$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer File: 5C413D56294D9D20E64978B7296A9DA893C32CAB.cer (raw, json) Hash identifier: XUEJacsi1OIXb2qPb9BMpdoHB45hlW6/1hwJmXyJHPk= Subject key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 79E954A483AFDEA5CD031589288B215E368080AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft caRepository: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 15 Mar 2025 13:00:57 +0000 Certificate not after: Sat 14 Mar 2026 13:05:57 +0000 Subordinate resources: IP: 103.150.60.0/23 IP: 2001:df3:5b80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 20:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:e9:54:a4:83:af:de:a5:cd:03:15:89:28:8b:21:5e:36:80:80:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 15 13:00:57 2025 GMT Not After : Mar 14 13:05:57 2026 GMT Subject: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:d1:91:87:8e:f3:8b:34:b9:71:88:b9:14: b9:84:e6:84:9e:29:cf:da:e3:39:48:53:7b:37:6a: 2c:f2:a4:93:26:30:e5:a9:c9:a6:35:22:fd:a2:b7: b3:9f:89:a5:c4:c0:47:a3:67:e4:4b:ea:55:be:d4: 77:73:b5:10:47:4a:1b:a3:b3:54:c8:ba:17:0c:f6: a8:f0:a7:9a:c3:b6:09:b2:b8:e5:44:4c:4f:36:e3: 05:44:72:28:9b:f8:16:a6:9e:6a:a6:18:54:04:8e: c1:f0:11:f9:4b:fe:31:5b:88:77:2e:05:17:39:b4: 2a:40:4e:25:86:3f:a6:8d:5c:76:37:71:55:96:4b: d1:94:4c:37:18:e3:7c:69:ca:10:35:69:ec:85:be: 0e:10:f7:6a:78:93:32:05:5a:f7:9b:c9:24:09:28: da:ed:a2:c5:f9:92:f9:9d:4a:5e:4f:21:58:1f:2e: e6:6c:49:6d:e1:83:c5:52:26:49:65:bf:b9:e9:28: 1b:84:da:cd:13:18:c1:cd:2c:95:45:17:a9:4c:b2: 0d:2d:17:8c:41:a6:a7:42:48:91:74:b2:65:aa:57: d1:32:35:08:3a:63:b7:22:17:78:19:df:34:e6:22: 28:e4:f0:b0:69:fa:5f:e9:1e:04:0d:90:c2:fd:a2: b7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.60.0/23 IPv6: 2001:df3:5b80::/48 Signature Algorithm: sha256WithRSAEncryption 05:7b:f1:c9:c7:d9:16:f6:d7:52:45:0e:ed:8c:44:58:65:6f: 89:51:f8:5a:12:c0:fc:a6:12:5e:f4:02:8e:d7:41:07:2f:05: 40:a0:96:27:53:93:b2:ef:86:f0:65:97:e1:c1:20:f8:fb:c0: 8a:47:08:5d:00:3c:65:b5:f7:e3:bd:c7:76:85:89:53:39:6c: 43:e0:57:7a:69:3a:f1:f7:0c:f5:87:59:ea:2f:b0:44:52:ff: 7c:1f:a5:cd:a0:7d:dc:5a:94:26:f8:ef:d7:06:a6:77:79:c3: 62:78:7e:03:85:4a:96:f4:44:1c:d1:ae:e0:79:a9:f3:83:85: 68:21:23:de:71:60:3c:f0:f7:d2:ae:d7:88:1f:6c:80:55:70: d1:4c:3b:95:c2:f0:6d:10:b5:c4:e0:9c:72:6a:da:b1:d4:b8: 8c:7d:09:58:33:df:ca:80:0d:7e:13:a1:39:6f:60:09:ae:df: df:c1:51:4a:2e:2d:a6:ad:e4:df:ef:7a:51:83:57:17:3c:d7: 62:b3:f8:80:a4:ea:ee:ea:8e:50:79:bb:ee:6b:58:6a:0b:1e: 88:76:e5:e2:95:29:08:d3:8b:40:12:72:92:96:c5:66:92:ba: 9f:a2:75:08:ca:13:a4:20:4d:68:6b:5d:82:f0:4c:38:58:e8: 39:df:ef:46 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUeelUpIOv3qXNAxWJKIshXjaAgK0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMxNTEzMDA1N1oX DTI2MDMxNDEzMDU1N1owMzExMC8GA1UEAxMoNUM0MTNENTYyOTREOUQyMEU2NDk3 OEI3Mjk2QTlEQTg5M0MzMkNBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUH0ZGHjvOLNLlxiLkUuYTmhJ4pz9rjOUhTezdqLPKkkyYw5anJpjUi/aK3 s5+JpcTAR6Nn5EvqVb7Ud3O1EEdKG6OzVMi6Fwz2qPCnmsO2CbK45URMTzbjBURy KJv4FqaeaqYYVASOwfAR+Uv+MVuIdy4FFzm0KkBOJYY/po1cdjdxVZZL0ZRMNxjj fGnKEDVp7IW+DhD3aniTMgVa95vJJAko2u2ixfmS+Z1KXk8hWB8u5mxJbeGDxVIm SWW/uekoG4TazRMYwc0slUUXqUyyDS0XjEGmp0JIkXSyZapX0TI1CDpjtyIXeBnf NOYiKOTwsGn6X+keBA2Qwv2itwcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFxBPVYpTZ0g5kl4tylqnaiTwyyrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YjNlYWJiNC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiM2VhYmI0 LTRkYjMtNDM3My1hMzQ4LWZiMWVkNzA1NTY1MS8wLzVDNDEzRDU2Mjk0RDlEMjBF NjQ5NzhCNzI5NkE5REE4OTNDMzJDQUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnljwwDwQCAAIwCQMHACABDfNbgDANBgkqhkiG9w0BAQsFAAOCAQEABXvxycfZ FvbXUkUO7YxEWGVviVH4WhLA/KYSXvQCjtdBBy8FQKCWJ1OTsu+G8GWX4cEg+PvA ikcIXQA8ZbX3473HdoWJUzlsQ+BXemk68fcM9YdZ6i+wRFL/fB+lzaB93FqUJvjv 1wamd3nDYnh+A4VKlvREHNGu4Hmp84OFaCEj3nFgPPD30q7XiB9sgFVw0Uw7lcLw bRC1xOCccmrasdS4jH0JWDPfyoANfhOhOW9gCa7f38FRSi4tpq3k3+96UYNXFzzX YrP4gKTq7uqOUHm77mtYagseiHbl4pUpCNOLQBJykpbFZpK6n6J1CMoTpCBNaGtd gvBMOFjoOd/vRg== -----END CERTIFICATE-----Generated at Thu Oct 30 14:59:05 2025 by rpki-client