$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer File: 7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer (raw, json) Hash identifier: KYm1Fdwq0iXwZbP0s80W6UehAbAKAI31rzrgoFU13Ts= Subject key identifier: 7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 33DE73B947EBDB4F9F70A72CA0B4D1236F494E23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft caRepository: rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 30 Aug 2025 08:37:54 +0000 Certificate not after: Sat 29 Aug 2026 08:42:54 +0000 Subordinate resources: IP: 103.147.72.0/23 IP: 2405:b040::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:de:73:b9:47:eb:db:4f:9f:70:a7:2c:a0:b4:d1:23:6f:49:4e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 30 08:37:54 2025 GMT Not After : Aug 29 08:42:54 2026 GMT Subject: CN=7D52713C0D26932DC1EECC75CB0C11784C9B0592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:49:0b:63:39:85:6e:97:29:ee:9e:10:ec:ea: 8a:59:e5:57:5f:9d:24:f7:5f:c0:a5:c5:0c:a0:af: 3d:77:4c:38:d6:ac:f9:30:29:d8:0e:b9:00:ae:fc: aa:3b:d2:7b:aa:de:24:84:ad:80:e5:1c:dd:8b:6d: 0e:dd:8a:75:35:77:64:6e:f1:b0:66:85:2b:dc:c5: d6:5e:9b:f4:6e:cc:97:1c:b7:27:80:3b:b0:21:af: e9:34:83:17:3c:34:25:78:2a:c7:81:ce:18:e3:d0: f9:1a:4c:7d:f3:d2:96:9b:6c:bd:a5:5c:c4:93:07: 06:85:0e:b0:28:fa:f6:25:0f:3e:dd:d1:a3:00:16: 5e:8e:27:79:9f:be:27:59:96:f4:c6:15:60:cd:13: aa:b4:9b:02:b4:e9:9a:e4:bf:4a:f5:33:90:09:52: 27:5f:a0:ad:0c:5a:3c:c0:5c:14:25:4f:3b:ac:ad: e8:25:56:94:b4:25:c4:44:e5:5b:46:6f:21:e4:df: 4f:03:6e:c6:1d:5e:d2:25:5f:e0:17:98:e3:f0:c1: 78:c3:f2:1f:7d:af:aa:07:03:0d:d8:dc:4a:23:06: 8b:99:59:d8:86:e6:ff:18:cb:2b:1b:34:dc:15:76: 3c:d6:ae:09:5a:53:a6:52:41:23:5b:55:44:d1:8d: 25:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.72.0/23 IPv6: 2405:b040::/32 Signature Algorithm: sha256WithRSAEncryption 2a:56:1e:ba:ce:fd:12:65:f7:04:1a:b1:67:7c:16:42:03:ba: 30:0c:b3:90:98:88:a2:96:22:70:1d:bf:cb:57:a9:ca:9d:dd: 97:68:a7:2c:ec:03:97:fe:26:a4:5f:5b:96:e8:65:05:0f:4c: 77:a2:1a:bf:fb:46:82:90:e3:8d:74:99:05:40:d1:29:89:f8: 52:bd:00:19:bc:0d:02:73:c1:b2:e1:c3:a5:0d:f7:94:bd:1a: c2:2b:f2:e5:55:24:7f:b8:28:d1:30:86:3a:58:1d:3c:51:ab: af:9a:bc:af:53:34:65:18:a9:a1:11:49:a3:69:8c:d7:85:87: be:c3:6f:e4:cd:e2:65:49:cb:54:48:9e:9d:2f:60:c0:73:0a: 09:ae:48:dd:c0:28:19:f7:14:46:27:fe:7c:1e:68:66:dc:34: a1:f9:81:54:c2:d9:72:16:59:95:57:a0:41:05:09:56:a6:32: 9f:23:c7:4c:fe:e2:c4:05:7b:99:7b:93:a1:e2:1b:12:5f:1d: 9d:ce:b7:1b:d9:56:f9:47:72:0c:9f:40:fc:e9:e2:fc:c0:13: 4e:2a:4e:73:d3:a6:e4:57:70:ac:74:a4:09:ee:a3:5f:88:53: e6:fa:dc:73:b6:14:5c:0d:c1:39:00:e8:64:b7:fd:d1:7a:3f: 2c:2a:ed:52 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUM95zuUfr20+fcKcsoLTRI29JTiMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgzMDA4Mzc1NFoX DTI2MDgyOTA4NDI1NFowMzExMC8GA1UEAxMoN0Q1MjcxM0MwRDI2OTMyREMxRUVD Qzc1Q0IwQzExNzg0QzlCMDU5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALtJC2M5hW6XKe6eEOzqilnlV1+dJPdfwKXFDKCvPXdMONas+TAp2A65AK78 qjvSe6reJIStgOUc3YttDt2KdTV3ZG7xsGaFK9zF1l6b9G7Mlxy3J4A7sCGv6TSD Fzw0JXgqx4HOGOPQ+RpMffPSlptsvaVcxJMHBoUOsCj69iUPPt3RowAWXo4neZ++ J1mW9MYVYM0TqrSbArTpmuS/SvUzkAlSJ1+grQxaPMBcFCVPO6yt6CVWlLQlxETl W0ZvIeTfTwNuxh1e0iVf4BeY4/DBeMPyH32vqgcDDdjcSiMGi5lZ2Ibm/xjLKxs0 3BV2PNauCVpTplJBI1tVRNGNJcECAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH1ScTwNJpMtwe7MdcsMEXhMmwWSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNjY1MjAwMC0xZjJjLTQ3OTEtODFiNC1kNDQ1N2NlZjEyNzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2NjUyMDAw LTFmMmMtNDc5MS04MWI0LWQ0NDU3Y2VmMTI3MC8wLzdENTI3MTNDMEQyNjkzMkRD MUVFQ0M3NUNCMEMxMTc4NEM5QjA1OTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnk0gwDQQCAAIwBwMFACQFsEAwDQYJKoZIhvcNAQELBQADggEBACpWHrrO/RJl 9wQasWd8FkIDujAMs5CYiKKWInAdv8tXqcqd3ZdopyzsA5f+JqRfW5boZQUPTHei Gr/7RoKQ4410mQVA0SmJ+FK9ABm8DQJzwbLhw6UN95S9GsIr8uVVJH+4KNEwhjpY HTxRq6+avK9TNGUYqaERSaNpjNeFh77Db+TN4mVJy1RInp0vYMBzCgmuSN3AKBn3 FEYn/nweaGbcNKH5gVTC2XIWWZVXoEEFCVamMp8jx0z+4sQFe5l7k6HiGxJfHZ3O txvZVvlHcgyfQPzp4vzAE04qTnPTpuRXcKx0pAnuo1+IU+b63HO2FFwNwTkA6GS3 /dF6Pywq7VI= -----END CERTIFICATE-----Generated at Fri Sep 5 10:18:40 2025 by rpki-client