$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer File: FCD05385904E00F3C10A339EE19D924D72FFAE0E.cer (raw, json) Hash identifier: OvwIjpfOGzJWp1gKSPaMTt+9rpKwQu/xJT5hLm+ZaRE= Subject key identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2870134E9A8AAD69DCFE0118F4A18D84DE6765A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft caRepository: rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 08:43:19 +0000 Certificate not after: Tue 02 Jun 2026 08:48:19 +0000 Subordinate resources: IP: 121.100.0.0/21 IP: 175.158.32.0/19 IP: 2402:9800::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 10:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:70:13:4e:9a:8a:ad:69:dc:fe:01:18:f4:a1:8d:84:de:67:65:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 08:43:19 2025 GMT Not After : Jun 2 08:48:19 2026 GMT Subject: CN=FCD05385904E00F3C10A339EE19D924D72FFAE0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f7:84:7b:0b:c8:f1:1b:30:4a:50:dd:07:cf: 08:6b:85:3d:96:95:28:35:7b:40:24:c0:2e:86:2f: 81:d8:3d:21:dd:d6:7f:13:92:68:f6:d9:66:7f:16: 3c:31:1a:91:d5:30:62:82:5b:75:da:83:85:fa:34: 56:54:9e:3a:64:68:d8:ec:ae:2b:92:34:4b:7f:c0: 18:9c:5c:6f:e6:f4:25:7c:50:5c:54:91:93:bf:3f: a1:97:59:29:62:8a:c0:83:fa:d6:4e:c2:92:b5:9a: 83:67:d4:93:95:ed:02:54:85:e2:19:49:87:52:64: 0b:07:24:8a:65:64:a1:34:b0:4a:03:76:ce:1a:f3: 51:9c:2a:66:9e:87:a1:8b:26:78:1c:bd:24:bd:3f: ab:b0:67:e5:91:7b:d5:99:6e:d6:3a:61:43:b7:8b: 93:25:a7:bd:90:20:32:61:8e:c6:28:75:70:ef:8d: f5:39:f4:6b:13:d7:83:3a:9b:c1:8a:1b:1e:68:92: 39:e9:36:a9:8a:21:63:df:49:63:5b:e2:31:03:d4: 83:2f:63:10:78:92:f7:ea:7e:04:78:5a:6e:55:fa: 8a:19:fd:2c:14:18:8a:6e:01:e1:97:29:6a:fd:fa: 97:eb:c6:83:5d:e9:94:cb:df:7b:8e:5c:9c:8a:4f: ba:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FC:D0:53:85:90:4E:00:F3:C1:0A:33:9E:E1:9D:92:4D:72:FF:AE:0E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/478fd4af-fe67-45c8-80b7-06fc118df8e2/0/FCD05385904E00F3C10A339EE19D924D72FFAE0E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.100.0.0/21 175.158.32.0/19 IPv6: 2402:9800::/32 Signature Algorithm: sha256WithRSAEncryption 6e:57:1f:cf:b5:47:d9:d3:1f:25:84:d2:88:9d:d4:64:56:f5: fe:e5:96:ce:a7:84:32:f5:b1:12:32:8f:c5:07:71:d2:4f:47: 6c:50:bf:22:a4:8a:f0:05:cf:62:39:13:97:81:5d:59:9e:b4: c4:70:bd:87:a1:ff:23:47:e1:4e:d2:da:ed:29:48:ec:00:24: 5c:97:b9:2b:61:d4:12:9a:c7:63:30:7b:fe:d5:2c:bc:91:f0: 55:7f:08:ac:51:3b:33:64:45:4a:64:33:a6:dd:6d:39:9f:d6: 4b:71:d6:ec:8c:71:00:ff:f8:99:b3:0d:ac:87:52:ac:a7:63: 50:ce:d5:36:7c:47:c2:89:3e:9b:47:2d:c1:ba:20:6b:34:bd: b5:26:27:a5:f0:96:4e:eb:7a:55:6d:e6:34:29:bb:97:b8:24: 6d:6e:31:46:af:fa:6c:f7:ac:a5:ed:2d:aa:cc:15:1e:47:c2: 27:98:9e:dc:d7:ac:ab:e7:01:26:93:57:9d:5b:4d:de:e3:da: e1:37:17:59:02:ad:4a:b9:5f:fd:b7:6c:56:27:fe:a1:47:2a: 14:8f:f9:5d:c2:e7:bc:89:20:5f:d9:7b:43:ec:27:c7:44:ce: a3:c1:c0:2f:ac:a6:29:1c:fc:e7:3d:83:5f:a9:30:ad:a9:84: 1a:79:2a:57 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUKHATTpqKrWnc/gEY9KGNhN5nZagwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzA4NDMxOVoX DTI2MDYwMjA4NDgxOVowMzExMC8GA1UEAxMoRkNEMDUzODU5MDRFMDBGM0MxMEEz MzlFRTE5RDkyNEQ3MkZGQUUwRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOP3hHsLyPEbMEpQ3QfPCGuFPZaVKDV7QCTALoYvgdg9Id3WfxOSaPbZZn8W PDEakdUwYoJbddqDhfo0VlSeOmRo2OyuK5I0S3/AGJxcb+b0JXxQXFSRk78/oZdZ KWKKwIP61k7CkrWag2fUk5XtAlSF4hlJh1JkCwckimVkoTSwSgN2zhrzUZwqZp6H oYsmeBy9JL0/q7Bn5ZF71Zlu1jphQ7eLkyWnvZAgMmGOxih1cO+N9Tn0axPXgzqb wYobHmiSOek2qYohY99JY1viMQPUgy9jEHiS9+p+BHhablX6ihn9LBQYim4B4Zcp av36l+vGg13plMvfe45cnIpPunUCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPzQU4WQTgDzwQoznuGdkk1y/64OMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NzhmZDRhZi1mZTY3LTQ1YzgtODBiNy0wNmZjMTE4ZGY4ZTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3OGZkNGFm LWZlNjctNDVjOC04MGI3LTA2ZmMxMThkZjhlMi8wL0ZDRDA1Mzg1OTA0RTAwRjND MTBBMzM5RUUxOUQ5MjRENzJGRkFFMEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAN5ZAADBAWvniAwDQQCAAIwBwMFACQCmAAwDQYJKoZIhvcNAQELBQADggEBAG5X H8+1R9nTHyWE0oid1GRW9f7lls6nhDL1sRIyj8UHcdJPR2xQvyKkivAFz2I5E5eB XVmetMRwvYeh/yNH4U7S2u0pSOwAJFyXuSth1BKax2Mwe/7VLLyR8FV/CKxROzNk RUpkM6bdbTmf1ktx1uyMcQD/+JmzDayHUqynY1DO1TZ8R8KJPptHLcG6IGs0vbUm J6Xwlk7relVt5jQpu5e4JG1uMUav+mz3rKXtLarMFR5HwieYntzXrKvnASaTV51b Td7j2uE3F1kCrUq5X/23bFYn/qFHKhSP+V3C57yJIF/Ze0PsJ8dEzqPBwC+spikc /Oc9g1+pMK2phBp5Klc= -----END CERTIFICATE-----Generated at Mon Oct 27 11:55:25 2025 by rpki-client