$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer File: E64D2B2A02A172B64A71F75C753571C841216A21.cer (raw, json) Hash identifier: w5EU6U/pp0TJmBdwFxhP5EYKy8tUquYLW0z/Y3U1ZrM= Subject key identifier: E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6DA57671EB601F0AE45A7EDCD298DFFD7E8067EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft caRepository: rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 18 Jul 2025 16:07:53 +0000 Certificate not after: Fri 17 Jul 2026 16:12:53 +0000 Subordinate resources: IP: 103.177.56.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a5:76:71:eb:60:1f:0a:e4:5a:7e:dc:d2:98:df:fd:7e:80:67:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 18 16:07:53 2025 GMT Not After : Jul 17 16:12:53 2026 GMT Subject: CN=E64D2B2A02A172B64A71F75C753571C841216A21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:f2:95:90:94:11:5c:a2:66:67:87:ce:20: d3:9d:bf:a0:41:5e:04:10:4a:ae:ff:67:b3:d6:3b: 19:a0:97:ec:cc:d0:a4:91:c2:78:ad:18:6f:2d:cd: 04:3f:00:9d:77:5f:8c:76:64:f1:20:1a:b9:e5:58: 3a:1d:78:73:47:16:1a:c2:e1:fc:2b:f1:ed:a6:c3: a3:33:02:b6:5a:9f:da:56:7f:26:19:91:74:2c:50: 57:7c:7c:1c:f9:f3:d9:45:8c:07:ea:11:52:7c:a4: 31:58:d3:56:90:a8:32:8e:26:5d:be:a6:72:18:8f: 86:67:f9:23:ce:86:47:1d:9e:a1:ec:40:29:2d:a0: 82:7c:03:fc:a2:48:3c:51:43:a4:53:e4:bb:e7:cc: c6:f3:4d:2f:32:ea:58:d2:22:54:55:ed:4a:7d:d9: 81:b5:ba:23:5a:1e:56:3d:e1:df:9f:d5:b6:fb:15: 22:64:dc:c2:68:e3:4d:dc:a0:2c:4f:7e:d2:b4:4f: 9e:53:ba:f0:8e:59:41:c7:16:97:1d:f2:66:c2:98: 6e:e7:af:0c:25:9f:b8:9e:35:f3:ba:0a:1a:8e:f7: 17:a5:8f:bf:90:d4:3a:ae:35:25:6b:26:f7:7b:69: 1d:b5:0b:f4:33:3d:fd:c2:8c:23:8d:8f:52:fe:49: e7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.56.0/23 Signature Algorithm: sha256WithRSAEncryption 92:0c:d3:89:1d:eb:31:29:31:37:18:ed:4c:b6:c7:29:e4:c8: 84:f7:43:49:a5:8f:86:ae:fd:1c:1b:03:79:cc:74:e6:f1:0c: a2:9b:8d:62:9c:74:f7:87:b4:a9:00:3e:23:56:19:eb:b0:8d: 5f:24:e0:96:04:94:d0:a1:83:5c:ac:47:75:4f:85:e1:fe:a9: a8:9c:cb:85:76:b1:6a:3c:8e:54:43:d2:a1:fe:55:78:e0:e1: 66:8e:60:6e:d4:d6:99:47:4d:37:12:c3:62:28:b9:e1:9a:25: b3:bb:03:7f:b4:3c:b7:a6:76:ce:5f:90:6d:a9:6d:fb:65:c1: ac:df:9c:1e:af:5e:1a:3f:e2:db:da:67:33:37:fd:1c:7f:70: 90:e6:53:65:8a:45:fd:03:87:ea:37:54:73:eb:04:3c:2d:22: e0:82:f6:02:55:59:29:13:b1:d9:4f:e6:64:b4:2c:57:a0:b8: 93:b9:7e:49:c0:a4:56:7a:5b:56:71:53:aa:1c:25:b9:1f:58: ab:ea:e9:2f:66:b6:1e:0f:3c:32:c2:c3:c8:37:7a:15:ea:4d: ff:ec:0e:c0:46:44:1d:ec:0b:cd:f4:95:26:48:be:94:ec:58: 55:0c:5e:73:1f:1c:48:ad:3b:6e:92:13:e4:e0:b9:b8:8d:4c: ff:81:4e:8f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbaV2cetgHwrkWn7c0pjf/X6AZ+swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxODE2MDc1M1oX DTI2MDcxNzE2MTI1M1owMzExMC8GA1UEAxMoRTY0RDJCMkEwMkExNzJCNjRBNzFG NzVDNzUzNTcxQzg0MTIxNkEyMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjT8pWQlBFcomZnh84g052/oEFeBBBKrv9ns9Y7GaCX7MzQpJHCeK0Yby3N BD8AnXdfjHZk8SAaueVYOh14c0cWGsLh/Cvx7abDozMCtlqf2lZ/JhmRdCxQV3x8 HPnz2UWMB+oRUnykMVjTVpCoMo4mXb6mchiPhmf5I86GRx2eoexAKS2ggnwD/KJI PFFDpFPku+fMxvNNLzLqWNIiVFXtSn3ZgbW6I1oeVj3h35/VtvsVImTcwmjjTdyg LE9+0rRPnlO68I5ZQccWlx3yZsKYbuevDCWfuJ4187oKGo73F6WPv5DUOq41JWsm 93tpHbUL9DM9/cKMI42PUv5J57sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOZNKyoCoXK2SnH3XHU1cchBIWohMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85Njc1MGJmOS05ZjU4LTQyOGEtODk1Mi04YjU1NTVlZjdjYTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk2NzUwYmY5 LTlmNTgtNDI4YS04OTUyLThiNTU1NWVmN2NhNy8wL0U2NEQyQjJBMDJBMTcyQjY0 QTcxRjc1Qzc1MzU3MUM4NDEyMTZBMjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsTgwDQYJKoZIhvcNAQELBQADggEBAJIM04kd6zEpMTcY7Uy2xynkyIT3Q0ml j4au/RwbA3nMdObxDKKbjWKcdPeHtKkAPiNWGeuwjV8k4JYElNChg1ysR3VPheH+ qaicy4V2sWo8jlRD0qH+VXjg4WaOYG7U1plHTTcSw2IoueGaJbO7A3+0PLemds5f kG2pbftlwazfnB6vXho/4tvaZzM3/Rx/cJDmU2WKRf0Dh+o3VHPrBDwtIuCC9gJV WSkTsdlP5mS0LFeguJO5fknApFZ6W1ZxU6ocJbkfWKvq6S9mth4PPDLCw8g3ehXq Tf/sDsBGRB3sC830lSZIvpTsWFUMXnMfHEitO26SE+TgubiNTP+BTo8= -----END CERTIFICATE-----Generated at Mon Jul 21 02:27:26 2025 by rpki-client