$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer File: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer (raw, json) Hash identifier: YEnhOnk+teTydvsixnx9VhvrRBRQh/pK5PO1aYBG72Y= Subject key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5FAC22B8C3C5FBAE7301830E1A38A71F9F3ECF78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft caRepository: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 16:58:56 +0000 Certificate not after: Tue 02 Jun 2026 17:03:56 +0000 Subordinate resources: IP: 103.148.110.0/23 IP: 2405:cec0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ac:22:b8:c3:c5:fb:ae:73:01:83:0e:1a:38:a7:1f:9f:3e:cf:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 16:58:56 2025 GMT Not After : Jun 2 17:03:56 2026 GMT Subject: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ad:e3:78:ba:ef:1b:51:d7:42:20:d1:6d:a4: fb:28:86:54:d2:78:8e:57:8a:42:fe:2f:0c:f8:75: 35:0b:dd:16:90:e9:68:f4:38:16:15:87:09:10:51: 1c:9f:d7:c5:af:61:ef:6b:67:9c:ab:6f:c6:c0:ac: 11:90:47:75:d2:c1:b1:c6:8b:76:48:67:9d:5d:06: d2:c3:58:f4:4e:c1:99:df:63:3e:99:99:90:fb:29: 7f:c1:4f:fc:2c:8e:8f:45:04:91:56:35:df:9e:88: 41:3c:96:f9:06:93:13:2d:7e:5f:29:29:c4:59:d5: 0a:c9:b4:4b:5a:65:32:03:fa:44:5a:fa:3b:19:f8: 3b:c0:3f:99:40:b2:aa:a9:b2:1a:91:07:42:04:f1: f1:13:0d:cd:98:b2:3c:3e:c0:79:8f:01:b8:50:89: ef:1f:37:20:fa:51:7a:48:b8:31:c3:93:56:58:20: 3a:b5:47:55:17:08:cc:12:ee:92:6d:41:d2:a9:35: ed:8e:32:cd:6a:0b:70:3b:d4:75:41:5c:64:6a:ab: 27:30:16:d3:5e:ed:ba:11:4c:4c:d8:ac:da:c3:b9: 97:e3:84:f8:28:ca:83:8b:58:79:e5:ef:5e:b3:f7: 5e:a3:d5:53:8b:c2:c6:6c:76:5d:4e:1c:a8:e6:87: 56:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.110.0/23 IPv6: 2405:cec0::/32 Signature Algorithm: sha256WithRSAEncryption 7c:a9:86:ab:2e:52:3b:81:ed:93:1a:49:06:72:d9:ea:32:35: cc:b4:87:6b:29:d6:2b:3b:9a:56:93:3a:ba:25:19:ec:84:cb: 55:5c:65:44:fe:8a:57:4c:28:17:1e:c6:d8:28:ef:dd:6d:68: 56:e9:d5:b0:c3:42:7c:83:21:8e:c3:72:c1:79:d0:6f:0a:2b: 79:fa:4a:90:d1:8c:d4:98:ed:ba:c7:15:37:02:b2:75:f3:34: 03:b1:a5:01:df:88:ea:c6:a0:79:ab:09:4f:59:41:ad:ef:52: 16:5f:d0:ef:c9:96:cf:66:c4:47:db:a7:9d:df:c2:6d:5f:f7: f4:dd:db:de:54:0f:b7:54:f4:41:db:1d:8f:51:54:95:cf:2b: 28:d6:bb:e4:99:d8:bc:d5:e3:79:fa:e7:fb:5c:da:61:f1:88: 13:5f:14:e5:27:e8:38:92:b3:ac:4d:cb:2b:65:98:82:71:83: 32:c9:c4:26:38:e4:59:b1:17:e3:90:12:8f:92:aa:09:a1:c4: 94:45:d4:b9:fb:de:0b:71:f6:d1:00:e7:dd:e9:ea:33:24:71: dc:98:83:f9:75:08:ed:3e:17:bd:8f:16:cb:20:98:8c:2d:4b: 25:b3:89:62:fe:e8:6d:d6:bf:3b:8e:d9:54:63:cf:df:bf:bd: 55:1c:13:19 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUX6wiuMPF+65zAYMOGjinH58+z3gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzE2NTg1NloX DTI2MDYwMjE3MDM1NlowMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZC REJFNzE4Qjk0OTUwMUQ5N0RDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKet43i67xtR10Ig0W2k+yiGVNJ4jleKQv4vDPh1NQvdFpDpaPQ4FhWHCRBR HJ/Xxa9h72tnnKtvxsCsEZBHddLBscaLdkhnnV0G0sNY9E7Bmd9jPpmZkPspf8FP /CyOj0UEkVY1356IQTyW+QaTEy1+XykpxFnVCsm0S1plMgP6RFr6Oxn4O8A/mUCy qqmyGpEHQgTx8RMNzZiyPD7AeY8BuFCJ7x83IPpReki4McOTVlggOrVHVRcIzBLu km1B0qk17Y4yzWoLcDvUdUFcZGqrJzAW017tuhFMTNis2sO5l+OE+CjKg4tYeeXv XrP3XqPVU4vCxmx2XU4cqOaHVnkCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF/N+qq4SQWGjU+9vnGLlJUB2X3EMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4ZjkyNDQ3 LWFjZDMtNDI3Yy1iNWU3LWRiMzkxN2YxODVjOC8wLzVGQ0RGQUFBQjg0OTA1ODY4 RDRGQkRCRTcxOEI5NDk1MDFEOTdEQzQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnlG4wDQQCAAIwBwMFACQFzsAwDQYJKoZIhvcNAQELBQADggEBAHyphqsuUjuB 7ZMaSQZy2eoyNcy0h2sp1is7mlaTOrolGeyEy1VcZUT+ildMKBcextgo791taFbp 1bDDQnyDIY7DcsF50G8KK3n6SpDRjNSY7brHFTcCsnXzNAOxpQHfiOrGoHmrCU9Z Qa3vUhZf0O/Jls9mxEfbp53fwm1f9/Td295UD7dU9EHbHY9RVJXPKyjWu+SZ2LzV 43n65/tc2mHxiBNfFOUn6DiSs6xNyytlmIJxgzLJxCY45FmxF+OQEo+SqgmhxJRF 1Ln73gtx9tEA593p6jMkcdyYg/l1CO0+F72PFssgmIwtSyWziWL+6G3WvzuO2VRj z9+/vVUcExk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:22 2025 by rpki-client