$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer File: 55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer (raw, json) Hash identifier: OGSIIC9Fq1c5uB4DzRszymQRH6GA9ToBcnYxdaKSPe4= Subject key identifier: 55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4A7511D78414B42CF134B450B36CE208551811AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft caRepository: rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 01 Sep 2025 14:08:28 +0000 Certificate not after: Mon 31 Aug 2026 14:13:28 +0000 Subordinate resources: IP: 103.130.4.0/22 IP: 2403:adc0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 09:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:75:11:d7:84:14:b4:2c:f1:34:b4:50:b3:6c:e2:08:55:18:11:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 1 14:08:28 2025 GMT Not After : Aug 31 14:13:28 2026 GMT Subject: CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:db:be:d8:6b:bb:65:20:94:31:af:6e:7c:46: 24:81:2e:5a:f8:58:2f:3a:33:02:98:5a:60:bf:6b: c9:6d:c1:71:a7:21:f4:68:13:36:c2:33:94:ca:da: f2:4c:d6:ac:7b:dd:73:19:68:36:93:22:81:cc:f5: 4b:b9:d1:ae:4c:df:f8:4a:20:53:9a:2a:f7:b4:ef: 16:b2:c7:fb:61:9d:31:36:b5:ed:a0:3a:0d:53:f4: 75:41:39:02:f8:c1:e9:c4:44:f0:65:e1:d5:af:1a: 36:ce:c6:36:b6:b8:4f:e1:2c:2b:4d:7c:2f:94:78: 0c:76:cf:5a:b3:40:a1:b9:6b:7f:e1:d8:76:48:ea: a1:d3:91:04:37:56:97:9b:d9:0c:0c:a9:4e:76:b3: df:f4:02:61:6c:2e:97:90:0e:d5:cc:20:f3:38:88: d1:86:79:97:7a:fe:6c:51:e4:c7:75:9f:f4:d4:75: 02:7c:61:42:7b:63:4c:82:e4:3f:7a:8f:6a:ac:3a: 0a:d4:cd:9b:6b:67:07:04:fc:7a:18:4a:52:7a:fa: ae:ca:db:67:e2:a0:11:57:b2:2e:5b:61:c5:92:cb: 4c:95:11:a3:9b:f3:4c:73:b0:e3:46:c6:1a:ad:d8: 19:4a:38:64:7d:65:f0:4a:2c:1c:98:fa:c4:73:22: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.130.4.0/22 IPv6: 2403:adc0::/32 Signature Algorithm: sha256WithRSAEncryption 12:f9:0a:48:dd:65:8f:c2:0c:f8:4a:16:40:f0:a1:16:79:c0: 5a:c1:1a:f9:e0:c1:e2:8b:fc:b9:92:b9:1b:34:e5:59:25:1a: 06:52:c6:07:97:f3:3a:1e:b7:7e:0e:af:1f:9d:f6:1f:ad:e3: 1c:fd:8c:af:c4:5a:13:17:97:45:84:4c:73:77:15:fd:55:97: 80:d5:e9:dc:36:69:a5:d5:4c:8b:29:32:28:cb:a6:fd:84:66: a6:6c:b6:70:08:80:2e:a8:fe:c0:34:9a:f0:b0:cc:3b:4f:6c: d5:7c:7b:c5:c1:6d:c9:58:99:11:16:4e:d8:c1:14:3c:69:14: 8d:cb:c1:6c:52:23:21:f2:3e:20:25:a6:1e:f9:3b:e1:15:7b: eb:cd:b2:be:fb:b9:f5:f8:e9:ef:58:d2:49:59:6e:b8:30:65: eb:6e:9b:bd:31:b2:75:d9:6f:53:b7:24:2c:12:d9:97:c2:a5: 86:d2:b3:e2:84:cc:a1:c6:8b:de:69:96:e1:79:c1:d9:ca:d3: 03:0b:53:a3:fa:73:2a:0b:4b:57:a3:0f:e9:98:2b:a4:0d:42: a8:6e:c0:2b:a3:a4:77:dd:5f:ff:9c:75:8e:c0:09:4f:09:40: a5:c7:58:ad:50:5f:b8:a5:66:8a:22:50:8c:e4:c9:02:3f:e2: db:cb:ea:3e -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUSnUR14QUtCzxNLRQs2ziCFUYEa0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkwMTE0MDgyOFoX DTI2MDgzMTE0MTMyOFowMzExMC8GA1UEAxMoNTVDN0E1RDU2Q0VDMTMxNkNGRTY2 MEM3OUMwMkMxNkZDRTM4MTAyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLbvthru2UglDGvbnxGJIEuWvhYLzozAphaYL9ryW3Bcach9GgTNsIzlMra 8kzWrHvdcxloNpMigcz1S7nRrkzf+EogU5oq97TvFrLH+2GdMTa17aA6DVP0dUE5 AvjB6cRE8GXh1a8aNs7GNra4T+EsK018L5R4DHbPWrNAoblrf+HYdkjqodORBDdW l5vZDAypTnaz3/QCYWwul5AO1cwg8ziI0YZ5l3r+bFHkx3Wf9NR1AnxhQntjTILk P3qPaqw6CtTNm2tnBwT8ehhKUnr6rsrbZ+KgEVeyLlthxZLLTJURo5vzTHOw40bG Gq3YGUo4ZH1l8EosHJj6xHMijbMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFXHpdVs7BMWz+Zgx5wCwW/OOBAqMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMjllMDYzNi0xZmUyLTRkM2ItOGMzOC0yZGJiOTkxNGU5MTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyOWUwNjM2 LTFmZTItNGQzYi04YzM4LTJkYmI5OTE0ZTkxMy8wLzU1QzdBNUQ1NkNFQzEzMTZD RkU2NjBDNzlDMDJDMTZGQ0UzODEwMkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnggQwDQQCAAIwBwMFACQDrcAwDQYJKoZIhvcNAQELBQADggEBABL5CkjdZY/C DPhKFkDwoRZ5wFrBGvngweKL/LmSuRs05VklGgZSxgeX8zoet34Orx+d9h+t4xz9 jK/EWhMXl0WETHN3Ff1Vl4DV6dw2aaXVTIspMijLpv2EZqZstnAIgC6o/sA0mvCw zDtPbNV8e8XBbclYmREWTtjBFDxpFI3LwWxSIyHyPiAlph75O+EVe+vNsr77ufX4 6e9Y0klZbrgwZetum70xsnXZb1O3JCwS2ZfCpYbSs+KEzKHGi95pluF5wdnK0wML U6P6cyoLS1ejD+mYK6QNQqhuwCujpHfdX/+cdY7ACU8JQKXHWK1QX7ilZooiUIzk yQI/4tvL6j4= -----END CERTIFICATE-----Generated at Fri Sep 5 08:14:20 2025 by rpki-client