$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer File: C710954C7B301C60B82BA6372CACEB81DA08F190.cer (raw, json) Hash identifier: hFYLvM0/cv//iQYuLibT+ucI3Avm3Fhn9oUR1bjABNQ= Subject key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7A0AE5A68E45C3B4DC73704EDA4E2303FEC7247C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft caRepository: rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 13 Jul 2025 01:24:26 +0000 Certificate not after: Sun 12 Jul 2026 01:29:26 +0000 Subordinate resources: IP: 103.58.111.0/24 IP: 2001:df4:4400::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 09:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:0a:e5:a6:8e:45:c3:b4:dc:73:70:4e:da:4e:23:03:fe:c7:24:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 13 01:24:26 2025 GMT Not After : Jul 12 01:29:26 2026 GMT Subject: CN=C710954C7B301C60B82BA6372CACEB81DA08F190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:1e:1b:4c:ee:43:6c:92:77:e4:7e:77:bf: 5e:9e:a4:73:6a:c7:57:fc:c1:b9:5e:d1:09:0d:d4: 4b:2f:49:98:16:d5:5e:cd:bf:0e:88:5e:8e:1b:50: 82:ce:e3:4b:6a:0a:15:09:87:5e:1e:6a:2b:69:49: 2e:fb:99:0d:af:76:23:cf:e3:d8:19:b4:58:f3:f5: ff:f1:c9:ce:a3:51:b6:5a:c0:43:c9:5a:06:47:f6: eb:20:6e:94:ad:6b:5b:eb:a5:47:7f:30:2b:eb:a4: 4a:05:59:32:a4:83:05:9f:3e:0e:29:63:f1:21:5e: 80:a2:ee:42:28:e8:7f:4b:7b:a7:21:84:fe:86:a2: ea:28:a7:80:9b:c5:75:34:5a:0a:6b:41:4f:26:86: 68:e1:49:b5:5f:d4:86:e4:94:68:72:7e:e8:70:ff: f6:4a:ea:30:fd:bf:24:41:e0:55:d6:d5:5f:eb:94: 40:86:15:54:b7:e8:e6:4e:14:6e:92:fd:b3:98:b7: cf:87:0d:b3:c1:51:0a:0b:4b:9f:22:8b:41:4f:ee: 9e:48:ba:6b:33:6f:d6:47:41:46:4f:01:73:d6:18: 61:51:48:a9:72:ca:40:f8:bc:81:04:a8:7b:81:d5: e9:8e:85:7f:1d:4b:9b:09:ee:eb:d9:fb:c0:95:80: 16:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.58.111.0/24 IPv6: 2001:df4:4400::/48 Signature Algorithm: sha256WithRSAEncryption 2a:b3:74:c7:48:1b:40:a3:54:0b:28:2c:f2:09:a4:a3:c7:52: 63:91:2b:b2:b7:97:cf:7c:d2:93:a4:04:f1:5d:48:65:9b:fc: e6:07:6c:78:76:c1:cb:a9:8f:4d:e3:53:bd:11:06:b2:14:0c: 26:6e:13:2f:4c:7a:86:f6:7b:71:78:df:9d:43:fe:1d:7b:17: 55:ec:42:23:8b:3b:d8:6e:8c:5c:ce:9b:33:28:0a:a5:a5:a1: 6e:1e:f3:1b:2c:79:1f:c9:70:10:66:df:40:8a:14:fe:ae:21: 84:51:66:92:61:9a:58:51:56:91:91:22:81:5c:b4:99:61:7e: 9e:11:cb:a6:d8:de:b1:d9:6e:0b:50:a5:0a:f9:15:cb:7b:40: f4:f3:95:d7:9d:3f:9b:6d:78:29:7e:51:a3:16:a2:7d:d3:cc: 53:17:cb:ec:56:99:75:21:1c:47:71:e6:87:e6:e9:f0:9d:87: c8:9c:3b:97:6f:57:b6:08:49:04:1e:0e:39:64:ac:c5:4f:64: 4b:45:4b:48:5f:df:1e:a8:96:a3:56:f8:89:ce:83:7b:ee:37: 1f:42:49:31:44:de:39:85:1b:b9:2f:77:ea:0a:16:4c:4f:54: c9:0c:67:d7:0d:86:c9:73:5d:fc:69:38:34:65:26:97:64:ff: 58:01:64:3e -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUegrlpo5Fw7Tcc3BO2k4jA/7HJHwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxMzAxMjQyNloX DTI2MDcxMjAxMjkyNlowMzExMC8GA1UEAxMoQzcxMDk1NEM3QjMwMUM2MEI4MkJB NjM3MkNBQ0VCODFEQTA4RjE5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMbBHhtM7kNsknfkfne/Xp6kc2rHV/zBuV7RCQ3USy9JmBbVXs2/DohejhtQ gs7jS2oKFQmHXh5qK2lJLvuZDa92I8/j2Bm0WPP1//HJzqNRtlrAQ8laBkf26yBu lK1rW+ulR38wK+ukSgVZMqSDBZ8+Dilj8SFegKLuQijof0t7pyGE/oai6iingJvF dTRaCmtBTyaGaOFJtV/UhuSUaHJ+6HD/9krqMP2/JEHgVdbVX+uUQIYVVLfo5k4U bpL9s5i3z4cNs8FRCgtLnyKLQU/unki6azNv1kdBRk8Bc9YYYVFIqXLKQPi8gQSo e4HV6Y6Ffx1Lmwnu69n7wJWAFgcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMcQlUx7MBxguCumNyys64HaCPGQMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80M2U0MTc3ZC04MDkzLTQ0N2MtODdiNS1jNzljOGNiNGM3MzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQzZTQxNzdk LTgwOTMtNDQ3Yy04N2I1LWM3OWM4Y2I0YzczMy8wL0M3MTA5NTRDN0IzMDFDNjBC ODJCQTYzNzJDQUNFQjgxREEwOEYxOTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnOm8wDwQCAAIwCQMHACABDfREADANBgkqhkiG9w0BAQsFAAOCAQEAKrN0x0gb QKNUCygs8gmko8dSY5ErsreXz3zSk6QE8V1IZZv85gdseHbBy6mPTeNTvREGshQM Jm4TL0x6hvZ7cXjfnUP+HXsXVexCI4s72G6MXM6bMygKpaWhbh7zGyx5H8lwEGbf QIoU/q4hhFFmkmGaWFFWkZEigVy0mWF+nhHLptjesdluC1ClCvkVy3tA9POV150/ m214KX5RoxaifdPMUxfL7FaZdSEcR3Hmh+bp8J2HyJw7l29XtghJBB4OOWSsxU9k S0VLSF/fHqiWo1b4ic6De+43H0JJMUTeOYUbuS936goWTE9UyQxn1w2GyXNd/Gk4 NGUml2T/WAFkPg== -----END CERTIFICATE-----Generated at Sun Nov 2 03:37:22 2025 by rpki-client