$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer File: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer (raw, json) Hash identifier: gkjZNmTSoZjIWhB6eoHeD0GmwbzT9TOJfETmQBr9qks= Subject key identifier: 1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1BC3E4D257EEE3FA718C6124DE5AEF3CACE349C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft caRepository: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Jun 2025 09:59:03 +0000 Certificate not after: Thu 04 Jun 2026 10:04:03 +0000 Subordinate resources: IP: 103.250.14.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c3:e4:d2:57:ee:e3:fa:71:8c:61:24:de:5a:ef:3c:ac:e3:49:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 5 09:59:03 2025 GMT Not After : Jun 4 10:04:03 2026 GMT Subject: CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0d:e8:34:8d:da:3f:e5:47:dd:d6:33:67:db: b2:8f:b0:07:ff:45:92:97:86:10:6f:a2:9f:07:23: 98:95:fb:ff:37:8d:eb:a5:ad:27:9a:61:dc:fd:d7: cb:f9:bf:17:13:df:b0:bd:89:45:fc:95:da:07:a5: 46:d4:86:f0:83:a1:3a:7e:4a:3b:11:d2:8d:1f:20: 54:fb:df:27:0e:ef:a0:39:6d:41:f8:d5:82:f1:6a: 81:45:28:80:01:de:32:17:55:e0:82:78:8e:ff:0f: af:eb:1f:79:f5:8a:4b:80:51:f7:ff:63:39:54:32: c6:2d:35:79:c5:64:ee:de:10:02:bb:b5:5d:7a:92: 0a:83:59:c7:03:40:3b:4f:d6:73:14:cc:f2:55:8a: aa:cb:42:2b:51:7b:e3:c3:c5:55:a1:77:56:f2:47: bb:04:65:00:ab:e2:f8:b3:10:43:df:da:53:ab:3d: 00:e7:ae:41:b7:eb:3b:8c:e0:fc:60:df:de:2a:e3: 6b:9a:92:e5:5c:bf:e3:90:5e:19:b7:8b:e4:05:88: be:1a:74:61:39:ba:88:25:d5:6d:01:e7:80:12:06: f6:ad:99:47:17:18:e1:50:0f:24:7c:5d:04:3f:37: c6:a0:80:7d:48:75:a9:3e:e3:d3:df:36:20:38:48: 9e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.250.14.0/23 Signature Algorithm: sha256WithRSAEncryption 53:50:2c:4a:73:c2:73:a0:2b:87:95:1b:7d:d4:7b:a2:5f:38: 61:61:4f:84:30:ef:89:4e:2c:2a:8f:81:7a:8f:4c:01:1f:d9: da:7a:00:2f:fb:06:ae:65:de:a4:47:4f:c6:88:6a:43:49:d5: 84:be:05:65:8e:f3:3b:dd:cc:68:87:0c:8d:f4:f5:0a:5f:8c: 7a:ed:21:b7:02:fd:d7:eb:5c:a8:71:86:8a:9a:f8:7f:52:29: 6b:25:1f:62:e2:1f:b2:10:2c:72:44:d5:3e:3f:20:72:bc:c1: a2:29:be:7d:24:19:4d:4d:20:5a:5f:b3:d4:bf:ca:83:04:92: fb:0c:35:45:e4:b4:5c:6b:1c:e1:d5:3f:03:df:a7:aa:26:c6: 0f:99:d4:3f:64:d5:52:74:4e:77:45:de:74:99:a5:45:37:5c: 30:6b:2a:cd:39:31:3b:8f:32:1a:b2:ef:74:fb:5c:ed:90:75: 89:eb:e7:e0:f1:89:a2:60:c4:a4:6f:3a:2d:9b:1d:08:91:1a: 6d:06:20:5b:9a:43:e6:61:fd:f2:01:4e:8b:06:e7:26:2a:89: 7a:89:42:52:36:f0:6c:10:94:0d:e8:de:ca:cb:03:1b:59:ca: 53:26:0d:f8:b0:3d:71:4d:73:55:be:2c:c0:52:c0:4e:d7:1e: 6e:40:ee:49 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUG8Pk0lfu4/pxjGEk3lrvPKzjScgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwNTA5NTkwM1oX DTI2MDYwNDEwMDQwM1owMzExMC8GA1UEAxMoMUY5ODVBRjg0QjY5NDU4MDRCODUz QzJFN0MwOUFFREMyOEI2QjJFNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKYN6DSN2j/lR93WM2fbso+wB/9FkpeGEG+inwcjmJX7/zeN66WtJ5ph3P3X y/m/FxPfsL2JRfyV2gelRtSG8IOhOn5KOxHSjR8gVPvfJw7voDltQfjVgvFqgUUo gAHeMhdV4IJ4jv8Pr+sfefWKS4BR9/9jOVQyxi01ecVk7t4QAru1XXqSCoNZxwNA O0/WcxTM8lWKqstCK1F748PFVaF3VvJHuwRlAKvi+LMQQ9/aU6s9AOeuQbfrO4zg /GDf3irja5qS5Vy/45BeGbeL5AWIvhp0YTm6iCXVbQHngBIG9q2ZRxcY4VAPJHxd BD83xqCAfUh1qT7j0982IDhInlsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB+YWvhLaUWAS4U8LnwJrtwotrLlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMWI5MjZlMC02YzZiLTQ4NTUtYTc1Ni1lMGNiYjdhZDAxZjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MxYjkyNmUw LTZjNmItNDg1NS1hNzU2LWUwY2JiN2FkMDFmOC8wLzFGOTg1QUY4NEI2OTQ1ODA0 Qjg1M0MyRTdDMDlBRURDMjhCNkIyRTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn+g4wDQYJKoZIhvcNAQELBQADggEBAFNQLEpzwnOgK4eVG33Ue6JfOGFhT4Qw 74lOLCqPgXqPTAEf2dp6AC/7Bq5l3qRHT8aIakNJ1YS+BWWO8zvdzGiHDI309Qpf jHrtIbcC/dfrXKhxhoqa+H9SKWslH2LiH7IQLHJE1T4/IHK8waIpvn0kGU1NIFpf s9S/yoMEkvsMNUXktFxrHOHVPwPfp6omxg+Z1D9k1VJ0TndF3nSZpUU3XDBrKs05 MTuPMhqy73T7XO2QdYnr5+DxiaJgxKRvOi2bHQiRGm0GIFuaQ+Zh/fIBTosG5yYq iXqJQlI28GwQlA3o3srLAxtZylMmDfiwPXFNc1W+LMBSwE7XHm5A7kk= -----END CERTIFICATE-----Generated at Sun Jun 8 05:16:22 2025 by rpki-client