$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer File: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer (raw, json) Hash identifier: 22ychgw6ONz3t+6/zbhD/Z/mWs16WLuDfzvTBmUMvyE= Subject key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 37DE9BAB991ED7D9217FD4FBE2D8F18E70E8B67F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft caRepository: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 19 Jul 2025 03:40:01 +0000 Certificate not after: Sat 18 Jul 2026 03:45:01 +0000 Subordinate resources: IP: 103.175.112.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:de:9b:ab:99:1e:d7:d9:21:7f:d4:fb:e2:d8:f1:8e:70:e8:b6:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 19 03:40:01 2025 GMT Not After : Jul 18 03:45:01 2026 GMT Subject: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:45:d9:6c:8f:8f:cb:ac:aa:6f:db:ed:17:7e: 14:8c:f3:ad:27:a2:1e:29:ce:3c:33:e1:a0:4c:1f: d0:09:db:d4:30:c7:e1:30:c0:67:7d:08:14:2c:5e: ce:a7:1a:a9:68:3a:39:d1:85:56:6c:1e:e1:47:49: 6e:99:b0:87:89:9c:c5:f8:37:fb:01:07:54:b0:41: 17:18:61:b4:32:9b:a8:bf:fa:1c:bc:be:83:ae:d8: e3:37:42:97:b1:ea:46:4c:48:59:34:2e:46:ce:28: 69:7a:9f:a7:52:9c:e2:56:2f:25:82:b4:e2:59:4a: 73:28:55:b8:1b:7e:8d:b0:a8:74:2b:ad:40:f8:dc: 45:4f:49:08:32:fc:56:00:88:40:87:43:64:8e:2e: 84:e0:b8:4f:c5:7a:a9:b1:cf:6f:90:dc:f2:81:92: 1d:b0:95:8a:68:44:be:cf:43:35:fa:67:cb:1b:87: 47:2e:48:db:da:ae:c0:8d:f6:80:94:8b:d7:e5:c5: 88:3f:e4:db:00:41:54:4f:1e:49:bf:b5:d6:8f:50: ef:cc:38:8a:0f:4d:fd:12:de:ff:ef:48:fc:ce:be: c2:a5:99:08:1c:75:cf:21:83:77:0b:02:04:51:64: 43:70:d0:28:c7:88:a4:3b:12:39:00:69:80:c7:52: 7f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.112.0/23 Signature Algorithm: sha256WithRSAEncryption 13:15:65:94:dc:8a:76:d4:ef:29:d7:d3:45:70:00:c3:21:c7: 7d:8d:7e:23:74:f6:f9:52:2c:a6:3d:11:96:8c:84:72:3c:00: 1a:0f:6a:cb:d2:dd:5f:32:d3:e1:6c:17:f5:11:04:ef:ee:9a: 2b:01:81:06:af:49:40:5c:82:e2:e8:a9:4b:57:5e:70:c4:ba: 90:42:64:09:2f:49:8c:83:56:01:0c:31:f5:46:1d:5a:f5:ab: 15:5f:a4:f0:31:89:a5:75:06:85:33:c1:e8:4a:a4:cb:79:fe: f9:89:3b:63:5b:c7:48:8c:86:94:54:d1:7f:5d:dc:fa:2a:46: ee:a6:97:fd:6b:9a:dd:90:f5:07:06:32:c5:40:f2:1b:47:bc: 49:8c:7e:ab:64:01:e1:ae:97:c8:39:47:9e:fd:31:e3:30:19: b8:27:77:69:26:45:ce:2e:cc:c2:87:cb:bb:44:5f:d5:90:41: 17:62:e9:ad:eb:24:b9:3f:20:ba:af:f0:41:56:9c:61:9d:f7: cf:d1:41:88:4c:a4:e9:ba:c2:d9:6a:3b:94:24:43:82:af:d5: 85:04:0a:6e:05:fe:38:39:ef:4a:e4:b7:29:41:77:be:ba:cf: 61:54:e7:1f:33:48:8d:d9:5e:9c:01:c8:8d:25:07:8d:3a:e1: 39:48:25:bb -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUN96bq5ke19khf9T74tjxjnDotn8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxOTAzNDAwMVoX DTI2MDcxODAzNDUwMVowMzExMC8GA1UEAxMoOTdBMjVEM0ZEREFBQzQzNzFERjRC RUM3N0FBNTg5RDdFMTcxNDVEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZF2WyPj8usqm/b7Rd+FIzzrSeiHinOPDPhoEwf0Anb1DDH4TDAZ30IFCxe zqcaqWg6OdGFVmwe4UdJbpmwh4mcxfg3+wEHVLBBFxhhtDKbqL/6HLy+g67Y4zdC l7HqRkxIWTQuRs4oaXqfp1Kc4lYvJYK04llKcyhVuBt+jbCodCutQPjcRU9JCDL8 VgCIQIdDZI4uhOC4T8V6qbHPb5Dc8oGSHbCVimhEvs9DNfpnyxuHRy5I29quwI32 gJSL1+XFiD/k2wBBVE8eSb+11o9Q78w4ig9N/RLe/+9I/M6+wqWZCBx1zyGDdwsC BFFkQ3DQKMeIpDsSOQBpgMdSfxsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJeiXT/dqsQ3HfS+x3qlidfhcUXcMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYmYxZGFmYy1iODI5LTQyY2ItYjE3Yy0wMTVmMGE5MGQ4M2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiZjFkYWZj LWI4MjktNDJjYi1iMTdjLTAxNWYwYTkwZDgzZC8wLzk3QTI1RDNGRERBQUM0Mzcx REY0QkVDNzdBQTU4OUQ3RTE3MTQ1REMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnr3AwDQYJKoZIhvcNAQELBQADggEBABMVZZTcinbU7ynX00VwAMMhx32NfiN0 9vlSLKY9EZaMhHI8ABoPasvS3V8y0+FsF/URBO/umisBgQavSUBcguLoqUtXXnDE upBCZAkvSYyDVgEMMfVGHVr1qxVfpPAxiaV1BoUzwehKpMt5/vmJO2Nbx0iMhpRU 0X9d3PoqRu6ml/1rmt2Q9QcGMsVA8htHvEmMfqtkAeGul8g5R579MeMwGbgnd2km Rc4uzMKHy7tEX9WQQRdi6a3rJLk/ILqv8EFWnGGd98/RQYhMpOm6wtlqO5QkQ4Kv 1YUECm4F/jg570rktylBd766z2FU5x8zSI3ZXpwByI0lB4064TlIJbs= -----END CERTIFICATE-----Generated at Sun Jul 20 21:00:22 2025 by rpki-client