$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer File: 94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.cer (raw, json) Hash identifier: QL0CqArhI+CgwbMVkqK8NFECIutMsH64XqfmMW25zN8= Subject key identifier: 94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 769B0077E3127267751C2D6CD4F7202EC7277031 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft caRepository: rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 01:48:03 +0000 Certificate not after: Tue 02 Jun 2026 01:53:03 +0000 Subordinate resources: IP: 103.144.250.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 23:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:9b:00:77:e3:12:72:67:75:1c:2d:6c:d4:f7:20:2e:c7:27:70:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 01:48:03 2025 GMT Not After : Jun 2 01:53:03 2026 GMT Subject: CN=94EDA4B2360B47DC65386E3E7EBAE35B997F2A42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b3:b9:d3:75:48:5b:2f:87:d3:c6:7d:d2:40: 2f:37:d4:06:f0:50:70:25:10:b3:ed:f0:16:69:04: 6d:8d:1c:5f:4f:0a:8e:91:e8:ac:e3:35:37:28:3e: 4e:5c:f9:5b:5f:98:44:6f:8a:7c:18:f1:fb:63:f5: ea:f5:37:64:0e:92:45:aa:ed:84:26:32:97:df:24: d8:60:b8:37:dc:85:93:4b:4e:d8:ae:9b:ad:45:da: 32:ec:7f:8b:78:d6:4d:96:79:26:93:b8:5f:f1:6b: 1e:fb:4d:14:2b:0f:8a:05:82:fd:d9:92:cb:99:41: a6:9e:22:2e:f9:2e:0f:57:c9:49:c6:86:14:4b:ff: 5a:f1:4c:d7:49:7a:97:19:df:7c:18:c7:1c:ce:bb: a5:05:e9:dc:0a:67:d5:4f:7c:b8:e5:12:80:27:41: 0a:49:76:df:70:b4:df:30:98:b0:4e:6a:f5:e5:b9: 67:b5:28:b0:60:12:b8:67:56:91:75:4f:a6:ca:ef: 69:c0:37:11:94:fe:08:89:ad:2f:9b:38:48:2c:49: 5e:0d:4d:d1:ae:ca:0f:03:2f:f8:cb:36:38:49:97: 05:e5:8e:6b:6b:ad:c0:96:72:b0:63:dc:3c:63:92: 28:a0:88:35:c6:c7:d6:25:6d:7b:35:39:74:81:71: 56:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:ED:A4:B2:36:0B:47:DC:65:38:6E:3E:7E:BA:E3:5B:99:7F:2A:42 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/15bf718d-911e-43d6-8e3c-0d1b3646e276/0/94EDA4B2360B47DC65386E3E7EBAE35B997F2A42.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.250.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:6e:99:5e:0f:1c:b7:61:52:f8:42:fd:c4:24:59:60:e7:de: a6:c7:82:52:f5:b7:33:55:20:fc:6e:74:d9:b3:77:fb:0b:3b: 8d:ba:19:24:55:7d:60:ea:5c:f4:74:a7:9d:29:8f:9a:92:97: 7e:3d:7d:6f:b7:8e:ba:2f:82:5d:8b:66:22:4c:66:73:72:4a: 24:3d:4b:4c:c2:a2:08:f2:e5:da:23:c7:9e:10:1a:aa:56:91: ff:ae:ec:ba:3c:46:97:47:7b:57:7e:cf:f1:d7:96:97:34:b6: ff:a3:3b:21:8a:15:07:0d:ba:7e:2d:95:46:7e:cb:f3:42:75: a0:c5:44:5f:3e:02:5e:63:26:84:9b:5e:16:12:08:1d:cf:aa: a3:09:ca:8f:4d:51:ce:a1:94:c3:de:51:9a:57:b4:c2:3c:0e: 9d:69:8c:a0:f5:fa:e0:93:b1:af:00:89:b6:b9:be:8f:6e:d7: fe:12:e6:f6:61:95:e7:d6:6a:b6:01:9e:d5:d6:59:83:1c:92: 89:2a:f9:8e:80:47:55:70:6b:03:81:a5:87:f2:95:eb:d1:c9: c4:fa:69:04:e5:98:a8:0d:2e:56:ff:6d:d0:72:4c:06:04:c8: 4b:c2:5f:7d:28:c4:f5:2c:c1:e5:4c:96:dd:62:12:63:bc:3a: cf:47:d4:da -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdpsAd+MScmd1HC1s1PcgLscncDEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzAxNDgwM1oX DTI2MDYwMjAxNTMwM1owMzExMC8GA1UEAxMoOTRFREE0QjIzNjBCNDdEQzY1Mzg2 RTNFN0VCQUUzNUI5OTdGMkE0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+zudN1SFsvh9PGfdJALzfUBvBQcCUQs+3wFmkEbY0cX08KjpHorOM1Nyg+ Tlz5W1+YRG+KfBjx+2P16vU3ZA6SRarthCYyl98k2GC4N9yFk0tO2K6brUXaMux/ i3jWTZZ5JpO4X/FrHvtNFCsPigWC/dmSy5lBpp4iLvkuD1fJScaGFEv/WvFM10l6 lxnffBjHHM67pQXp3Apn1U98uOUSgCdBCkl233C03zCYsE5q9eW5Z7UosGASuGdW kXVPpsrvacA3EZT+CImtL5s4SCxJXg1N0a7KDwMv+Ms2OEmXBeWOa2utwJZysGPc PGOSKKCINcbH1iVtezU5dIFxVqECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJTtpLI2C0fcZThuPn6641uZfypCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNWJmNzE4ZC05MTFlLTQzZDYtOGUzYy0wZDFiMzY0NmUyNzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1YmY3MThk LTkxMWUtNDNkNi04ZTNjLTBkMWIzNjQ2ZTI3Ni8wLzk0RURBNEIyMzYwQjQ3REM2 NTM4NkUzRTdFQkFFMzVCOTk3RjJBNDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnkPowDQYJKoZIhvcNAQELBQADggEBAF1umV4PHLdhUvhC/cQkWWDn3qbHglL1 tzNVIPxudNmzd/sLO426GSRVfWDqXPR0p50pj5qSl349fW+3jrovgl2LZiJMZnNy SiQ9S0zCogjy5dojx54QGqpWkf+u7Lo8RpdHe1d+z/HXlpc0tv+jOyGKFQcNun4t lUZ+y/NCdaDFRF8+Al5jJoSbXhYSCB3PqqMJyo9NUc6hlMPeUZpXtMI8Dp1pjKD1 +uCTsa8Aiba5vo9u1/4S5vZhlefWarYBntXWWYMckokq+Y6AR1VwawOBpYfylevR ycT6aQTlmKgNLlb/bdByTAYEyEvCX30oxPUsweVMlt1iEmO8Os9H1No= -----END CERTIFICATE-----Generated at Wed Nov 5 19:44:51 2025 by rpki-client