$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer File: 9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer (raw, json) Hash identifier: 8SqGKPaFbioAPvztWeEioPewJv8v37uaf9B0QDdLB5c= Subject key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 49BE289DCC05BDAA42EA4CB4CA133805D407BE4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft caRepository: rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 03 Jul 2025 20:09:39 +0000 Certificate not after: Thu 02 Jul 2026 20:14:39 +0000 Subordinate resources: IP: 203.123.60.0/22 IP: 2001:df5:3e00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:be:28:9d:cc:05:bd:aa:42:ea:4c:b4:ca:13:38:05:d4:07:be:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 3 20:09:39 2025 GMT Not After : Jul 2 20:14:39 2026 GMT Subject: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ae:39:9a:d4:09:34:27:b1:74:d4:b3:de:1d: d3:b7:42:f6:80:d2:75:40:54:ab:7d:32:a0:b2:76: e5:4f:76:a4:5d:ec:2a:10:72:8f:b4:af:72:a2:d3: 81:3c:29:8e:df:0e:c1:10:de:18:9c:2c:fe:c0:23: 6b:4d:c3:d9:4f:c7:3e:43:fb:aa:2c:37:7b:1b:7d: 53:a8:c6:db:90:ad:7e:43:96:84:16:fd:49:0d:ea: d5:4b:90:b5:b9:b1:73:ba:9e:fd:61:00:56:70:a8: 23:c3:ec:a0:53:1c:f7:04:be:05:75:06:4e:2d:73: f8:71:98:ff:ae:c5:a3:fd:16:94:dc:5c:a6:29:9d: 6e:19:90:82:ff:f5:14:21:27:b8:cf:30:1d:b1:f9: 5b:7c:9f:98:b2:59:df:a2:b3:f4:9b:4a:14:12:ff: 75:c0:ec:24:ba:69:89:dd:3d:4b:30:91:8d:6e:e9: bc:3e:16:dc:b9:c1:ad:6a:cd:eb:ea:18:4f:32:69: 5f:0a:10:60:86:22:4c:cf:97:9e:17:83:5a:50:f7: 5f:78:13:fa:da:ba:9a:df:e0:47:20:a2:dc:c9:57: 17:3e:8c:f8:03:82:98:a4:f3:e2:67:a0:4f:3f:e8: c6:da:8e:fb:6d:58:80:81:d2:46:96:88:8a:d6:9c: fe:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.123.60.0/22 IPv6: 2001:df5:3e00::/48 Signature Algorithm: sha256WithRSAEncryption 6b:fa:e8:fa:6e:6e:69:ee:7f:de:6f:f1:b9:c9:18:3d:18:e9: 26:4b:1e:ec:e6:ff:a9:45:3e:88:ae:cf:d9:e0:00:c8:f9:8e: 5b:37:5d:a8:25:45:83:1e:bd:77:5f:cf:35:eb:f0:91:76:89: ef:3e:b0:cf:a4:9f:fc:db:17:fb:2c:93:11:6b:25:61:fa:de: 5f:94:4d:2c:85:93:b4:6e:3b:55:5a:7b:a6:18:88:02:35:c8: 54:59:d4:cf:10:24:c4:1d:7a:17:c6:65:be:8f:ad:15:6e:7c: ef:b2:10:b7:59:f1:cb:f2:00:1c:9c:24:53:86:8e:46:6c:12: 9c:10:4e:b7:c1:8d:a9:b9:3d:b5:ae:2a:6e:e7:b8:51:42:4e: 60:f8:76:2c:75:d6:9a:6c:c2:cd:5e:f6:65:41:3d:ce:fa:f4: f0:7d:20:85:c6:a2:ae:fc:1c:53:b8:e1:5c:88:58:a1:77:de: f5:fc:bd:b3:72:7e:b0:28:cb:81:df:47:63:59:b2:6b:fc:9f: 42:95:f1:0a:de:6b:23:29:13:3c:22:f1:9b:80:67:4b:98:c5: 89:e7:d1:2a:3c:9d:64:da:01:ae:c6:2a:67:dc:33:7d:d8:b9: cb:3a:c6:7a:b6:a4:42:30:e6:8f:95:fe:9e:87:02:09:7a:69: ca:6a:bc:7e -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUSb4oncwFvapC6ky0yhM4BdQHvk0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwMzIwMDkzOVoX DTI2MDcwMjIwMTQzOVowMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZF NjJFOTYxNkMzQTlEMDFCMTVDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKiuOZrUCTQnsXTUs94d07dC9oDSdUBUq30yoLJ25U92pF3sKhByj7SvcqLT gTwpjt8OwRDeGJws/sAja03D2U/HPkP7qiw3ext9U6jG25CtfkOWhBb9SQ3q1UuQ tbmxc7qe/WEAVnCoI8PsoFMc9wS+BXUGTi1z+HGY/67Fo/0WlNxcpimdbhmQgv/1 FCEnuM8wHbH5W3yfmLJZ36Kz9JtKFBL/dcDsJLppid09SzCRjW7pvD4W3LnBrWrN 6+oYTzJpXwoQYIYiTM+XnheDWlD3X3gT+tq6mt/gRyCi3MlXFz6M+AOCmKTz4meg Tz/oxtqO+21YgIHSRpaIitac/usCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ9hmQGDuNEEjN/mLpYWw6nQGxXHMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlhYjM5MDJi LTc0NTktNDg1NC1hNWY1LTA5ZjE1ZDhjODdkMy8wLzlGNjE5OTAxODNCOEQxMDQ4 Q0RGRTYyRTk2MTZDM0E5RDAxQjE1QzcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BALLezwwDwQCAAIwCQMHACABDfU+ADANBgkqhkiG9w0BAQsFAAOCAQEAa/ro+m5u ae5/3m/xuckYPRjpJkse7Ob/qUU+iK7P2eAAyPmOWzddqCVFgx69d1/PNevwkXaJ 7z6wz6Sf/NsX+yyTEWslYfreX5RNLIWTtG47VVp7phiIAjXIVFnUzxAkxB16F8Zl vo+tFW5877IQt1nxy/IAHJwkU4aORmwSnBBOt8GNqbk9ta4qbue4UUJOYPh2LHXW mmzCzV72ZUE9zvr08H0ghcairvwcU7jhXIhYoXfe9fy9s3J+sCjLgd9HY1mya/yf QpXxCt5rIykTPCLxm4BnS5jFiefRKjydZNoBrsYqZ9wzfdi5yzrGerakQjDmj5X+ nocCCXppymq8fg== -----END CERTIFICATE-----Generated at Sun Jul 20 22:37:09 2025 by rpki-client