$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.cer File: 75777FAFA6DB253E3CA15E2E09216AC6AF01001C.cer (raw, json) Hash identifier: RF8/k9n8Oz4lHghaey2K6IoQRjQSjdNCdaSZJqWhPq8= Subject key identifier: 75:77:7F:AF:A6:DB:25:3E:3C:A1:5E:2E:09:21:6A:C6:AF:01:00:1C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2A8091643D26EB70D7F78F51A2D57C936EA92252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.mft caRepository: rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 22 May 2025 08:13:40 +0000 Certificate not after: Thu 21 May 2026 08:18:40 +0000 Subordinate resources: IP: 103.159.198.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 06:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:80:91:64:3d:26:eb:70:d7:f7:8f:51:a2:d5:7c:93:6e:a9:22:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 22 08:13:40 2025 GMT Not After : May 21 08:18:40 2026 GMT Subject: CN=75777FAFA6DB253E3CA15E2E09216AC6AF01001C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7f:b9:8d:63:ab:9b:d7:2e:e2:e1:a4:f9:dc: ef:a5:88:2c:1b:20:ad:ea:cd:f2:77:bb:cc:7f:a4: 74:44:ab:cf:3d:11:d7:77:6d:69:ff:9b:76:f7:93: 4c:27:1c:a1:4d:d3:37:d7:2b:90:94:42:f5:66:2b: 68:03:bc:cf:c4:e1:52:8c:5b:93:62:40:ec:ed:23: 6f:50:27:6c:34:20:01:97:3c:25:c6:32:8d:2e:39: 2c:d2:a3:10:02:2a:ce:5b:df:e4:56:42:dd:9d:5d: 20:e4:fd:8c:82:c8:4b:2e:c1:f3:13:02:83:af:bb: e7:56:7b:d3:9c:9b:95:bb:6d:54:1a:b7:fb:7c:bf: f1:5b:11:b1:38:5a:e3:8d:92:34:e5:99:43:bc:9a: d6:27:da:98:5a:49:77:e8:a6:68:b5:ee:08:cb:7f: dd:ae:51:d1:ab:3f:c0:21:f8:5b:86:c0:de:a8:40: b2:c7:f0:cf:f5:62:db:5b:92:3c:97:b4:e5:0d:96: ff:ca:f9:1f:27:9d:07:60:a8:30:a5:7d:02:12:8d: 10:93:df:97:0a:d6:71:81:2f:37:86:9f:6f:06:f8: 84:d2:3e:34:97:77:79:47:fe:c7:32:c5:36:3c:52: 49:4f:b6:e9:d4:c3:0e:97:91:d5:c0:1a:d7:82:cf: a2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 75:77:7F:AF:A6:DB:25:3E:3C:A1:5E:2E:09:21:6A:C6:AF:01:00:1C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e931cb07-1b52-4cae-9e8e-468991ecc731/0/75777FAFA6DB253E3CA15E2E09216AC6AF01001C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.198.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:f8:04:a4:12:8f:04:f8:45:ee:e1:5a:b9:a7:32:33:84:f8: 59:94:16:b3:6f:5e:24:b3:91:9a:c5:46:ec:63:8b:12:43:7b: c7:54:3a:5b:84:9c:97:3e:b1:ad:9e:c2:83:b3:36:5a:6f:16: cb:41:3d:e1:73:b3:8d:dc:3e:fe:95:02:de:4b:cb:22:c6:40: ef:16:5d:26:29:36:b3:b8:e0:79:ba:42:51:d7:a4:6e:3a:9b: de:7c:ff:99:9e:cb:6f:96:4f:58:66:67:23:fe:b6:7d:8c:ed: 20:73:50:2c:f8:4d:6c:5c:b8:8f:21:9f:a2:aa:b4:ca:ff:3e: 20:08:29:b4:5c:d9:8a:18:50:38:81:20:74:34:e2:16:13:74: 8d:e8:67:50:b0:da:a2:f0:06:70:02:3a:42:33:25:50:9b:e3: 6e:a3:f0:65:a0:3e:9e:9b:c1:9e:40:2e:d7:5a:1e:77:93:7a: c3:27:50:93:50:0e:47:2c:d8:a9:1e:d6:24:57:51:73:d3:4d: b4:3c:ab:d2:b5:1e:6a:1a:f9:c6:ea:3a:37:4e:1c:87:23:79: 29:e2:f5:eb:f4:15:5e:f7:ba:44:7b:9e:1d:e9:21:e5:2e:2b: 46:1e:02:73:55:3b:d6:f8:4f:1c:38:3e:3c:9f:30:65:90:fc: 45:24:ea:c0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKoCRZD0m63DX949RotV8k26pIlIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUyMjA4MTM0MFoX DTI2MDUyMTA4MTg0MFowMzExMC8GA1UEAxMoNzU3NzdGQUZBNkRCMjUzRTNDQTE1 RTJFMDkyMTZBQzZBRjAxMDAxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOZ/uY1jq5vXLuLhpPnc76WILBsgrerN8ne7zH+kdESrzz0R13dtaf+bdveT TCccoU3TN9crkJRC9WYraAO8z8ThUoxbk2JA7O0jb1AnbDQgAZc8JcYyjS45LNKj EAIqzlvf5FZC3Z1dIOT9jILISy7B8xMCg6+751Z705yblbttVBq3+3y/8VsRsTha 442SNOWZQ7ya1ifamFpJd+imaLXuCMt/3a5R0as/wCH4W4bA3qhAssfwz/Vi21uS PJe05Q2W/8r5HyedB2CoMKV9AhKNEJPflwrWcYEvN4afbwb4hNI+NJd3eUf+xzLF NjxSSU+26dTDDpeR1cAa14LPoi8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHV3f6+m2yU+PKFeLgkhasavAQAcMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lOTMxY2IwNy0xYjUyLTRjYWUtOWU4ZS00Njg5OTFlY2M3MzEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5MzFjYjA3 LTFiNTItNGNhZS05ZThlLTQ2ODk5MWVjYzczMS8wLzc1Nzc3RkFGQTZEQjI1M0Uz Q0ExNUUyRTA5MjE2QUM2QUYwMTAwMUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnn8YwDQYJKoZIhvcNAQELBQADggEBAIz4BKQSjwT4Re7hWrmnMjOE+FmUFrNv XiSzkZrFRuxjixJDe8dUOluEnJc+sa2ewoOzNlpvFstBPeFzs43cPv6VAt5LyyLG QO8WXSYpNrO44Hm6QlHXpG46m958/5mey2+WT1hmZyP+tn2M7SBzUCz4TWxcuI8h n6KqtMr/PiAIKbRc2YoYUDiBIHQ04hYTdI3oZ1Cw2qLwBnACOkIzJVCb426j8GWg Pp6bwZ5ALtdaHneTesMnUJNQDkcs2Kke1iRXUXPTTbQ8q9K1Hmoa+cbqOjdOHIcj eSni9ev0FV73ukR7nh3pIeUuK0YeAnNVO9b4Txw4PjyfMGWQ/EUk6sA= -----END CERTIFICATE-----Generated at Mon Jun 2 06:35:26 2025 by rpki-client