$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer File: EC9D9872A710FE713DC62241D587703BDF7DC1D6.cer (raw, json) Hash identifier: 2kNxtZaOdKRLBCGJfMjz4OkU4EKI9rxfSNQGG3UxNMs= Subject key identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6806EEEF600D9D5890898A011E41FA2E7527D0C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft caRepository: rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 22 Sep 2025 01:42:50 +0000 Certificate not after: Mon 21 Sep 2026 01:47:50 +0000 Subordinate resources: IP: 45.126.56.0/22 IP: 103.19.176.0/22 IP: 2001:df5:4000::/48 IP: 2402:ee80::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:06:ee:ef:60:0d:9d:58:90:89:8a:01:1e:41:fa:2e:75:27:d0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 22 01:42:50 2025 GMT Not After : Sep 21 01:47:50 2026 GMT Subject: CN=EC9D9872A710FE713DC62241D587703BDF7DC1D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:93:f0:76:2b:df:5f:eb:11:37:29:c8:e3: 6d:f4:64:b8:56:21:26:2a:33:ad:10:e5:07:cc:0f: d5:8d:46:00:cd:72:3f:a0:93:af:58:59:de:0e:ab: ec:fd:31:1d:c5:f9:0b:cf:fc:0d:c7:42:9b:41:15: d5:78:8d:e5:cc:20:74:56:42:75:27:be:33:1d:37: 53:ae:72:15:ce:1a:39:56:7f:1c:b1:62:21:9f:7a: b6:fc:8e:72:f3:bf:d4:bc:01:dd:a5:1c:bb:95:5f: 44:e5:4e:e0:2d:cf:d6:d1:f9:b5:a4:94:3e:8b:6d: c4:2c:75:51:c2:89:69:2a:db:85:e7:a2:37:e8:3d: c0:0e:47:76:4a:0f:ac:c1:95:bf:75:2f:ac:4b:9d: e2:61:58:df:ff:a3:5a:01:20:73:9d:80:fb:50:4c: b2:f4:92:fd:b1:1c:7c:40:43:9b:6b:13:1a:3c:5c: aa:9b:81:51:9f:a0:e7:c1:72:75:3f:44:20:e6:93: 32:a0:62:b8:c6:20:59:44:a5:64:37:ca:42:3a:5e: 62:4d:27:48:93:90:a9:52:27:90:91:18:17:0d:2f: 6d:4b:4f:7d:cc:7b:d7:76:02:89:56:50:d2:60:3b: fd:92:d1:3d:04:c4:e5:d9:16:d2:5b:04:88:79:29: 7e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:9D:98:72:A7:10:FE:71:3D:C6:22:41:D5:87:70:3B:DF:7D:C1:D6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a6617d8c-d154-461e-bcca-b66d267cffc7/0/EC9D9872A710FE713DC62241D587703BDF7DC1D6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.126.56.0/22 103.19.176.0/22 IPv6: 2001:df5:4000::/48 2402:ee80::/32 Signature Algorithm: sha256WithRSAEncryption 67:1a:17:9a:1e:b9:ee:37:3f:b3:f9:8e:ac:e7:5a:2a:f5:72: 0e:a4:cf:c4:bc:e6:e5:ca:f1:aa:e7:26:65:ae:a5:92:7c:a6: 17:6b:b1:2d:fb:06:82:45:11:7c:46:9b:2c:6b:19:51:89:02: 82:e1:a8:b7:14:bf:0a:da:70:c7:5b:1b:e6:51:b4:ac:f1:c6: 37:03:15:e9:7c:f2:1f:ba:08:e9:aa:1f:3e:cb:1f:ef:c0:c9: 02:b6:ad:c9:cb:c1:02:bc:be:cd:ad:41:f6:54:9a:c5:8a:6a: 79:9a:0e:ea:73:1b:e8:57:fe:ae:da:23:b9:8d:e8:1c:1f:7f: a9:d9:24:c4:b4:0d:19:23:44:1b:6c:fb:f3:33:b1:78:c1:04: 3c:ca:3d:f6:1c:34:f8:a1:db:37:20:90:21:84:a3:1b:46:de: 49:a1:82:a7:3b:78:fb:81:03:f4:0e:8a:43:4a:b4:4b:99:1c: 00:a8:7c:32:5d:36:c8:75:e2:a7:fa:e3:f9:57:49:07:04:c0: 05:f0:50:1f:ef:35:8d:9e:53:00:2c:7d:07:f2:fb:67:4b:b2: e4:4e:9b:b1:12:9f:76:ef:90:d7:59:bc:60:6c:2e:2c:26:ea: 05:47:c7:0c:e4:b1:3e:d4:82:96:be:35:5f:b0:6b:98:43:ce: 21:ff:1c:ff -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgIUaAbu72ANnViQiYoBHkH6LnUn0MYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyMjAxNDI1MFoX DTI2MDkyMTAxNDc1MFowMzExMC8GA1UEAxMoRUM5RDk4NzJBNzEwRkU3MTNEQzYy MjQxRDU4NzcwM0JERjdEQzFENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKv8k/B2K99f6xE3KcjjbfRkuFYhJiozrRDlB8wP1Y1GAM1yP6CTr1hZ3g6r 7P0xHcX5C8/8DcdCm0EV1XiN5cwgdFZCdSe+Mx03U65yFc4aOVZ/HLFiIZ96tvyO cvO/1LwB3aUcu5VfROVO4C3P1tH5taSUPottxCx1UcKJaSrbheeiN+g9wA5HdkoP rMGVv3UvrEud4mFY3/+jWgEgc52A+1BMsvSS/bEcfEBDm2sTGjxcqpuBUZ+g58Fy dT9EIOaTMqBiuMYgWUSlZDfKQjpeYk0nSJOQqVInkJEYFw0vbUtPfcx713YCiVZQ 0mA7/ZLRPQTE5dkW0lsEiHkpfsMCAwEAAaOCAtYwggLSMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOydmHKnEP5xPcYiQdWHcDvffcHWMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hNjYxN2Q4Yy1kMTU0LTQ2MWUtYmNjYS1iNjZkMjY3Y2ZmYzcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2NjE3ZDhj LWQxNTQtNDYxZS1iY2NhLWI2NmQyNjdjZmZjNy8wL0VDOUQ5ODcyQTcxMEZFNzEz REM2MjI0MUQ1ODc3MDNCREY3REMxRDYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMBIEAgABMAwD BAItfjgDBAJnE7AwFgQCAAIwEAMHACABDfVAAAMFACQC7oAwDQYJKoZIhvcNAQEL BQADggEBAGcaF5oeue43P7P5jqznWir1cg6kz8S85uXK8arnJmWupZJ8phdrsS37 BoJFEXxGmyxrGVGJAoLhqLcUvwracMdbG+ZRtKzxxjcDFel88h+6COmqHz7LH+/A yQK2rcnLwQK8vs2tQfZUmsWKanmaDupzG+hX/q7aI7mN6Bwff6nZJMS0DRkjRBts +/MzsXjBBDzKPfYcNPih2zcgkCGEoxtG3kmhgqc7ePuBA/QOikNKtEuZHACofDJd Nsh14qf64/lXSQcEwAXwUB/vNY2eUwAsfQfy+2dLsuROm7ESn3bvkNdZvGBsLiwm 6gVHxwzksT7Ugpa+NV+wa5hDziH/HP8= -----END CERTIFICATE-----Generated at Sun Oct 19 12:51:13 2025 by rpki-client