$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer File: 0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer (raw, json) Hash identifier: rEOxyK6i44Hl0mX9nYkbt7y7aQFKXaN2NAbhr4B6uBs= Subject key identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 07D1BD7579556C69D3889919BE9889C1FA92CF87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft caRepository: rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 02:29:47 +0000 Certificate not after: Tue 02 Jun 2026 02:34:47 +0000 Subordinate resources: IP: 103.90.24.0/22 IP: 103.232.240.0/24 IP: 103.232.242.0/23 IP: 103.250.199.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d1:bd:75:79:55:6c:69:d3:88:99:19:be:98:89:c1:fa:92:cf:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 02:29:47 2025 GMT Not After : Jun 2 02:34:47 2026 GMT Subject: CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:a5:5f:60:f4:d7:6f:ec:58:aa:78:41:44: 33:9b:0f:06:ad:55:87:0c:8d:35:5e:a4:f3:64:ec: d7:77:cf:22:b3:42:f4:46:b7:d2:b4:a4:2d:6d:07: 1e:de:3b:c0:33:1a:e8:37:cf:5b:e4:f3:1b:b5:a7: 47:0e:42:44:8c:f2:07:fb:fe:5c:56:f0:ac:ed:c1: 5c:ba:eb:76:5d:3f:d6:0f:5e:db:2e:c7:04:5a:4c: 6a:a1:6d:8a:d2:94:9c:2e:30:52:07:5e:eb:3d:6f: 99:3e:1e:ec:94:34:84:e2:4e:b2:8b:55:c4:9b:22: 9c:3f:e7:e4:94:62:2a:d6:b6:46:af:47:cf:2e:86: be:5c:e8:c1:41:8e:da:26:6d:b2:7d:58:c2:54:85: 2a:06:04:62:4b:a2:f3:3b:a6:65:8e:c8:60:03:f0: b7:27:97:fc:5c:1d:3d:4c:9e:f5:fc:df:a7:8d:ac: f4:45:f4:d3:98:f1:47:7d:25:2e:87:59:27:d4:1c: 10:51:b3:8a:db:67:5a:cd:95:aa:70:76:70:28:bb: bc:d3:11:43:92:6b:81:d0:83:a0:2b:b1:db:d3:a5: a5:84:95:af:0c:2e:33:cd:04:d5:df:59:8e:80:da: 34:b0:56:c4:e9:5f:ab:8d:d9:28:e0:45:3e:73:a7: d1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.90.24.0/22 103.232.240.0/24 103.232.242.0/23 103.250.199.0/24 Signature Algorithm: sha256WithRSAEncryption 59:ab:e4:eb:a4:1f:aa:95:5e:53:0f:ca:ac:a0:70:1c:f4:33: 4d:2a:67:11:7a:75:d6:64:b7:cd:9b:7e:2d:1f:43:d3:77:a8: be:04:8b:53:99:79:8f:32:60:8a:cb:20:0a:e0:6e:23:ad:b5: 0b:ef:1e:90:1c:88:35:91:5a:3e:28:b9:df:64:dd:c1:95:a5: 7d:56:80:09:4d:fb:88:4b:74:49:0d:5b:d2:65:49:4d:25:6d: d1:50:fd:ff:4d:d5:9d:51:ff:68:5e:95:e2:06:bc:c9:b4:f1: 5c:27:6d:86:a4:16:b3:16:b3:9d:fe:dc:f4:39:d8:c9:d8:d7: 1e:97:5c:3e:52:9d:30:39:e3:d3:82:b3:b0:21:ad:81:9f:9f: 7c:01:9e:93:f0:45:19:c0:31:3d:00:f6:b5:4d:31:ae:61:04: 51:8b:66:e1:03:8d:c7:93:3e:83:3d:77:3e:d7:70:ca:ce:03: 34:16:5f:81:d7:9f:54:56:db:83:48:1a:32:7a:fb:fc:f5:52: 65:f8:e1:d1:b7:b1:e7:83:d5:aa:46:1c:3c:6b:ff:0d:d5:1f: 29:f8:95:da:ec:00:58:cf:74:1f:47:67:2b:75:5b:b9:43:6f: cc:26:bb:e0:31:58:12:e7:54:9a:b2:e6:af:e1:e3:21:19:73: 95:46:6a:85 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUB9G9dXlVbGnTiJkZvpiJwfqSz4cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzAyMjk0N1oX DTI2MDYwMjAyMzQ0N1owMzExMC8GA1UEAxMoMDMyMTk4NEY5ODIzMEE0Rjk0NjY3 RTgyQzBBM0RFQjExNTFDNUVEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALd2pV9g9Ndv7FiqeEFEM5sPBq1VhwyNNV6k82Ts13fPIrNC9Ea30rSkLW0H Ht47wDMa6DfPW+TzG7WnRw5CRIzyB/v+XFbwrO3BXLrrdl0/1g9e2y7HBFpMaqFt itKUnC4wUgde6z1vmT4e7JQ0hOJOsotVxJsinD/n5JRiKta2Rq9Hzy6GvlzowUGO 2iZtsn1YwlSFKgYEYkui8zumZY7IYAPwtyeX/FwdPUye9fzfp42s9EX005jxR30l LodZJ9QcEFGzittnWs2VqnB2cCi7vNMRQ5JrgdCDoCux29OlpYSVrwwuM80E1d9Z joDaNLBWxOlfq43ZKOBFPnOn0XcCAwEAAaOCAsowggLGMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAMhmE+YIwpPlGZ+gsCj3rEVHF7bMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMTYzM2I4ZS0wZGY5LTQ0YWMtOWNhZS1kNmY2NzY1YTUyYzkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExNjMzYjhl LTBkZjktNDRhYy05Y2FlLWQ2ZjY3NjVhNTJjOS8wLzAzMjE5ODRGOTgyMzBBNEY5 NDY2N0U4MkMwQTNERUIxMTUxQzVFREIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgABMBgD BAJnWhgDBABn6PADBAFn6PIDBABn+scwDQYJKoZIhvcNAQELBQADggEBAFmr5Ouk H6qVXlMPyqygcBz0M00qZxF6ddZkt82bfi0fQ9N3qL4Ei1OZeY8yYIrLIArgbiOt tQvvHpAciDWRWj4oud9k3cGVpX1WgAlN+4hLdEkNW9JlSU0lbdFQ/f9N1Z1R/2he leIGvMm08VwnbYakFrMWs53+3PQ52MnY1x6XXD5SnTA549OCs7AhrYGfn3wBnpPw RRnAMT0A9rVNMa5hBFGLZuEDjceTPoM9dz7XcMrOAzQWX4HXn1RW24NIGjJ6+/z1 UmX44dG3seeD1apGHDxr/w3VHyn4ldrsAFjPdB9HZyt1W7lDb8wmu+AxWBLnVJqy 5q/h4yEZc5VGaoU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:53:06 2025 by rpki-client