$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer File: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer (raw, json) Hash identifier: epRmSOK/lDPbB65SQsQX0GQ3qAhIUhCjWYuhnq1lysk= Subject key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7C022551463D02D62CF6AEBEDD53E1A80FF4DE5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft caRepository: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 11 Apr 2025 20:48:06 +0000 Certificate not after: Fri 10 Apr 2026 20:53:06 +0000 Subordinate resources: IP: 103.189.200.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 20:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:02:25:51:46:3d:02:d6:2c:f6:ae:be:dd:53:e1:a8:0f:f4:de:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 11 20:48:06 2025 GMT Not After : Apr 10 20:53:06 2026 GMT Subject: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:9d:78:0c:e4:f4:24:43:2c:d7:7c:c6:52: d2:a1:6f:d3:0c:2d:aa:63:5e:c7:5b:ab:03:df:0d: e5:5f:6f:39:a0:c1:e0:17:97:7a:ef:d8:f8:4e:b1: 19:ab:9d:78:b4:b8:0f:69:bd:01:55:eb:f8:e1:a7: 18:13:f9:e8:34:ad:17:68:b2:ed:4f:f5:3c:4a:39: 15:a7:0f:1a:5f:d7:b7:63:79:2f:03:1b:09:a6:87: 69:eb:ae:b3:1d:df:80:a0:33:2e:89:4f:aa:62:f0: df:fd:75:35:a3:b5:2f:c0:04:a1:d4:ad:0c:c8:18: 65:12:ad:b7:39:cb:d3:34:b5:01:97:ae:30:da:86: 7c:ea:66:ff:7f:25:4a:bb:3e:cc:ff:11:2f:a4:de: 4d:17:71:25:d3:23:40:b6:a9:d0:63:c5:40:8d:ed: 11:52:55:1b:4f:8f:06:f6:63:1e:81:46:eb:c2:8f: 40:c8:e9:93:db:af:92:f5:0a:cd:2a:ff:6b:77:b9: d0:7c:42:18:43:a5:de:df:c8:8d:fa:ad:ba:83:77: c1:c8:b3:32:5a:3a:49:ef:78:1e:7d:f1:59:ef:b9: 87:bd:8c:2f:b4:e1:ab:0a:04:e1:98:d0:eb:4a:71: d5:13:6d:65:42:ca:79:7c:ef:5c:a7:29:8d:4f:af: 77:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.200.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:23:94:17:a4:25:b7:53:cc:dd:15:ee:5b:e1:5f:14:29:a0: 82:63:95:24:b4:d3:b2:10:9d:ce:21:13:1b:27:76:42:b9:25: b1:81:25:6a:2f:25:fe:ec:96:89:de:81:36:65:5c:e6:35:89: 27:67:56:59:c2:4b:2d:09:57:54:c3:89:e7:f1:7e:04:05:3b: 9d:5b:1c:48:16:82:65:2d:96:20:77:c2:8c:4d:7c:68:19:65: 1f:fd:de:ab:3d:ed:74:c0:08:35:60:48:41:49:83:58:80:b9: 18:8d:f4:02:65:d5:ed:1c:6a:75:bb:ba:6f:3f:15:51:d0:24: 4e:08:ae:cb:aa:c7:18:1e:e2:55:a9:59:e9:08:86:db:48:f3: e6:51:40:47:8d:58:7c:54:9f:bf:b4:68:08:44:77:7a:bc:1d: db:c3:5f:0d:47:49:39:db:bb:e4:75:72:8e:49:fb:9e:76:56: df:a5:a7:7e:28:d7:99:f1:fe:94:a1:32:3e:69:ca:d1:30:69: 3f:86:e9:69:50:4c:10:83:31:68:1a:5a:c1:07:9e:39:fb:de: 39:3d:3d:b2:5c:1a:8b:6e:62:ed:fe:a2:2a:8d:70:fa:f9:a6: 2b:dc:80:7c:87:a3:95:81:78:9b:e5:11:e5:6e:34:d5:2f:5a: 25:0a:d1:ef -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfAIlUUY9AtYs9q6+3VPhqA/03l4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxMTIwNDgwNloX DTI2MDQxMDIwNTMwNlowMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUy RkExODkzNEMxRTdCMUQ5MjE2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdbnXgM5PQkQyzXfMZS0qFv0wwtqmNex1urA98N5V9vOaDB4BeXeu/Y+E6x GaudeLS4D2m9AVXr+OGnGBP56DStF2iy7U/1PEo5FacPGl/Xt2N5LwMbCaaHaeuu sx3fgKAzLolPqmLw3/11NaO1L8AEodStDMgYZRKttznL0zS1AZeuMNqGfOpm/38l Srs+zP8RL6TeTRdxJdMjQLap0GPFQI3tEVJVG0+PBvZjHoFG68KPQMjpk9uvkvUK zSr/a3e50HxCGEOl3t/IjfqtuoN3wcizMlo6Se94Hn3xWe+5h72ML7ThqwoE4ZjQ 60px1RNtZULKeXzvXKcpjU+vd7kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF7CwCNA+/p5ozUvoYk0weex2SFvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhMmU1ZjAz LWJmOTYtNGI0MC1iZDRhLTZlMzg4OGM0MDIwNS8wLzVFQzJDMDIzNDBGQkZBNzlB MzM1MkZBMTg5MzRDMUU3QjFEOTIxNkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvcgwDQYJKoZIhvcNAQELBQADggEBADsjlBekJbdTzN0V7lvhXxQpoIJjlSS0 07IQnc4hExsndkK5JbGBJWovJf7slonegTZlXOY1iSdnVlnCSy0JV1TDiefxfgQF O51bHEgWgmUtliB3woxNfGgZZR/93qs97XTACDVgSEFJg1iAuRiN9AJl1e0canW7 um8/FVHQJE4Irsuqxxge4lWpWekIhttI8+ZRQEeNWHxUn7+0aAhEd3q8HdvDXw1H STnbu+R1co5J+552Vt+lp34o15nx/pShMj5pytEwaT+G6WlQTBCDMWgaWsEHnjn7 3jk9PbJcGotuYu3+oiqNcPr5pivcgHyHo5WBeJvlEeVuNNUvWiUK0e8= -----END CERTIFICATE-----Generated at Thu Oct 30 15:02:35 2025 by rpki-client