$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer File: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer (raw, json) Hash identifier: x8vMAshkJwtL+As9Tbgy0dZFyi6qvMQ8e/A1AxwxM2c= Subject key identifier: 01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6E7BCBF43183A3C205B974C1313FDE5CCCFF90B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft caRepository: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 07 May 2025 20:24:46 +0000 Certificate not after: Wed 06 May 2026 20:29:46 +0000 Subordinate resources: IP: 103.250.128.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 06:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:7b:cb:f4:31:83:a3:c2:05:b9:74:c1:31:3f:de:5c:cc:ff:90:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 7 20:24:46 2025 GMT Not After : May 6 20:29:46 2026 GMT Subject: CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c4:2a:56:b8:64:67:36:cb:0a:09:08:5a:a5: 2a:89:7b:b1:8c:13:a3:3e:39:5c:b5:57:46:36:72: e8:c9:eb:7b:59:17:b3:81:df:ee:e2:60:c5:d0:2c: 3a:ed:92:fe:07:27:0a:80:9f:78:bb:64:5e:b2:44: 96:98:e9:b2:0e:2c:ed:35:52:ab:5c:54:96:85:03: df:ed:12:29:ab:b4:e1:7e:50:a1:9a:50:a9:f4:38: 38:29:e8:fa:0b:49:c9:2d:a5:0b:88:17:7a:f5:4e: ea:2e:0e:37:62:7f:fa:f1:42:ba:1d:db:8b:59:24: ae:c5:ff:31:76:29:1d:41:f9:fb:0a:d4:f4:7c:49: 66:52:ae:71:25:06:a8:cf:d1:0e:07:0e:03:c3:a6: da:c7:9e:d7:b5:10:99:e7:e6:ff:e2:cc:6c:fd:10: fe:d3:98:09:2e:73:26:fa:4a:c6:11:c7:df:b7:eb: 07:a0:70:73:b9:86:f3:8f:4b:32:12:18:b6:ea:04: d7:2f:8d:8a:67:13:4a:02:8d:f0:fe:24:a7:8f:fd: e2:82:6a:68:81:b9:f1:7e:c2:ee:e2:3a:fa:fa:bc: 82:e1:6f:b8:bb:a9:38:a1:01:de:b2:6d:f2:d1:a8: 21:ca:36:db:bf:1b:de:69:e0:1f:d9:b8:0e:d2:bb: 09:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.250.128.0/24 Signature Algorithm: sha256WithRSAEncryption 56:da:c5:ae:68:e9:68:0f:2d:f2:a2:18:76:8d:27:be:f8:73: 16:c9:da:21:e1:e2:18:25:18:d5:ad:8a:9c:19:37:dc:bc:26: b8:20:ed:1d:91:3e:a3:98:11:f2:1e:00:c3:45:6b:f4:d3:6c: d0:4e:d5:65:9a:0a:39:f2:74:ad:18:a6:b4:e8:0c:db:08:68: fa:c3:78:ee:5a:68:a2:0c:b3:02:6b:b1:3e:d7:7b:3e:c4:6c: 18:b5:ef:b3:2f:61:14:a7:88:0d:4f:0f:06:07:87:67:01:66: 9d:7c:33:9d:64:86:e6:22:cc:1d:8d:30:ac:7a:bf:42:7b:d8: 63:d7:c5:86:f3:a6:d8:fa:48:47:9e:cc:26:3c:23:c9:cf:a7: f1:8b:7c:3d:f3:3b:5a:47:14:00:47:b5:83:b6:22:f9:6d:b1: f3:eb:e6:37:74:74:d5:03:ff:d5:2d:76:64:77:ae:f0:64:c2: de:23:73:51:95:15:df:fd:66:5c:75:fb:4e:27:c6:84:54:dc: 64:d6:d6:70:40:33:1b:5c:70:e8:28:83:92:9f:19:49:40:91: 56:bb:37:1c:ff:ef:f1:67:c0:2d:aa:59:0f:c8:60:50:b4:cd: 2d:99:ad:5f:7b:59:b7:2c:4b:25:a0:6f:36:bb:2a:34:e3:92: 97:8c:1d:16 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbnvL9DGDo8IFuXTBMT/eXMz/kLIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUwNzIwMjQ0NloX DTI2MDUwNjIwMjk0NlowMzExMC8GA1UEAxMoMDFFODdFRENCRTkwMUE5QUU4NkNG NUU0MUNCQThCMjQ4M0U5QjZBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrEKla4ZGc2ywoJCFqlKol7sYwToz45XLVXRjZy6Mnre1kXs4Hf7uJgxdAs Ou2S/gcnCoCfeLtkXrJElpjpsg4s7TVSq1xUloUD3+0SKau04X5QoZpQqfQ4OCno +gtJyS2lC4gXevVO6i4ON2J/+vFCuh3bi1kkrsX/MXYpHUH5+wrU9HxJZlKucSUG qM/RDgcOA8Om2see17UQmefm/+LMbP0Q/tOYCS5zJvpKxhHH37frB6Bwc7mG849L MhIYtuoE1y+NimcTSgKN8P4kp4/94oJqaIG58X7C7uI6+vq8guFvuLupOKEB3rJt 8tGoIco2278b3mngH9m4DtK7CVcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAHofty+kBqa6Gz15By6iySD6basMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84MTZiNTk5ZC03ZmJiLTQ0OTgtODZlZi0xODY0NWFlOThlM2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxNmI1OTlk LTdmYmItNDQ5OC04NmVmLTE4NjQ1YWU5OGUzZC8wLzAxRTg3RURDQkU5MDFBOUFF ODZDRjVFNDFDQkE4QjI0ODNFOUI2QUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn+oAwDQYJKoZIhvcNAQELBQADggEBAFbaxa5o6WgPLfKiGHaNJ774cxbJ2iHh 4hglGNWtipwZN9y8Jrgg7R2RPqOYEfIeAMNFa/TTbNBO1WWaCjnydK0YprToDNsI aPrDeO5aaKIMswJrsT7Xez7EbBi177MvYRSniA1PDwYHh2cBZp18M51khuYizB2N MKx6v0J72GPXxYbzptj6SEeezCY8I8nPp/GLfD3zO1pHFABHtYO2IvltsfPr5jd0 dNUD/9UtdmR3rvBkwt4jc1GVFd/9Zlx1+04nxoRU3GTW1nBAMxtccOgog5KfGUlA kVa7Nxz/7/FnwC2qWQ/IYFC0zS2ZrV97WbcsSyWgbza7KjTjkpeMHRY= -----END CERTIFICATE-----Generated at Mon Jun 2 06:28:44 2025 by rpki-client