$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CE118685D363E20B6D3B3955972062D9581B9E43.cer File: CE118685D363E20B6D3B3955972062D9581B9E43.cer (raw, json) Hash identifier: sVEgV0PVpEEwP9h+UlHWEKv8oOLSj9j4/PbzzvCzdsg= Subject key identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 70714418D415EFD5D3FBFBB63A7F714725E68B13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft caRepository: rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 08 Jul 2025 11:14:05 +0000 Certificate not after: Tue 07 Jul 2026 11:19:05 +0000 Subordinate resources: IP: 103.224.124.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 20:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:71:44:18:d4:15:ef:d5:d3:fb:fb:b6:3a:7f:71:47:25:e6:8b:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 8 11:14:05 2025 GMT Not After : Jul 7 11:19:05 2026 GMT Subject: CN=CE118685D363E20B6D3B3955972062D9581B9E43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:f5:82:82:62:18:d7:3e:40:98:61:ed:71: e6:ea:20:2b:94:7c:de:c1:db:03:4d:9c:df:6b:c7: b1:04:b9:45:01:42:99:17:17:ad:9b:d2:12:27:c3: 1b:4c:d8:90:6c:b8:ba:4a:47:d4:01:d0:25:2a:fd: 15:7d:c8:43:4b:3a:41:d9:e3:70:69:b1:fa:39:be: c1:45:e3:7c:7e:b9:2d:1b:53:99:86:ba:d0:70:7c: c3:f2:db:11:a8:fa:06:68:87:2f:1e:57:3c:b0:9f: b1:35:56:9b:89:cc:ae:e2:41:f6:5b:32:79:02:62: ee:94:d6:2b:45:1c:fa:55:b0:8b:fc:39:23:b4:f3: 02:6a:3a:cc:99:2a:29:95:42:3d:df:97:59:34:4d: d7:3a:fa:42:fb:0e:2f:04:77:63:14:9d:6d:bb:23: b1:ad:98:ef:3a:ac:d6:7f:00:a9:7c:13:e2:d4:4a: bc:b7:85:5e:53:01:0f:b0:85:ba:38:8e:e5:24:1d: a0:a1:bb:e2:ad:b0:db:e8:26:85:29:e6:4b:3a:37: 12:e0:0e:58:15:d4:19:ea:53:f6:1f:1c:8d:8b:b6: 35:d6:26:85:98:fe:35:ba:5e:15:9a:8f:9c:fe:2b: b8:19:c7:3f:f9:81:68:ca:9d:e0:08:ec:98:5a:03: d5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:11:86:85:D3:63:E2:0B:6D:3B:39:55:97:20:62:D9:58:1B:9E:43 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ed808f67-9abc-46dd-9817-b9339093f88e/0/CE118685D363E20B6D3B3955972062D9581B9E43.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.224.124.0/23 Signature Algorithm: sha256WithRSAEncryption 46:4b:cd:de:eb:2c:67:25:25:aa:28:7d:dd:be:75:8e:e8:dd: b8:9b:b8:68:f0:13:2d:7c:a9:76:46:cd:74:ec:14:cf:12:c9: 50:27:da:4e:f0:db:53:36:d0:6f:e7:73:f9:b3:45:e4:1e:65: 81:d4:e4:bc:b1:70:7d:89:28:48:18:21:5c:38:d8:e6:51:2f: d9:7a:3a:73:6f:82:93:9d:73:19:0a:37:31:3b:6f:63:3e:75: 6f:bc:ee:d3:2f:b3:20:c0:39:55:f9:3f:04:12:85:52:0c:46: 7f:d7:4e:27:90:27:0c:5b:2c:bf:a3:5e:51:d1:81:30:b0:79: bf:7a:08:87:60:d2:80:f7:04:b0:76:e6:c6:db:1f:48:3f:e6: 72:50:11:7c:9f:ef:58:e5:e2:4a:a3:82:cc:15:4d:b0:fe:aa: 48:e4:48:ef:cc:15:c6:c7:f2:e4:1f:75:fc:61:0c:55:c2:d1: 3d:24:66:5d:b7:42:03:9d:da:bb:d7:a1:5a:3c:66:ea:a1:49: 82:a1:df:13:19:65:a2:6a:1b:24:84:a5:03:24:db:9f:22:45: 0d:1f:d9:da:03:d1:69:fb:ac:97:98:0b:9e:3c:46:fa:7a:b1: 43:35:28:cc:c2:56:03:32:50:44:95:a5:cb:6e:c3:04:9a:4a: a2:ae:e3:e2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcHFEGNQV79XT+/u2On9xRyXmixMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwODExMTQwNVoX DTI2MDcwNzExMTkwNVowMzExMC8GA1UEAxMoQ0UxMTg2ODVEMzYzRTIwQjZEM0Iz OTU1OTcyMDYyRDk1ODFCOUU0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKF19YKCYhjXPkCYYe1x5uogK5R83sHbA02c32vHsQS5RQFCmRcXrZvSEifD G0zYkGy4ukpH1AHQJSr9FX3IQ0s6QdnjcGmx+jm+wUXjfH65LRtTmYa60HB8w/Lb Eaj6BmiHLx5XPLCfsTVWm4nMruJB9lsyeQJi7pTWK0Uc+lWwi/w5I7TzAmo6zJkq KZVCPd+XWTRN1zr6QvsOLwR3YxSdbbsjsa2Y7zqs1n8AqXwT4tRKvLeFXlMBD7CF ujiO5SQdoKG74q2w2+gmhSnmSzo3EuAOWBXUGepT9h8cjYu2NdYmhZj+NbpeFZqP nP4ruBnHP/mBaMqd4AjsmFoD1R0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM4RhoXTY+ILbTs5VZcgYtlYG55DMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lZDgwOGY2Ny05YWJjLTQ2ZGQtOTgxNy1iOTMzOTA5M2Y4OGUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkODA4ZjY3 LTlhYmMtNDZkZC05ODE3LWI5MzM5MDkzZjg4ZS8wL0NFMTE4Njg1RDM2M0UyMEI2 RDNCMzk1NTk3MjA2MkQ5NTgxQjlFNDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn4HwwDQYJKoZIhvcNAQELBQADggEBAEZLzd7rLGclJaoofd2+dY7o3bibuGjw Ey18qXZGzXTsFM8SyVAn2k7w21M20G/nc/mzReQeZYHU5LyxcH2JKEgYIVw42OZR L9l6OnNvgpOdcxkKNzE7b2M+dW+87tMvsyDAOVX5PwQShVIMRn/XTieQJwxbLL+j XlHRgTCweb96CIdg0oD3BLB25sbbH0g/5nJQEXyf71jl4kqjgswVTbD+qkjkSO/M FcbH8uQfdfxhDFXC0T0kZl23QgOd2rvXoVo8ZuqhSYKh3xMZZaJqGySEpQMk258i RQ0f2doD0Wn7rJeYC548Rvp6sUM1KMzCVgMyUESVpctuwwSaSqKu4+I= -----END CERTIFICATE-----Generated at Mon Jul 21 12:38:26 2025 by rpki-client