$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer File: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer (raw, json) Hash identifier: TVVHlkBx6KDrHH77XHArKJHMzjG81Ysnt/0gYYEJ9sM= Subject key identifier: 7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 03EDE7FBA38BB4F9A36456AD8C88389BE4632AEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft caRepository: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Jun 2025 08:52:12 +0000 Certificate not after: Thu 04 Jun 2026 08:57:12 +0000 Subordinate resources: IP: 103.134.66.0/23 IP: 2001:df7:bd00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ed:e7:fb:a3:8b:b4:f9:a3:64:56:ad:8c:88:38:9b:e4:63:2a:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 5 08:52:12 2025 GMT Not After : Jun 4 08:57:12 2026 GMT Subject: CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:1e:52:5f:80:85:e0:e3:94:cb:24:31:c4:76: 87:62:6f:d6:1e:6b:55:73:92:eb:cb:77:f5:14:bf: 1c:2e:7f:e1:12:83:f2:d1:6c:ce:43:8f:70:94:c3: 8a:34:7c:8c:fd:05:e6:f6:d9:7c:ef:00:10:02:5c: 84:a6:c2:f9:7f:2a:02:d1:ba:f7:54:19:b7:ca:4a: 1c:01:07:93:c0:0f:fc:40:49:28:85:65:b0:66:b7: 4f:5b:47:21:53:47:97:0e:72:fc:e2:a4:db:ba:dd: 85:38:4f:dc:26:bc:c7:ee:30:f8:80:46:9e:a8:2d: db:f1:69:df:05:b0:24:03:53:34:36:f6:a2:06:a0: 20:1d:72:cd:f2:48:3d:d4:5b:5d:71:a2:f6:38:86: 47:1d:af:8e:8d:72:c1:3e:f4:d3:9f:0e:8f:36:62: e4:dc:1e:c8:80:7c:70:cf:d2:7f:71:cd:be:07:6d: 07:13:91:aa:22:7b:cd:88:23:a2:3d:a4:e0:f5:4a: 23:61:b9:20:d5:ca:aa:3a:0f:f5:2d:e8:65:0f:62: 8f:6c:1e:03:7a:0a:2c:a8:97:4c:50:53:69:05:ca: 1f:dd:86:7b:2a:77:72:5a:a2:34:50:4e:55:83:67: 01:b6:58:de:73:86:52:13:cf:d5:b6:cf:28:a8:35: 9a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.134.66.0/23 IPv6: 2001:df7:bd00::/48 Signature Algorithm: sha256WithRSAEncryption 94:de:c6:03:ea:c8:b6:bb:69:a0:e5:b5:f2:19:80:ae:5f:4f: 87:65:ed:2d:ca:e2:09:c2:17:1c:65:79:39:d1:27:de:d8:72: 40:59:a0:62:16:64:91:21:f6:ee:c5:2c:ad:35:28:d1:6d:70: 83:ab:bb:1f:d2:0e:0f:92:8d:e3:04:56:51:ad:46:5f:d6:f8: 61:f3:7c:8a:c4:9a:4b:52:41:bc:1f:b6:35:a2:f8:3f:96:01: a0:cc:a4:32:78:f6:12:1c:79:48:ce:b7:ea:27:1c:58:05:46: 9a:ec:29:b3:20:94:49:22:cd:6e:a7:40:75:f6:cf:f2:ec:d1: c3:ba:49:e3:3b:66:22:f5:f8:42:05:3d:0d:8a:a7:ec:8d:4d: a2:bb:17:51:8e:9e:15:78:61:e6:e8:d4:c6:df:7d:60:52:54: 42:99:2e:9e:61:2b:96:67:7d:60:6e:d9:d4:7d:5b:b5:ed:d1: 84:24:33:4f:db:34:27:90:8c:80:20:04:78:29:e4:4f:3d:7d: 5c:cb:0b:a5:a1:42:01:41:5f:58:a4:15:42:54:c2:2a:72:dd: c8:7e:54:8b:f3:fe:1d:f5:f7:85:e1:86:e5:62:78:00:9d:31: e1:1a:00:86:1f:a7:20:b8:3f:35:61:c9:ef:03:29:74:9e:bc: bf:fe:f7:d6 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUA+3n+6OLtPmjZFatjIg4m+RjKuwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwNTA4NTIxMloX DTI2MDYwNDA4NTcxMlowMzExMC8GA1UEAxMoN0Y5RUNFNzQzQTMwNzRFNjFGNTZD RDExMTYxQUE1OEE2QkI0MDkyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOAeUl+AheDjlMskMcR2h2Jv1h5rVXOS68t39RS/HC5/4RKD8tFszkOPcJTD ijR8jP0F5vbZfO8AEAJchKbC+X8qAtG691QZt8pKHAEHk8AP/EBJKIVlsGa3T1tH IVNHlw5y/OKk27rdhThP3Ca8x+4w+IBGnqgt2/Fp3wWwJANTNDb2ogagIB1yzfJI PdRbXXGi9jiGRx2vjo1ywT70058OjzZi5NweyIB8cM/Sf3HNvgdtBxORqiJ7zYgj oj2k4PVKI2G5INXKqjoP9S3oZQ9ij2weA3oKLKiXTFBTaQXKH92Geyp3clqiNFBO VYNnAbZY3nOGUhPP1bbPKKg1miUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH+eznQ6MHTmH1bNERYapYprtAksMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZjY2YmZhNi1kYzRjLTQxMDgtOTMyYy0yMDRiNjJlODYyNzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JmNjZiZmE2 LWRjNGMtNDEwOC05MzJjLTIwNGI2MmU4NjI3Mi8wLzdGOUVDRTc0M0EzMDc0RTYx RjU2Q0QxMTE2MUFBNThBNkJCNDA5MkMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnhkIwDwQCAAIwCQMHACABDfe9ADANBgkqhkiG9w0BAQsFAAOCAQEAlN7GA+rI trtpoOW18hmArl9Ph2XtLcriCcIXHGV5OdEn3thyQFmgYhZkkSH27sUsrTUo0W1w g6u7H9IOD5KN4wRWUa1GX9b4YfN8isSaS1JBvB+2NaL4P5YBoMykMnj2Ehx5SM63 6iccWAVGmuwpsyCUSSLNbqdAdfbP8uzRw7pJ4ztmIvX4QgU9DYqn7I1NorsXUY6e FXhh5ujUxt99YFJUQpkunmErlmd9YG7Z1H1bte3RhCQzT9s0J5CMgCAEeCnkTz19 XMsLpaFCAUFfWKQVQlTCKnLdyH5Ui/P+HfX3heGG5WJ4AJ0x4RoAhh+nILg/NWHJ 7wMpdJ68v/731g== -----END CERTIFICATE-----Generated at Sun Jun 8 05:16:20 2025 by rpki-client