$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer File: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer (raw, json) Hash identifier: KqgKcE50dGYbTxx2fSXvE5aeqFt4asZswXFRGU9wMh8= Subject key identifier: 40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 55EDD0C3E9089E92C191FC4ED37071C8D95D95E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft caRepository: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 12 May 2025 17:55:37 +0000 Certificate not after: Mon 11 May 2026 18:00:37 +0000 Subordinate resources: IP: 103.14.231.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 06:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ed:d0:c3:e9:08:9e:92:c1:91:fc:4e:d3:70:71:c8:d9:5d:95:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 12 17:55:37 2025 GMT Not After : May 11 18:00:37 2026 GMT Subject: CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:73:a1:53:f6:e9:58:da:7c:18:96:43:1c: 00:e6:50:8e:f1:00:ca:22:e9:b5:6d:2d:05:c0:f8: 9f:ad:b6:b3:b9:69:57:8b:60:b6:73:8e:89:60:3e: 71:26:75:4b:fc:c2:2f:de:12:81:21:f2:7a:91:32: 10:c7:e2:d4:38:54:2d:53:54:9c:81:7d:4a:41:2e: 3c:25:5b:6f:c4:35:5f:ed:a2:07:1a:86:6e:03:e0: 11:5b:02:aa:c4:1b:d3:a3:a9:51:5d:2a:98:26:02: bf:b3:dc:0f:f5:ff:d4:07:d0:f2:06:43:50:9e:ef: 3b:25:f4:54:95:f5:e1:4c:05:70:6b:7b:7b:8e:45: b1:62:36:57:64:47:2f:9d:1a:4b:f8:e4:2b:97:1d: 1e:e3:05:6f:18:94:e4:12:34:1e:74:21:20:ed:65: 24:83:fb:ac:54:53:32:1c:4f:b3:1f:29:31:85:4c: 9a:03:26:2f:2d:a5:4e:99:58:bd:4c:8f:87:c5:c1: 8e:02:83:dd:8d:96:b8:59:3b:0c:58:33:fc:60:cf: c7:9e:03:e3:d1:23:84:2c:f3:c1:e1:b0:59:7d:9a: f7:d2:27:a2:35:11:52:b5:90:92:aa:8f:42:65:e4: 61:a7:6e:fe:53:e5:ec:37:e1:e9:aa:22:25:a7:4b: 4d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.14.231.0/24 Signature Algorithm: sha256WithRSAEncryption 55:16:5c:e1:14:dc:02:e4:f0:98:33:36:91:05:c4:bf:62:08: 1d:90:91:f4:3c:ff:6d:f2:51:cd:15:47:5b:76:1a:6c:4e:d1: e9:f2:20:a6:45:32:09:ca:0f:9d:94:c4:be:09:6f:ea:2a:9b: 04:f7:0a:2c:86:7d:80:97:8e:bb:53:27:51:7d:45:96:48:32: 48:77:49:bc:90:c7:ec:06:b7:31:fd:c3:08:88:01:eb:c5:ee: a0:29:53:a8:fb:29:2f:3d:30:c0:5f:cb:40:aa:cd:d3:9d:75: a3:07:0e:57:d2:8f:7e:b2:88:6d:58:53:cb:d7:4d:c0:9e:bc: b5:3b:66:3b:44:74:3a:4c:ec:21:87:d9:30:1c:59:b8:ca:2f: 23:d2:79:c7:1a:e6:6f:70:5b:e1:7c:48:7e:48:ba:13:29:82: 41:fe:73:19:69:1e:03:14:15:84:3c:23:78:dd:9a:45:7d:7c: 53:27:ae:39:e3:40:41:14:00:44:0e:6f:8d:65:8d:ca:56:73: 7a:79:f4:d8:df:ba:87:1e:22:9a:2d:95:65:c0:6b:5a:f8:35: be:06:83:f9:a5:e6:ce:3b:00:97:00:fa:2f:6c:a6:e7:61:ba: a6:88:49:b8:91:c1:b4:0d:e9:53:7e:61:c6:8e:92:16:9c:39: 7f:3e:4b:a9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVe3Qw+kInpLBkfxO03BxyNldlecwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUxMjE3NTUzN1oX DTI2MDUxMTE4MDAzN1owMzExMC8GA1UEAxMoNDA3MDZBNUNDRkE4OTZDOEVFMEMx RjlBNUI2RENEQTE5MTVBQzc2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbbc6FT9ulY2nwYlkMcAOZQjvEAyiLptW0tBcD4n622s7lpV4tgtnOOiWA+ cSZ1S/zCL94SgSHyepEyEMfi1DhULVNUnIF9SkEuPCVbb8Q1X+2iBxqGbgPgEVsC qsQb06OpUV0qmCYCv7PcD/X/1AfQ8gZDUJ7vOyX0VJX14UwFcGt7e45FsWI2V2RH L50aS/jkK5cdHuMFbxiU5BI0HnQhIO1lJIP7rFRTMhxPsx8pMYVMmgMmLy2lTplY vUyPh8XBjgKD3Y2WuFk7DFgz/GDPx54D49EjhCzzweGwWX2a99InojURUrWQkqqP QmXkYadu/lPl7Dfh6aoiJadLTW0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEBwalzPqJbI7gwfmlttzaGRWsdtMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZGY0Mjk2Zi0xY2E5LTQ1ZmMtYmIwOC04NDEzNWViMDBmYTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkZjQyOTZm LTFjYTktNDVmYy1iYjA4LTg0MTM1ZWIwMGZhNy8wLzQwNzA2QTVDQ0ZBODk2QzhF RTBDMUY5QTVCNkRDREExOTE1QUM3NkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnDucwDQYJKoZIhvcNAQELBQADggEBAFUWXOEU3ALk8JgzNpEFxL9iCB2QkfQ8 /23yUc0VR1t2GmxO0enyIKZFMgnKD52UxL4Jb+oqmwT3CiyGfYCXjrtTJ1F9RZZI Mkh3SbyQx+wGtzH9wwiIAevF7qApU6j7KS89MMBfy0CqzdOddaMHDlfSj36yiG1Y U8vXTcCevLU7ZjtEdDpM7CGH2TAcWbjKLyPSecca5m9wW+F8SH5IuhMpgkH+cxlp HgMUFYQ8I3jdmkV9fFMnrjnjQEEUAEQOb41ljcpWc3p59NjfuoceIpotlWXAa1r4 Nb4Gg/ml5s47AJcA+i9spudhuqaISbiRwbQN6VN+YcaOkhacOX8+S6k= -----END CERTIFICATE-----Generated at Mon Jun 2 06:36:57 2025 by rpki-client