$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer File: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer (raw, json) Hash identifier: 6vgiZc7WqfQKN7fg8GHiw5XPt5TiMYJga33MfqY+Ymw= Subject key identifier: E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 11A447AF8AFEE06BF370ADD8F4C36EBE779AF26E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft caRepository: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 02 Sep 2025 20:31:37 +0000 Certificate not after: Tue 01 Sep 2026 20:36:37 +0000 Subordinate resources: IP: 103.147.74.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a4:47:af:8a:fe:e0:6b:f3:70:ad:d8:f4:c3:6e:be:77:9a:f2:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 2 20:31:37 2025 GMT Not After : Sep 1 20:36:37 2026 GMT Subject: CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:46:56:67:a3:6e:da:92:57:19:ef:df:fb:3b: f9:c4:62:a1:fb:e1:de:f6:42:3f:9d:02:f4:71:55: d1:ef:74:74:5d:e4:a4:9d:7d:0d:e2:7e:e4:79:d6: 41:b8:cd:ff:3f:2c:41:5f:58:b8:21:59:22:9a:50: a9:2b:45:40:0c:89:c7:62:0b:b9:b9:47:24:fd:3c: 55:a5:c7:6d:16:54:88:f8:ad:9a:9c:49:82:b6:28: 4b:80:dc:99:8c:81:58:e9:80:b6:50:26:b5:28:e4: 3a:6e:02:82:09:81:f0:40:4f:8f:b5:44:8d:9f:ea: 44:41:23:70:6b:71:a0:6a:58:7e:8c:f0:9d:e0:57: 73:68:44:46:68:bd:57:d6:43:9b:ea:ac:75:ca:62: 2f:17:78:a2:21:c9:82:59:28:03:17:e1:4b:be:b5: 5f:ba:d1:bb:5c:4f:4f:af:33:eb:4a:35:76:44:f5: 6a:b0:b6:d0:ac:51:cb:2d:72:d4:7f:5e:eb:54:34: cd:37:25:36:a8:14:35:67:eb:53:07:c3:ac:3b:9d: 72:7c:dd:1c:cc:c1:6d:bb:d4:f4:6f:28:50:a8:85: ec:e6:91:0b:fa:7d:a6:50:58:49:68:49:5f:32:c7: e7:54:e6:97:45:9f:e1:0f:2f:74:6c:ff:7a:21:8e: 54:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.74.0/23 Signature Algorithm: sha256WithRSAEncryption 7e:2e:a1:82:47:ae:b4:d9:f8:30:cd:fa:a8:d2:76:a8:57:04: 5b:84:c2:48:9a:12:1a:34:5a:68:1e:66:15:ae:7f:b2:bf:ae: b3:2f:6e:1f:01:dc:42:81:59:ea:e8:d0:33:72:c9:24:ae:ee: d8:c1:b3:dc:2c:d0:11:53:ad:55:7b:dc:2e:a7:cd:84:a7:23: c4:c5:23:0b:2b:c6:99:74:a1:8d:07:f8:48:71:30:f4:43:df: b3:dc:0c:d7:94:77:32:73:bb:9c:ea:83:02:7c:5a:98:e8:dd: 24:ae:ae:2c:83:91:45:b6:dc:9d:72:52:6b:f7:d4:65:44:cd: f5:cf:74:15:f2:3c:91:76:f0:9b:1d:e3:1f:39:47:a4:6f:d2: 88:26:8e:03:37:2e:1a:16:e8:c7:4c:43:8e:a0:36:ee:8b:6c: 62:19:be:86:5a:ae:e3:f9:97:4c:16:f8:38:8e:e8:af:bb:7f: ff:08:8a:84:a7:b2:d0:eb:b4:f8:89:d0:8a:6f:68:da:81:02: 44:eb:02:8f:dc:ff:39:04:3e:7f:06:13:0f:8f:d9:72:36:ef: 5f:58:7b:cb:f6:f1:5b:25:9a:c0:e8:c2:a3:30:08:7d:33:e7: 08:e3:ea:85:7d:d7:04:9c:c4:29:12:8a:b3:0c:a2:2a:58:c9: 43:f5:dc:06 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUEaRHr4r+4GvzcK3Y9MNuvnea8m4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkwMjIwMzEzN1oX DTI2MDkwMTIwMzYzN1owMzExMC8GA1UEAxMoRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3 NzBGNUQ4NDZCNTBGQzc4M0EzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANZGVmejbtqSVxnv3/s7+cRiofvh3vZCP50C9HFV0e90dF3kpJ19DeJ+5HnW QbjN/z8sQV9YuCFZIppQqStFQAyJx2ILublHJP08VaXHbRZUiPitmpxJgrYoS4Dc mYyBWOmAtlAmtSjkOm4CggmB8EBPj7VEjZ/qREEjcGtxoGpYfozwneBXc2hERmi9 V9ZDm+qsdcpiLxd4oiHJglkoAxfhS761X7rRu1xPT68z60o1dkT1arC20KxRyy1y 1H9e61Q0zTclNqgUNWfrUwfDrDudcnzdHMzBbbvU9G8oUKiF7OaRC/p9plBYSWhJ XzLH51Tml0Wf4Q8vdGz/eiGOVNsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOSBO/2f0nycoip3D12Ea1D8eDo8MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNzI5MDdkMy1iZTI0LTRkYTgtOTZiYi1mMTIyOGZjOTkyMDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3MjkwN2Qz LWJlMjQtNGRhOC05NmJiLWYxMjI4ZmM5OTIwNS8wL0U0ODEzQkZEOUZEMjdDOUNB MjJBNzcwRjVEODQ2QjUwRkM3ODNBM0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnk0owDQYJKoZIhvcNAQELBQADggEBAH4uoYJHrrTZ+DDN+qjSdqhXBFuEwkia Eho0WmgeZhWuf7K/rrMvbh8B3EKBWero0DNyySSu7tjBs9ws0BFTrVV73C6nzYSn I8TFIwsrxpl0oY0H+EhxMPRD37PcDNeUdzJzu5zqgwJ8Wpjo3SSuriyDkUW23J1y Umv31GVEzfXPdBXyPJF28Jsd4x85R6Rv0ogmjgM3LhoW6MdMQ46gNu6LbGIZvoZa ruP5l0wW+DiO6K+7f/8IioSnstDrtPiJ0IpvaNqBAkTrAo/c/zkEPn8GEw+P2XI2 719Ye8v28VslmsDowqMwCH0z5wjj6oV91wScxCkSirMMoipYyUP13AY= -----END CERTIFICATE-----Generated at Fri Sep 5 08:21:54 2025 by rpki-client