$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer File: 771D0AB9C445B28C887FD7BA18DEC515D8BA3862.cer (raw, json) Hash identifier: bYy1xIjFeyzUwN7oGKJ5wCiVmMfvUSAoiciJIAzhBo8= Subject key identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0F0F479D23F966D3884A1527130E7A1FCCD8EC29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft caRepository: rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 28 Jun 2025 05:47:45 +0000 Certificate not after: Sat 27 Jun 2026 05:52:45 +0000 Subordinate resources: IP: 103.220.22.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 22:20:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:0f:47:9d:23:f9:66:d3:88:4a:15:27:13:0e:7a:1f:cc:d8:ec:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 28 05:47:45 2025 GMT Not After : Jun 27 05:52:45 2026 GMT Subject: CN=771D0AB9C445B28C887FD7BA18DEC515D8BA3862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:d8:46:fc:22:7c:60:59:9b:39:72:83:67: d5:73:21:60:34:d1:1c:23:c6:4b:7d:b3:a1:9c:e5: 90:81:af:41:cf:c6:25:82:a5:8f:73:d5:32:14:eb: 47:c9:09:b4:5e:71:b7:83:40:1f:db:c9:53:f8:fe: eb:a7:99:d1:4a:b6:45:88:1d:43:4b:95:66:21:7f: 44:d3:95:12:11:ea:84:21:3f:77:f2:d4:9b:07:e8: 6f:26:56:e1:e4:e3:13:6f:71:7f:5c:ef:23:74:a0: 6a:2d:ab:b0:d0:8b:5b:b0:cf:52:38:69:c4:d7:d3: 54:2f:85:49:3b:e1:47:f6:71:a9:16:b8:dc:44:50: 2a:ec:7a:76:a5:88:1f:dc:ea:06:6d:55:32:90:9b: 15:82:00:55:ba:7c:69:7c:23:06:3d:dd:a5:aa:d2: c8:1b:1f:2e:3f:d4:56:83:bb:c8:8d:86:b2:c5:5b: cd:0f:f7:4e:4d:23:fb:56:6f:6a:09:8f:58:42:46: 25:ec:66:d9:e5:02:ce:76:1d:ba:c4:8b:97:f1:46: 86:88:ec:95:fa:9a:84:ab:a0:47:77:3b:4c:fa:ed: b1:5f:ff:79:83:66:36:9a:7e:9e:7e:1b:c0:81:54: 3b:a2:c3:7f:4c:a0:33:3b:14:28:36:82:6d:2f:a2: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 77:1D:0A:B9:C4:45:B2:8C:88:7F:D7:BA:18:DE:C5:15:D8:BA:38:62 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6aad6a3f-6ca0-4669-98f7-6f34837faa62/0/771D0AB9C445B28C887FD7BA18DEC515D8BA3862.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.220.22.0/23 Signature Algorithm: sha256WithRSAEncryption 34:d8:82:5d:6f:c3:e8:ed:7f:7c:03:3d:89:74:00:f5:42:6d: e9:b9:08:3d:31:d1:15:45:b2:06:4a:73:ba:25:21:de:1b:8c: 0a:78:89:bc:b6:94:93:ae:e1:36:f2:6a:00:ff:61:ee:05:da: 5a:3c:c0:3d:5c:b6:0e:e2:73:f0:f5:cf:d0:db:4a:28:d6:f5: 26:00:4e:59:a0:c2:a4:38:a7:95:88:3c:26:e0:3d:1a:9a:70: 36:40:56:79:83:7d:24:ce:a5:b1:5c:61:ee:45:b1:a0:5c:7d: 4d:99:ed:6a:33:d4:d1:67:f6:94:95:d3:80:0a:b7:db:61:8b: e3:bf:2c:fc:fc:9b:46:c3:a3:08:e0:79:89:93:01:3c:9e:87: 6c:06:10:76:42:d1:b9:e0:64:14:64:37:03:00:bd:61:78:ed: cf:14:19:97:b1:6d:08:22:bc:ef:b6:b9:65:0a:e5:50:a1:9b: c5:cb:45:17:15:40:b3:f2:25:37:2d:ff:fa:63:ac:16:a0:98: 50:cd:86:f5:13:18:b3:9f:14:5c:b2:3c:23:b1:c5:35:ed:af: 3f:ba:c2:93:49:17:ad:7a:46:71:78:0f:19:8b:31:7e:df:24: 0b:db:c8:6e:cc:d6:68:4d:13:83:07:ae:36:f9:7e:d5:e1:b3: 61:6e:02:36 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDw9HnSP5ZtOIShUnEw56H8zY7CkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYyODA1NDc0NVoX DTI2MDYyNzA1NTI0NVowMzExMC8GA1UEAxMoNzcxRDBBQjlDNDQ1QjI4Qzg4N0ZE N0JBMThERUM1MTVEOEJBMzg2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALrA2Eb8InxgWZs5coNn1XMhYDTRHCPGS32zoZzlkIGvQc/GJYKlj3PVMhTr R8kJtF5xt4NAH9vJU/j+66eZ0Uq2RYgdQ0uVZiF/RNOVEhHqhCE/d/LUmwfobyZW 4eTjE29xf1zvI3Sgai2rsNCLW7DPUjhpxNfTVC+FSTvhR/ZxqRa43ERQKux6dqWI H9zqBm1VMpCbFYIAVbp8aXwjBj3dparSyBsfLj/UVoO7yI2GssVbzQ/3Tk0j+1Zv agmPWEJGJexm2eUCznYdusSLl/FGhojslfqahKugR3c7TPrtsV//eYNmNpp+nn4b wIFUO6LDf0ygMzsUKDaCbS+ipDcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHcdCrnERbKMiH/XuhjexRXYujhiMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YWFkNmEzZi02Y2EwLTQ2NjktOThmNy02ZjM0ODM3ZmFhNjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhYWQ2YTNm LTZjYTAtNDY2OS05OGY3LTZmMzQ4MzdmYWE2Mi8wLzc3MUQwQUI5QzQ0NUIyOEM4 ODdGRDdCQTE4REVDNTE1RDhCQTM4NjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn3BYwDQYJKoZIhvcNAQELBQADggEBADTYgl1vw+jtf3wDPYl0APVCbem5CD0x 0RVFsgZKc7olId4bjAp4iby2lJOu4TbyagD/Ye4F2lo8wD1ctg7ic/D1z9DbSijW 9SYATlmgwqQ4p5WIPCbgPRqacDZAVnmDfSTOpbFcYe5FsaBcfU2Z7Woz1NFn9pSV 04AKt9thi+O/LPz8m0bDowjgeYmTATyeh2wGEHZC0bngZBRkNwMAvWF47c8UGZex bQgivO+2uWUK5VChm8XLRRcVQLPyJTct//pjrBagmFDNhvUTGLOfFFyyPCOxxTXt rz+6wpNJF616RnF4DxmLMX7fJAvbyG7M1mhNE4MHrjb5ftXhs2FuAjY= -----END CERTIFICATE-----Generated at Tue Oct 28 22:08:43 2025 by rpki-client