$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer File: 81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.cer (raw, json) Hash identifier: hM9WyAldDuNq/38l82/SJH45y/LtSzz7QoPHfyagzxE= Subject key identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 223FD46F74DBDB8D74F389A97E8FC3945BCD1493 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft caRepository: rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 29 Aug 2025 09:29:13 +0000 Certificate not after: Fri 28 Aug 2026 09:34:13 +0000 Subordinate resources: IP: 103.96.146.0/23 IP: 2001:df2:e9c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3f:d4:6f:74:db:db:8d:74:f3:89:a9:7e:8f:c3:94:5b:cd:14:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 29 09:29:13 2025 GMT Not After : Aug 28 09:34:13 2026 GMT Subject: CN=81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:08:f8:cf:26:3a:eb:5f:a1:e0:33:57:e1: f1:7b:e2:f7:1d:45:8a:0e:40:55:07:96:5c:a2:2c: bc:8a:59:bd:1c:1b:60:da:26:ad:78:ba:b6:3c:6f: 1f:84:51:6b:7b:ff:28:0d:d6:9e:61:c5:e1:8f:b8: cc:48:82:f7:92:a0:58:90:50:f1:9f:c2:b5:aa:c6: 31:aa:05:fb:64:07:c2:3a:2a:24:d9:32:33:bb:b2: 07:ec:34:60:94:68:1a:6c:41:3c:bc:12:97:97:fa: fb:9f:b0:82:8a:c8:aa:7d:e7:d2:15:65:1e:2b:2d: 09:ec:f2:3f:cc:4b:c1:dc:37:72:33:57:9e:9c:ae: 62:4e:9a:6d:3f:76:c1:2a:32:dd:d8:bb:f8:b2:79: 1e:c3:e1:1a:a3:99:1c:06:ff:5e:a8:e2:94:12:43: 80:8b:86:14:0b:6f:b5:2b:60:75:b0:2b:e7:c4:aa: b0:e9:fc:88:49:77:68:b2:3a:30:87:69:51:4d:68: 73:39:22:78:c2:01:13:be:91:52:ed:80:e4:af:0f: 88:ed:10:b5:1e:63:bb:46:57:92:40:c9:e7:2e:39: 53:9e:e0:8f:47:24:ed:64:65:ba:db:ab:27:55:f5: e2:f9:05:87:e2:4f:76:49:93:0d:12:37:aa:55:e6: 4b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 81:C2:03:CF:45:8E:48:A8:FF:34:5F:B4:A5:DD:84:C6:FA:2D:CD:0A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/da4746b7-5ff2-4556-8a3e-5a86cbcc8598/0/81C203CF458E48A8FF345FB4A5DD84C6FA2DCD0A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.96.146.0/23 IPv6: 2001:df2:e9c0::/48 Signature Algorithm: sha256WithRSAEncryption 2f:79:0f:d6:ed:fd:e6:a2:d0:33:d8:49:49:81:81:61:c8:d4: 40:2f:d9:21:03:85:e4:4f:b3:c6:22:cf:08:51:8d:6e:90:58: ac:d8:e2:3d:31:73:3e:5c:e6:7b:4e:82:ee:75:be:77:c8:67: 49:a1:6e:a9:0e:72:b6:43:d9:fe:46:2f:4d:d8:5c:b8:0e:6a: 82:16:79:5b:9e:88:08:2a:bb:6c:ba:b8:a0:4c:f5:99:51:30: 2d:c6:75:bb:37:02:76:17:c5:fd:22:97:36:a2:3d:65:6e:64: 10:b5:bd:fc:ed:d1:2b:e1:d0:5d:a1:31:ca:6b:34:cb:91:3b: c1:10:79:fb:0b:2d:20:02:51:69:e1:c6:d6:4d:76:92:1b:89: 8c:c5:4b:a6:2e:1c:99:e9:2e:d0:bb:f4:46:a5:d4:b9:22:79: c3:26:28:89:9c:57:c3:d6:62:1e:67:20:43:97:e4:ac:a0:6f: b9:70:ae:52:2b:f9:5e:f4:5b:5d:74:bf:6f:a1:69:6f:25:60: 37:9a:e4:6c:59:34:c8:66:11:7b:5c:00:20:3f:c5:24:45:e3: e4:3e:23:ec:c7:8e:60:f0:f3:b5:d6:76:ce:f8:5f:81:e7:aa: af:32:db:6b:d5:b0:37:ce:ed:79:4c:60:e4:74:89:e0:da:30: e7:9f:83:88 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUIj/Ub3Tb241084mpfo/DlFvNFJMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyOTA5MjkxM1oX DTI2MDgyODA5MzQxM1owMzExMC8GA1UEAxMoODFDMjAzQ0Y0NThFNDhBOEZGMzQ1 RkI0QTVERDg0QzZGQTJEQ0QwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsICPjPJjrrX6HgM1fh8Xvi9x1Fig5AVQeWXKIsvIpZvRwbYNomrXi6tjxv H4RRa3v/KA3WnmHF4Y+4zEiC95KgWJBQ8Z/CtarGMaoF+2QHwjoqJNkyM7uyB+w0 YJRoGmxBPLwSl5f6+5+wgorIqn3n0hVlHistCezyP8xLwdw3cjNXnpyuYk6abT92 wSoy3di7+LJ5HsPhGqOZHAb/XqjilBJDgIuGFAtvtStgdbAr58SqsOn8iEl3aLI6 MIdpUU1oczkieMIBE76RUu2A5K8PiO0QtR5ju0ZXkkDJ5y45U57gj0ck7WRlutur J1X14vkFh+JPdkmTDRI3qlXmS00CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIHCA89Fjkio/zRftKXdhMb6Lc0KMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYTQ3NDZiNy01ZmYyLTQ1NTYtOGEzZS01YTg2Y2JjYzg1OTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhNDc0NmI3 LTVmZjItNDU1Ni04YTNlLTVhODZjYmNjODU5OC8wLzgxQzIwM0NGNDU4RTQ4QThG RjM0NUZCNEE1REQ4NEM2RkEyRENEMEEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnYJIwDwQCAAIwCQMHACABDfLpwDANBgkqhkiG9w0BAQsFAAOCAQEAL3kP1u39 5qLQM9hJSYGBYcjUQC/ZIQOF5E+zxiLPCFGNbpBYrNjiPTFzPlzme06C7nW+d8hn SaFuqQ5ytkPZ/kYvTdhcuA5qghZ5W56ICCq7bLq4oEz1mVEwLcZ1uzcCdhfF/SKX NqI9ZW5kELW9/O3RK+HQXaExyms0y5E7wRB5+wstIAJRaeHG1k12khuJjMVLpi4c meku0Lv0RqXUuSJ5wyYoiZxXw9ZiHmcgQ5fkrKBvuXCuUiv5XvRbXXS/b6FpbyVg N5rkbFk0yGYRe1wAID/FJEXj5D4j7MeOYPDztdZ2zvhfgeeqrzLba9WwN87teUxg 5HSJ4Now55+DiA== -----END CERTIFICATE-----Generated at Fri Sep 5 10:18:43 2025 by rpki-client