$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/516450A151C5487FCC5911F4C18941CA895B07A5.cer File: 516450A151C5487FCC5911F4C18941CA895B07A5.cer (raw, json) Hash identifier: z0bTAh7b0IVbe6Ns7cGXs5wAIKy2cUh086S5aldpVZU= Subject key identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 17429A7798807FFA13FBEABC611B0D8209F0C884 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft caRepository: rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 28 Jun 2025 16:37:38 +0000 Certificate not after: Sat 27 Jun 2026 16:42:38 +0000 Subordinate resources: IP: 103.144.18.0/23 IP: 2405:62c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 17:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:42:9a:77:98:80:7f:fa:13:fb:ea:bc:61:1b:0d:82:09:f0:c8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 28 16:37:38 2025 GMT Not After : Jun 27 16:42:38 2026 GMT Subject: CN=516450A151C5487FCC5911F4C18941CA895B07A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f7:59:5f:f2:32:1f:e0:4a:f9:c2:e1:62:54: 9f:c9:ea:86:7b:2b:34:57:93:2e:a6:bc:19:79:d1: 75:85:4f:d8:27:a8:f4:34:cb:46:5c:6e:06:e3:b6: 1d:38:f2:7d:cf:aa:3e:f9:cf:f1:5b:09:e5:48:f6: 19:11:e9:ba:a7:38:2c:17:8a:b0:e7:0c:ce:8a:5c: 6e:fe:44:7e:41:cc:fd:2d:0c:3f:f8:9d:22:b7:0e: 75:c1:d8:8b:0a:ea:c7:d9:87:50:51:15:0b:4b:60: 9a:91:74:3d:d2:f3:89:a8:8f:db:5d:36:50:98:c6: 63:28:c8:74:25:bc:89:2a:12:39:f7:e8:18:de:94: 1e:b3:57:6d:94:43:f5:9c:82:02:c7:d2:c1:ff:0e: f1:b4:a9:a5:82:eb:b2:b4:88:fa:7e:6b:12:3b:6a: 80:6d:e8:18:3a:d0:0b:60:07:a7:ed:f2:89:c8:e7: 68:33:4d:fe:3a:4f:6c:14:09:c8:86:28:7d:1d:1c: 4c:61:23:92:9d:3a:eb:14:f5:9f:5c:a2:07:ff:0a: df:c8:ae:d8:e8:7c:ad:43:06:16:84:39:cb:8f:08: 2b:3a:91:52:3a:92:7e:ac:72:15:ee:fc:4f:28:83: a9:4b:aa:b1:d3:be:14:c3:1f:7f:71:67:7e:b1:d0: 40:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 51:64:50:A1:51:C5:48:7F:CC:59:11:F4:C1:89:41:CA:89:5B:07:A5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ad598e99-e9ff-4abe-b08e-226fdd07f9ae/0/516450A151C5487FCC5911F4C18941CA895B07A5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.18.0/23 IPv6: 2405:62c0::/32 Signature Algorithm: sha256WithRSAEncryption 2e:2b:26:d6:89:a9:d0:f5:2f:91:2b:56:b9:a0:b7:c6:49:e3: a9:98:7a:2c:d1:5d:68:fa:75:7b:11:c1:77:04:59:8b:b2:ae: e1:f7:d2:44:b4:a5:93:e9:df:1d:2d:9f:32:b6:c0:53:f8:38: 6a:4e:6b:cb:e6:c8:99:3b:38:ad:66:2c:06:be:f1:5c:5f:b3: 8f:f7:b7:6e:ee:81:5f:a1:e5:9c:5c:89:ec:9d:cd:88:59:e2: 4f:42:4c:48:5c:8f:ba:0a:bf:51:c5:ea:fb:a0:35:f1:2f:8c: f8:61:5e:74:25:c6:eb:9b:a2:e8:b0:48:b0:80:4a:0c:8c:a9: 17:71:58:dd:91:68:b4:4e:c2:14:2b:bb:d5:37:40:ce:5b:6a: aa:b4:f3:96:02:8e:e6:4d:ef:9a:88:25:01:2c:17:19:95:cf: 5b:7d:77:52:95:ad:7f:16:0b:32:56:19:1d:1d:15:3f:9a:90: 1f:c0:f4:72:16:11:ab:d9:f4:d3:c3:3c:eb:c7:41:8c:00:9f: 00:2b:3c:73:f8:31:03:a8:ad:aa:39:62:29:3e:6c:cd:65:eb: 27:89:50:1f:f8:ef:d1:e1:61:07:dd:d0:bc:71:8b:33:99:77: 8b:4f:39:88:98:eb:5b:12:a8:3f:df:15:24:a7:3d:b9:0d:e1: 26:fe:c5:a0 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUF0Kad5iAf/oT++q8YRsNggnwyIQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYyODE2MzczOFoX DTI2MDYyNzE2NDIzOFowMzExMC8GA1UEAxMoNTE2NDUwQTE1MUM1NDg3RkNDNTkx MUY0QzE4OTQxQ0E4OTVCMDdBNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOT3WV/yMh/gSvnC4WJUn8nqhnsrNFeTLqa8GXnRdYVP2Ceo9DTLRlxuBuO2 HTjyfc+qPvnP8VsJ5Uj2GRHpuqc4LBeKsOcMzopcbv5EfkHM/S0MP/idIrcOdcHY iwrqx9mHUFEVC0tgmpF0PdLziaiP2102UJjGYyjIdCW8iSoSOffoGN6UHrNXbZRD 9ZyCAsfSwf8O8bSppYLrsrSI+n5rEjtqgG3oGDrQC2AHp+3yicjnaDNN/jpPbBQJ yIYofR0cTGEjkp066xT1n1yiB/8K38iu2Oh8rUMGFoQ5y48IKzqRUjqSfqxyFe78 TyiDqUuqsdO+FMMff3FnfrHQQHcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFFkUKFRxUh/zFkR9MGJQcqJWwelMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZDU5OGU5OS1lOWZmLTRhYmUtYjA4ZS0yMjZmZGQwN2Y5YWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkNTk4ZTk5 LWU5ZmYtNGFiZS1iMDhlLTIyNmZkZDA3ZjlhZS8wLzUxNjQ1MEExNTFDNTQ4N0ZD QzU5MTFGNEMxODk0MUNBODk1QjA3QTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnkBIwDQQCAAIwBwMFACQFYsAwDQYJKoZIhvcNAQELBQADggEBAC4rJtaJqdD1 L5ErVrmgt8ZJ46mYeizRXWj6dXsRwXcEWYuyruH30kS0pZPp3x0tnzK2wFP4OGpO a8vmyJk7OK1mLAa+8Vxfs4/3t27ugV+h5ZxcieydzYhZ4k9CTEhcj7oKv1HF6vug NfEvjPhhXnQlxuubouiwSLCASgyMqRdxWN2RaLROwhQru9U3QM5baqq085YCjuZN 75qIJQEsFxmVz1t9d1KVrX8WCzJWGR0dFT+akB/A9HIWEavZ9NPDPOvHQYwAnwAr PHP4MQOorao5Yik+bM1l6yeJUB/479HhYQfd0LxxizOZd4tPOYiY61sSqD/fFSSn PbkN4Sb+xaA= -----END CERTIFICATE-----Generated at Tue Oct 28 16:05:47 2025 by rpki-client