$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer File: 1635F5E419798341BDC615D4E1C6AE340C34BEED.cer (raw, json) Hash identifier: hNCNMTe6pZyCCaCm1Dhw+ZO7e845MLdh2eQEuqLJidA= Subject key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 70BBDFD083148357AD408074E4A23F00EB9C22B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft caRepository: rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 07:14:01 +0000 Certificate not after: Tue 02 Jun 2026 07:19:01 +0000 Subordinate resources: IP: 202.127.96.0/20 IP: 210.79.208.0/20 IP: 2406:5c00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:bb:df:d0:83:14:83:57:ad:40:80:74:e4:a2:3f:00:eb:9c:22:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 07:14:01 2025 GMT Not After : Jun 2 07:19:01 2026 GMT Subject: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b9:ef:c6:6f:af:a6:3d:53:cd:c7:8e:80:d1: c2:ec:cb:44:46:b6:bc:ed:b8:15:08:ec:2a:bf:ec: 77:e8:7a:09:e2:da:ab:45:7c:93:96:b2:59:90:1b: e6:db:77:9a:28:68:e7:4b:39:75:02:3b:5b:59:f3: 32:b8:a8:ce:1b:01:8f:54:1c:3c:6e:cf:47:89:bc: 57:f1:17:fe:9b:7b:5b:d0:2b:00:06:f9:ba:9b:cb: c1:5e:89:95:82:c7:fd:47:01:bc:80:af:16:c9:e2: 39:a0:78:11:fe:b6:ce:30:da:ed:89:98:5e:07:21: 68:c3:a7:9e:b9:44:f2:eb:a5:8b:0a:0a:26:c9:64: 43:e7:c3:4d:f2:de:91:a9:b4:e5:79:11:e0:70:e5: 8c:76:ac:24:20:6b:0b:23:50:db:0f:aa:b7:4f:00: ba:e1:1f:89:8a:02:f2:2a:ad:0a:77:2d:c4:d1:f1: 6a:3b:c9:d9:ab:47:7a:2b:43:91:ad:04:a9:2f:59: da:2d:26:be:e2:15:c9:7c:d3:b4:e2:61:23:b8:27: 82:b0:98:14:44:a1:2d:86:b7:83:58:0e:59:a1:aa: 20:f8:ee:63:ca:81:cd:34:9b:cb:7f:3c:f7:68:cf: 33:14:9f:e5:8e:1b:a2:80:e8:52:65:f1:64:f5:d6: 89:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.127.96.0/20 210.79.208.0/20 IPv6: 2406:5c00::/32 Signature Algorithm: sha256WithRSAEncryption 0d:fa:ab:79:ab:d0:b8:48:0e:88:31:33:69:eb:f2:bb:5d:5b: 93:fa:6e:a6:02:a6:14:3e:75:b7:e9:37:e4:73:5d:7e:1c:2b: cb:c4:a7:8f:dd:4f:4c:fa:14:28:d8:b6:ea:e6:cf:61:3e:ab: 83:44:ee:6a:7a:cd:c9:70:a2:fc:e2:2f:48:a7:d9:b8:2a:d7: fb:16:9d:fd:46:55:cb:7f:e5:78:a2:86:fd:07:90:59:7a:57: 25:7a:6d:82:97:f1:19:a9:90:8f:34:6b:db:7e:18:c8:1e:93: ed:8d:8b:7f:e5:3f:f4:7a:7b:97:f0:66:93:a7:47:a5:c8:c1: 2e:3b:df:7c:31:ee:ca:89:d7:2c:72:ea:63:9c:61:8e:f7:0c: 05:1e:99:c4:20:47:92:d5:87:55:54:91:91:2f:d5:1d:81:60: 8b:a3:9b:93:2f:eb:7e:f3:a8:2a:09:2d:37:de:a8:38:9f:b0: 2d:26:77:4a:ce:d9:1a:7c:4a:bf:9e:c2:20:35:09:48:aa:14: eb:2e:06:fe:1f:ba:8b:30:99:c8:7c:38:54:1b:9f:53:57:0b: 1e:15:72:2b:7d:72:51:b7:ca:88:54:2d:46:ab:36:c6:71:c0: 21:0e:03:79:3b:28:ee:32:18:e4:f2:35:0a:44:73:db:62:a7: 08:02:42:ea -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUcLvf0IMUg1etQIB05KI/AOucIrYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzA3MTQwMVoX DTI2MDYwMjA3MTkwMVowMzExMC8GA1UEAxMoMTYzNUY1RTQxOTc5ODM0MUJEQzYx NUQ0RTFDNkFFMzQwQzM0QkVFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN+578Zvr6Y9U83HjoDRwuzLREa2vO24FQjsKr/sd+h6CeLaq0V8k5ayWZAb 5tt3miho50s5dQI7W1nzMriozhsBj1QcPG7PR4m8V/EX/pt7W9ArAAb5upvLwV6J lYLH/UcBvICvFsniOaB4Ef62zjDa7YmYXgchaMOnnrlE8uuliwoKJslkQ+fDTfLe kam05XkR4HDljHasJCBrCyNQ2w+qt08AuuEfiYoC8iqtCnctxNHxajvJ2atHeitD ka0EqS9Z2i0mvuIVyXzTtOJhI7gngrCYFEShLYa3g1gOWaGqIPjuY8qBzTSby388 92jPMxSf5Y4booDoUmXxZPXWiasCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBY19eQZeYNBvcYV1OHGrjQMNL7tMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NjQ1MDAzMi01NDkyLTRhNWEtOTQzZi1iZGI0NzMzNDEyMzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2NDUwMDMy LTU0OTItNGE1YS05NDNmLWJkYjQ3MzM0MTIzMy8wLzE2MzVGNUU0MTk3OTgzNDFC REM2MTVENEUxQzZBRTM0MEMzNEJFRUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BATKf2ADBATST9AwDQQCAAIwBwMFACQGXAAwDQYJKoZIhvcNAQELBQADggEBAA36 q3mr0LhIDogxM2nr8rtdW5P6bqYCphQ+dbfpN+RzXX4cK8vEp4/dT0z6FCjYturm z2E+q4NE7mp6zclwovziL0in2bgq1/sWnf1GVct/5Xiihv0HkFl6VyV6bYKX8Rmp kI80a9t+GMgek+2Ni3/lP/R6e5fwZpOnR6XIwS4733wx7sqJ1yxy6mOcYY73DAUe mcQgR5LVh1VUkZEv1R2BYIujm5Mv637zqCoJLTfeqDifsC0md0rO2Rp8Sr+ewiA1 CUiqFOsuBv4fuoswmch8OFQbn1NXCx4Vcit9clG3yohULUarNsZxwCEOA3k7KO4y GOTyNQpEc9tipwgCQuo= -----END CERTIFICATE-----Generated at Tue Jun 3 23:35:43 2025 by rpki-client