$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer File: F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer (raw, json) Hash identifier: 3pqEU5bPm7cFc5GRyd0sufPb6arqxoS2AFGN67FxisA= Subject key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 02EEFCBC297914BE2CA7797C287816932F35979A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft caRepository: rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 02:17:37 +0000 Certificate not after: Tue 02 Jun 2026 02:22:37 +0000 Subordinate resources: IP: 202.87.240.0/21 IP: 2406:2140::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ee:fc:bc:29:79:14:be:2c:a7:79:7c:28:78:16:93:2f:35:97:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 02:17:37 2025 GMT Not After : Jun 2 02:22:37 2026 GMT Subject: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a6:e7:0a:19:11:9a:c3:fb:32:13:09:89:2d: aa:fb:54:5f:db:a7:7b:73:45:c8:dc:85:13:00:09: 4d:52:6f:5d:aa:f9:63:40:b0:52:36:7b:fe:c7:70: 6f:6b:6a:cc:a5:9d:81:6a:bd:03:ed:00:1b:d4:85: 71:03:71:61:44:e6:ff:0c:7c:21:c3:1d:f5:96:88: d3:57:24:7e:68:57:2d:ec:49:e1:44:84:79:81:ca: 37:2a:87:e9:ac:04:c2:29:34:cf:9a:32:6a:e3:6a: 95:29:b2:6c:de:bc:9f:df:aa:16:74:11:d2:52:99: 12:b9:06:6c:8f:11:4d:5a:37:ad:ef:5e:2b:18:9a: c9:68:3d:bf:5f:01:5c:73:18:79:b0:a8:bb:f6:df: 09:23:59:61:95:35:58:11:7e:93:12:b4:d1:8b:d7: d5:fb:dc:f0:d8:ee:bd:cb:85:20:19:c6:d8:8f:b1: 2d:bd:49:5f:78:45:d4:eb:fc:c3:8c:ea:7a:55:7f: f8:25:c4:e1:8e:11:cf:8d:c1:4f:78:d8:cd:a3:5e: 78:23:42:85:02:0f:8b:b6:5b:84:a2:57:0c:6b:2b: 7a:dd:46:c7:d8:30:e0:01:cc:10:c6:cd:f2:ca:ba: be:72:19:8f:2e:37:96:00:bc:55:4e:94:ca:b4:0c: 81:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.87.240.0/21 IPv6: 2406:2140::/32 Signature Algorithm: sha256WithRSAEncryption 2c:10:98:df:fe:ed:22:3a:c3:bc:6f:38:5b:52:2b:94:ef:24: 70:e7:32:fc:13:85:b8:f7:0b:19:dc:f7:ce:f3:80:ce:a0:6d: 0d:52:1f:1f:39:fc:cd:78:04:8f:eb:45:65:d2:a6:81:f6:85: 7e:d0:f4:fe:2d:d3:57:20:fe:ae:52:93:53:e2:41:ac:96:b0: 2f:72:91:ad:ec:40:67:d4:11:5b:c1:6c:a4:b4:8b:02:12:1a: e1:82:6a:3d:98:09:8e:cd:72:75:3f:a3:28:11:a4:6b:f9:cd: 29:04:b5:9a:c7:24:96:00:db:c0:57:08:3d:3f:32:58:1c:04: 1f:2a:01:9e:b5:1c:99:14:c4:69:55:dd:a4:d0:ce:45:f3:ee: bf:fe:05:8e:b2:6c:65:cb:11:da:3e:4c:e0:3a:6d:e8:9f:a7: c9:72:a1:74:ca:70:c3:87:38:4d:0f:81:81:c4:52:32:21:ff: f7:b0:6e:49:10:52:b9:55:89:4d:f2:b0:93:72:33:a3:27:9a: 86:3e:64:eb:b3:c3:ff:4a:04:8f:3d:ea:61:00:db:b3:60:a0: b7:5d:f3:fa:03:e1:9d:a0:89:d4:65:72:ce:d2:5a:51:4f:18: d6:d4:7b:cf:24:3e:87:9f:00:9a:22:04:a7:60:ab:28:8d:24: 19:57:6f:3d -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUAu78vCl5FL4sp3l8KHgWky81l5owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzAyMTczN1oX DTI2MDYwMjAyMjIzN1owMzExMC8GA1UEAxMoRjk1OUQ4ODMxNDRCMEJGQkU4MEU5 OEMwNEVFNkI2RjY5NTNGMDc0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKm5woZEZrD+zITCYktqvtUX9une3NFyNyFEwAJTVJvXar5Y0CwUjZ7/sdw b2tqzKWdgWq9A+0AG9SFcQNxYUTm/wx8IcMd9ZaI01ckfmhXLexJ4USEeYHKNyqH 6awEwik0z5oyauNqlSmybN68n9+qFnQR0lKZErkGbI8RTVo3re9eKxiayWg9v18B XHMYebCou/bfCSNZYZU1WBF+kxK00YvX1fvc8NjuvcuFIBnG2I+xLb1JX3hF1Ov8 w4zqelV/+CXE4Y4Rz43BT3jYzaNeeCNChQIPi7ZbhKJXDGsret1Gx9gw4AHMEMbN 8sq6vnIZjy43lgC8VU6UyrQMgSUCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPlZ2IMUSwv76A6YwE7mtvaVPwdMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82MWYwMmE4OS03ZWU4LTRhODMtODAwNC0yMzRkOTE0YTBmZDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxZjAyYTg5 LTdlZTgtNGE4My04MDA0LTIzNGQ5MTRhMGZkNC8wL0Y5NTlEODgzMTQ0QjBCRkJF ODBFOThDMDRFRTZCNkY2OTUzRjA3NEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAPKV/AwDQQCAAIwBwMFACQGIUAwDQYJKoZIhvcNAQELBQADggEBACwQmN/+7SI6 w7xvOFtSK5TvJHDnMvwThbj3Cxnc987zgM6gbQ1SHx85/M14BI/rRWXSpoH2hX7Q 9P4t01cg/q5Sk1PiQayWsC9yka3sQGfUEVvBbKS0iwISGuGCaj2YCY7NcnU/oygR pGv5zSkEtZrHJJYA28BXCD0/MlgcBB8qAZ61HJkUxGlV3aTQzkXz7r/+BY6ybGXL Edo+TOA6beifp8lyoXTKcMOHOE0PgYHEUjIh//ewbkkQUrlViU3ysJNyM6MnmoY+ ZOuzw/9KBI896mEA27NgoLdd8/oD4Z2gidRlcs7SWlFPGNbUe88kPoefAJoiBKdg qyiNJBlXbz0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:28 2025 by rpki-client