$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5782DE79396EB62186D082F936F3AB7084CB59CB.cer File: 5782DE79396EB62186D082F936F3AB7084CB59CB.cer (raw, json) Hash identifier: /SlvbqgDsTSzmprBT+ZKrm+NbLxfIbG4yZKemhJJ0fo= Subject key identifier: 57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4C163D0E92A8E1C7746830E75E4170DD6B6609 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.mft caRepository: rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 19:11:31 +0000 Certificate not after: Tue 02 Jun 2026 19:16:31 +0000 Subordinate resources: IP: 103.80.236.0/22 IP: 2001:df7:1a00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:16:3d:0e:92:a8:e1:c7:74:68:30:e7:5e:41:70:dd:6b:66:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 19:11:31 2025 GMT Not After : Jun 2 19:16:31 2026 GMT Subject: CN=5782DE79396EB62186D082F936F3AB7084CB59CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:c9:ff:16:a3:90:ff:1a:ba:a4:ee:b9:06: 1e:11:4b:cf:0a:ab:6f:38:d8:53:29:1c:b6:ac:ae: 95:2f:ec:22:4e:2a:c6:86:a3:76:46:50:61:f5:2c: a5:34:13:be:13:f4:86:58:75:82:5d:23:88:b6:64: ba:ce:0c:2d:f3:5a:1a:58:87:a6:c8:41:a2:a7:76: cd:27:00:49:20:8f:0d:1b:9e:30:50:c8:7e:3b:92: 04:9e:36:15:ea:c7:11:29:7c:d6:e0:d0:7f:b6:45: 95:16:52:0c:0d:27:6e:ce:e0:36:2e:f9:30:49:cb: 07:63:22:05:47:a2:0b:66:c5:cc:ad:e1:c9:01:66: a1:3d:19:b9:01:b4:2b:99:42:a6:e1:e4:a3:2e:84: 3c:f4:6e:48:6a:3e:c6:74:1b:28:f2:30:b2:d9:31: c4:27:19:dd:fd:91:bd:8e:d5:b2:81:aa:65:80:e8: 0f:84:9e:3f:6f:ce:c2:af:fe:68:6a:16:15:38:fe: 71:8c:a9:9d:bc:1a:d6:11:ea:ba:7a:68:76:11:51: c0:9f:67:72:c2:ff:89:ff:ca:43:e9:f3:cd:b5:ea: 6b:36:df:5b:04:ae:8d:c6:cb:27:ea:21:63:7f:ef: 2e:25:1d:55:df:7f:a4:39:77:17:48:0b:58:12:f9: 38:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 57:82:DE:79:39:6E:B6:21:86:D0:82:F9:36:F3:AB:70:84:CB:59:CB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e95f5f11-57ae-4ac3-a039-e0456bccf44c/0/5782DE79396EB62186D082F936F3AB7084CB59CB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.80.236.0/22 IPv6: 2001:df7:1a00::/48 Signature Algorithm: sha256WithRSAEncryption 38:e9:d0:77:f1:59:49:59:02:ed:ea:1d:b2:2f:e7:83:8d:d3: 6e:c5:2a:72:9b:78:d7:2b:32:13:11:e3:4b:a7:64:60:f7:c3: 27:a1:2f:bf:d0:6a:73:84:eb:93:ce:26:ae:3f:cc:d5:da:30: 7f:d3:96:31:4d:d4:be:15:f2:51:46:f3:e4:56:25:a7:3d:87: 1e:5e:7e:09:cf:da:62:91:4a:47:36:fa:23:89:e9:5f:a7:a8: e4:ad:2f:51:51:26:8f:19:5c:2e:cf:bb:c9:72:96:db:ef:c0: 3b:aa:4e:02:56:5f:24:56:c0:22:aa:0a:8d:3e:de:c9:3f:ab: 2a:27:3c:f3:3d:95:9f:50:72:74:7e:50:de:f2:78:ec:00:6a: 62:19:ac:cc:0d:0d:ac:eb:4b:b3:ba:af:ea:b2:77:50:fc:66: 9a:94:ae:1a:bb:89:0e:6b:d5:b8:db:f7:da:f8:f6:48:d6:eb: b5:53:d5:c6:84:f3:5d:54:55:2e:35:13:3d:7a:37:da:ee:74: 35:d9:fa:de:dc:d5:ec:2d:89:d1:04:69:4b:c4:e8:fa:fe:fd: a4:5e:1b:2b:be:c1:2e:be:03:90:84:ec:9f:ab:b1:16:e9:c8: 09:3c:8e:50:f7:af:86:97:9c:9b:a6:e0:80:57:95:08:5d:e9: 51:3d:56:b0 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgITTBY9DpKo4cd0aDDnXkFw3WtmCTANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjUwNjAzMTkxMTMxWhcN MjYwNjAyMTkxNjMxWjAzMTEwLwYDVQQDEyg1NzgyREU3OTM5NkVCNjIxODZEMDgy RjkzNkYzQUI3MDg0Q0I1OUNCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6jJ/xajkP8auqTuuQYeEUvPCqtvONhTKRy2rK6VL+wiTirGhqN2RlBh9Syl NBO+E/SGWHWCXSOItmS6zgwt81oaWIemyEGip3bNJwBJII8NG54wUMh+O5IEnjYV 6scRKXzW4NB/tkWVFlIMDSduzuA2LvkwScsHYyIFR6ILZsXMreHJAWahPRm5AbQr mUKm4eSjLoQ89G5Iaj7GdBso8jCy2THEJxnd/ZG9jtWygaplgOgPhJ4/b87Cr/5o ahYVOP5xjKmdvBrWEeq6emh2EVHAn2dywv+J/8pD6fPNteprNt9bBK6Nxssn6iFj f+8uJR1V33+kOXcXSAtYEvk4SwIDAQABo4ICyTCCAsUwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUV4LeeTlutiGG0IL5NvOrcITLWcswHwYDVR0jBBgwFoAUuo93 0h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIv QkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgzMzc2Qi5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvdW85 MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L2U5NWY1ZjExLTU3YWUtNGFjMy1hMDM5LWUwNDU2YmNjZjQ0Yy8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk1ZjVmMTEt NTdhZS00YWMzLWEwMzktZTA0NTZiY2NmNDRjLzAvNTc4MkRFNzkzOTZFQjYyMTg2 RDA4MkY5MzZGM0FCNzA4NENCNTlDQi5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgME AmdQ7DAPBAIAAjAJAwcAIAEN9xoAMA0GCSqGSIb3DQEBCwUAA4IBAQA46dB38VlJ WQLt6h2yL+eDjdNuxSpym3jXKzITEeNLp2Rg98MnoS+/0GpzhOuTziauP8zV2jB/ 05YxTdS+FfJRRvPkViWnPYceXn4Jz9pikUpHNvojielfp6jkrS9RUSaPGVwuz7vJ cpbb78A7qk4CVl8kVsAiqgqNPt7JP6sqJzzzPZWfUHJ0flDe8njsAGpiGazMDQ2s 60uzuq/qsndQ/GaalK4au4kOa9W42/fa+PZI1uu1U9XGhPNdVFUuNRM9ejfa7nQ1 2fre3NXsLYnRBGlLxOj6/v2kXhsrvsEuvgOQhOyfq7EW6cgJPI5Q96+Gl5ybpuCA V5UIXelRPVaw -----END CERTIFICATE-----Generated at Tue Jun 3 23:53:34 2025 by rpki-client