$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/082F7822D1C63E1ED5DA833913215FE68925FF6E.cer File: 082F7822D1C63E1ED5DA833913215FE68925FF6E.cer (raw, json) Hash identifier: Lcq6j0eWKCj5I63RPHdHHHJocgVgnqL2MGQ+xukMOMI= Subject key identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2C0D1A6D58803E23E315047762FA5A97E5F894B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft caRepository: rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 28 May 2025 05:33:51 +0000 Certificate not after: Wed 27 May 2026 05:38:51 +0000 Subordinate resources: IP: 103.172.118.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 06:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0d:1a:6d:58:80:3e:23:e3:15:04:77:62:fa:5a:97:e5:f8:94:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 28 05:33:51 2025 GMT Not After : May 27 05:38:51 2026 GMT Subject: CN=082F7822D1C63E1ED5DA833913215FE68925FF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:27:49:b8:d3:53:4d:3c:c8:a8:b6:85:80:8b: 42:00:4c:cc:77:e0:c6:8d:01:47:0e:c4:a5:70:6f: 03:11:29:23:47:38:78:1c:5c:4f:31:e1:e2:aa:b7: 3c:64:e4:25:7a:3c:2b:62:3d:bc:d7:8c:d8:49:e7: 83:c3:ff:d4:5d:a7:24:e8:15:49:e5:d1:b6:2e:8c: 59:f8:2e:1a:a8:83:e6:d3:9f:f4:34:89:74:32:60: b5:1d:82:57:17:b2:c3:7a:25:56:9c:6e:96:9f:7c: d4:8f:2d:66:98:2b:66:d8:37:6f:a9:03:af:d2:21: a2:3e:47:a0:0b:cd:23:1f:0f:e9:99:e7:cc:1e:10: 22:2d:16:6b:27:ac:03:1b:a6:63:e7:2a:0f:3a:12: 2c:ca:bb:7d:12:a9:4a:2a:4d:4a:b2:0d:44:12:3e: 94:26:7a:1a:88:d1:5b:12:d2:16:95:97:a7:4e:d7: 6c:5a:4a:11:3e:ec:07:15:ff:11:65:8e:6d:51:64: 55:f9:04:10:7b:c4:0e:f3:ee:01:c4:49:a5:5d:6f: 9d:21:1f:a6:9f:9c:39:b0:fc:57:bb:8d:92:93:96: 65:35:d5:8d:a8:f8:3b:c5:d6:d0:be:75:81:c2:62: ff:b8:61:52:4e:0f:4a:c0:bc:8d:1e:b0:51:26:43: a3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:2F:78:22:D1:C6:3E:1E:D5:DA:83:39:13:21:5F:E6:89:25:FF:6E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f04e97d3-71c3-4d0a-8b04-7088fe382bc3/0/082F7822D1C63E1ED5DA833913215FE68925FF6E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.118.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:0e:55:25:8f:a8:c7:63:34:b6:14:47:f8:bd:73:1e:b2:54: b4:76:72:20:09:ad:ff:a8:6f:93:03:0c:86:b9:03:c8:e2:69: c9:60:ed:e7:02:f6:a8:cf:eb:04:12:72:9f:d0:f1:4e:c1:d0: 81:ab:0d:49:8c:22:63:48:d2:ff:b2:4a:31:0b:06:a5:47:21: 1e:be:97:6b:0f:98:66:e0:b1:2e:e1:0b:f5:26:27:ec:35:08: 2a:e0:fd:90:06:33:e9:81:ef:57:db:bb:74:db:f6:16:0d:e6: ef:76:b0:12:72:ae:7c:37:02:b5:82:c3:96:6a:ee:fe:99:07: 70:e3:cf:4b:46:9d:d6:05:dd:85:10:3f:09:d8:7f:ce:f2:41: 2e:38:65:f9:79:b0:d7:ca:fe:18:cf:b4:b7:04:f0:2b:26:c2: 79:8d:64:11:34:8c:f5:45:67:a8:7f:bb:b7:c3:50:aa:8b:8b: 66:18:9e:48:74:b6:b3:0e:76:13:6d:ad:b1:8b:62:cf:79:52: 45:0c:89:86:d5:1a:bd:66:12:3b:45:31:ab:4f:77:6a:d2:78: 3d:d9:6c:3b:c7:8a:d9:7d:2d:c6:7e:78:bb:8b:26:ab:a9:98: f8:b6:42:99:f8:01:75:6c:d3:6c:db:7f:c8:03:1c:15:cd:68: 54:09:8e:13 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULA0abViAPiPjFQR3Yvpal+X4lLgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUyODA1MzM1MVoX DTI2MDUyNzA1Mzg1MVowMzExMC8GA1UEAxMoMDgyRjc4MjJEMUM2M0UxRUQ1REE4 MzM5MTMyMTVGRTY4OTI1RkY2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOEnSbjTU008yKi2hYCLQgBMzHfgxo0BRw7EpXBvAxEpI0c4eBxcTzHh4qq3 PGTkJXo8K2I9vNeM2Enng8P/1F2nJOgVSeXRti6MWfguGqiD5tOf9DSJdDJgtR2C Vxeyw3olVpxulp981I8tZpgrZtg3b6kDr9Ihoj5HoAvNIx8P6ZnnzB4QIi0Wayes AxumY+cqDzoSLMq7fRKpSipNSrINRBI+lCZ6GojRWxLSFpWXp07XbFpKET7sBxX/ EWWObVFkVfkEEHvEDvPuAcRJpV1vnSEfpp+cObD8V7uNkpOWZTXVjaj4O8XW0L51 gcJi/7hhUk4PSsC8jR6wUSZDo10CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAgveCLRxj4e1dqDORMhX+aJJf9uMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMDRlOTdkMy03MWMzLTRkMGEtOGIwNC03MDg4ZmUzODJiYzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwNGU5N2Qz LTcxYzMtNGQwYS04YjA0LTcwODhmZTM4MmJjMy8wLzA4MkY3ODIyRDFDNjNFMUVE NURBODMzOTEzMjE1RkU2ODkyNUZGNkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrHYwDQYJKoZIhvcNAQELBQADggEBAH4OVSWPqMdjNLYUR/i9cx6yVLR2ciAJ rf+ob5MDDIa5A8jiaclg7ecC9qjP6wQScp/Q8U7B0IGrDUmMImNI0v+ySjELBqVH IR6+l2sPmGbgsS7hC/UmJ+w1CCrg/ZAGM+mB71fbu3Tb9hYN5u92sBJyrnw3ArWC w5Zq7v6ZB3Djz0tGndYF3YUQPwnYf87yQS44Zfl5sNfK/hjPtLcE8CsmwnmNZBE0 jPVFZ6h/u7fDUKqLi2YYnkh0trMOdhNtrbGLYs95UkUMiYbVGr1mEjtFMatPd2rS eD3ZbDvHitl9LcZ+eLuLJqupmPi2Qpn4AXVs02zbf8gDHBXNaFQJjhM= -----END CERTIFICATE-----Generated at Mon Jun 2 06:31:32 2025 by rpki-client