$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer File: F54362AD2B6B191CB7D37B54DCD2468426E8BA98.cer (raw, json) Hash identifier: WsI4Q9k5KlEjWZHRfapbHKYZcJxrQbXM3VyWKIe6Who= Subject key identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 306D7FA673DC5EA2F2CA35A447841BA8C103D37C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft caRepository: rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 06:01:00 +0000 Certificate not after: Tue 02 Jun 2026 06:06:00 +0000 Subordinate resources: IP: 103.143.170.0/23 IP: 2001:df1:8d80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:6d:7f:a6:73:dc:5e:a2:f2:ca:35:a4:47:84:1b:a8:c1:03:d3:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 06:01:00 2025 GMT Not After : Jun 2 06:06:00 2026 GMT Subject: CN=F54362AD2B6B191CB7D37B54DCD2468426E8BA98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e9:5c:c2:ea:5f:79:49:be:d9:64:97:c0:3c: fa:57:cf:30:63:f7:b6:74:15:20:e1:90:01:eb:f6: 17:6e:a6:cc:69:8e:ec:fb:ce:0b:2a:b5:41:9b:4f: 9f:95:84:f2:e9:a9:73:1e:15:70:ad:0f:61:72:4f: 26:3b:e1:42:ee:96:bc:75:23:ab:e1:3e:8e:1a:96: b5:2e:10:02:5a:94:ee:bd:af:ab:2e:32:d7:d4:f0: fa:aa:13:7e:b1:19:2a:3f:f3:5b:aa:04:ac:98:21: 75:00:52:0d:d6:bf:c4:55:3b:81:37:b5:44:5b:49: e3:32:39:0c:69:fc:2c:1d:4f:66:bd:26:e5:28:64: a2:67:79:0b:0e:f5:79:d1:9c:dd:2a:55:c3:c0:c1: 55:d2:d8:a4:2f:96:07:13:01:fe:ef:78:3c:ea:73: 37:ab:1d:af:1c:3d:18:e7:aa:1c:ce:23:82:e7:ba: 66:bd:f4:9b:ba:40:08:71:04:0d:a7:b1:61:4b:ba: 21:ca:56:5e:f0:75:00:ba:00:ce:ea:ef:ff:5a:86: e4:f9:d8:78:b3:ec:67:a7:67:66:a7:c3:45:14:93: 37:65:c6:75:fa:5a:c6:50:14:9c:52:df:fc:18:47: 57:18:57:77:4d:7d:48:da:23:19:75:d7:e2:b2:97: b7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:43:62:AD:2B:6B:19:1C:B7:D3:7B:54:DC:D2:46:84:26:E8:BA:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ac0b39e2-687b-4614-809f-73672ea212cf/0/F54362AD2B6B191CB7D37B54DCD2468426E8BA98.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.170.0/23 IPv6: 2001:df1:8d80::/48 Signature Algorithm: sha256WithRSAEncryption 4a:cb:ef:7a:63:91:a9:52:78:e1:11:01:a0:ac:fe:09:57:26: f1:d3:47:1f:b6:7b:53:50:64:7e:55:7d:f8:1b:07:34:94:0e: 11:ac:14:9a:01:1e:57:54:a9:52:4c:c3:06:1a:f2:b0:a2:7c: 6b:0e:6a:6a:bb:7c:54:79:4a:51:0a:9b:28:82:b8:25:0f:dd: c4:63:7f:83:77:7d:fb:3f:b3:39:82:4e:8f:81:31:c5:a0:cc: a9:16:0f:66:f1:a3:67:5c:55:0f:49:de:4d:11:0c:63:f9:1c: 2b:a7:df:b1:4f:a9:19:3d:97:4d:16:ff:b9:67:c7:c9:3e:cc: d8:24:f1:11:1d:57:d1:3e:e7:e8:56:9a:e7:b2:4a:1d:d2:48: 18:a6:f0:89:dc:1c:e7:6a:26:3c:db:69:f2:42:4f:3b:55:97: 60:b5:69:a2:03:c4:b9:11:4c:8d:31:c1:64:f6:db:e8:f8:60: 02:6c:9d:da:61:2d:17:40:5a:7a:97:f8:20:9f:43:53:ad:dd: 4a:d2:d5:3f:2a:a2:e4:a3:16:39:86:09:1c:4f:a6:7f:d6:08: 87:55:b9:fc:e3:3b:70:15:74:89:2a:8f:2f:eb:8b:91:7d:52: 4e:2f:5e:e4:27:6d:5b:76:56:a8:82:e3:f2:98:7c:be:76:ea: 0d:89:06:e2 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUMG1/pnPcXqLyyjWkR4QbqMED03wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzA2MDEwMFoX DTI2MDYwMjA2MDYwMFowMzExMC8GA1UEAxMoRjU0MzYyQUQyQjZCMTkxQ0I3RDM3 QjU0RENEMjQ2ODQyNkU4QkE5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALzpXMLqX3lJvtlkl8A8+lfPMGP3tnQVIOGQAev2F26mzGmO7PvOCyq1QZtP n5WE8umpcx4VcK0PYXJPJjvhQu6WvHUjq+E+jhqWtS4QAlqU7r2vqy4y19Tw+qoT frEZKj/zW6oErJghdQBSDda/xFU7gTe1RFtJ4zI5DGn8LB1PZr0m5Shkomd5Cw71 edGc3SpVw8DBVdLYpC+WBxMB/u94POpzN6sdrxw9GOeqHM4jgue6Zr30m7pACHEE DaexYUu6IcpWXvB1ALoAzurv/1qG5PnYeLPsZ6dnZqfDRRSTN2XGdfpaxlAUnFLf /BhHVxhXd019SNojGXXX4rKXt/cCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPVDYq0raxkct9N7VNzSRoQm6LqYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hYzBiMzllMi02ODdiLTQ2MTQtODA5Zi03MzY3MmVhMjEyY2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjMGIzOWUy LTY4N2ItNDYxNC04MDlmLTczNjcyZWEyMTJjZi8wL0Y1NDM2MkFEMkI2QjE5MUNC N0QzN0I1NERDRDI0Njg0MjZFOEJBOTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnj6owDwQCAAIwCQMHACABDfGNgDANBgkqhkiG9w0BAQsFAAOCAQEASsvvemOR qVJ44REBoKz+CVcm8dNHH7Z7U1BkflV9+BsHNJQOEawUmgEeV1SpUkzDBhrysKJ8 aw5qart8VHlKUQqbKIK4JQ/dxGN/g3d9+z+zOYJOj4ExxaDMqRYPZvGjZ1xVD0ne TREMY/kcK6ffsU+pGT2XTRb/uWfHyT7M2CTxER1X0T7n6Faa57JKHdJIGKbwidwc 52omPNtp8kJPO1WXYLVpogPEuRFMjTHBZPbb6PhgAmyd2mEtF0Baepf4IJ9DU63d StLVPyqi5KMWOYYJHE+mf9YIh1W5/OM7cBV0iSqPL+uLkX1STi9e5CdtW3ZWqILj 8ph8vnbqDYkG4g== -----END CERTIFICATE-----Generated at Sun Jun 8 07:03:10 2025 by rpki-client