$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer File: 9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.cer (raw, json) Hash identifier: MamLHzteJwYdG+5kSzKMyeiMRFEAtVgm4tsZGHcIARw= Subject key identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7A14F77438D95B0AFAE63B26AD346D339D753B7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft caRepository: rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 20 Jul 2025 02:54:46 +0000 Certificate not after: Sun 19 Jul 2026 02:59:46 +0000 Subordinate resources: IP: 103.165.155.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:14:f7:74:38:d9:5b:0a:fa:e6:3b:26:ad:34:6d:33:9d:75:3b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 20 02:54:46 2025 GMT Not After : Jul 19 02:59:46 2026 GMT Subject: CN=9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d5:c0:53:e4:d4:30:a9:e9:af:66:3a:13:50: d8:3d:e0:5f:3d:cf:c3:e6:92:37:1a:bc:30:4b:1d: 59:03:3b:20:75:b1:3c:15:8f:24:4b:ce:5b:eb:98: f5:86:fd:e3:45:51:db:98:7f:72:86:4a:a9:76:3b: 45:95:1e:32:d5:fb:0d:b4:99:42:79:af:39:a2:ac: 2a:1a:c0:0c:4f:84:51:1a:28:12:7f:00:6d:5a:b1: e1:63:10:82:25:da:d8:ec:b7:ea:a8:02:5c:63:84: c2:b3:20:7d:c5:62:60:82:92:76:a5:59:5e:32:8e: 36:7a:66:b3:39:fc:4e:64:6b:bf:85:04:88:1d:82: 75:23:ff:8b:3a:04:0e:14:1e:42:e4:b2:8b:bb:51: cd:9c:8b:66:b7:19:71:f3:ea:d7:c4:67:16:3a:3b: 23:25:3f:d0:b9:ba:bf:6e:66:86:7c:42:c2:a1:a3: 1f:43:d6:f7:9b:7b:dd:81:ec:b1:84:09:2d:8a:9f: cc:77:f5:61:0d:49:a7:25:05:35:46:fa:67:91:0e: da:d4:2f:f4:d9:40:ca:c5:c4:34:38:07:f9:0b:fa: 1f:d8:b9:a9:be:e2:28:93:76:5a:38:c2:3b:5c:cb: 67:aa:27:1d:6a:78:60:12:e9:40:f7:af:0d:68:41: 55:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9A:D7:12:7E:C4:30:A4:C9:B6:1F:6A:F6:09:6D:6D:B6:F5:1E:FE:34 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/160fe2ac-29f6-43a2-be64-06a3ae9d8d20/0/9AD7127EC430A4C9B61F6AF6096D6DB6F51EFE34.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.155.0/24 Signature Algorithm: sha256WithRSAEncryption 26:e6:f0:f8:eb:55:b4:69:fa:00:bf:9c:9f:cf:93:ef:80:80: 66:11:ac:4e:08:8d:a7:10:ae:e9:2d:ac:e3:d1:53:8a:4f:6e: 95:ec:8c:5e:d6:f2:cb:4b:c3:d4:5e:86:32:d0:1d:ff:9e:65: 7a:3f:a9:46:71:71:91:5c:7c:13:64:59:4c:01:ab:37:ea:84: 63:d4:50:df:4a:eb:8e:32:29:b8:0c:57:f4:11:83:cf:99:0e: bf:af:ed:89:0d:58:1d:23:0d:f8:72:8a:0b:f0:2b:79:58:38: 5c:16:26:5d:f3:6f:05:ad:72:32:47:9c:2d:f9:8d:35:2c:83: 30:2f:ba:7e:3c:fa:79:ce:02:36:7f:c8:73:96:58:90:12:e1: 54:68:70:95:63:5e:69:0e:6e:54:49:9f:99:33:db:9c:6f:80: 71:97:01:db:a9:46:ca:2f:d5:c5:ed:cb:39:e5:41:b7:ca:51: b7:d7:0e:ad:c7:8a:c5:75:b4:a9:30:f0:52:17:9d:e4:af:8a: 84:1d:3f:8c:7e:8b:50:68:09:84:50:e7:fe:25:84:0f:2d:54: 57:d3:29:3d:fc:14:01:21:53:58:47:b6:85:53:3f:a3:69:7f: 2d:92:86:12:56:71:3e:fe:a7:a3:ac:4e:03:dd:5f:81:ff:ce: 9e:d4:7e:cc -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUehT3dDjZWwr65jsmrTRtM511O30wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyMDAyNTQ0NloX DTI2MDcxOTAyNTk0NlowMzExMC8GA1UEAxMoOUFENzEyN0VDNDMwQTRDOUI2MUY2 QUY2MDk2RDZEQjZGNTFFRkUzNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANTVwFPk1DCp6a9mOhNQ2D3gXz3Pw+aSNxq8MEsdWQM7IHWxPBWPJEvOW+uY 9Yb940VR25h/coZKqXY7RZUeMtX7DbSZQnmvOaKsKhrADE+EURooEn8AbVqx4WMQ giXa2Oy36qgCXGOEwrMgfcViYIKSdqVZXjKONnpmszn8TmRrv4UEiB2CdSP/izoE DhQeQuSyi7tRzZyLZrcZcfPq18RnFjo7IyU/0Lm6v25mhnxCwqGjH0PW95t73YHs sYQJLYqfzHf1YQ1JpyUFNUb6Z5EO2tQv9NlAysXENDgH+Qv6H9i5qb7iKJN2WjjC O1zLZ6onHWp4YBLpQPevDWhBVa0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJrXEn7EMKTJth9q9gltbbb1Hv40MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNjBmZTJhYy0yOWY2LTQzYTItYmU2NC0wNmEzYWU5ZDhkMjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2MGZlMmFj LTI5ZjYtNDNhMi1iZTY0LTA2YTNhZTlkOGQyMC8wLzlBRDcxMjdFQzQzMEE0QzlC NjFGNkFGNjA5NkQ2REI2RjUxRUZFMzQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnpZswDQYJKoZIhvcNAQELBQADggEBACbm8PjrVbRp+gC/nJ/Pk++AgGYRrE4I jacQruktrOPRU4pPbpXsjF7W8stLw9RehjLQHf+eZXo/qUZxcZFcfBNkWUwBqzfq hGPUUN9K644yKbgMV/QRg8+ZDr+v7YkNWB0jDfhyigvwK3lYOFwWJl3zbwWtcjJH nC35jTUsgzAvun48+nnOAjZ/yHOWWJAS4VRocJVjXmkOblRJn5kz25xvgHGXAdup Rsov1cXtyznlQbfKUbfXDq3HisV1tKkw8FIXneSvioQdP4x+i1BoCYRQ5/4lhA8t VFfTKT38FAEhU1hHtoVTP6Npfy2ShhJWcT7+p6OsTgPdX4H/zp7Ufsw= -----END CERTIFICATE-----Generated at Mon Jul 21 07:36:42 2025 by rpki-client