$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/755B61748263D4DD472C69CA7F1847254B03EBBC.cer File: 755B61748263D4DD472C69CA7F1847254B03EBBC.cer (raw, json) Hash identifier: QxInkRxGEvUPo7G/hMcAhFV8V/n3lxCowXIMy9kDnZk= Subject key identifier: 75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1EDD8E24DF58627E64CFE6B888191A342D4D3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft caRepository: rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 25 Aug 2025 19:39:15 +0000 Certificate not after: Mon 24 Aug 2026 19:44:15 +0000 Subordinate resources: IP: 103.22.216.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:dd:8e:24:df:58:62:7e:64:cf:e6:b8:88:19:1a:34:2d:4d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 25 19:39:15 2025 GMT Not After : Aug 24 19:44:15 2026 GMT Subject: CN=755B61748263D4DD472C69CA7F1847254B03EBBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:57:13:89:b2:89:f3:3a:b4:1d:e7:b6:58:a5: 4c:41:dc:b7:7a:3e:09:47:59:a1:13:23:a3:47:dc: 40:8b:38:ac:15:3d:96:07:29:44:f5:da:ce:d0:2d: a3:87:09:d8:de:5a:13:12:af:54:b0:55:dc:3d:c4: b0:09:fc:a4:55:86:7a:ba:6a:74:2d:2c:d5:93:64: 1a:90:8b:e4:e0:5b:80:8a:e8:bd:30:de:cb:69:f8: dd:30:ac:3e:4d:2c:a4:8d:f1:24:dc:d5:d2:57:30: 52:c5:d7:b4:6c:d3:38:54:4f:97:2c:0b:51:20:ae: e4:46:17:29:e7:ee:ed:15:4e:61:1a:98:73:7d:b3: 33:a3:e2:c0:9f:5d:d3:c7:99:f5:eb:7f:38:6d:1b: c7:51:41:b2:97:a5:4d:38:12:73:6d:0e:63:97:8b: 88:f3:ba:2c:f8:8c:75:8e:8e:6e:76:73:de:b9:65: 78:6d:22:d0:81:31:1d:f4:77:c6:eb:d3:17:59:0b: 26:3a:09:3a:50:93:8e:1f:8d:74:c3:b9:93:0b:e3: 99:35:fa:02:6d:53:04:46:c6:65:7f:4e:e6:d8:57: b6:32:34:73:75:40:d9:5b:30:4c:af:92:76:5a:c2: 4c:db:95:b9:61:e8:8a:af:3e:2b:50:27:75:fb:46: 35:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 75:5B:61:74:82:63:D4:DD:47:2C:69:CA:7F:18:47:25:4B:03:EB:BC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/654607f0-1701-49b1-91ff-b1bed5cbded1/0/755B61748263D4DD472C69CA7F1847254B03EBBC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.22.216.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:79:85:c6:a6:90:48:13:fa:35:de:36:88:00:3d:af:ea:13: 2c:ff:1c:cc:0b:e2:e1:6a:d2:aa:9c:69:cb:8a:ae:96:c8:a1: 26:a3:dd:06:d4:45:45:72:74:e2:d3:d3:ab:24:0e:ce:d7:56: 9f:3b:37:ac:46:bb:f0:de:39:e9:af:cc:58:ed:ef:e1:13:88: 3e:20:8c:1e:ee:27:3f:32:a3:ad:75:99:4f:77:23:5f:c1:f1: 26:52:25:56:ee:fb:30:88:cc:cd:1d:11:7e:1b:a7:ea:ec:fb: 6b:da:39:31:6e:62:a6:e9:3c:fc:9f:a5:af:5b:d1:bb:9d:6d: 64:16:f1:49:71:ba:fc:4f:28:3b:b2:26:f3:e4:12:5d:ae:1d: 0e:a9:b4:19:4a:63:eb:3f:4c:b7:55:47:dd:52:a7:af:81:46: 6e:c7:bb:66:b9:8c:fe:96:60:40:84:35:e5:bc:7e:b2:90:b0: d4:21:fc:17:41:63:86:e6:fb:97:f4:f8:f6:e8:77:bc:2a:8e: 14:d2:70:1c:3c:06:de:b3:27:27:98:71:49:bd:d2:65:e7:8d: bc:59:5e:d5:a8:c3:2e:35:cd:ec:bf:5b:cf:99:93:cc:1c:55: bb:24:6f:cf:7a:10:03:d7:62:34:40:11:23:78:51:be:49:17: 2e:46:81:ff -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgITHt2OJN9YYn5kz+a4iBkaNC1NPzANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjUwODI1MTkzOTE1WhcN MjYwODI0MTk0NDE1WjAzMTEwLwYDVQQDEyg3NTVCNjE3NDgyNjNENERENDcyQzY5 Q0E3RjE4NDcyNTRCMDNFQkJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FcTibKJ8zq0Hee2WKVMQdy3ej4JR1mhEyOjR9xAizisFT2WBylE9drO0C2j hwnY3loTEq9UsFXcPcSwCfykVYZ6ump0LSzVk2QakIvk4FuAiui9MN7LafjdMKw+ TSykjfEk3NXSVzBSxde0bNM4VE+XLAtRIK7kRhcp5+7tFU5hGphzfbMzo+LAn13T x5n16384bRvHUUGyl6VNOBJzbQ5jl4uI87os+Ix1jo5udnPeuWV4bSLQgTEd9HfG 69MXWQsmOgk6UJOOH410w7mTC+OZNfoCbVMERsZlf07m2Fe2MjRzdUDZWzBMr5J2 WsJM25W5YeiKrz4rUCd1+0Y17QIDAQABo4ICuDCCArQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUdVthdIJj1N1HLGnKfxhHJUsD67wwHwYDVR0jBBgwFoAUuo93 0h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIv QkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgzMzc2Qi5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvdW85 MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv LzY1NDYwN2YwLTE3MDEtNDliMS05MWZmLWIxYmVkNWNiZGVkMS8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU0NjA3ZjAt MTcwMS00OWIxLTkxZmYtYjFiZWQ1Y2JkZWQxLzAvNzU1QjYxNzQ4MjYzRDRERDQ3 MkM2OUNBN0YxODQ3MjU0QjAzRUJCQy5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWcW2DANBgkqhkiG9w0BAQsFAAOCAQEADnmFxqaQSBP6Nd42iAA9r+oTLP8czAvi 4WrSqpxpy4qulsihJqPdBtRFRXJ04tPTqyQOztdWnzs3rEa78N456a/MWO3v4ROI PiCMHu4nPzKjrXWZT3cjX8HxJlIlVu77MIjMzR0Rfhun6uz7a9o5MW5ipuk8/J+l r1vRu51tZBbxSXG6/E8oO7Im8+QSXa4dDqm0GUpj6z9Mt1VH3VKnr4FGbse7ZrmM /pZgQIQ15bx+spCw1CH8F0Fjhub7l/T49uh3vCqOFNJwHDwG3rMnJ5hxSb3SZeeN vFle1ajDLjXN7L9bz5mTzBxVuyRvz3oQA9diNEARI3hRvkkXLkaB/w== -----END CERTIFICATE-----Generated at Fri Sep 5 08:16:19 2025 by rpki-client