$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer File: 25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.cer (raw, json) Hash identifier: m24tLsKQSoZPHDRUFbjz69svlIpbqrFxx5fQC+2HkLo= Subject key identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3BCBCCA473C5FB91A59E34252426555C41AAE357 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft caRepository: rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 10:33:57 +0000 Certificate not after: Tue 02 Jun 2026 10:38:57 +0000 Subordinate resources: IP: 103.126.8.0/22 IP: 2404:40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:cb:cc:a4:73:c5:fb:91:a5:9e:34:25:24:26:55:5c:41:aa:e3:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 10:33:57 2025 GMT Not After : Jun 2 10:38:57 2026 GMT Subject: CN=25FB03D0A2C3547C3A38ACAE2A752BB15A245E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:cf:ae:fc:fe:61:bf:0f:f9:c2:c3:86:03:fc: a2:4a:e5:26:31:2a:41:a2:02:ca:1e:25:9e:4d:0c: 5b:6c:05:a7:bc:c1:95:a5:df:20:3b:3c:a0:1b:cc: da:56:24:4c:ce:a2:e0:1a:c6:5e:de:c3:99:26:96: a8:1d:95:f1:ac:ff:41:ef:f4:f7:52:78:ca:13:2f: dd:fd:60:00:ad:de:65:ca:0a:a9:0d:8c:f8:97:c9: d2:0f:60:1a:0f:95:8f:db:f9:2e:4f:fb:a2:05:aa: 74:e2:01:e5:44:9f:8b:77:50:aa:56:ff:95:5b:ec: 77:16:a2:bc:6f:ee:d6:04:e6:8a:52:80:92:75:43: 32:d9:8f:6f:59:a3:d7:46:c8:db:92:c1:e6:0b:9e: 71:58:4f:03:38:e7:07:4d:da:0b:10:96:c7:b0:a3: b8:df:80:15:4e:b9:be:8f:03:09:00:2d:1d:17:b9: b0:11:cb:dd:82:68:75:cc:52:0b:48:c6:1d:a6:bf: 36:b0:43:09:00:13:15:04:34:15:c1:f0:ea:aa:eb: 32:6a:6f:ce:3c:e0:f2:15:2c:3d:e6:fe:0b:e3:47: 37:22:21:81:8a:9d:f3:51:46:44:78:ef:0f:4a:ab: d1:42:a9:3f:c3:5d:7a:38:7e:f8:d7:63:4c:23:6d: 42:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:FB:03:D0:A2:C3:54:7C:3A:38:AC:AE:2A:75:2B:B1:5A:24:5E:15 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/018c6831-8f40-4a20-813e-878558e80c26/0/25FB03D0A2C3547C3A38ACAE2A752BB15A245E15.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.8.0/22 IPv6: 2404:40::/32 Signature Algorithm: sha256WithRSAEncryption 1d:ab:56:24:eb:c6:9b:9c:a4:05:27:38:fa:6c:a4:75:dc:f2: 45:b0:55:69:9c:1d:21:51:37:b6:8f:8b:4a:07:50:b6:7c:57: 57:8a:eb:3a:94:c1:af:47:58:6e:a8:c3:9d:5c:65:0e:a6:fc: 88:88:d8:ad:bb:33:2e:15:4a:e3:2d:50:46:f6:18:f1:01:9d: 40:f0:62:3c:e4:30:b2:b9:f2:5c:53:d7:e0:3a:e9:d8:1f:d0: b4:8e:3f:48:65:d2:9f:71:bc:61:85:54:89:d4:28:a1:a8:b7: e2:32:d1:7f:e8:1f:68:d0:d2:6e:51:79:57:5b:3e:de:1f:3b: 7b:e0:90:c9:05:22:21:30:3a:fe:ad:7f:59:ca:4c:d9:33:3d: 71:77:96:96:99:0f:6e:06:58:12:aa:8b:93:dc:d9:03:82:46: 0b:ba:24:4e:c7:9e:9d:1f:46:49:a4:6c:f3:2c:20:af:7d:ca: f1:c3:9a:5a:e2:bc:87:d4:65:9c:d6:bd:0b:97:51:35:08:d3: db:1f:1b:ce:df:cb:2c:ee:74:f5:df:92:72:76:cc:8b:32:e1: 5e:b8:22:ec:1a:2f:cf:82:83:5e:10:b4:a4:14:66:fa:89:e9: d1:38:63:73:d8:ae:56:3b:01:9f:ac:1d:04:e7:44:d9:dc:00: 7d:60:14:03 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUO8vMpHPF+5GlnjQlJCZVXEGq41cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzEwMzM1N1oX DTI2MDYwMjEwMzg1N1owMzExMC8GA1UEAxMoMjVGQjAzRDBBMkMzNTQ3QzNBMzhB Q0FFMkE3NTJCQjE1QTI0NUUxNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLPrvz+Yb8P+cLDhgP8okrlJjEqQaICyh4lnk0MW2wFp7zBlaXfIDs8oBvM 2lYkTM6i4BrGXt7DmSaWqB2V8az/Qe/091J4yhMv3f1gAK3eZcoKqQ2M+JfJ0g9g Gg+Vj9v5Lk/7ogWqdOIB5USfi3dQqlb/lVvsdxaivG/u1gTmilKAknVDMtmPb1mj 10bI25LB5guecVhPAzjnB03aCxCWx7CjuN+AFU65vo8DCQAtHRe5sBHL3YJodcxS C0jGHaa/NrBDCQATFQQ0FcHw6qrrMmpvzjzg8hUsPeb+C+NHNyIhgYqd81FGRHjv D0qr0UKpP8Ndejh++NdjTCNtQtkCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCX7A9Ciw1R8Ojisrip1K7FaJF4VMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMThjNjgzMS04ZjQwLTRhMjAtODEzZS04Nzg1NThlODBjMjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAxOGM2ODMx LThmNDAtNGEyMC04MTNlLTg3ODU1OGU4MGMyNi8wLzI1RkIwM0QwQTJDMzU0N0Mz QTM4QUNBRTJBNzUyQkIxNUEyNDVFMTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnfggwDQQCAAIwBwMFACQEAEAwDQYJKoZIhvcNAQELBQADggEBAB2rViTrxpuc pAUnOPpspHXc8kWwVWmcHSFRN7aPi0oHULZ8V1eK6zqUwa9HWG6ow51cZQ6m/IiI 2K27My4VSuMtUEb2GPEBnUDwYjzkMLK58lxT1+A66dgf0LSOP0hl0p9xvGGFVInU KKGot+Iy0X/oH2jQ0m5ReVdbPt4fO3vgkMkFIiEwOv6tf1nKTNkzPXF3lpaZD24G WBKqi5Pc2QOCRgu6JE7Hnp0fRkmkbPMsIK99yvHDmlrivIfUZZzWvQuXUTUI09sf G87fyyzudPXfknJ2zIsy4V64IuwaL8+Cg14QtKQUZvqJ6dE4Y3PYrlY7AZ+sHQTn RNncAH1gFAM= -----END CERTIFICATE-----Generated at Wed Jun 4 00:04:20 2025 by rpki-client