$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer (raw, json) Hash identifier: rp/4fea27NxLiMz0LhWmjU2cYkWn3fazKwREpPwXAW0= Subject key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 30A17F863BCE541B9FD4581738097B3E27CAB741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft caRepository: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 10:07:58 +0000 Certificate not after: Tue 02 Jun 2026 10:12:58 +0000 Subordinate resources: IP: 103.148.198.0/23 IP: 2001:df2:e880::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a1:7f:86:3b:ce:54:1b:9f:d4:58:17:38:09:7b:3e:27:ca:b7:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 10:07:58 2025 GMT Not After : Jun 2 10:12:58 2026 GMT Subject: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:72:5e:00:ef:92:a0:ef:aa:b9:32:6a:21:7a: 28:e4:e7:f0:cc:0c:b9:aa:93:7e:dd:b5:45:b7:26: fc:77:51:31:51:59:4a:ff:2f:17:b4:66:98:d6:76: 06:61:58:0d:9c:f7:e5:3f:82:fe:8a:3e:ba:bc:90: 71:40:1d:47:06:b8:f6:bc:17:6a:55:3a:ce:d0:08: b5:82:24:34:66:d5:c6:48:c0:d3:de:16:fe:57:91: 4f:ec:5a:11:08:18:fe:be:f6:e8:ab:44:64:cc:fa: a0:c5:0f:9b:ff:23:8c:a1:86:f7:3c:a9:b0:2a:86: d8:f3:39:f0:19:c4:c6:65:a0:d6:99:17:01:53:14: 1f:7f:04:b3:fd:56:a8:f0:53:3a:df:1d:81:10:90: eb:5f:37:9e:f8:d8:30:a0:2e:c4:3e:fc:73:98:21: 14:96:46:ca:9a:4a:8b:62:c1:da:4e:cf:ef:62:7f: 6a:91:4c:35:fb:a7:4f:04:93:7e:31:61:1c:a0:56: f9:5c:3a:cc:75:e7:ea:dd:74:db:af:5d:3f:91:93: 3f:33:c6:ba:78:31:de:f2:30:90:33:0e:50:9e:30: 81:df:1f:76:16:01:96:82:8d:d2:18:e6:f2:11:06: ba:62:13:ec:4a:a8:0b:16:34:f4:68:f8:2a:55:b8: 5c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.198.0/23 IPv6: 2001:df2:e880::/48 Signature Algorithm: sha256WithRSAEncryption 85:0d:62:1a:c9:4f:b7:e3:a0:d6:c5:55:ac:53:2c:cf:b2:5e: 1c:61:09:f9:dd:ee:7c:ad:38:92:ef:ef:f7:e9:bf:8f:6c:9c: 3a:f9:9d:93:6b:21:ee:94:f4:c5:38:71:94:bb:64:b0:96:48: 89:2e:50:c7:39:8a:3c:6e:3d:7d:b2:c5:76:9f:9d:85:75:39: 49:da:d2:47:50:65:66:80:e0:0c:7a:9b:3f:cf:f0:8c:4d:35: 2b:fe:c4:d0:0d:63:b9:4f:f1:54:53:0c:49:34:47:3a:f9:e4: db:71:bc:d8:93:c0:85:7d:55:52:ea:16:c9:3f:dc:3b:90:f5: 78:d3:6c:bb:d6:75:ec:b0:cf:4c:dc:cc:61:62:8f:0b:b3:e1: 7e:4b:3b:d4:37:fd:fe:d4:39:c4:52:71:63:96:3d:2e:6b:c7: 7a:7b:dd:29:61:c6:cc:e5:b3:b6:30:0f:9c:6b:68:ea:fe:60: 09:13:f3:d3:0a:4d:4f:71:ad:46:5b:ac:8e:16:43:86:53:c8: 5c:6f:81:e6:be:d9:b1:48:56:b9:85:96:ff:75:64:5f:ab:b6: 0f:d5:5e:12:f3:6c:3c:3c:58:60:a5:99:19:2f:52:f5:c5:d0: 31:9e:42:8e:1a:4b:1d:06:dc:69:bf:80:b1:d3:48:45:80:de: 73:ed:4b:82 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUMKF/hjvOVBuf1FgXOAl7PifKt0EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzEwMDc1OFoX DTI2MDYwMjEwMTI1OFowMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4 ODAwQzMxN0I4REY3RjFBQkY0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9yXgDvkqDvqrkyaiF6KOTn8MwMuaqTft21Rbcm/HdRMVFZSv8vF7RmmNZ2 BmFYDZz35T+C/oo+uryQcUAdRwa49rwXalU6ztAItYIkNGbVxkjA094W/leRT+xa EQgY/r726KtEZMz6oMUPm/8jjKGG9zypsCqG2PM58BnExmWg1pkXAVMUH38Es/1W qPBTOt8dgRCQ6183nvjYMKAuxD78c5ghFJZGyppKi2LB2k7P72J/apFMNfunTwST fjFhHKBW+Vw6zHXn6t10269dP5GTPzPGungx3vIwkDMOUJ4wgd8fdhYBloKN0hjm 8hEGumIT7EqoCxY09Gj4KlW4XLMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAjQfwENooESqU6IAMMXuN9/Gr9DMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwYzJhMTNi LTFmNDAtNGMwMy1iYzM1LWY2OTYxNTE2ZDRkOS8wLzA4RDA3RjAxMERBMjgxMTJB OTRFODgwMEMzMTdCOERGN0YxQUJGNDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnlMYwDwQCAAIwCQMHACABDfLogDANBgkqhkiG9w0BAQsFAAOCAQEAhQ1iGslP t+Og1sVVrFMsz7JeHGEJ+d3ufK04ku/v9+m/j2ycOvmdk2sh7pT0xThxlLtksJZI iS5QxzmKPG49fbLFdp+dhXU5SdrSR1BlZoDgDHqbP8/wjE01K/7E0A1juU/xVFMM STRHOvnk23G82JPAhX1VUuoWyT/cO5D1eNNsu9Z17LDPTNzMYWKPC7Phfks71Df9 /tQ5xFJxY5Y9LmvHenvdKWHGzOWztjAPnGto6v5gCRPz0wpNT3GtRlusjhZDhlPI XG+B5r7ZsUhWuYWW/3VkX6u2D9VeEvNsPDxYYKWZGS9S9cXQMZ5CjhpLHQbcab+A sdNIRYDec+1Lgg== -----END CERTIFICATE-----Generated at Sun Jun 15 17:14:29 2025 by rpki-client