$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FF102371565831DDB9C06DF47DF79B1120C9861E.cer File: FF102371565831DDB9C06DF47DF79B1120C9861E.cer (raw, json) Hash identifier: LKkWEWxlunwQqG14uEHzG0PWGbRKPEu+5kFINtGwFBQ= Subject key identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0138831ED792795C421E054CB4651E124817FFB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft caRepository: rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 02 Jul 2025 15:59:51 +0000 Certificate not after: Wed 01 Jul 2026 16:04:51 +0000 Subordinate resources: IP: 103.3.233.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:38:83:1e:d7:92:79:5c:42:1e:05:4c:b4:65:1e:12:48:17:ff:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 2 15:59:51 2025 GMT Not After : Jul 1 16:04:51 2026 GMT Subject: CN=FF102371565831DDB9C06DF47DF79B1120C9861E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:6d:d5:81:3f:14:41:f0:16:65:e6:39:c9: 88:85:10:0d:5b:16:9b:22:a7:07:8c:cd:1d:e0:f0: a2:9e:eb:3c:ba:85:b4:00:87:09:5e:0d:3d:13:2f: 7d:1b:f7:b4:ec:33:38:ec:d3:74:8b:f4:0d:e4:ec: 23:e2:ab:90:a8:63:fd:b8:8e:68:09:05:7a:2b:3c: db:bd:b3:1b:7b:da:d1:f1:15:7e:9d:15:98:a2:b3: a7:6e:78:c3:23:e8:ee:5e:ac:eb:4f:7f:07:3d:77: 8f:6e:05:71:e3:df:4c:94:df:ab:99:7e:c8:ed:88: 51:62:48:3c:b8:1c:5f:68:85:31:f4:3c:80:d4:1d: e1:7f:6d:a4:88:b5:bb:86:17:b9:68:e3:5e:50:f6: c8:1f:b2:fc:9c:b0:9b:e8:dc:6d:3d:98:76:1a:a6: 00:b8:f5:0d:76:4c:34:64:da:ba:e8:16:f5:ec:75: 45:96:84:c0:03:1c:3e:1e:e4:04:91:11:62:c1:11: 60:76:28:ec:56:24:18:10:cb:00:07:9b:60:a2:d4: 76:3e:1f:e4:b6:37:58:dc:b4:7a:51:2d:e2:cf:49: 9a:d5:e3:13:b9:a5:54:18:78:74:06:9d:ba:08:3e: b8:f9:2b:ab:d2:b4:e9:6e:e6:48:19:a0:1a:e2:93: 5d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:10:23:71:56:58:31:DD:B9:C0:6D:F4:7D:F7:9B:11:20:C9:86:1E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/343f29ea-874a-4d1a-abcc-75293cb51a6d/0/FF102371565831DDB9C06DF47DF79B1120C9861E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.233.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:00:06:53:5f:85:53:5b:e8:e8:c6:da:64:82:ee:09:8f:71: 15:00:aa:17:91:a2:5d:93:9c:8e:0e:38:3b:5d:4a:d8:96:0f: c2:7c:62:46:fa:c9:0f:62:2a:37:3b:da:87:2d:65:32:61:f1: f5:c4:e7:cf:07:4f:d6:41:30:bd:33:2a:f8:c9:8f:f3:71:3a: 27:0d:b9:8d:9e:fc:63:ed:9f:4c:e4:97:8a:4f:bc:50:11:96: 81:4a:87:87:0a:ea:70:e0:82:04:6e:09:38:6e:78:ec:d7:fa: 60:c0:d4:a4:02:33:61:bd:61:9a:99:a7:45:87:f6:a5:45:e0: cd:1a:a8:6d:1f:45:75:d2:4e:61:e1:0b:a3:6c:2f:df:05:8c: 06:25:cf:38:a1:7c:0a:e8:04:dc:e2:78:11:30:e7:1b:ec:67: a8:50:c7:15:9c:b4:13:4d:d1:e8:2e:f9:fd:93:47:f1:31:f1: 44:c4:40:8c:7d:b6:f0:51:30:56:87:ae:d9:ce:88:18:22:9f: 1b:58:f7:3e:8c:44:94:89:98:91:09:f2:53:9b:53:84:48:c3: 00:06:ca:fd:8a:ca:45:86:df:9b:ff:d8:ca:6d:0f:84:60:88: 9e:e3:7e:fc:44:6f:fe:20:68:91:7a:b0:8e:c5:ac:ad:db:46: 0a:23:a6:7c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUATiDHteSeVxCHgVMtGUeEkgX/7UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwMjE1NTk1MVoX DTI2MDcwMTE2MDQ1MVowMzExMC8GA1UEAxMoRkYxMDIzNzE1NjU4MzFEREI5QzA2 REY0N0RGNzlCMTEyMEM5ODYxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhebdWBPxRB8BZl5jnJiIUQDVsWmyKnB4zNHeDwop7rPLqFtACHCV4NPRMv fRv3tOwzOOzTdIv0DeTsI+KrkKhj/biOaAkFeis8272zG3va0fEVfp0VmKKzp254 wyPo7l6s609/Bz13j24FcePfTJTfq5l+yO2IUWJIPLgcX2iFMfQ8gNQd4X9tpIi1 u4YXuWjjXlD2yB+y/Jywm+jcbT2YdhqmALj1DXZMNGTauugW9ex1RZaEwAMcPh7k BJERYsERYHYo7FYkGBDLAAebYKLUdj4f5LY3WNy0elEt4s9JmtXjE7mlVBh4dAad ugg+uPkrq9K06W7mSBmgGuKTXTkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP8QI3FWWDHducBt9H33mxEgyYYeMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zNDNmMjllYS04NzRhLTRkMWEtYWJjYy03NTI5M2NiNTFhNmQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM0M2YyOWVh LTg3NGEtNGQxYS1hYmNjLTc1MjkzY2I1MWE2ZC8wL0ZGMTAyMzcxNTY1ODMxRERC OUMwNkRGNDdERjc5QjExMjBDOTg2MUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnA+kwDQYJKoZIhvcNAQELBQADggEBAHoABlNfhVNb6OjG2mSC7gmPcRUAqheR ol2TnI4OODtdStiWD8J8Ykb6yQ9iKjc72octZTJh8fXE588HT9ZBML0zKvjJj/Nx OicNuY2e/GPtn0zkl4pPvFARloFKh4cK6nDgggRuCThueOzX+mDA1KQCM2G9YZqZ p0WH9qVF4M0aqG0fRXXSTmHhC6NsL98FjAYlzzihfAroBNzieBEw5xvsZ6hQxxWc tBNN0egu+f2TR/Ex8UTEQIx9tvBRMFaHrtnOiBginxtY9z6MRJSJmJEJ8lObU4RI wwAGyv2KykWG35v/2MptD4RgiJ7jfvxEb/4gaJF6sI7FrK3bRgojpnw= -----END CERTIFICATE-----Generated at Sun Jul 20 17:45:00 2025 by rpki-client