$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer File: 604C441ACDF554F380D7FED8F68B2EC7FB780413.cer (raw, json) Hash identifier: +gc0KYrGwR9XCQgpX6S3oW+rNYRazB/Ae5YP5dZW8Jw= Subject key identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 144DE61A5851203E35F95726868456F229CB8BAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft caRepository: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 25 Aug 2025 15:43:34 +0000 Certificate not after: Mon 24 Aug 2026 15:48:34 +0000 Subordinate resources: IP: 103.191.196.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:4d:e6:1a:58:51:20:3e:35:f9:57:26:86:84:56:f2:29:cb:8b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 25 15:43:34 2025 GMT Not After : Aug 24 15:48:34 2026 GMT Subject: CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7b:85:ef:ea:60:a3:da:23:ef:3c:09:86:d5: e4:75:11:22:73:4a:e2:6b:44:74:50:4c:46:29:38: 35:9e:ea:40:d2:ec:ff:0a:85:84:44:08:80:97:d6: da:91:b0:a2:59:64:ad:36:de:e0:83:b1:2c:fd:4b: 31:00:70:15:e9:b4:76:34:8f:7d:e8:8d:ed:a5:40: 6b:ec:a1:75:cf:d5:8f:40:ba:a2:9a:c9:df:25:87: 62:09:71:67:4d:11:4b:bc:ec:3e:bb:00:d3:21:f8: e3:39:d0:65:b7:93:d8:07:8e:a0:db:7c:e9:e5:c7: 8a:56:60:98:d2:26:52:57:4a:86:8d:aa:4b:d9:9f: 92:56:63:34:80:b3:6f:9d:96:ef:63:20:47:b4:a9: aa:0b:c3:29:d3:5c:28:c7:1e:4e:d5:6e:fd:88:45: 27:2e:ac:0a:7e:c2:85:29:95:7b:e7:74:1e:04:88: a8:de:c9:56:62:e1:88:0f:c6:5d:00:e0:4f:7a:cd: cb:ca:26:9f:bf:b6:2e:69:f4:10:b4:bf:e8:8a:ff: a1:ac:80:15:c1:ae:56:31:3e:90:83:95:d2:5c:2f: f7:89:49:64:01:0c:16:ce:0e:2e:2a:82:d4:08:c0: 8d:bb:3d:91:28:9b:24:4f:6d:82:13:f6:35:66:8e: 95:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.196.0/23 Signature Algorithm: sha256WithRSAEncryption 42:26:7b:ea:4e:27:76:bf:27:33:d0:b3:0f:18:a1:82:fc:0e: d7:6f:72:5c:9e:f4:70:ca:92:e9:1a:ee:0e:fd:ab:ed:1b:8f: 99:47:36:6c:d6:36:7a:4c:7e:81:f3:06:77:98:2e:ce:6e:00: fd:20:d1:cf:83:d9:2f:a0:3f:e1:7e:25:8f:c5:ce:94:e3:43: fc:10:99:af:27:ef:c2:6e:b3:a5:1c:23:13:ad:f7:f4:cd:03: 6e:8d:ca:a3:58:5e:6e:c1:1b:d8:06:1d:ce:a9:bd:41:86:6e: 2d:1a:53:07:a7:73:92:34:8f:db:60:fe:8e:30:9f:05:bb:7b: 75:27:6c:62:1c:43:b7:66:aa:9e:d3:0a:ff:e4:16:20:f0:5f: cf:83:86:37:80:19:bd:1d:63:ec:fb:42:07:24:43:47:c3:b3: c1:b5:d8:88:ef:8e:01:80:7c:a9:78:5f:cf:d4:28:b3:fc:9e: 99:3b:e9:3e:67:80:53:ac:bd:be:48:0f:8b:99:20:77:a7:11: 79:7f:78:f8:7b:63:c9:e4:11:f1:26:1f:aa:bd:0b:88:9e:fe: d7:10:82:9e:40:c5:3d:51:96:7c:c2:08:ac:37:cf:ff:30:6d: 7c:84:15:d4:7c:21:3f:54:8b:a7:f3:a4:66:fd:07:ae:54:aa: f0:62:d5:97 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUFE3mGlhRID41+VcmhoRW8inLi68wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyNTE1NDMzNFoX DTI2MDgyNDE1NDgzNFowMzExMC8GA1UEAxMoNjA0QzQ0MUFDREY1NTRGMzgwRDdG RUQ4RjY4QjJFQzdGQjc4MDQxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMR7he/qYKPaI+88CYbV5HURInNK4mtEdFBMRik4NZ7qQNLs/wqFhEQIgJfW 2pGwollkrTbe4IOxLP1LMQBwFem0djSPfeiN7aVAa+yhdc/Vj0C6oprJ3yWHYglx Z00RS7zsPrsA0yH44znQZbeT2AeOoNt86eXHilZgmNImUldKho2qS9mfklZjNICz b52W72MgR7SpqgvDKdNcKMceTtVu/YhFJy6sCn7ChSmVe+d0HgSIqN7JVmLhiA/G XQDgT3rNy8omn7+2Lmn0ELS/6Ir/oayAFcGuVjE+kIOV0lwv94lJZAEMFs4OLiqC 1AjAjbs9kSibJE9tghP2NWaOlZcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGBMRBrN9VTzgNf+2PaLLsf7eAQTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NWQ2ZWZmZi04NWIyLTRhZjQtODlhYi02ZDk4Yzk1MjdkYTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc1ZDZlZmZm LTg1YjItNGFmNC04OWFiLTZkOThjOTUyN2RhNC8wLzYwNEM0NDFBQ0RGNTU0RjM4 MEQ3RkVEOEY2OEIyRUM3RkI3ODA0MTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnv8QwDQYJKoZIhvcNAQELBQADggEBAEIme+pOJ3a/JzPQsw8YoYL8Dtdvclye 9HDKkuka7g79q+0bj5lHNmzWNnpMfoHzBneYLs5uAP0g0c+D2S+gP+F+JY/FzpTj Q/wQma8n78Jus6UcIxOt9/TNA26NyqNYXm7BG9gGHc6pvUGGbi0aUwenc5I0j9tg /o4wnwW7e3UnbGIcQ7dmqp7TCv/kFiDwX8+DhjeAGb0dY+z7QgckQ0fDs8G12Ijv jgGAfKl4X8/UKLP8npk76T5ngFOsvb5ID4uZIHenEXl/ePh7Y8nkEfEmH6q9C4ie /tcQgp5AxT1RlnzCCKw3z/8wbXyEFdR8IT9Ui6fzpGb9B65UqvBi1Zc= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:19 2025 by rpki-client