$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer File: 229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer (raw, json) Hash identifier: ZJjREIHomWdSvw6OP7GeJXexwfVwBpmYOGIfXksx9Bo= Subject key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3A99CC9951DA315584C16DA4ACAAA609A3435805 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft caRepository: rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 00:40:19 +0000 Certificate not after: Tue 02 Jun 2026 00:45:19 +0000 Subordinate resources: IP: 45.116.156.0/22 IP: 103.54.92.0/22 IP: 103.104.132.0/22 IP: 2407:df00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 12:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:99:cc:99:51:da:31:55:84:c1:6d:a4:ac:aa:a6:09:a3:43:58:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 00:40:19 2025 GMT Not After : Jun 2 00:45:19 2026 GMT Subject: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5b:5b:74:2d:a9:16:be:a7:da:e5:58:48:10: 19:f8:37:bc:12:d9:01:f5:ef:ee:ed:b1:d2:2b:d5: ad:54:02:34:bc:67:1c:be:f6:f2:62:9e:b8:6e:5b: 0c:b4:ad:2d:77:ef:d6:26:73:91:43:9d:16:7b:e0: 37:6b:41:21:4c:09:85:b0:34:bc:4d:b3:d0:fc:e2: 63:8f:a2:e8:59:27:7c:b5:15:36:1a:dc:75:0d:31: ed:81:63:02:12:03:58:7f:fe:84:11:e2:e1:a3:2f: f0:26:2a:72:0a:0a:3f:f2:5a:7f:df:3d:f2:77:e0: ba:18:7d:b7:90:1b:8b:b6:ab:9d:b0:46:a3:59:be: f2:b9:8b:ce:40:ef:84:be:30:1b:88:91:1f:8a:0d: 50:4a:9a:3b:13:e4:28:8c:34:a6:c5:6f:cd:33:9d: 34:72:e7:f9:6d:23:4b:30:44:50:66:8f:48:32:f3: c3:67:f5:33:45:35:18:0b:e5:96:6b:b7:7e:db:70: f9:56:9e:53:bf:8a:b6:a0:d7:fa:a6:79:41:f7:6a: 1c:a2:b1:62:c5:20:03:f6:cb:7f:b1:fd:0d:fa:80: f3:89:ce:35:54:df:8d:72:99:36:bb:bd:c7:79:cc: 6c:ec:69:6c:2e:7c:02:4e:cb:95:79:db:9e:85:b3: 3c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.116.156.0/22 103.54.92.0/22 103.104.132.0/22 IPv6: 2407:df00::/32 Signature Algorithm: sha256WithRSAEncryption 6f:0b:73:4b:0e:ca:1b:41:a3:e0:2d:5c:59:c9:2b:f5:d7:f9: 6b:ae:0d:1e:f7:db:23:c5:54:9f:ed:ec:ae:09:3d:c7:ca:fa: 8a:9e:3c:0e:9e:4f:e5:1d:25:d3:5e:0f:04:c3:93:ef:77:87: 7f:fb:84:e9:82:4b:25:3e:31:99:4c:6e:06:46:aa:37:8b:4e: a0:af:8d:88:9b:5f:52:06:29:33:99:7d:76:70:fd:97:7e:68: ec:27:29:40:8c:63:ba:67:15:5a:64:15:1d:c4:a8:1a:60:fc: 3a:8f:7c:f4:1f:58:33:4a:aa:15:40:51:56:96:f9:69:55:d0: e4:af:ef:f8:7a:7d:76:e5:95:eb:64:43:a3:10:7c:2e:99:bf: f5:9d:01:95:21:29:12:60:97:3b:15:93:5d:8f:38:6b:bc:20: 4c:e1:db:8e:4e:41:82:ad:13:58:90:d3:a1:61:51:c3:77:49: fd:77:f5:46:31:b0:19:b2:9c:10:24:8f:78:fd:af:6d:e5:31: db:7d:89:77:36:85:fb:46:70:c1:df:ce:ad:f1:bf:3f:81:df: e2:2e:41:60:ee:1b:ea:dc:b3:f4:1c:8c:fa:e9:dc:5a:57:26: ee:8d:4d:74:9a:b1:de:c1:fa:e5:20:48:dc:55:65:85:66:6b: f9:2b:71:cb -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUOpnMmVHaMVWEwW2krKqmCaNDWAUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzAwNDAxOVoX DTI2MDYwMjAwNDUxOVowMzExMC8GA1UEAxMoMjI5Rjk2MThBRTNGMDY2N0VDMTdD OTc3RjI2NkIyQkU3NEM4MUFCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAORbW3QtqRa+p9rlWEgQGfg3vBLZAfXv7u2x0ivVrVQCNLxnHL728mKeuG5b DLStLXfv1iZzkUOdFnvgN2tBIUwJhbA0vE2z0PziY4+i6FknfLUVNhrcdQ0x7YFj AhIDWH/+hBHi4aMv8CYqcgoKP/Jaf9898nfguhh9t5Abi7arnbBGo1m+8rmLzkDv hL4wG4iRH4oNUEqaOxPkKIw0psVvzTOdNHLn+W0jSzBEUGaPSDLzw2f1M0U1GAvl lmu3fttw+VaeU7+KtqDX+qZ5QfdqHKKxYsUgA/bLf7H9DfqA84nONVTfjXKZNru9 x3nMbOxpbC58Ak7LlXnbnoWzPL0CAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCKflhiuPwZn7BfJd/Jmsr50yBq3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NDc5MWIxZi02ZGE5LTQwMGQtOGIxNC05OTJhYWU2Mzc0NmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0NzkxYjFm LTZkYTktNDAwZC04YjE0LTk5MmFhZTYzNzQ2Yy8wLzIyOUY5NjE4QUUzRjA2NjdF QzE3Qzk3N0YyNjZCMkJFNzRDODFBQjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAItdJwDBAJnNlwDBAJnaIQwDQQCAAIwBwMFACQH3wAwDQYJKoZIhvcNAQELBQAD ggEBAG8Lc0sOyhtBo+AtXFnJK/XX+WuuDR732yPFVJ/t7K4JPcfK+oqePA6eT+Ud JdNeDwTDk+93h3/7hOmCSyU+MZlMbgZGqjeLTqCvjYibX1IGKTOZfXZw/Zd+aOwn KUCMY7pnFVpkFR3EqBpg/DqPfPQfWDNKqhVAUVaW+WlV0OSv7/h6fXblletkQ6MQ fC6Zv/WdAZUhKRJglzsVk12POGu8IEzh245OQYKtE1iQ06FhUcN3Sf139UYxsBmy nBAkj3j9r23lMdt9iXc2hftGcMHfzq3xvz+B3+IuQWDuG+rcs/QcjPrp3FpXJu6N TXSasd7B+uUgSNxVZYVma/krccs= -----END CERTIFICATE-----Generated at Tue Oct 28 08:12:01 2025 by rpki-client