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXh45G+ZfIvEPcdLnbv2q76UR3vEGCAsTuxa729NAUpWHc/S/6Gm+wObPfS 0nPUXBkVOwc9VbJmqGFUfiA/Bb0BgcWgnbcRbQBdv/yoX90G5xe5HKoZHKZkePm4 nfzbxAVkb08KdS/dUWn/UOUaF/SSG83R+q7956zeZoEpfCkKc2jvqD0NMGntYDC8 FZRJHvpudk108PFEbgq9UdXUWqorvnJdf5dmrUfJEYw2qMYDZm+XWRYRvPT20mA3 nUl1hNZ2PKoRVL6rQvH86409o2zYI5W70/UuM3HouN+LRHnWaJEZ+zsEg6wyNU0m eVsjSF7WBZmNevM3oUUjMvFhuacCAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH32YCwRPd7pIqoBnHTvQoN2SkaVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMGE5ODViMC1lMTdhLTQyMWItOTY1NS0wMzI0NWEwMWFlZjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwYTk4NWIw LWUxN2EtNDIxYi05NjU1LTAzMjQ1YTAxYWVmOC8wLzdERjY2MDJDMTEzRERFRTky MkFBMDE5Qzc0RUY0MjgzNzY0QTQ2OTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAIr/AgDBAJnGGgDBAOvaggwDQQCAAIwBwMFACQGuQAwDQYJKoZIhvcNAQELBQAD ggEBAEO6loM19GfgieDO54QPRejlFeHt3Boe713S5WOHcWE0UaGMaZQIwurpwF7N In57YU7hTbE1gFB9EAeYjr/O52nEb7xo4ObSh1belnr97FWmcbt409PRGcxmoveJ 7w2sKqNl3LOHaSF5mfNNWM4j0Ck+LJgA3aiood4YeCB/VDbADK5cKAFz1MHEPyPB RpG+tycSvcbw3za277gq1J80Atfv3cvfbJrRlBQkA3im/Z/KRrcDtV4rh+aBr4js Ztxd4kPQRRTAKm6iscXSikYWXEtmmOqJmzOQyqfTrcCTuF37FQgExAfmjC8J4C4W zl3oyEOKNAdJ6XIqTqsKkUnEOww= -----END CERTIFICATE-----Generated at Sun Jul 20 18:24:33 2025 by rpki-client