$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EBA04070CA27E646C332039E07557734C6732ED2.cer File: EBA04070CA27E646C332039E07557734C6732ED2.cer (raw, json) Hash identifier: K67R8zPF01hQuxoVG/FkyQJYOKPnLyluOmt7DVt+m8w= Subject key identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 655F7C635DF17F8B9D23EDA2C7A6B516087F49C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft caRepository: rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 24 Aug 2025 22:53:08 +0000 Certificate not after: Sun 23 Aug 2026 22:58:08 +0000 Subordinate resources: IP: 103.111.140.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:5f:7c:63:5d:f1:7f:8b:9d:23:ed:a2:c7:a6:b5:16:08:7f:49:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 24 22:53:08 2025 GMT Not After : Aug 23 22:58:08 2026 GMT Subject: CN=EBA04070CA27E646C332039E07557734C6732ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:40:d7:46:82:3e:e3:6f:26:95:b8:9c:85: 49:17:9d:dc:39:4a:4a:37:65:27:cc:1c:d9:d4:cf: 44:c5:c0:9d:a3:6b:d4:eb:67:37:4e:0c:68:79:36: d3:f2:05:f8:51:7f:1f:ec:ad:01:50:6d:51:03:c9: a9:2a:1e:4e:05:02:9f:fb:a7:c3:29:41:42:6d:cb: 0a:dc:c2:26:fa:b0:f6:ca:2c:50:be:d1:41:ee:fc: db:83:6a:18:ab:c1:9b:61:eb:e3:b4:27:95:24:25: 1b:2d:9f:2c:30:88:95:49:09:16:17:c2:fc:70:a6: d7:bd:cd:aa:6a:2c:36:49:50:a7:82:65:d8:06:e2: 72:5a:4a:7d:12:a2:24:6d:d7:f3:df:3d:b3:4d:51: 2d:50:5a:18:3a:af:64:67:21:2c:c2:d1:1e:c2:f0: 8d:23:05:dd:4f:3d:76:fd:95:6f:e2:ef:e8:75:78: 19:57:bb:be:c5:e5:a9:02:7d:75:37:1e:07:2c:dd: 1c:6f:24:f9:ee:30:bf:5e:ef:73:aa:5c:de:82:2b: bb:7b:2b:3d:ab:3c:0d:9d:de:9b:ce:35:b1:a8:26: 47:49:9a:81:b6:60:e2:ee:09:48:d8:c3:6c:95:f3: 7b:97:dc:ae:9b:45:2d:09:5e:fd:e8:e7:81:7b:3a: f2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EB:A0:40:70:CA:27:E6:46:C3:32:03:9E:07:55:77:34:C6:73:2E:D2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1127eafd-a674-4437-abf1-e550dec137fa/0/EBA04070CA27E646C332039E07557734C6732ED2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.111.140.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:da:83:33:1b:28:13:e1:09:5a:9f:d7:c0:68:f8:0e:a4:29: e2:0d:60:6d:00:df:83:34:8c:1c:f0:cc:5f:98:65:23:6b:57: 3b:bb:03:1a:60:17:5a:52:71:d8:8e:e6:66:6d:a0:23:3e:ff: a4:91:38:db:71:2a:fa:62:6d:ba:15:c2:06:1c:b0:78:0d:b8: ba:15:83:69:f3:18:c5:1a:26:33:d2:57:de:d1:c9:75:65:ef: a5:a9:c6:96:bc:fe:c4:51:8a:da:e9:a3:37:db:fa:78:18:6f: 71:bd:17:0f:64:c4:f8:a9:51:60:77:4d:28:85:99:b0:94:b4: dc:09:d2:24:a3:fa:eb:13:87:9b:6a:83:8c:de:67:03:87:89: cd:fd:70:a3:91:03:6f:28:ee:6b:2c:7c:5c:e5:df:21:21:aa: 0e:df:49:5c:c9:b7:4b:b3:e1:b6:de:38:4e:69:f1:16:3e:df: 23:30:74:b8:43:b0:ab:96:ff:ff:75:6f:c2:0e:a5:23:77:f6: 3f:fc:af:7b:b8:7b:7c:d5:6c:a2:1f:94:ba:47:6a:d1:65:64: ec:81:ef:4d:42:ba:27:43:d0:9e:5f:a0:b7:52:3e:45:0c:3e: d0:b8:9f:cc:25:e9:73:32:a5:af:5b:24:78:93:2c:4f:2b:3b: dc:25:e3:4a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZV98Y13xf4udI+2ix6a1Fgh/ScEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyNDIyNTMwOFoX DTI2MDgyMzIyNTgwOFowMzExMC8GA1UEAxMoRUJBMDQwNzBDQTI3RTY0NkMzMzIw MzlFMDc1NTc3MzRDNjczMkVEMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKqcQNdGgj7jbyaVuJyFSRed3DlKSjdlJ8wc2dTPRMXAnaNr1OtnN04MaHk2 0/IF+FF/H+ytAVBtUQPJqSoeTgUCn/unwylBQm3LCtzCJvqw9sosUL7RQe7824Nq GKvBm2Hr47QnlSQlGy2fLDCIlUkJFhfC/HCm173NqmosNklQp4Jl2AbiclpKfRKi JG3X8989s01RLVBaGDqvZGchLMLRHsLwjSMF3U89dv2Vb+Lv6HV4GVe7vsXlqQJ9 dTceByzdHG8k+e4wv17vc6pc3oIru3srPas8DZ3em841sagmR0magbZg4u4JSNjD bJXze5fcrptFLQle/ejngXs68usCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOugQHDKJ+ZGwzIDngdVdzTGcy7SMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMTI3ZWFmZC1hNjc0LTQ0MzctYWJmMS1lNTUwZGVjMTM3ZmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzExMjdlYWZk LWE2NzQtNDQzNy1hYmYxLWU1NTBkZWMxMzdmYS8wL0VCQTA0MDcwQ0EyN0U2NDZD MzMyMDM5RTA3NTU3NzM0QzY3MzJFRDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnb4wwDQYJKoZIhvcNAQELBQADggEBAAragzMbKBPhCVqf18Bo+A6kKeINYG0A 34M0jBzwzF+YZSNrVzu7AxpgF1pScdiO5mZtoCM+/6SRONtxKvpibboVwgYcsHgN uLoVg2nzGMUaJjPSV97RyXVl76Wpxpa8/sRRitrpozfb+ngYb3G9Fw9kxPipUWB3 TSiFmbCUtNwJ0iSj+usTh5tqg4zeZwOHic39cKORA28o7mssfFzl3yEhqg7fSVzJ t0uz4bbeOE5p8RY+3yMwdLhDsKuW//91b8IOpSN39j/8r3u4e3zVbKIflLpHatFl ZOyB701CuidD0J5foLdSPkUMPtC4n8wl6XMypa9bJHiTLE8rO9wl40o= -----END CERTIFICATE-----Generated at Fri Sep 5 08:19:32 2025 by rpki-client