$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A9DD956A549689BA0A3E2FC62291352AAABD591B.cer File: A9DD956A549689BA0A3E2FC62291352AAABD591B.cer (raw, json) Hash identifier: WD5ZBNq0CFXwUqRlMt7xU5hayPiXy+bVg7YMz+aRUec= Subject key identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3B1970641C40770EAD0143DAA4FC6DBE0DDA6BB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft caRepository: rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 30 Aug 2025 11:37:51 +0000 Certificate not after: Sat 29 Aug 2026 11:42:51 +0000 Subordinate resources: IP: 103.175.240.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Nov 2025 11:05:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:19:70:64:1c:40:77:0e:ad:01:43:da:a4:fc:6d:be:0d:da:6b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 30 11:37:51 2025 GMT Not After : Aug 29 11:42:51 2026 GMT Subject: CN=A9DD956A549689BA0A3E2FC62291352AAABD591B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f5:6e:02:26:83:d5:e4:f2:1a:af:97:37:27: 51:d1:32:aa:f3:c6:29:12:56:34:04:40:9d:21:b1: 23:ff:5e:25:3e:46:12:d7:45:83:29:15:f3:53:bd: 77:cc:3c:77:39:85:4b:9e:ec:5b:31:3d:2e:a3:87: 7f:b4:cd:e4:16:b6:92:d1:f2:b4:4b:4d:10:e5:0d: ef:d6:63:b3:08:7a:b3:ad:97:58:49:b5:ae:1e:c1: 6b:c3:95:0d:31:1d:9d:1e:36:d8:0d:50:e5:e9:0c: 75:0c:5d:88:58:85:35:f6:40:12:59:38:e4:e8:3b: 87:c3:ef:ad:16:ae:f4:e2:30:84:69:f9:03:2e:3f: 04:66:02:40:a6:af:f9:e5:75:07:7f:df:23:f0:40: ec:67:05:25:2b:e9:79:d6:82:85:ae:d6:e3:11:5f: 9d:44:aa:97:8d:8e:b9:85:78:53:ba:32:25:33:3c: 06:22:2b:b6:d5:7a:fd:ee:49:07:3e:76:8c:d1:0c: 1a:74:0e:e6:e2:bc:cd:e1:c1:08:9e:e3:77:28:82: 4c:93:41:ac:a8:42:72:cd:35:90:9e:79:e1:de:4b: 75:15:3f:d0:58:20:01:ff:fa:ea:9d:e7:d8:e1:ea: 94:40:6b:1f:04:99:d8:5f:e4:b1:ca:c9:88:ac:a3: 9f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A9:DD:95:6A:54:96:89:BA:0A:3E:2F:C6:22:91:35:2A:AA:BD:59:1B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9dc1c49c-d404-45a1-9e7d-86f5f852e276/0/A9DD956A549689BA0A3E2FC62291352AAABD591B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.240.0/23 Signature Algorithm: sha256WithRSAEncryption 80:14:bb:46:4b:f9:98:92:a9:ef:b9:29:ef:38:3d:ba:d2:fe: 14:86:07:aa:fc:b7:a9:49:88:ea:e6:0f:fa:74:7f:11:88:e3: 99:e0:3c:ae:82:be:42:86:6b:a7:b3:a0:5c:0c:f1:cf:6e:8b: b2:d3:3e:71:aa:de:f3:88:d3:ab:47:dd:1c:2f:9b:c5:50:79: e1:01:9f:19:17:cf:36:78:95:93:80:02:f0:a4:75:c9:ac:6d: 2b:68:28:aa:dc:aa:80:b7:de:9c:fd:cf:7a:f5:55:ac:45:22: 4c:4c:fd:65:27:3d:8a:13:b5:70:fa:4b:24:2f:ca:63:a1:68: cf:03:b6:24:4c:51:16:6e:50:28:17:7e:12:8f:e5:6d:4e:fb: ce:c8:a2:3d:57:8d:3b:88:3e:a6:a1:a8:b6:18:4d:d1:5d:54: e8:93:f1:ef:bf:6e:4a:4a:8f:dc:ee:4f:c2:8c:81:74:c4:6f: 61:f0:45:5e:f8:7a:fc:1c:66:cb:af:1c:2c:ec:c4:a6:3d:08: b2:f2:aa:12:5b:51:a7:72:7d:cb:c0:76:a8:9b:fb:39:eb:1d: fa:ad:9b:1b:01:94:81:91:05:ac:f9:40:ac:6f:d1:b3:e5:89: 82:a2:9c:95:5a:cb:d2:44:79:bc:92:48:57:30:cb:7c:e3:17: 42:47:02:3c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOxlwZBxAdw6tAUPapPxtvg3aa7IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgzMDExMzc1MVoX DTI2MDgyOTExNDI1MVowMzExMC8GA1UEAxMoQTlERDk1NkE1NDk2ODlCQTBBM0Uy RkM2MjI5MTM1MkFBQUJENTkxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANT1bgImg9Xk8hqvlzcnUdEyqvPGKRJWNARAnSGxI/9eJT5GEtdFgykV81O9 d8w8dzmFS57sWzE9LqOHf7TN5Ba2ktHytEtNEOUN79Zjswh6s62XWEm1rh7Ba8OV DTEdnR422A1Q5ekMdQxdiFiFNfZAElk45Og7h8PvrRau9OIwhGn5Ay4/BGYCQKav +eV1B3/fI/BA7GcFJSvpedaCha7W4xFfnUSql42OuYV4U7oyJTM8BiIrttV6/e5J Bz52jNEMGnQO5uK8zeHBCJ7jdyiCTJNBrKhCcs01kJ554d5LdRU/0FggAf/66p3n 2OHqlEBrHwSZ2F/kscrJiKyjnxkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKndlWpUlom6Cj4vxiKRNSqqvVkbMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZGMxYzQ5Yy1kNDA0LTQ1YTEtOWU3ZC04NmY1Zjg1MmUyNzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkYzFjNDlj LWQ0MDQtNDVhMS05ZTdkLTg2ZjVmODUyZTI3Ni8wL0E5REQ5NTZBNTQ5Njg5QkEw QTNFMkZDNjIyOTEzNTJBQUFCRDU5MUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnr/AwDQYJKoZIhvcNAQELBQADggEBAIAUu0ZL+ZiSqe+5Ke84PbrS/hSGB6r8 t6lJiOrmD/p0fxGI45ngPK6CvkKGa6ezoFwM8c9ui7LTPnGq3vOI06tH3Rwvm8VQ eeEBnxkXzzZ4lZOAAvCkdcmsbStoKKrcqoC33pz9z3r1VaxFIkxM/WUnPYoTtXD6 SyQvymOhaM8DtiRMURZuUCgXfhKP5W1O+87Ioj1XjTuIPqahqLYYTdFdVOiT8e+/ bkpKj9zuT8KMgXTEb2HwRV74evwcZsuvHCzsxKY9CLLyqhJbUadyfcvAdqib+znr HfqtmxsBlIGRBaz5QKxv0bPliYKinJVay9JEebySSFcwy3zjF0JHAjw= -----END CERTIFICATE-----Generated at Mon Nov 17 12:03:11 2025 by rpki-client