$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer File: EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.cer (raw, json) Hash identifier: wlhpkYTWeK/PpJ7se2xVAUjrC9rkweqXqRNciQLMd84= Subject key identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1CF0787800C4E3A1E92FB4B427332CCD4F2CB43A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft caRepository: rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 05:18:22 +0000 Certificate not after: Tue 02 Jun 2026 05:23:22 +0000 Subordinate resources: IP: 103.6.214.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:f0:78:78:00:c4:e3:a1:e9:2f:b4:b4:27:33:2c:cd:4f:2c:b4:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 05:18:22 2025 GMT Not After : Jun 2 05:23:22 2026 GMT Subject: CN=EC62A94970E56AC9FE8B828A542B7EDBA3D116D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:f5:18:7e:93:4d:45:f2:cb:8b:da:21:01: f9:eb:19:0d:22:ae:66:64:54:ca:8f:02:e7:8c:54: bd:f5:74:75:c7:8a:e1:c6:bf:8f:0d:72:c8:59:f9: a7:f1:29:ce:25:37:1a:e6:82:47:94:01:f0:d5:60: bf:5a:ad:d6:9e:55:9e:4a:db:31:46:2d:bd:90:ba: 0a:62:4f:c9:06:3a:c4:39:b7:1c:1a:f3:87:f7:4c: 59:c5:0b:32:2b:57:c1:42:87:44:41:90:66:a6:67: 1e:84:b4:02:63:a9:89:57:7f:05:79:89:c3:69:6e: bb:e0:52:ec:b6:00:b2:06:aa:75:b6:f9:e2:9b:20: 48:01:70:b7:2e:c5:c8:33:b8:5c:c0:e5:99:8e:7d: e8:c0:bc:1d:f0:74:63:5a:fd:a0:10:f3:f1:49:fb: da:30:2a:ea:98:e7:14:95:ff:59:86:4e:41:db:c7: 68:f1:03:f6:a6:1b:3c:02:c3:5e:d7:e8:1c:d2:19: fc:45:e2:6d:15:d8:76:12:31:e0:99:81:46:8b:82: 2a:55:91:9a:4c:b8:b2:71:4f:da:f3:0d:44:ff:07: 26:06:94:de:cb:c9:02:5a:01:97:f2:ff:91:0b:bc: 00:a4:72:d4:f8:04:33:3a:66:e4:d4:52:e3:f1:b1: 62:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:62:A9:49:70:E5:6A:C9:FE:8B:82:8A:54:2B:7E:DB:A3:D1:16:D5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/287f8f82-37bb-4983-93ca-5e0670ab02e3/0/EC62A94970E56AC9FE8B828A542B7EDBA3D116D5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.6.214.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:cb:a2:86:10:c0:e2:4a:4e:c8:cd:03:6c:b2:8f:9a:82:c3: 47:ce:f3:62:86:07:ff:b7:e5:10:9b:c2:b3:22:cd:d5:c9:c6: 58:b6:19:c4:e3:23:0d:42:80:4b:17:0e:69:7e:b3:5a:78:b4: 53:cb:51:f5:4f:74:64:0a:37:21:b3:19:c2:00:81:d3:fa:be: 57:cc:12:01:8e:af:77:b6:15:8d:d3:0f:76:5e:2f:e9:d1:bc: 8e:df:44:2a:e6:ec:47:40:8b:ee:7d:04:21:c1:b8:9f:21:0d: 6e:57:fe:c8:9a:1f:b4:dd:89:c7:99:a2:dd:64:90:79:c6:8f: 16:95:2e:db:3a:97:a0:b6:e8:76:94:99:c8:c5:04:4a:4e:76: ee:d0:1e:1b:80:bd:21:f8:cd:28:45:c8:78:1b:fd:06:4a:34: d0:ab:7d:c5:69:9d:7b:d0:5e:6d:bd:1b:2f:35:58:07:aa:28: ed:ff:32:1b:39:0e:a0:b6:ce:83:e7:47:d1:ce:af:68:3c:11: 7e:70:27:09:74:f0:88:c4:98:63:ba:0c:48:54:7f:2f:f5:6a: 15:64:cd:08:88:49:fe:65:62:a8:6d:f8:45:96:6b:0f:bf:2e: 2f:06:89:11:1f:79:c7:fe:69:c1:08:12:0f:41:5a:45:a0:ec: 26:b8:bd:91 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHPB4eADE46HpL7S0JzMszU8stDowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzA1MTgyMloX DTI2MDYwMjA1MjMyMlowMzExMC8GA1UEAxMoRUM2MkE5NDk3MEU1NkFDOUZFOEI4 MjhBNTQyQjdFREJBM0QxMTZENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKy19Rh+k01F8suL2iEB+esZDSKuZmRUyo8C54xUvfV0dceK4ca/jw1yyFn5 p/EpziU3GuaCR5QB8NVgv1qt1p5VnkrbMUYtvZC6CmJPyQY6xDm3HBrzh/dMWcUL MitXwUKHREGQZqZnHoS0AmOpiVd/BXmJw2luu+BS7LYAsgaqdbb54psgSAFwty7F yDO4XMDlmY596MC8HfB0Y1r9oBDz8Un72jAq6pjnFJX/WYZOQdvHaPED9qYbPALD XtfoHNIZ/EXibRXYdhIx4JmBRouCKlWRmky4snFP2vMNRP8HJgaU3svJAloBl/L/ kQu8AKRy1PgEMzpm5NRS4/GxYtsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOxiqUlw5WrJ/ouCilQrftuj0RbVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yODdmOGY4Mi0zN2JiLTQ5ODMtOTNjYS01ZTA2NzBhYjAyZTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4N2Y4Zjgy LTM3YmItNDk4My05M2NhLTVlMDY3MGFiMDJlMy8wL0VDNjJBOTQ5NzBFNTZBQzlG RThCODI4QTU0MkI3RURCQTNEMTE2RDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnBtYwDQYJKoZIhvcNAQELBQADggEBAHrLooYQwOJKTsjNA2yyj5qCw0fO82KG B/+35RCbwrMizdXJxli2GcTjIw1CgEsXDml+s1p4tFPLUfVPdGQKNyGzGcIAgdP6 vlfMEgGOr3e2FY3TD3ZeL+nRvI7fRCrm7EdAi+59BCHBuJ8hDW5X/siaH7TdiceZ ot1kkHnGjxaVLts6l6C26HaUmcjFBEpOdu7QHhuAvSH4zShFyHgb/QZKNNCrfcVp nXvQXm29Gy81WAeqKO3/Mhs5DqC2zoPnR9HOr2g8EX5wJwl08IjEmGO6DEhUfy/1 ahVkzQiISf5lYqht+EWWaw+/Li8GiREfecf+acEIEg9BWkWg7Ca4vZE= -----END CERTIFICATE-----Generated at Mon Jun 9 02:03:32 2025 by rpki-client