$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer File: A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer (raw, json) Hash identifier: w/8V09N3gaFb2CRqPEsyB+PsPnkzRHHrMvcmgOuQC40= Subject key identifier: A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3E01224EBBCC50FACFBF18D34903D018A88DA416 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft caRepository: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 20 Jul 2025 12:28:12 +0000 Certificate not after: Sun 19 Jul 2026 12:33:12 +0000 Subordinate resources: IP: 103.84.116.0/24 IP: 103.157.55.0/24 IP: 2001:df0:1700::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 11:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:01:22:4e:bb:cc:50:fa:cf:bf:18:d3:49:03:d0:18:a8:8d:a4:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 20 12:28:12 2025 GMT Not After : Jul 19 12:33:12 2026 GMT Subject: CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:34:8a:47:0b:f8:e4:fa:ad:bf:ac:99:7c:5b: b2:33:a7:bb:ba:e1:b5:c1:e1:5f:7c:32:d0:90:88: af:6f:a4:6f:ab:7c:02:75:8e:fa:f3:0c:4d:59:b7: f7:0d:92:7d:e5:03:f1:3d:a9:56:ca:85:5a:ae:f2: 3f:d5:04:d2:0a:88:4d:67:d4:e3:90:7d:c5:52:98: b7:04:f6:2e:70:ef:1d:3e:ed:45:9e:95:9d:f7:b4: f6:79:ce:ca:4c:4c:1c:9b:f1:7f:03:83:35:ea:0e: 06:8c:2a:80:a3:66:60:0c:93:a4:d7:3d:7f:0c:98: 89:41:80:ae:96:99:75:2f:1c:b5:d2:96:87:e0:b4: 66:19:ac:7a:20:17:9e:13:2c:be:97:62:4d:31:34: 43:95:74:ca:71:43:52:2b:f5:3a:50:a4:93:4a:e0: 75:2e:68:bf:1c:1e:98:4e:4e:ca:5d:e1:ca:07:dd: 76:b6:81:2b:19:99:9d:dc:8c:05:8f:7c:4e:12:2b: e7:1f:30:ba:07:b8:d3:cf:a0:b1:5e:30:42:a6:b2: ec:fb:66:56:a6:b6:55:c0:cc:ba:9e:4b:25:ae:dc: 4b:dd:ce:c9:62:d6:73:ac:29:fc:7b:05:65:68:c1: 91:fc:4e:45:bc:21:fd:68:d2:0d:df:c9:b1:99:38: 36:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.84.116.0/24 103.157.55.0/24 IPv6: 2001:df0:1700::/48 Signature Algorithm: sha256WithRSAEncryption 59:58:4f:1c:d8:8f:5f:e6:15:6d:db:4a:b8:83:b0:00:00:4a: 7e:cd:b0:8a:6e:08:e4:6c:52:df:ca:d4:bd:64:76:30:8b:22: 9b:8e:b3:72:de:14:ee:9b:ab:fc:b5:7f:cd:aa:2b:7e:f3:9c: a8:8c:ee:24:48:52:0f:ae:9d:7e:3a:6e:94:95:86:dc:83:e6: ca:62:fb:a0:87:7b:12:66:4d:a0:93:73:e5:bf:dd:2b:ec:98: 24:ba:5f:7f:f8:4a:f2:55:1e:e3:43:30:2e:5f:ea:de:e9:67: bb:97:40:e7:11:13:d3:f0:1b:40:6a:18:0e:74:bb:83:73:fb: 58:a5:5f:0f:ed:80:33:04:bb:c4:e1:23:f0:1b:89:ab:14:61: 83:7e:fa:01:e6:08:e7:42:2e:f0:f3:1e:e9:b4:31:ae:74:67: c5:5c:50:35:4d:78:98:f4:0e:0c:d5:f7:38:c2:1e:3b:85:37: 00:59:3e:8d:da:3e:f1:93:3e:fb:2a:1c:8e:32:ab:98:53:84: ab:db:fd:31:14:6c:86:90:c7:cb:ab:31:42:37:cb:6f:dc:cf: bf:32:4b:09:aa:36:5c:cb:58:b8:5d:d9:39:34:03:88:67:1d: c9:23:2f:9f:ee:60:14:d9:0a:4f:fb:5e:4d:69:c2:1d:f4:83: 6e:aa:0f:58 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUPgEiTrvMUPrPvxjTSQPQGKiNpBYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyMDEyMjgxMloX DTI2MDcxOTEyMzMxMlowMzExMC8GA1UEAxMoQTBBMkE1Q0E4QzIwQTdDRjZEQTEz MjVDOUJENUMzMzc2RjNGRTBCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALs0ikcL+OT6rb+smXxbsjOnu7rhtcHhX3wy0JCIr2+kb6t8AnWO+vMMTVm3 9w2SfeUD8T2pVsqFWq7yP9UE0gqITWfU45B9xVKYtwT2LnDvHT7tRZ6Vnfe09nnO ykxMHJvxfwODNeoOBowqgKNmYAyTpNc9fwyYiUGArpaZdS8ctdKWh+C0ZhmseiAX nhMsvpdiTTE0Q5V0ynFDUiv1OlCkk0rgdS5ovxwemE5Oyl3hygfddraBKxmZndyM BY98ThIr5x8wuge408+gsV4wQqay7PtmVqa2VcDMup5LJa7cS93OyWLWc6wp/HsF ZWjBkfxORbwh/WjSDd/JsZk4Nk8CAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKCipcqMIKfPbaEyXJvVwzdvP+CzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZjM3NzcxMS0xZTNkLTRlNWEtYTRhYy0wNWExYzUwMmFkMjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmMzc3NzEx LTFlM2QtNGU1YS1hNGFjLTA1YTFjNTAyYWQyOC8wL0EwQTJBNUNBOEMyMEE3Q0Y2 REExMzI1QzlCRDVDMzM3NkYzRkUwQjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BABnVHQDBABnnTcwDwQCAAIwCQMHACABDfAXADANBgkqhkiG9w0BAQsFAAOCAQEA WVhPHNiPX+YVbdtKuIOwAABKfs2wim4I5GxS38rUvWR2MIsim46zct4U7pur/LV/ zaorfvOcqIzuJEhSD66dfjpulJWG3IPmymL7oId7EmZNoJNz5b/dK+yYJLpff/hK 8lUe40MwLl/q3ulnu5dA5xET0/AbQGoYDnS7g3P7WKVfD+2AMwS7xOEj8BuJqxRh g376AeYI50Iu8PMe6bQxrnRnxVxQNU14mPQODNX3OMIeO4U3AFk+jdo+8ZM++yoc jjKrmFOEq9v9MRRshpDHy6sxQjfLb9zPvzJLCao2XMtYuF3ZOTQDiGcdySMvn+5g FNkKT/teTWnCHfSDbqoPWA== -----END CERTIFICATE-----Generated at Wed Jul 23 02:41:36 2025 by rpki-client