$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer File: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer (raw, json) Hash identifier: fu4EMPZZBDyWDu7OrtwrQDv8KedBC/JPa5YLd90F2Fc= Subject key identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5755CB438BF15D6499E430552D86BE6C174C23D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft caRepository: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 03 Sep 2025 09:39:46 +0000 Certificate not after: Wed 02 Sep 2026 09:44:46 +0000 Subordinate resources: IP: 103.147.142.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:55:cb:43:8b:f1:5d:64:99:e4:30:55:2d:86:be:6c:17:4c:23:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 3 09:39:46 2025 GMT Not After : Sep 2 09:44:46 2026 GMT Subject: CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f0:ae:55:15:f8:b4:26:59:c4:2d:a7:89:0a: 17:72:94:4b:90:31:51:90:47:81:e1:0a:8b:7a:cd: ba:50:61:2c:27:d1:30:0c:9a:e0:28:0a:c3:b3:bd: 95:63:a3:99:38:7b:17:f2:b9:80:6f:b1:66:c0:46: 41:de:12:50:85:c7:c3:7c:92:7d:b9:e6:60:73:e4: 78:5b:a9:a1:4e:12:df:29:d6:d3:a0:3f:9e:f2:5d: 0f:43:40:5c:cc:ff:77:20:90:46:c1:cc:eb:5a:b5: d3:52:5b:88:e5:c9:d9:af:c6:b2:83:fc:86:7d:9e: 3c:8b:66:da:84:eb:93:72:20:68:ed:67:ae:9c:92: 08:42:05:35:21:ba:ad:30:c3:2c:b1:89:58:7f:29: da:f2:2e:28:8c:bc:74:3d:d6:50:e5:12:09:f3:ab: 23:e7:bb:fc:74:ce:50:72:5e:99:e1:62:d1:33:0c: ee:a1:b0:8b:11:42:8e:19:65:72:10:c9:cc:4d:eb: df:e4:d6:1e:d4:7a:25:1e:c4:3c:17:70:ec:9d:4f: cd:b5:03:6c:4b:18:f3:5d:8c:5e:b0:a6:d0:06:10: d0:5f:75:27:4d:57:0e:3a:de:34:da:1c:98:9a:82: 3e:bc:b4:7a:5b:11:29:a7:ae:d7:f1:af:7c:f8:a7: 62:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.142.0/23 Signature Algorithm: sha256WithRSAEncryption 02:7c:54:22:b8:ee:03:2c:46:50:9c:99:42:23:95:e2:75:5d: 5a:a8:26:0b:0b:67:73:41:31:bd:06:bb:fd:53:50:87:2d:26: d8:19:ef:2d:24:d3:52:38:4f:fd:04:d3:97:eb:92:6b:98:9d: db:a6:71:02:0a:5b:b5:5d:35:9a:33:03:7e:d7:98:5f:30:cb: f4:c7:3e:66:2c:20:03:62:f2:94:11:b7:3c:c9:30:e0:e4:93: f2:e5:35:8c:95:ff:a4:65:75:7a:7d:78:91:19:14:92:38:46: e3:33:27:ca:2b:d3:d7:fb:6d:c1:62:8f:cc:13:5d:44:b2:f1: a9:5d:e5:f6:2b:35:ab:5e:ab:06:4f:5c:be:66:d8:46:b5:a4: 26:2f:af:f0:f0:39:2b:8c:e4:87:7b:5c:b3:e0:7b:4a:c2:49: 17:b6:a3:2e:94:b9:95:f7:19:69:d8:22:dc:34:b4:f8:4c:6c: 99:bf:c3:bc:d2:9f:19:ce:74:f2:24:c8:8f:c9:6a:f7:67:47: ab:a8:99:8e:26:d3:38:cc:05:78:a2:53:a8:46:60:b4:26:05: de:95:85:96:d1:a5:91:0c:79:15:33:a0:9e:e1:2e:3b:9f:70: de:ce:78:79:09:92:38:c9:8f:a3:56:d9:50:36:fe:01:aa:b7: 05:34:57:f7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUV1XLQ4vxXWSZ5DBVLYa+bBdMI9gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkwMzA5Mzk0NloX DTI2MDkwMjA5NDQ0NlowMzExMC8GA1UEAxMoQTJENzkwMjQzRUQ2NTBCMjdEN0E1 NEVCRDE2QURDNjgxMUNGMTRCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLwrlUV+LQmWcQtp4kKF3KUS5AxUZBHgeEKi3rNulBhLCfRMAya4CgKw7O9 lWOjmTh7F/K5gG+xZsBGQd4SUIXHw3ySfbnmYHPkeFupoU4S3ynW06A/nvJdD0NA XMz/dyCQRsHM61q101JbiOXJ2a/GsoP8hn2ePItm2oTrk3IgaO1nrpySCEIFNSG6 rTDDLLGJWH8p2vIuKIy8dD3WUOUSCfOrI+e7/HTOUHJemeFi0TMM7qGwixFCjhll chDJzE3r3+TWHtR6JR7EPBdw7J1PzbUDbEsY812MXrCm0AYQ0F91J01XDjreNNoc mJqCPry0elsRKaeu1/GvfPinYlUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKLXkCQ+1lCyfXpU69Fq3GgRzxS9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZmYwYWY2YS1jNjgwLTQ3MzEtOWI5Mi05YWE5M2Q5YzAxNmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmZjBhZjZh LWM2ODAtNDczMS05YjkyLTlhYTkzZDljMDE2Yy8wL0EyRDc5MDI0M0VENjUwQjI3 RDdBNTRFQkQxNkFEQzY4MTFDRjE0QkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnk44wDQYJKoZIhvcNAQELBQADggEBAAJ8VCK47gMsRlCcmUIjleJ1XVqoJgsL Z3NBMb0Gu/1TUIctJtgZ7y0k01I4T/0E05frkmuYndumcQIKW7VdNZozA37XmF8w y/THPmYsIANi8pQRtzzJMODkk/LlNYyV/6RldXp9eJEZFJI4RuMzJ8or09f7bcFi j8wTXUSy8ald5fYrNateqwZPXL5m2Ea1pCYvr/DwOSuM5Id7XLPge0rCSRe2oy6U uZX3GWnYItw0tPhMbJm/w7zSnxnOdPIkyI/JavdnR6uomY4m0zjMBXiiU6hGYLQm Bd6VhZbRpZEMeRUzoJ7hLjufcN7OeHkJkjjJj6NW2VA2/gGqtwU0V/c= -----END CERTIFICATE-----Generated at Fri Sep 5 08:13:34 2025 by rpki-client