$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2D0745D26E59440CB71FAFE996834493DA753248.cer File: 2D0745D26E59440CB71FAFE996834493DA753248.cer (raw, json) Hash identifier: sJ2co2vAMAZa3Vn3ZGZZQPqKZAJ7NPDyuWUfs6jvGic= Subject key identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5A6C98AC08A69AF4EA45405F79B2C8ED4B9C0879 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft caRepository: rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 08 Aug 2025 01:13:07 +0000 Certificate not after: Fri 07 Aug 2026 01:18:07 +0000 Subordinate resources: IP: 103.73.158.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 14:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:6c:98:ac:08:a6:9a:f4:ea:45:40:5f:79:b2:c8:ed:4b:9c:08:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 8 01:13:07 2025 GMT Not After : Aug 7 01:18:07 2026 GMT Subject: CN=2D0745D26E59440CB71FAFE996834493DA753248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:97:b0:88:fc:a3:11:f9:06:1e:60:5f:80:79: b4:cb:7d:4b:80:77:cc:29:7a:08:0c:0e:fd:62:94: c7:58:e8:f1:81:10:ca:e0:5d:a3:1c:c2:5a:87:f5: b0:c4:db:3c:ee:b3:78:4b:b3:db:7b:48:72:5f:9e: dc:60:4e:2e:a1:0d:c7:44:ea:5f:01:fd:02:cb:38: 35:97:a2:b0:75:59:13:22:9c:c8:4d:c4:c0:53:15: 6d:d6:b7:f9:7e:0c:05:d4:3d:04:1b:c9:89:52:18: 0a:ca:d4:9e:9e:1e:29:90:6c:65:3f:5f:c7:03:34: 46:1a:79:69:c7:32:05:86:1d:48:7a:59:76:0b:6e: 91:62:80:a4:9b:4a:ac:1a:35:1f:de:41:4a:8c:02: 3a:69:ac:03:00:3f:e6:78:05:0c:c4:80:a2:6e:17: 41:9d:bd:87:84:19:71:db:53:ce:92:df:a0:fb:82: b6:19:ea:2a:28:3c:59:57:20:62:43:67:a2:56:1d: b4:a0:c1:58:de:64:98:22:9a:c5:a2:c0:9c:6a:16: 09:32:2d:4f:53:92:f0:53:bc:ac:3f:0e:18:e7:7f: 17:19:db:da:9f:cd:b0:1a:88:48:b8:f7:88:bd:80: ec:2f:ab:f6:c0:a6:7b:08:bb:60:bc:d6:46:0f:87: 76:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:07:45:D2:6E:59:44:0C:B7:1F:AF:E9:96:83:44:93:DA:75:32:48 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3a406cdb-1791-478d-9d28-9e37a6f809cc/0/2D0745D26E59440CB71FAFE996834493DA753248.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.73.158.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:10:a5:99:67:b9:42:15:ef:f8:11:19:b2:6f:e4:f9:87:5a: 00:ca:b2:e5:81:ce:61:50:5e:44:8d:6a:55:53:d3:4b:22:ef: 8c:1b:99:2d:73:0f:2e:15:8d:52:e5:39:4a:ae:e6:45:c9:fc: f4:38:54:7b:87:0d:95:45:7d:f5:fa:1b:b6:ab:9d:f2:08:ec: 69:03:c0:07:0f:ca:83:9d:33:b0:2f:f8:8f:8f:bd:59:b3:da: 19:7c:f9:67:ad:01:95:bc:0a:e9:73:96:55:a1:88:a3:25:9c: 92:10:6e:bb:d2:70:31:57:a2:7b:72:3e:33:be:b7:b9:4b:34: 3e:0c:dd:7d:69:c0:6b:2d:88:e7:ec:32:f5:c3:42:8a:9e:0b: e0:8e:b0:ca:ae:18:6b:b2:74:45:f6:f6:02:a6:6d:55:ab:18: ed:89:f4:dd:6c:f6:03:17:3c:41:b4:1f:08:e1:27:58:6f:e0: 48:82:a5:87:b9:42:5d:e0:49:15:f8:1d:34:c6:c9:de:9b:55: e0:40:be:50:93:dc:36:46:33:76:4d:9a:8f:c3:3d:f0:8c:8d: cb:c8:6a:e8:46:aa:bc:39:15:78:cc:84:10:32:69:1b:2c:27: 3d:bc:db:22:2e:10:9b:61:3d:0c:cf:04:a5:5e:6f:e3:3c:2d: 8a:c2:de:b6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUWmyYrAimmvTqRUBfebLI7UucCHkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgwODAxMTMwN1oX DTI2MDgwNzAxMTgwN1owMzExMC8GA1UEAxMoMkQwNzQ1RDI2RTU5NDQwQ0I3MUZB RkU5OTY4MzQ0OTNEQTc1MzI0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMeXsIj8oxH5Bh5gX4B5tMt9S4B3zCl6CAwO/WKUx1jo8YEQyuBdoxzCWof1 sMTbPO6zeEuz23tIcl+e3GBOLqENx0TqXwH9Ass4NZeisHVZEyKcyE3EwFMVbda3 +X4MBdQ9BBvJiVIYCsrUnp4eKZBsZT9fxwM0Rhp5accyBYYdSHpZdgtukWKApJtK rBo1H95BSowCOmmsAwA/5ngFDMSAom4XQZ29h4QZcdtTzpLfoPuCthnqKig8WVcg YkNnolYdtKDBWN5kmCKaxaLAnGoWCTItT1OS8FO8rD8OGOd/Fxnb2p/NsBqISLj3 iL2A7C+r9sCmewi7YLzWRg+HdvUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC0HRdJuWUQMtx+v6ZaDRJPadTJIMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zYTQwNmNkYi0xNzkxLTQ3OGQtOWQyOC05ZTM3YTZmODA5Y2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNDA2Y2Ri LTE3OTEtNDc4ZC05ZDI4LTllMzdhNmY4MDljYy8wLzJEMDc0NUQyNkU1OTQ0MENC NzFGQUZFOTk2ODM0NDkzREE3NTMyNDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnSZ4wDQYJKoZIhvcNAQELBQADggEBAIoQpZlnuUIV7/gRGbJv5PmHWgDKsuWB zmFQXkSNalVT00si74wbmS1zDy4VjVLlOUqu5kXJ/PQ4VHuHDZVFffX6G7arnfII 7GkDwAcPyoOdM7Av+I+PvVmz2hl8+WetAZW8CulzllWhiKMlnJIQbrvScDFXonty PjO+t7lLND4M3X1pwGstiOfsMvXDQoqeC+COsMquGGuydEX29gKmbVWrGO2J9N1s 9gMXPEG0HwjhJ1hv4EiCpYe5Ql3gSRX4HTTGyd6bVeBAvlCT3DZGM3ZNmo/DPfCM jcvIauhGqrw5FXjMhBAyaRssJz282yIuEJthPQzPBKVeb+M8LYrC3rY= -----END CERTIFICATE-----Generated at Thu Oct 23 05:52:42 2025 by rpki-client