$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer File: F318D15D68E63CEBE4BFA026A5269F3877BE13C1.cer (raw, json) Hash identifier: O3Po1yow01vbwMicgfLMgURVdQt+hGkFbWrWAspMq18= Subject key identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5EC0A57C917000D4562D3488BE83D87F87615832 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft caRepository: rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 10:36:40 +0000 Certificate not after: Tue 02 Jun 2026 10:41:40 +0000 Subordinate resources: IP: 103.97.111.0/24 IP: 103.97.140.0/23 IP: 103.241.24.0/24 IP: 2001:df1:9000::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c0:a5:7c:91:70:00:d4:56:2d:34:88:be:83:d8:7f:87:61:58:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 10:36:40 2025 GMT Not After : Jun 2 10:41:40 2026 GMT Subject: CN=F318D15D68E63CEBE4BFA026A5269F3877BE13C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:bb:bc:a9:c4:e8:52:67:38:8f:ec:94:83: e6:44:ef:9b:59:75:86:e5:4d:2f:59:10:5c:7a:1e: 8e:7f:e0:4d:fc:c9:c8:28:05:e5:2c:b8:e3:95:ff: a2:23:ce:bc:12:84:86:26:67:03:3f:ac:30:46:82: ab:33:3b:44:72:7c:64:40:fe:ac:b7:66:d0:f6:c1: 42:78:16:ce:7c:76:41:19:b8:83:3b:be:6f:67:d7: ef:2f:94:24:aa:68:96:37:aa:40:3f:71:eb:85:51: 98:f0:1a:a6:b3:81:b8:69:15:3d:22:c3:74:b6:78: 21:b7:be:7a:2c:fc:ad:d0:be:71:6e:ef:fb:84:b7: fd:da:5d:98:ee:67:ad:c1:bf:14:75:82:6d:42:96: df:f7:5e:4b:16:35:b6:ce:85:23:0a:79:4a:b4:f0: ba:a1:d4:54:37:4b:68:b7:44:5f:99:c3:98:0f:30: f5:a4:6f:4a:99:3f:53:c6:d5:8c:d9:d7:c9:b4:8e: 5c:4d:f2:8f:a6:0b:55:d8:14:89:40:6a:52:c1:80: 7c:99:b0:b5:82:6f:5f:c9:d4:db:3a:d7:b4:a8:df: 82:be:f9:cb:07:3e:16:dc:cf:27:f9:92:35:75:63: 01:d4:e4:67:aa:30:20:c0:96:60:81:2f:8f:52:e7: 9d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:18:D1:5D:68:E6:3C:EB:E4:BF:A0:26:A5:26:9F:38:77:BE:13:C1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a401436b-0267-466b-a340-e288d2e934a8/0/F318D15D68E63CEBE4BFA026A5269F3877BE13C1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.111.0/24 103.97.140.0/23 103.241.24.0/24 IPv6: 2001:df1:9000::/48 Signature Algorithm: sha256WithRSAEncryption 93:0e:2e:a9:bf:b3:56:43:9c:cd:90:e6:3a:ed:c5:78:2a:e8: a9:f9:2e:ec:fb:30:d9:ab:2f:be:3b:c5:85:d0:33:cc:2e:7c: 01:c4:ce:c5:7e:6b:20:80:4b:fb:83:7e:f7:f7:19:f4:29:40: e4:6f:d3:ac:db:25:fe:c0:6c:0a:6f:b3:a6:cd:bb:c9:9e:e0: 63:9a:86:f3:b6:dc:e2:45:34:87:b3:d1:e4:c1:f6:c2:5f:7d: 7e:83:76:fc:1a:6a:d8:d9:76:58:ab:fb:66:28:43:27:11:96: c0:c9:6c:ef:ba:ec:20:79:e3:1b:2e:df:3c:eb:e5:6e:b7:e8: 02:57:1c:32:ea:7a:a9:a3:6d:2e:16:62:b8:19:67:f1:6a:26: 50:0a:a2:b0:20:bb:77:88:e1:5e:3b:30:84:9f:93:b8:92:43: f1:c1:ff:55:5f:1e:cb:25:15:df:2b:5c:71:79:77:d0:f6:72: c2:b1:1f:4e:92:46:3d:95:03:43:bb:97:61:f5:ee:c1:a4:e9: cb:40:05:9d:66:04:ba:4f:f4:1d:f5:fa:90:50:52:b0:ad:8f: e2:b7:54:3e:83:be:b4:4f:f3:a6:71:80:63:19:fd:3e:cc:98: 37:cc:51:22:45:31:f1:11:01:83:3a:42:fe:8b:cb:2c:fe:f2: 5a:40:7e:0e -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUXsClfJFwANRWLTSIvoPYf4dhWDIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzEwMzY0MFoX DTI2MDYwMjEwNDE0MFowMzExMC8GA1UEAxMoRjMxOEQxNUQ2OEU2M0NFQkU0QkZB MDI2QTUyNjlGMzg3N0JFMTNDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMWJu7ypxOhSZziP7JSD5kTvm1l1huVNL1kQXHoejn/gTfzJyCgF5Sy445X/ oiPOvBKEhiZnAz+sMEaCqzM7RHJ8ZED+rLdm0PbBQngWznx2QRm4gzu+b2fX7y+U JKpoljeqQD9x64VRmPAaprOBuGkVPSLDdLZ4Ibe+eiz8rdC+cW7v+4S3/dpdmO5n rcG/FHWCbUKW3/deSxY1ts6FIwp5SrTwuqHUVDdLaLdEX5nDmA8w9aRvSpk/U8bV jNnXybSOXE3yj6YLVdgUiUBqUsGAfJmwtYJvX8nU2zrXtKjfgr75ywc+FtzPJ/mS NXVjAdTkZ6owIMCWYIEvj1LnndUCAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPMY0V1o5jzr5L+gJqUmnzh3vhPBMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hNDAxNDM2Yi0wMjY3LTQ2NmItYTM0MC1lMjg4ZDJlOTM0YTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E0MDE0MzZi LTAyNjctNDY2Yi1hMzQwLWUyODhkMmU5MzRhOC8wL0YzMThEMTVENjhFNjNDRUJF NEJGQTAyNkE1MjY5RjM4NzdCRTEzQzEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID BABnYW8DBAFnYYwDBABn8RgwDwQCAAIwCQMHACABDfGQADANBgkqhkiG9w0BAQsF AAOCAQEAkw4uqb+zVkOczZDmOu3FeCroqfku7Psw2asvvjvFhdAzzC58AcTOxX5r IIBL+4N+9/cZ9ClA5G/TrNsl/sBsCm+zps27yZ7gY5qG87bc4kU0h7PR5MH2wl99 foN2/Bpq2Nl2WKv7ZihDJxGWwMls77rsIHnjGy7fPOvlbrfoAlccMup6qaNtLhZi uBln8WomUAqisCC7d4jhXjswhJ+TuJJD8cH/VV8eyyUV3ytccXl30PZywrEfTpJG PZUDQ7uXYfXuwaTpy0AFnWYEuk/0HfX6kFBSsK2P4rdUPoO+tE/zpnGAYxn9PsyY N8xRIkUx8REBgzpC/ovLLP7yWkB+Dg== -----END CERTIFICATE-----Generated at Wed Jun 4 00:06:07 2025 by rpki-client