$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer File: E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.cer (raw, json) Hash identifier: 5z0TznSOOnH2Cc4XvEfSbKU9J5zueojl4OW1J+a8mMU= Subject key identifier: E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 126C7F038405E7E5A0C633AE634BC4C645039280 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft caRepository: rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 07 Jul 2025 15:14:13 +0000 Certificate not after: Mon 06 Jul 2026 15:19:13 +0000 Subordinate resources: IP: 103.120.138.0/24 IP: 2001:df6:1d00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 20:58:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:6c:7f:03:84:05:e7:e5:a0:c6:33:ae:63:4b:c4:c6:45:03:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 7 15:14:13 2025 GMT Not After : Jul 6 15:19:13 2026 GMT Subject: CN=E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:38:a1:86:3f:3e:b1:eb:7c:1e:cb:09:fb:d1: 02:fa:70:51:8e:14:75:3e:97:39:79:c2:0a:12:76: d3:8a:54:14:c9:97:2a:12:8e:33:8b:35:4f:68:3a: 8a:a0:73:32:1d:fa:c2:e3:65:bc:1f:89:3f:38:21: a1:c0:8b:af:32:99:b6:01:c8:3b:84:51:e3:02:ea: c4:cb:70:2e:a0:1b:b9:89:26:dc:a0:aa:ad:7e:af: 16:59:13:47:7c:e4:71:ad:39:2d:88:27:85:47:51: f1:a9:d4:45:ea:44:a8:98:33:05:12:9d:31:b4:6d: ba:8e:19:3b:07:16:19:7c:f6:b6:7d:c5:01:1b:13: ad:7e:af:fa:8d:d5:72:44:30:15:57:90:18:68:d5: 88:ae:c2:a0:0d:da:72:bc:92:09:e7:c8:da:c8:aa: ff:5e:33:b6:4b:0e:43:ef:86:0f:1d:4a:fb:20:c2: 41:cb:db:34:16:b5:c6:69:44:35:eb:aa:0c:28:cd: 60:7f:4d:93:1c:46:b3:44:5e:c1:7a:e1:c7:d8:c2: 7d:7d:74:41:67:e4:a0:35:83:4e:76:0d:cb:e0:c3: 11:a7:73:c5:0d:3f:6d:5b:82:6a:b7:a9:5c:55:95: d5:d0:fa:2a:78:26:16:61:cb:8a:67:7f:c3:99:73: ab:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E8:4D:B4:4F:00:08:62:4F:8E:76:93:BC:3B:E1:F9:BF:CD:DF:A2:80 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0eb96005-83a9-41e4-af5b-f3eaa8f23651/0/E84DB44F0008624F8E7693BC3BE1F9BFCDDFA280.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.138.0/24 IPv6: 2001:df6:1d00::/48 Signature Algorithm: sha256WithRSAEncryption 18:ea:78:66:4b:3c:33:d8:b9:71:7f:82:69:c2:5c:95:75:5d: 4e:8d:99:06:4f:43:fe:ff:8f:f8:b1:76:38:12:ed:d2:c3:88: df:ed:fa:80:59:e9:7b:8a:28:2a:6b:d0:5a:ee:46:2c:75:26: 40:57:13:65:65:c5:2a:67:ae:4a:e7:90:04:46:72:a5:07:fd: 10:75:7c:18:c8:62:b1:e1:18:36:f2:f7:f5:2b:11:8d:63:2e: 87:e4:61:19:3b:ee:7c:d6:6d:0e:b8:33:36:74:ed:21:20:ff: 9e:70:c4:75:c6:8c:f9:fe:4e:e3:ee:65:97:60:5e:d3:c0:a5: 04:c5:5c:23:c4:10:d8:52:95:41:30:5b:b2:f4:91:ed:36:bf: 9b:4b:14:dc:e5:e5:56:69:88:5e:6f:24:f7:98:1b:50:d2:ae: 04:41:2e:4a:1b:0d:0e:30:4b:8d:7a:92:3c:b9:3d:12:a9:f2: ca:81:c6:cb:ba:5d:b3:7f:f8:34:8e:ea:76:6f:7a:c8:71:01: 96:93:73:2e:3e:2c:41:77:08:11:c3:f7:2b:b1:7c:43:3c:75: 56:74:3d:a9:f8:29:bb:4b:9e:dc:f4:4a:21:9f:0d:b2:83:eb: 7f:40:e4:7a:33:08:78:ec:f9:7d:7f:16:90:b0:ca:a9:a9:52: 70:54:ef:73 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUEmx/A4QF5+WgxjOuY0vExkUDkoAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwNzE1MTQxM1oX DTI2MDcwNjE1MTkxM1owMzExMC8GA1UEAxMoRTg0REI0NEYwMDA4NjI0RjhFNzY5 M0JDM0JFMUY5QkZDRERGQTI4MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKY4oYY/PrHrfB7LCfvRAvpwUY4UdT6XOXnCChJ204pUFMmXKhKOM4s1T2g6 iqBzMh36wuNlvB+JPzghocCLrzKZtgHIO4RR4wLqxMtwLqAbuYkm3KCqrX6vFlkT R3zkca05LYgnhUdR8anURepEqJgzBRKdMbRtuo4ZOwcWGXz2tn3FARsTrX6v+o3V ckQwFVeQGGjViK7CoA3acrySCefI2siq/14ztksOQ++GDx1K+yDCQcvbNBa1xmlE NeuqDCjNYH9NkxxGs0RewXrhx9jCfX10QWfkoDWDTnYNy+DDEadzxQ0/bVuCarep XFWV1dD6KngmFmHLimd/w5lzqwUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOhNtE8ACGJPjnaTvDvh+b/N36KAMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZWI5NjAwNS04M2E5LTQxZTQtYWY1Yi1mM2VhYThmMjM2NTEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlYjk2MDA1 LTgzYTktNDFlNC1hZjViLWYzZWFhOGYyMzY1MS8wL0U4NERCNDRGMDAwODYyNEY4 RTc2OTNCQzNCRTFGOUJGQ0RERkEyODAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABneIowDwQCAAIwCQMHACABDfYdADANBgkqhkiG9w0BAQsFAAOCAQEAGOp4Zks8 M9i5cX+CacJclXVdTo2ZBk9D/v+P+LF2OBLt0sOI3+36gFnpe4ooKmvQWu5GLHUm QFcTZWXFKmeuSueQBEZypQf9EHV8GMhiseEYNvL39SsRjWMuh+RhGTvufNZtDrgz NnTtISD/nnDEdcaM+f5O4+5ll2Be08ClBMVcI8QQ2FKVQTBbsvSR7Ta/m0sU3OXl VmmIXm8k95gbUNKuBEEuShsNDjBLjXqSPLk9EqnyyoHGy7pds3/4NI7qdm96yHEB lpNzLj4sQXcIEcP3K7F8Qzx1VnQ9qfgpu0ue3PRKIZ8NsoPrf0DkejMIeOz5fX8W kLDKqalScFTvcw== -----END CERTIFICATE-----Generated at Mon Jul 21 12:36:29 2025 by rpki-client