$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer File: E118E8E6144A59677DB6D05BDF713DB23BC61342.cer (raw, json) Hash identifier: 4NeftH5GAv11shM2Zug0w5OUjIwcnAZgI2AZzNeG2z4= Subject key identifier: E1:18:E8:E6:14:4A:59:67:7D:B6:D0:5B:DF:71:3D:B2:3B:C6:13:42 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1B498C70DC9FF7F9DFF4F06CA3A0500CE83A20C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft caRepository: rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 03 Jul 2025 19:07:56 +0000 Certificate not after: Thu 02 Jul 2026 19:12:56 +0000 Subordinate resources: IP: 103.174.18.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 20:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:49:8c:70:dc:9f:f7:f9:df:f4:f0:6c:a3:a0:50:0c:e8:3a:20:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 3 19:07:56 2025 GMT Not After : Jul 2 19:12:56 2026 GMT Subject: CN=E118E8E6144A59677DB6D05BDF713DB23BC61342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:80:ca:e6:64:74:c1:60:55:aa:80:69:c6:9d: f0:7c:06:53:3b:a6:77:af:2e:7c:1f:26:8c:00:2f: 0c:51:c8:69:fd:26:46:53:f6:ce:0b:9a:cf:bd:c4: df:15:7c:3a:c7:bc:b9:00:44:5e:d6:97:e2:61:5a: 2a:bb:bc:69:44:5c:6a:28:65:df:9f:86:b3:80:49: 15:b8:d5:c5:25:f1:62:a7:ef:15:ce:12:06:c9:79: d9:d1:93:c0:9b:f3:2d:43:ce:b0:0c:b0:7e:fa:6e: df:22:ce:29:70:26:82:ca:e9:41:a3:04:eb:f4:10: 68:ee:48:a5:8d:fb:52:47:cd:4a:82:d5:5a:c0:26: bd:ab:78:65:ac:d9:20:7b:ae:04:8f:96:34:a1:71: 38:5b:46:df:f3:32:6f:47:24:38:f3:ac:cb:27:47: 30:a8:6d:dd:13:6d:7f:54:cf:63:c6:b5:3e:90:d7: 97:9e:58:09:63:6d:9a:1d:b3:69:b8:20:76:92:3f: 44:12:c3:3a:4c:cb:e3:d2:ec:72:59:92:07:08:9a: f0:59:58:19:62:cb:63:af:c0:cb:fa:f4:71:1b:34: c8:22:42:0c:f4:13:53:52:28:a0:92:bf:1b:09:8f: a5:fb:9f:48:1f:71:5a:33:5c:c1:25:52:6e:3d:51: ea:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:18:E8:E6:14:4A:59:67:7D:B6:D0:5B:DF:71:3D:B2:3B:C6:13:42 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.18.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:03:7f:70:d4:d5:c7:a6:cc:ab:4c:5c:5b:14:71:b5:33:d1: ff:e3:07:31:09:9b:bc:b3:aa:5d:90:c5:d5:b3:c5:c3:e6:9b: 65:dd:8a:27:67:25:15:3f:e1:a3:c7:82:97:1f:c8:82:dc:98: 12:56:aa:1d:fb:f6:b0:01:24:4b:fb:25:d5:a8:ea:1b:21:64: 34:1e:51:1d:c5:ed:e4:e2:3c:40:91:a1:7d:e9:ce:14:48:cc: 34:9c:ed:3e:0e:5f:27:46:b4:49:04:ea:ba:1e:87:21:59:e8: e1:a3:99:30:4d:33:7e:7d:40:ec:7b:3c:8c:8c:5d:09:4f:46: 18:0a:ab:9a:ab:fb:33:74:d7:75:59:9a:87:d4:de:5e:3c:c1: 9e:25:41:ea:ca:37:82:49:e3:99:fb:ca:96:8c:f1:39:98:e8: af:e4:14:98:f7:db:66:1d:f0:4b:b2:db:bf:65:e1:4d:c5:cc: 86:4b:13:f6:79:a8:6a:d8:63:5c:94:a5:e5:0d:db:59:ac:a8: 0a:99:8c:fd:35:0e:dc:46:5e:97:27:fc:8d:ce:91:9b:50:e1: 03:a7:0e:52:45:eb:5d:60:3a:e6:4e:f5:89:ee:97:fa:85:a4: 89:6b:f3:83:b9:32:e2:47:28:8d:b2:0c:7a:15:77:54:13:65: 1e:70:a0:4b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUG0mMcNyf9/nf9PBso6BQDOg6IMgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwMzE5MDc1NloX DTI2MDcwMjE5MTI1NlowMzExMC8GA1UEAxMoRTExOEU4RTYxNDRBNTk2NzdEQjZE MDVCREY3MTNEQjIzQkM2MTM0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJqAyuZkdMFgVaqAacad8HwGUzumd68ufB8mjAAvDFHIaf0mRlP2zguaz73E 3xV8Ose8uQBEXtaX4mFaKru8aURcaihl35+Gs4BJFbjVxSXxYqfvFc4SBsl52dGT wJvzLUPOsAywfvpu3yLOKXAmgsrpQaME6/QQaO5IpY37UkfNSoLVWsAmvat4ZazZ IHuuBI+WNKFxOFtG3/Myb0ckOPOsyydHMKht3RNtf1TPY8a1PpDXl55YCWNtmh2z abggdpI/RBLDOkzL49LsclmSBwia8FlYGWLLY6/Ay/r0cRs0yCJCDPQTU1IooJK/ GwmPpfufSB9xWjNcwSVSbj1R6jkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOEY6OYUSllnfbbQW99xPbI7xhNCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMDFkYmFmYy1jMGNjLTQ5NmEtYjVlMC00ZjQ4YmE5NDZjZDMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEwMWRiYWZj LWMwY2MtNDk2YS1iNWUwLTRmNDhiYTk0NmNkMy8wL0UxMThFOEU2MTQ0QTU5Njc3 REI2RDA1QkRGNzEzREIyM0JDNjEzNDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrhIwDQYJKoZIhvcNAQELBQADggEBAGoDf3DU1cemzKtMXFsUcbUz0f/jBzEJ m7yzql2QxdWzxcPmm2XdiidnJRU/4aPHgpcfyILcmBJWqh379rABJEv7JdWo6hsh ZDQeUR3F7eTiPECRoX3pzhRIzDSc7T4OXydGtEkE6roehyFZ6OGjmTBNM359QOx7 PIyMXQlPRhgKq5qr+zN013VZmofU3l48wZ4lQerKN4JJ45n7ypaM8TmY6K/kFJj3 22Yd8Euy279l4U3FzIZLE/Z5qGrYY1yUpeUN21msqAqZjP01DtxGXpcn/I3OkZtQ 4QOnDlJF611gOuZO9Ynul/qFpIlr84O5MuJHKI2yDHoVd1QTZR5woEs= -----END CERTIFICATE-----Generated at Mon Jul 21 12:41:48 2025 by rpki-client