$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer File: A70723C87D2C27B95BE6227C631E7D85EF89D513.cer (raw, json) Hash identifier: AZbK2eQnKWjiUuyk2CSuPm07/Fg6xR4E8lMzlZkVp88= Subject key identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 62204E933A6BB36A3D61C0F983EC8F6955968593 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft caRepository: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 16:16:18 +0000 Certificate not after: Tue 02 Jun 2026 16:21:18 +0000 Subordinate resources: IP: 103.48.128.0/22 IP: 2001:df2:2400::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:20:4e:93:3a:6b:b3:6a:3d:61:c0:f9:83:ec:8f:69:55:96:85:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 16:16:18 2025 GMT Not After : Jun 2 16:21:18 2026 GMT Subject: CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4e:7f:05:54:ad:ea:5b:85:01:51:1c:35:e9: 91:df:4f:25:2b:f2:cf:04:b0:68:99:f6:93:90:2b: df:43:64:a8:5b:43:83:48:ad:45:56:bb:c1:3a:39: ae:25:b3:da:4f:f0:79:58:ed:c8:01:bd:c8:36:51: 7b:56:6b:4d:49:a3:4c:2c:ad:60:a5:d5:1b:78:0a: 04:b2:00:30:7e:7f:10:be:08:db:e7:99:e5:61:37: f5:7b:9f:bb:01:fb:91:a0:28:77:82:bc:e1:2a:af: 38:0c:3d:f8:9d:c0:b9:9e:34:63:1a:99:7e:66:c5: 73:1c:78:81:89:6f:52:4e:c0:1d:d2:ba:c4:2c:20: 2d:24:4f:b7:1a:05:a5:28:1b:5b:34:f9:f9:5a:17: 2c:10:e0:e3:d0:8d:60:28:4e:75:38:40:17:4d:63: 4d:96:0e:70:b9:86:62:ba:b8:35:2b:a0:04:ab:7a: 00:70:3a:12:7f:2f:5e:0b:17:62:94:f4:f9:c0:a3: 72:7c:ec:aa:43:ef:b8:f1:24:8d:47:36:f3:4b:a6: de:42:40:e3:83:1a:10:19:5a:97:56:8a:55:52:07: 38:87:9d:35:24:cf:83:b0:37:86:64:d2:d4:ba:a5: 6d:90:f8:01:67:b4:69:e5:cf:93:5e:36:6c:d3:cf: f9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.48.128.0/22 IPv6: 2001:df2:2400::/48 Signature Algorithm: sha256WithRSAEncryption 41:09:44:d5:b2:67:4d:85:87:fc:39:6d:69:ab:31:04:92:51: 56:e9:91:72:d7:c5:f5:1d:d2:5b:88:76:d4:07:bc:b3:40:35: 63:5b:9a:44:4c:1c:d1:0d:6e:ab:03:a6:40:d3:6f:6a:54:43: 47:63:71:12:74:2c:1e:75:41:62:2d:38:08:54:47:a5:ce:13: 64:67:a9:ff:41:e6:38:16:5a:35:71:f1:99:36:37:4c:36:56: 83:65:91:66:32:44:63:8c:94:f9:cf:92:af:5c:8b:ab:37:7f: c0:bf:ae:e6:7f:44:5e:94:33:c9:cb:7d:4a:2b:a4:f0:f7:b1: 9c:b8:f3:fc:fe:34:66:dd:88:2e:e3:10:01:ad:de:80:39:e9: ed:71:44:70:09:85:13:f3:13:95:d8:d8:fb:1c:ad:f6:29:dc: 1c:1f:96:f0:e6:1b:e0:92:3b:97:db:88:ec:59:5d:3b:f2:e4: d3:33:96:82:fa:d0:ca:b6:17:f7:06:78:8b:86:2f:e2:31:5d: 8b:bd:b9:c3:81:fb:e6:c9:ae:40:d9:a4:42:5b:fe:ca:66:a9: e6:af:a3:0c:23:57:20:ae:8c:13:8b:b7:34:5e:c2:fe:7f:6c: 57:b2:0d:ef:42:c3:32:8d:57:d7:90:86:ec:0f:51:9a:a2:6c: 2f:14:11:16 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUYiBOkzprs2o9YcD5g+yPaVWWhZMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzE2MTYxOFoX DTI2MDYwMjE2MjExOFowMzExMC8GA1UEAxMoQTcwNzIzQzg3RDJDMjdCOTVCRTYy MjdDNjMxRTdEODVFRjg5RDUxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxOfwVUrepbhQFRHDXpkd9PJSvyzwSwaJn2k5Ar30NkqFtDg0itRVa7wTo5 riWz2k/weVjtyAG9yDZRe1ZrTUmjTCytYKXVG3gKBLIAMH5/EL4I2+eZ5WE39Xuf uwH7kaAod4K84SqvOAw9+J3AuZ40YxqZfmbFcxx4gYlvUk7AHdK6xCwgLSRPtxoF pSgbWzT5+VoXLBDg49CNYChOdThAF01jTZYOcLmGYrq4NSugBKt6AHA6En8vXgsX YpT0+cCjcnzsqkPvuPEkjUc280um3kJA44MaEBlal1aKVVIHOIedNSTPg7A3hmTS 1LqlbZD4AWe0aeXPk142bNPP+bMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKcHI8h9LCe5W+YifGMefYXvidUTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85YjcwOTA0NC01NzE4LTRmMWQtYTZkMC04NzY2ZWE3M2VhZjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzliNzA5MDQ0 LTU3MTgtNGYxZC1hNmQwLTg3NjZlYTczZWFmNC8wL0E3MDcyM0M4N0QyQzI3Qjk1 QkU2MjI3QzYzMUU3RDg1RUY4OUQ1MTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJnMIAwDwQCAAIwCQMHACABDfIkADANBgkqhkiG9w0BAQsFAAOCAQEAQQlE1bJn TYWH/DltaasxBJJRVumRctfF9R3SW4h21Ae8s0A1Y1uaREwc0Q1uqwOmQNNvalRD R2NxEnQsHnVBYi04CFRHpc4TZGep/0HmOBZaNXHxmTY3TDZWg2WRZjJEY4yU+c+S r1yLqzd/wL+u5n9EXpQzyct9Siuk8PexnLjz/P40Zt2ILuMQAa3egDnp7XFEcAmF E/MTldjY+xyt9incHB+W8OYb4JI7l9uI7FldO/Lk0zOWgvrQyrYX9wZ4i4Yv4jFd i725w4H75smuQNmkQlv+ymap5q+jDCNXIK6ME4u3NF7C/n9sV7IN70LDMo1X15CG 7A9RmqJsLxQRFg== -----END CERTIFICATE-----Generated at Wed Jun 4 00:02:57 2025 by rpki-client