$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer File: 8A05EBF58BEC96D946EE85F0F0F85701A0A72799.cer (raw, json) Hash identifier: s28PTadHGz8aZNvdEv7hGmIPCqSEu6Sbw6VejvAo+6Q= Subject key identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6C040E755D07BDD3E847DCC1DF527F0F75EC1620 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft caRepository: rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 10:41:03 +0000 Certificate not after: Tue 02 Jun 2026 10:46:03 +0000 Subordinate resources: IP: 103.139.46.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:04:0e:75:5d:07:bd:d3:e8:47:dc:c1:df:52:7f:0f:75:ec:16:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 10:41:03 2025 GMT Not After : Jun 2 10:46:03 2026 GMT Subject: CN=8A05EBF58BEC96D946EE85F0F0F85701A0A72799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7d:3b:df:99:e0:53:6d:20:5a:8b:b4:67:e3: 0f:82:9c:35:1c:35:fd:31:6a:0f:30:87:30:ec:cd: 4d:b4:dd:bd:79:3a:bf:a7:16:26:14:42:c1:58:71: 7c:2f:03:a4:8b:0b:90:87:a0:5c:08:90:f4:5f:af: 09:d0:fa:84:2c:a4:d2:57:7e:85:64:f3:41:ff:c1: 72:9f:58:1d:a1:55:a8:df:73:98:13:8b:cb:82:5c: 60:c1:72:25:35:e3:5a:ae:6c:da:56:bd:24:38:b8: e1:35:60:2f:75:bd:c5:0d:d1:5d:79:55:04:61:21: 78:69:23:28:dd:6e:61:ee:89:9b:fd:ae:df:12:e0: 73:e8:04:36:62:43:34:8d:dd:78:2a:15:86:2b:90: 38:0e:e3:74:77:f8:97:71:87:1e:84:a8:06:3e:ed: d1:5f:7a:b8:ba:b4:88:14:a6:ff:7d:a7:ac:fc:bf: 71:7f:f2:65:0a:87:ca:e5:36:c0:d5:21:e5:40:19: 84:c7:0a:c5:e6:e8:da:9a:1a:49:83:59:22:1a:fb: 3c:d0:69:03:b7:85:03:66:12:9d:21:48:5d:e3:df: a9:ef:8e:b5:c5:e1:21:9c:42:c1:c7:4d:9c:5b:51: 84:aa:aa:38:13:9e:8f:0c:12:cf:40:e4:86:66:59: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:05:EB:F5:8B:EC:96:D9:46:EE:85:F0:F0:F8:57:01:A0:A7:27:99 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/12307390-6ef3-4476-a6aa-d0c5783e1f37/0/8A05EBF58BEC96D946EE85F0F0F85701A0A72799.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.46.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:1d:8c:fa:77:e9:61:c9:0f:a3:fa:cd:af:0a:ec:48:75:58: 0c:81:f5:07:08:53:fe:c0:9d:5b:a8:d9:90:73:fa:7a:2b:47: 3c:c6:f2:31:fe:99:c5:fe:ef:d3:3a:7d:60:c1:fb:55:bc:60: be:d3:6e:34:62:3e:d9:9c:c7:96:12:c0:5b:42:15:a9:ad:fe: d9:9e:e2:33:82:47:74:72:1c:39:56:76:d4:30:9a:41:9f:b0: 88:34:14:60:88:4b:44:a8:bb:75:68:46:48:df:1e:13:69:82: bd:b1:a2:8b:3f:47:9e:41:a7:59:2a:41:0f:82:96:bb:5c:a8: dc:3a:ad:ad:33:4c:01:0b:ec:ec:9c:dd:20:43:7f:56:77:a0: e3:6f:95:b0:c7:a6:f9:a3:14:65:2c:1c:92:0b:51:64:1a:e3: 2d:a5:17:99:3b:da:f6:13:2e:f6:24:8a:8f:8d:9b:95:dc:8c: 7e:cb:07:3d:eb:18:f2:7d:cb:a5:03:4a:d4:40:75:1b:47:a7: 2a:20:1b:ef:f9:fc:d3:70:e1:e5:a6:da:25:02:78:1a:79:ec: 62:42:0b:fe:fe:43:d1:4a:85:7a:c7:c4:18:ac:cc:f0:b1:35: 2d:71:55:70:36:9a:f9:8f:2a:31:a1:57:4e:50:5e:98:a4:54: 12:94:eb:87 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbAQOdV0HvdPoR9zB31J/D3XsFiAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzEwNDEwM1oX DTI2MDYwMjEwNDYwM1owMzExMC8GA1UEAxMoOEEwNUVCRjU4QkVDOTZEOTQ2RUU4 NUYwRjBGODU3MDFBMEE3Mjc5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN99O9+Z4FNtIFqLtGfjD4KcNRw1/TFqDzCHMOzNTbTdvXk6v6cWJhRCwVhx fC8DpIsLkIegXAiQ9F+vCdD6hCyk0ld+hWTzQf/Bcp9YHaFVqN9zmBOLy4JcYMFy JTXjWq5s2la9JDi44TVgL3W9xQ3RXXlVBGEheGkjKN1uYe6Jm/2u3xLgc+gENmJD NI3deCoVhiuQOA7jdHf4l3GHHoSoBj7t0V96uLq0iBSm/32nrPy/cX/yZQqHyuU2 wNUh5UAZhMcKxebo2poaSYNZIhr7PNBpA7eFA2YSnSFIXePfqe+OtcXhIZxCwcdN nFtRhKqqOBOejwwSz0DkhmZZ040CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIoF6/WL7JbZRu6F8PD4VwGgpyeZMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMjMwNzM5MC02ZWYzLTQ0NzYtYTZhYS1kMGM1NzgzZTFmMzcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyMzA3Mzkw LTZlZjMtNDQ3Ni1hNmFhLWQwYzU3ODNlMWYzNy8wLzhBMDVFQkY1OEJFQzk2RDk0 NkVFODVGMEYwRjg1NzAxQTBBNzI3OTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFniy4wDQYJKoZIhvcNAQELBQADggEBAI8djPp36WHJD6P6za8K7Eh1WAyB9QcI U/7AnVuo2ZBz+norRzzG8jH+mcX+79M6fWDB+1W8YL7TbjRiPtmcx5YSwFtCFamt /tme4jOCR3RyHDlWdtQwmkGfsIg0FGCIS0Sou3VoRkjfHhNpgr2xoos/R55Bp1kq QQ+ClrtcqNw6ra0zTAEL7Oyc3SBDf1Z3oONvlbDHpvmjFGUsHJILUWQa4y2lF5k7 2vYTLvYkio+Nm5XcjH7LBz3rGPJ9y6UDStRAdRtHpyogG+/5/NNw4eWm2iUCeBp5 7GJCC/7+Q9FKhXrHxBiszPCxNS1xVXA2mvmPKjGhV05QXpikVBKU64c= -----END CERTIFICATE-----Generated at Tue Jun 3 23:52:14 2025 by rpki-client