$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer File: C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer (raw, json) Hash identifier: fNTEHOtbzLsyAE5XMGL3u09E3TMel0wskVwf5n0rqkc= Subject key identifier: C1:F7:CC:0C:8D:5E:31:55:96:AF:10:F6:EC:F4:6F:2C:75:E4:F5:85 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 277940700EF1DC64753ECFB4058841B162FA2759 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft caRepository: rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 07 Jul 2025 10:39:25 +0000 Certificate not after: Mon 06 Jul 2026 10:44:25 +0000 Subordinate resources: IP: 103.103.20.0/22 IP: 2001:df2:f700::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:79:40:70:0e:f1:dc:64:75:3e:cf:b4:05:88:41:b1:62:fa:27:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 7 10:39:25 2025 GMT Not After : Jul 6 10:44:25 2026 GMT Subject: CN=C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:42:6a:c1:b8:65:ec:b6:81:e0:72:dd:ab:27: 24:a2:5a:dc:f0:17:be:54:48:57:9a:31:cc:27:d5: d1:7a:52:6d:dd:21:23:d7:bf:0b:2d:72:f1:54:33: a0:33:d9:da:eb:af:bb:a7:b6:46:9e:50:75:d0:8b: 91:19:7b:4a:9f:55:04:84:88:b2:98:86:c7:f9:00: d1:66:27:e7:b5:71:ae:12:9d:e9:80:dd:02:f5:9c: dc:8a:e3:4e:f9:86:dc:9f:e3:69:1a:b0:a4:0c:ed: f8:84:51:a4:58:9b:1a:8b:5a:96:55:e5:b5:81:10: 88:1d:ad:45:72:1b:50:bb:83:47:dd:94:47:7b:bf: 0b:50:b2:9b:12:bc:4a:ae:de:74:0d:11:2b:34:d1: e7:48:fb:d5:86:fc:70:4e:05:a3:2e:82:de:1b:9e: 9b:ab:6f:87:7f:21:77:0e:d6:59:27:b8:95:d6:31: 46:a9:58:7f:4a:10:51:bc:22:ca:92:50:0f:c9:bc: 1b:8d:aa:a1:aa:18:82:64:3e:2f:8a:e6:21:8e:fd: 49:07:0c:95:32:46:4c:68:99:55:c0:bc:9b:13:d2: d1:c2:0f:e1:84:b3:9b:59:41:c4:ad:43:9f:2a:6b: 9c:90:2d:d9:7d:8f:97:da:af:e5:2d:07:7f:8a:f7: 02:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C1:F7:CC:0C:8D:5E:31:55:96:AF:10:F6:EC:F4:6F:2C:75:E4:F5:85 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.103.20.0/22 IPv6: 2001:df2:f700::/48 Signature Algorithm: sha256WithRSAEncryption 6a:63:86:1c:66:97:fc:c6:2f:77:64:07:3f:77:c5:a5:31:f6: a9:f5:c6:e7:10:9f:65:eb:39:f0:73:a6:4e:a8:21:34:e9:22: ae:7e:7e:ba:01:f5:cf:ee:5c:2a:4c:ee:45:8d:fd:00:3f:43: 90:57:c9:ef:6f:a8:7f:aa:d7:21:dc:aa:86:8d:5d:97:6d:6c: b9:82:62:ff:ca:fc:3f:8e:b6:ac:31:23:01:38:17:df:a7:f9: 1d:3a:bd:08:f4:f3:f7:61:ed:fc:23:75:98:98:8e:78:9d:45: df:f5:50:e5:28:d2:7b:f7:d4:9c:c8:58:43:e5:94:a1:cf:62: 2b:4c:76:fd:12:40:89:f6:5b:e1:96:96:3c:e2:2e:8c:24:51: 7a:7b:78:12:1b:40:25:57:9a:a1:53:05:28:fa:c8:88:39:06: de:79:ae:76:d7:02:e6:e8:5b:b3:d0:5f:ff:d2:1c:01:12:74: 2f:c6:9f:e3:57:d2:7e:6f:fc:ce:6f:5b:01:2e:ea:5b:4e:1e: de:45:9c:b3:10:ac:d9:43:cb:cd:2c:e0:b3:2e:af:c2:45:6c: 24:5c:f8:27:5b:c1:49:2e:27:4c:a3:cb:14:0e:86:32:72:2c: e4:8a:24:48:8c:7b:40:11:25:f0:56:c6:84:b4:fd:c3:39:1f: 5f:63:fb:0c -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUJ3lAcA7x3GR1Ps+0BYhBsWL6J1kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwNzEwMzkyNVoX DTI2MDcwNjEwNDQyNVowMzExMC8GA1UEAxMoQzFGN0NDMEM4RDVFMzE1NTk2QUYx MEY2RUNGNDZGMkM3NUU0RjU4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO9CasG4Zey2geBy3asnJKJa3PAXvlRIV5oxzCfV0XpSbd0hI9e/Cy1y8VQz oDPZ2uuvu6e2Rp5QddCLkRl7Sp9VBISIspiGx/kA0WYn57VxrhKd6YDdAvWc3Irj TvmG3J/jaRqwpAzt+IRRpFibGotallXltYEQiB2tRXIbULuDR92UR3u/C1CymxK8 Sq7edA0RKzTR50j71Yb8cE4Foy6C3huem6tvh38hdw7WWSe4ldYxRqlYf0oQUbwi ypJQD8m8G42qoaoYgmQ+L4rmIY79SQcMlTJGTGiZVcC8mxPS0cIP4YSzm1lBxK1D nyprnJAt2X2Pl9qv5S0Hf4r3At8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMH3zAyNXjFVlq8Q9uz0byx15PWFMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NjYyNDdmOS0xZWVjLTQ5MDEtYmE0Mi05ZGYyNjQyNGY1YjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2NjI0N2Y5 LTFlZWMtNDkwMS1iYTQyLTlkZjI2NDI0ZjViOC8wL0MxRjdDQzBDOEQ1RTMxNTU5 NkFGMTBGNkVDRjQ2RjJDNzVFNEY1ODUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJnZxQwDwQCAAIwCQMHACABDfL3ADANBgkqhkiG9w0BAQsFAAOCAQEAamOGHGaX /MYvd2QHP3fFpTH2qfXG5xCfZes58HOmTqghNOkirn5+ugH1z+5cKkzuRY39AD9D kFfJ72+of6rXIdyqho1dl21suYJi/8r8P462rDEjATgX36f5HTq9CPTz92Ht/CN1 mJiOeJ1F3/VQ5SjSe/fUnMhYQ+WUoc9iK0x2/RJAifZb4ZaWPOIujCRRent4EhtA JVeaoVMFKPrIiDkG3nmudtcC5uhbs9Bf/9IcARJ0L8af41fSfm/8zm9bAS7qW04e 3kWcsxCs2UPLzSzgsy6vwkVsJFz4J1vBSS4nTKPLFA6GMnIs5IokSIx7QBEl8FbG hLT9wzkfX2P7DA== -----END CERTIFICATE-----Generated at Sun Jul 20 21:14:48 2025 by rpki-client