$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/510BADD365AB1A82795AF2361991094E4847999C.cer File: 510BADD365AB1A82795AF2361991094E4847999C.cer (raw, json) Hash identifier: mWclB/f+PYEUbeTC5EnxhbLr7XP0XVg1seo0XsBjGJc= Subject key identifier: 51:0B:AD:D3:65:AB:1A:82:79:5A:F2:36:19:91:09:4E:48:47:99:9C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4515E8719EAD6AB5E055FFF8690ECD94A2ED8844 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.mft caRepository: rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 28 Jun 2025 19:54:50 +0000 Certificate not after: Sat 27 Jun 2026 19:59:50 +0000 Subordinate resources: IP: 103.225.209.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 09:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:15:e8:71:9e:ad:6a:b5:e0:55:ff:f8:69:0e:cd:94:a2:ed:88:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 28 19:54:50 2025 GMT Not After : Jun 27 19:59:50 2026 GMT Subject: CN=510BADD365AB1A82795AF2361991094E4847999C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ba:67:77:ef:5c:4c:6a:ba:44:6b:74:83:6f: f9:07:06:c3:15:4b:a8:2e:bc:d3:c9:2b:50:82:84: c4:a5:d6:e7:86:93:51:0d:2d:4e:e5:65:dc:93:d7: 13:27:c3:cf:d0:56:c2:cd:ac:45:6a:08:d2:81:c5: 92:43:60:c1:b2:f4:ea:a0:93:6f:4e:08:4b:44:a3: 5b:94:48:24:8d:48:88:25:39:3a:f8:97:68:64:fe: ec:13:f0:bd:cf:e0:57:f6:a7:fe:32:0a:77:9a:7b: b3:42:f2:a2:6a:d9:da:08:66:8c:1b:8f:01:a1:ec: a7:15:80:9e:bc:8d:88:62:28:ba:9b:17:5e:f7:07: c2:91:1f:36:92:5f:0d:ec:0c:1f:88:61:b1:46:a3: 06:40:17:66:67:a0:94:d5:64:18:de:33:44:59:6a: 49:a3:52:63:b5:c5:7a:0d:a0:81:92:ff:a7:cd:a9: 60:3d:b3:14:a3:2f:39:88:08:8c:3d:07:ae:d1:8c: 55:75:8c:70:f6:b2:78:fb:8f:f9:15:11:7f:b8:13: dd:01:16:14:12:93:65:4c:b3:83:1e:55:29:01:27: d7:18:04:3d:06:af:75:d3:9b:f4:c9:76:76:f4:a5: fa:96:2d:f9:d1:96:7e:bf:88:8a:36:f8:b3:ab:e3: 54:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:0B:AD:D3:65:AB:1A:82:79:5A:F2:36:19:91:09:4E:48:47:99:9C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8e4baa72-654f-4b80-8fc7-f3f27bcdd340/0/510BADD365AB1A82795AF2361991094E4847999C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.225.209.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:11:e4:23:d6:01:7e:1f:4f:f4:ac:5f:58:03:76:1d:a7:13: a8:55:bf:e3:d6:a2:5d:4b:f9:0f:a8:37:82:bf:4f:f0:87:08: f1:e4:11:1d:9b:4b:a2:ae:07:d1:48:57:b5:ca:8a:98:98:82: 94:30:e2:38:d8:4d:15:56:f9:45:ec:d1:62:c3:23:8d:f2:61: 3a:d4:25:51:bc:5f:b2:3c:1a:e9:e4:a8:58:05:3b:0b:56:a5: c0:3d:66:30:94:b8:26:cf:51:88:57:08:bd:cc:df:05:58:e0: a0:96:66:4a:eb:98:e0:1f:72:51:71:28:de:ce:41:21:e4:57: 0d:6c:21:01:3f:26:bc:25:63:e7:15:bf:fb:7d:17:cf:df:d7: 9d:47:11:dd:8f:5d:45:bf:b2:05:32:c1:0a:0f:70:76:2c:8e: 74:c1:e6:b6:ba:33:b6:e4:64:70:0b:91:fa:15:33:e0:15:67: e5:1f:9e:de:e1:be:9a:f8:04:ec:0e:e0:78:a0:9f:b7:75:23: 05:26:37:52:38:e3:42:4b:f5:c0:27:e9:70:1a:e8:6d:8a:40: 12:58:20:93:8c:89:af:89:45:9c:31:d5:bd:09:30:ff:2b:75: fd:f3:88:70:bb:9e:fa:63:ef:db:8a:ca:05:8a:2a:9b:5a:3e: 5b:17:80:3e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURRXocZ6tarXgVf/4aQ7NlKLtiEQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYyODE5NTQ1MFoX DTI2MDYyNzE5NTk1MFowMzExMC8GA1UEAxMoNTEwQkFERDM2NUFCMUE4Mjc5NUFG MjM2MTk5MTA5NEU0ODQ3OTk5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANu6Z3fvXExqukRrdINv+QcGwxVLqC6808krUIKExKXW54aTUQ0tTuVl3JPX EyfDz9BWws2sRWoI0oHFkkNgwbL06qCTb04IS0SjW5RIJI1IiCU5OviXaGT+7BPw vc/gV/an/jIKd5p7s0LyomrZ2ghmjBuPAaHspxWAnryNiGIoupsXXvcHwpEfNpJf DewMH4hhsUajBkAXZmeglNVkGN4zRFlqSaNSY7XFeg2ggZL/p82pYD2zFKMvOYgI jD0HrtGMVXWMcPayePuP+RURf7gT3QEWFBKTZUyzgx5VKQEn1xgEPQavddOb9Ml2 dvSl+pYt+dGWfr+Iijb4s6vjVJ0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFELrdNlqxqCeVryNhmRCU5IR5mcMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84ZTRiYWE3Mi02NTRmLTRiODAtOGZjNy1mM2YyN2JjZGQzNDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhlNGJhYTcy LTY1NGYtNGI4MC04ZmM3LWYzZjI3YmNkZDM0MC8wLzUxMEJBREQzNjVBQjFBODI3 OTVBRjIzNjE5OTEwOTRFNDg0Nzk5OUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn4dEwDQYJKoZIhvcNAQELBQADggEBAIsR5CPWAX4fT/SsX1gDdh2nE6hVv+PW ol1L+Q+oN4K/T/CHCPHkER2bS6KuB9FIV7XKipiYgpQw4jjYTRVW+UXs0WLDI43y YTrUJVG8X7I8GunkqFgFOwtWpcA9ZjCUuCbPUYhXCL3M3wVY4KCWZkrrmOAfclFx KN7OQSHkVw1sIQE/JrwlY+cVv/t9F8/f151HEd2PXUW/sgUywQoPcHYsjnTB5ra6 M7bkZHALkfoVM+AVZ+Ufnt7hvpr4BOwO4Hign7d1IwUmN1I440JL9cAn6XAa6G2K QBJYIJOMia+JRZwx1b0JMP8rdf3ziHC7nvpj79uKygWKKptaPlsXgD4= -----END CERTIFICATE-----Generated at Sun Nov 2 06:58:50 2025 by rpki-client