$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer File: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer (raw, json) Hash identifier: HwkrpnHn7piwbYiy0e++JvztVKl58gLzMOVU15bMhE8= Subject key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 43BCC4437EB2B5D46B8399C2C1074AA3631B2C47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft caRepository: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 03 Sep 2025 15:50:47 +0000 Certificate not after: Wed 02 Sep 2026 15:55:47 +0000 Subordinate resources: IP: 103.182.78.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 09:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:bc:c4:43:7e:b2:b5:d4:6b:83:99:c2:c1:07:4a:a3:63:1b:2c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 3 15:50:47 2025 GMT Not After : Sep 2 15:55:47 2026 GMT Subject: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:e3:c6:16:6f:ff:27:17:0d:bb:a6:2c:0d: 9f:88:c9:e8:aa:f6:16:12:7e:c1:70:9b:1d:0f:bc: 1f:0a:a0:f9:3a:82:37:c4:a2:26:97:8b:c1:76:0a: 65:0e:c2:d3:35:41:0d:f7:b3:d3:32:b7:b4:4b:83: 23:90:8f:36:59:67:bd:71:db:e5:c5:0e:24:f4:8c: 70:72:47:fa:34:ac:9f:0b:5e:9b:14:76:fa:d9:a4: 99:4a:92:6d:e6:b9:b2:6d:b8:1b:92:2c:81:7a:cb: 0d:61:9d:6d:b0:a2:3f:4a:12:f5:06:7c:7d:23:38: d6:c6:31:1e:0b:29:6e:f7:c5:0b:5a:0d:1e:cc:4d: a5:28:d0:5f:f8:e7:d8:58:5c:df:ed:e2:c1:99:35: 5d:5b:5e:3c:2f:f8:14:e3:a2:63:f2:53:88:b3:1d: c2:f7:04:b1:fe:f8:c9:fe:0e:cf:a6:6e:ae:df:b9: 71:74:d3:b5:e3:d5:78:55:c5:0a:cb:2e:5b:27:4c: 03:44:44:b0:73:02:ea:c4:92:b7:35:18:e3:6d:be: 4e:9a:72:ec:b3:e1:89:ee:f0:16:be:28:76:7d:27: a5:7a:2e:70:a6:e9:a3:7a:79:57:07:e2:f5:b3:4f: af:54:ca:12:67:83:fb:d5:13:ab:96:13:09:ea:57: 1f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.78.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:f4:37:b5:77:4a:b9:19:d3:25:6a:f5:67:ce:12:cc:01:ca: d8:b1:13:09:07:89:2b:c4:be:2b:03:35:f2:5f:3a:c6:94:dd: 3a:8a:fb:62:45:a0:b5:d6:a2:42:b7:0e:5d:ed:68:36:41:fb: 96:39:ba:18:d2:5d:eb:20:6e:35:67:ec:89:0e:88:27:d0:c0: 70:58:02:af:60:e5:19:38:96:6d:74:9a:c5:d1:b3:f2:70:45: 48:6c:c4:23:1b:f5:ac:f1:2f:1a:80:ef:bb:0d:a4:f7:37:bb: 60:a8:a9:02:36:8c:51:3e:f3:b5:f3:1f:69:71:a0:d2:c6:ad: ac:7d:34:c3:ec:3b:c5:50:98:f3:54:80:6c:29:b7:f1:a2:a1: c5:22:6c:b9:17:3e:1d:9c:64:7f:d8:d9:06:43:88:ca:30:87: 24:b3:82:9a:b0:fd:3b:61:bc:1b:ac:56:04:86:3b:f7:b9:56: d0:9a:f6:fd:6a:c3:2a:59:19:f7:df:e1:b7:9e:6d:f6:5a:38: 30:fd:bb:6d:45:45:ec:cd:72:8c:f2:c4:15:f6:8a:25:61:8f: ff:67:52:d8:d7:03:df:5f:11:4b:5f:a1:e3:76:82:5f:c4:5c: 62:cd:35:e7:96:78:95:43:86:87:38:00:12:10:6c:16:bf:d1: ec:1e:d9:cc -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQ7zEQ36ytdRrg5nCwQdKo2MbLEcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkwMzE1NTA0N1oX DTI2MDkwMjE1NTU0N1owMzExMC8GA1UEAxMoRDFGNzJFNjdEQTlDQ0UwOTA0NEZB NDIwNEVBOTkzQUU5M0QxOTZENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzr48YWb/8nFw27piwNn4jJ6Kr2FhJ+wXCbHQ+8Hwqg+TqCN8SiJpeLwXYK ZQ7C0zVBDfez0zK3tEuDI5CPNllnvXHb5cUOJPSMcHJH+jSsnwtemxR2+tmkmUqS bea5sm24G5IsgXrLDWGdbbCiP0oS9QZ8fSM41sYxHgspbvfFC1oNHsxNpSjQX/jn 2Fhc3+3iwZk1XVtePC/4FOOiY/JTiLMdwvcEsf74yf4Oz6Zurt+5cXTTtePVeFXF CssuWydMA0REsHMC6sSStzUY422+Tppy7LPhie7wFr4odn0npXoucKbpo3p5Vwfi 9bNPr1TKEmeD+9UTq5YTCepXH3UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNH3LmfanM4JBE+kIE6pk66T0ZbWMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMzRjMzNiOC05ZDQyLTQyMDgtOGFjNC1mMTcyYTE0NGQ4NjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGMzM2I4 LTlkNDItNDIwOC04YWM0LWYxNzJhMTQ0ZDg2OC8wL0QxRjcyRTY3REE5Q0NFMDkw NDRGQTQyMDRFQTk5M0FFOTNEMTk2RDYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFntk4wDQYJKoZIhvcNAQELBQADggEBAF30N7V3SrkZ0yVq9WfOEswBytixEwkH iSvEvisDNfJfOsaU3TqK+2JFoLXWokK3Dl3taDZB+5Y5uhjSXesgbjVn7IkOiCfQ wHBYAq9g5Rk4lm10msXRs/JwRUhsxCMb9azxLxqA77sNpPc3u2CoqQI2jFE+87Xz H2lxoNLGrax9NMPsO8VQmPNUgGwpt/GiocUibLkXPh2cZH/Y2QZDiMowhySzgpqw /TthvBusVgSGO/e5VtCa9v1qwypZGfff4beebfZaODD9u21FRezNcozyxBX2iiVh j/9nUtjXA99fEUtfoeN2gl/EXGLNNeeWeJVDhoc4ABIQbBa/0ewe2cw= -----END CERTIFICATE-----Generated at Fri Sep 5 08:14:30 2025 by rpki-client