$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer File: F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.cer (raw, json) Hash identifier: UA1bAZlOnRbR6RqnE5uOaqkMrxCOvLi+RRdKrhyLTxA= Subject key identifier: F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5B21984426EB6B29E5085AEBE53AD3C90160ED01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft caRepository: rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 20:13:14 +0000 Certificate not after: Tue 02 Jun 2026 20:18:14 +0000 Subordinate resources: IP: 103.155.26.0/24 IP: 2001:df4:aa80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:21:98:44:26:eb:6b:29:e5:08:5a:eb:e5:3a:d3:c9:01:60:ed:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 20:13:14 2025 GMT Not After : Jun 2 20:18:14 2026 GMT Subject: CN=F2286B78D2C96CF3CDF067A89D3F5481591CFE3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4f:2d:03:d0:a8:95:40:92:94:82:af:bf:49: 07:5a:ce:68:86:d2:f8:f5:b9:d5:05:28:00:53:86: 92:17:70:e2:68:39:35:74:d6:f5:bb:e7:9f:00:84: 4c:7e:f6:b9:96:47:79:26:e8:12:6d:12:34:6e:56: bf:13:f4:6a:e4:f5:8f:02:87:33:33:e8:75:9c:86: f5:36:e1:38:a1:d8:d9:99:a9:3e:48:69:26:c9:02: 29:e7:55:57:68:3e:7c:2a:f7:9c:8b:83:76:16:3f: c0:1b:26:9a:c8:9d:56:de:6f:09:3c:33:b5:5c:c5: cf:41:11:2b:a3:49:8e:ad:09:8c:ef:21:10:53:5c: 3c:cd:60:e4:e2:97:1c:b1:a0:06:58:4c:59:47:18: 27:50:d2:5b:8f:64:a4:10:2c:53:40:6c:3d:05:0e: 8d:03:4b:66:06:a1:4b:12:0f:f7:e5:16:91:25:8a: e7:80:55:d5:43:e2:68:4c:e0:e2:2f:47:2d:57:a8: 72:aa:c2:99:1a:88:22:1f:7f:9e:9a:6f:52:76:55: 2e:8a:f1:0d:97:a0:5e:dc:5a:27:79:8d:bb:4f:d8: 58:97:83:69:2c:13:f3:ae:86:ed:51:34:62:80:c9: d6:42:eb:f0:4e:f9:b9:de:07:82:99:54:46:74:64: a1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:28:6B:78:D2:C9:6C:F3:CD:F0:67:A8:9D:3F:54:81:59:1C:FE:3F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/724da152-0024-436d-990d-323806e01699/0/F2286B78D2C96CF3CDF067A89D3F5481591CFE3F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.26.0/24 IPv6: 2001:df4:aa80::/48 Signature Algorithm: sha256WithRSAEncryption 46:a5:0c:8d:b8:e1:02:97:a8:01:79:43:a5:59:fc:c2:43:e5: fc:b9:1b:fa:3f:45:6f:1c:bb:12:48:e6:99:5b:2f:e8:1f:19: 7d:a7:7b:4c:bb:72:cb:aa:41:5e:4e:5e:0d:6f:4f:2d:a1:04: 65:72:85:1b:79:13:9c:c5:d6:5f:6a:a9:4d:2e:75:2b:aa:c4: 1a:09:4e:0c:2e:47:81:5a:19:47:16:28:b1:b3:2c:be:a2:67: 15:6e:aa:bc:6b:2f:36:dc:41:57:b8:05:68:23:1c:3e:84:9d: cc:9c:2d:d2:9f:c6:83:d3:7a:fc:ea:ab:32:d5:94:d2:d0:68: fb:13:05:b3:99:02:59:72:a1:9c:da:4d:96:6d:63:ab:e7:a9: 63:b3:3d:d8:96:ae:d4:e2:c2:a1:e8:ca:07:21:67:7b:c3:44: 69:5d:95:dd:57:ff:9d:94:f1:0d:8b:64:7e:e0:18:36:16:42: c2:69:76:ae:da:a8:80:47:db:cd:f5:b5:ee:64:9f:25:c7:ff: f3:4e:b7:eb:f1:c3:46:20:15:f6:80:b5:92:32:36:10:2f:00: 22:78:2b:b5:f9:53:bd:8c:b0:83:c1:47:73:f5:eb:51:4f:03: 92:47:2e:96:99:60:e3:3d:c9:29:49:fb:37:66:fb:f7:cb:a0: 3d:9d:50:12 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUWyGYRCbraynlCFrr5TrTyQFg7QEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzIwMTMxNFoX DTI2MDYwMjIwMTgxNFowMzExMC8GA1UEAxMoRjIyODZCNzhEMkM5NkNGM0NERjA2 N0E4OUQzRjU0ODE1OTFDRkUzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALhPLQPQqJVAkpSCr79JB1rOaIbS+PW51QUoAFOGkhdw4mg5NXTW9bvnnwCE TH72uZZHeSboEm0SNG5WvxP0auT1jwKHMzPodZyG9TbhOKHY2ZmpPkhpJskCKedV V2g+fCr3nIuDdhY/wBsmmsidVt5vCTwztVzFz0ERK6NJjq0JjO8hEFNcPM1g5OKX HLGgBlhMWUcYJ1DSW49kpBAsU0BsPQUOjQNLZgahSxIP9+UWkSWK54BV1UPiaEzg 4i9HLVeocqrCmRqIIh9/nppvUnZVLorxDZegXtxaJ3mNu0/YWJeDaSwT866G7VE0 YoDJ1kLr8E75ud4HgplURnRkoR8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPIoa3jSyWzzzfBnqJ0/VIFZHP4/MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MjRkYTE1Mi0wMDI0LTQzNmQtOTkwZC0zMjM4MDZlMDE2OTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyNGRhMTUy LTAwMjQtNDM2ZC05OTBkLTMyMzgwNmUwMTY5OS8wL0YyMjg2Qjc4RDJDOTZDRjND REYwNjdBODlEM0Y1NDgxNTkxQ0ZFM0YubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnmxowDwQCAAIwCQMHACABDfSqgDANBgkqhkiG9w0BAQsFAAOCAQEARqUMjbjh ApeoAXlDpVn8wkPl/Lkb+j9Fbxy7EkjmmVsv6B8Zfad7TLtyy6pBXk5eDW9PLaEE ZXKFG3kTnMXWX2qpTS51K6rEGglODC5HgVoZRxYosbMsvqJnFW6qvGsvNtxBV7gF aCMcPoSdzJwt0p/Gg9N6/OqrMtWU0tBo+xMFs5kCWXKhnNpNlm1jq+epY7M92Jau 1OLCoejKByFne8NEaV2V3Vf/nZTxDYtkfuAYNhZCwml2rtqogEfbzfW17mSfJcf/ 80636/HDRiAV9oC1kjI2EC8AIngrtflTvYywg8FHc/XrUU8Dkkculplg4z3JKUn7 N2b798ugPZ1QEg== -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:44 2025 by rpki-client