$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/809C666CC84F942588E109E6E6C454A9CD0524EB.cer File: 809C666CC84F942588E109E6E6C454A9CD0524EB.cer (raw, json) Hash identifier: X6K/H+fVzu5yjeNp8vOHJeP0UD6UzLWZQ6w6aozFwhE= Subject key identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3E2121337B469B177D1B05BEF1E4688D1F6E43F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft caRepository: rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 24 May 2025 01:31:28 +0000 Certificate not after: Sat 23 May 2026 01:36:28 +0000 Subordinate resources: IP: 103.131.61.0/24 IP: 2001:df7:300::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 06:20:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:21:21:33:7b:46:9b:17:7d:1b:05:be:f1:e4:68:8d:1f:6e:43:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 24 01:31:28 2025 GMT Not After : May 23 01:36:28 2026 GMT Subject: CN=809C666CC84F942588E109E6E6C454A9CD0524EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f0:3f:93:6f:fd:dc:42:6b:b8:ae:2f:b7:a5: c9:67:53:e3:7d:47:de:21:49:5a:2d:0b:59:7f:1c: e8:7a:90:88:9b:e0:06:d7:cf:c6:7b:81:1f:7c:78: de:30:6f:37:d3:f5:2e:e9:2f:1e:7a:26:c6:a5:83: 06:59:44:4b:9b:46:fd:c2:7c:a8:20:2a:3c:e4:d7: 4b:de:12:6b:ff:2d:6c:71:fc:18:16:2d:fd:28:a9: 47:fc:7c:f3:c5:a9:71:42:e8:d2:e6:51:ec:15:66: 18:e7:f7:93:fd:93:69:19:20:c2:31:fd:a5:e1:76: ac:97:19:aa:5e:a4:d0:25:7b:b7:02:7b:dc:09:40: 91:28:50:43:5b:8b:de:f3:7c:53:57:12:7b:63:1c: f1:b6:eb:c6:e2:30:a5:46:29:5b:79:87:cb:a0:ef: 0e:5e:e0:22:d9:00:41:2c:b2:93:12:1f:14:53:01: c8:a0:42:89:90:a7:8a:51:1e:e2:14:ea:6d:8e:81: bf:4c:98:c7:d4:4a:00:e1:19:ac:bb:62:59:65:02: 5f:c0:30:29:1a:c4:b1:2d:99:e4:4d:9a:e1:7c:01: 97:36:6f:fd:43:37:2b:00:52:0c:cf:f9:56:10:9b: ee:d9:90:be:ab:c1:15:c0:3c:75:25:ad:06:c8:81: 01:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:9C:66:6C:C8:4F:94:25:88:E1:09:E6:E6:C4:54:A9:CD:05:24:EB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a6d57201-7e2f-49bb-941d-9fcabe8623f5/0/809C666CC84F942588E109E6E6C454A9CD0524EB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.131.61.0/24 IPv6: 2001:df7:300::/48 Signature Algorithm: sha256WithRSAEncryption 0f:30:9c:3e:8c:dd:fa:6c:e8:2e:64:c4:15:6e:6a:8f:3d:b9: 92:ee:bd:ab:6a:a7:7b:c0:72:64:ea:c3:58:54:58:98:97:fd: e6:0b:74:82:f8:8a:55:f6:a8:da:07:da:32:85:fa:06:47:87: d7:18:4d:87:52:84:c7:2d:ba:3f:35:c5:d3:cc:66:7e:8e:d3: 66:cf:46:7e:01:a1:b1:0f:ee:35:ff:39:3b:18:9c:49:8a:1a: 87:45:d4:63:26:0f:35:f4:16:1d:91:27:61:2f:4e:8c:7e:90: 0c:5f:ce:b0:66:10:00:ec:00:e0:b4:0c:59:07:ee:69:41:0c: ca:7d:76:09:dc:0e:aa:0e:ce:ed:29:9e:cd:5e:12:28:42:74: 40:64:e6:6a:fc:64:43:d7:69:36:1a:bf:39:e4:4b:ed:02:99: 98:a9:32:1a:da:14:03:3d:fb:70:70:4b:db:b7:6f:55:4d:17: 9b:2b:0f:7b:cc:09:dd:96:e1:6c:39:4d:d7:6e:b5:b7:47:27: 35:f6:53:ef:10:68:c7:e9:ff:88:c5:d4:ff:e9:ac:eb:b9:a2: 3b:39:fc:c9:78:0c:c2:7d:2e:4a:c2:e1:b9:fd:fa:9f:73:58: e8:2e:57:f3:6a:e7:d8:32:3a:ed:b5:87:db:d7:3f:ed:ee:7e: 59:6a:e1:5d -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUPiEhM3tGmxd9GwW+8eRojR9uQ/QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUyNDAxMzEyOFoX DTI2MDUyMzAxMzYyOFowMzExMC8GA1UEAxMoODA5QzY2NkNDODRGOTQyNTg4RTEw OUU2RTZDNDU0QTlDRDA1MjRFQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANbwP5Nv/dxCa7iuL7elyWdT431H3iFJWi0LWX8c6HqQiJvgBtfPxnuBH3x4 3jBvN9P1LukvHnomxqWDBllES5tG/cJ8qCAqPOTXS94Sa/8tbHH8GBYt/SipR/x8 88WpcULo0uZR7BVmGOf3k/2TaRkgwjH9peF2rJcZql6k0CV7twJ73AlAkShQQ1uL 3vN8U1cSe2Mc8bbrxuIwpUYpW3mHy6DvDl7gItkAQSyykxIfFFMByKBCiZCnilEe 4hTqbY6Bv0yYx9RKAOEZrLtiWWUCX8AwKRrEsS2Z5E2a4XwBlzZv/UM3KwBSDM/5 VhCb7tmQvqvBFcA8dSWtBsiBAQUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFICcZmzIT5QliOEJ5ubEVKnNBSTrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hNmQ1NzIwMS03ZTJmLTQ5YmItOTQxZC05ZmNhYmU4NjIzZjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2ZDU3MjAx LTdlMmYtNDliYi05NDFkLTlmY2FiZTg2MjNmNS8wLzgwOUM2NjZDQzg0Rjk0MjU4 OEUxMDlFNkU2QzQ1NEE5Q0QwNTI0RUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABngz0wDwQCAAIwCQMHACABDfcDADANBgkqhkiG9w0BAQsFAAOCAQEADzCcPozd +mzoLmTEFW5qjz25ku69q2qne8ByZOrDWFRYmJf95gt0gviKVfao2gfaMoX6BkeH 1xhNh1KExy26PzXF08xmfo7TZs9GfgGhsQ/uNf85OxicSYoah0XUYyYPNfQWHZEn YS9OjH6QDF/OsGYQAOwA4LQMWQfuaUEMyn12CdwOqg7O7SmezV4SKEJ0QGTmavxk Q9dpNhq/OeRL7QKZmKkyGtoUAz37cHBL27dvVU0XmysPe8wJ3ZbhbDlN1261t0cn NfZT7xBox+n/iMXU/+ms67miOzn8yXgMwn0uSsLhuf36n3NY6C5X82rn2DI67bWH 29c/7e5+WWrhXQ== -----END CERTIFICATE-----Generated at Mon Jun 2 06:29:57 2025 by rpki-client