$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer File: 0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.cer (raw, json) Hash identifier: A7M08Nh+IMwkd7oVlRk+vynfruXI3svxCFjqJjdYzKE= Subject key identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 15ED617BEFF93DEE1BC6EB4D136D6D99F0D7EA96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft caRepository: rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 22 Aug 2025 07:07:21 +0000 Certificate not after: Fri 21 Aug 2026 07:12:21 +0000 Subordinate resources: IP: 103.190.112.0/23 IP: 2001:df0:f9c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ed:61:7b:ef:f9:3d:ee:1b:c6:eb:4d:13:6d:6d:99:f0:d7:ea:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 22 07:07:21 2025 GMT Not After : Aug 21 07:12:21 2026 GMT Subject: CN=0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:05:e4:2f:d0:3d:19:5e:b2:d4:25:0c:cb:3e: a4:b4:b3:dc:cd:e7:19:f1:f6:af:20:10:7d:7d:6a: 3b:41:7c:4b:43:88:ae:29:be:78:dd:f9:28:21:95: a0:a8:f3:ae:8b:35:a1:fa:a4:cc:03:97:89:b2:7f: 12:f8:8f:d6:8f:85:19:48:5d:58:27:c7:fa:a0:6b: 4d:9e:46:16:16:78:00:55:90:bc:a7:4c:71:20:40: 0f:2f:e1:0a:14:14:bd:0f:16:a3:2a:26:b5:c5:ed: bd:8b:88:99:98:99:9f:38:bb:da:9e:f7:f4:85:d2: e9:7d:ee:ef:3d:e5:1b:e5:68:f3:3d:6a:78:07:9c: 14:a9:b1:ec:0a:89:97:65:1a:1d:c0:92:b2:fc:7c: 78:ca:1b:a1:1d:33:0f:97:2d:8c:74:f6:51:ae:45: 2c:9b:f5:40:36:1a:67:68:d7:a2:1d:e8:4b:66:d8: 10:56:52:74:3e:1a:8a:49:4e:4e:4d:a1:13:3e:7d: 73:22:2c:3f:14:bc:4e:78:0f:0b:d9:73:11:e7:c5: 22:ca:a4:1a:d6:75:aa:71:85:f7:7c:8c:89:b0:31: f2:e0:d9:36:5f:cc:28:fb:dd:8b:0a:42:6a:26:4d: 4d:36:43:ce:d7:bf:f7:aa:24:40:4b:1e:b4:ae:bf: 36:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0C:E1:E1:11:46:E2:51:D0:CD:52:BD:83:7A:1A:0A:CD:B7:E0:BA:0C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b0516a7a-4195-44b3-a24e-cf8ed578d791/0/0CE1E11146E251D0CD52BD837A1A0ACDB7E0BA0C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.112.0/23 IPv6: 2001:df0:f9c0::/48 Signature Algorithm: sha256WithRSAEncryption 0b:19:19:5d:53:55:b9:82:0f:56:38:d5:ca:00:fa:17:ad:19: 47:ee:fa:44:ce:5b:ec:b9:e7:4b:ec:24:56:ba:ec:de:96:43: 70:26:ac:46:bd:d3:80:82:0f:d2:de:39:5a:a3:3a:18:ed:52: c2:0c:c6:87:00:53:fa:cd:09:bc:0c:1b:c5:67:ca:cc:13:31: 8f:7a:41:fc:a6:a8:e8:dd:30:85:45:01:1c:98:87:80:f0:b2: 53:d5:77:35:3a:69:46:fd:e1:41:b5:d6:38:6e:b3:bd:20:12: 21:6a:f1:67:89:a5:bd:1d:30:06:a2:eb:d1:4a:e0:58:d4:d0: 39:96:1b:64:a2:21:f3:02:15:a4:bb:f6:e7:33:f0:eb:16:da: 8a:f6:80:39:67:f9:30:56:b9:6f:b6:81:66:01:c1:d0:cf:9c: 10:01:37:79:70:09:07:ea:ee:99:2d:e4:48:63:03:c8:c8:93: 3b:cf:9e:3f:c0:cc:b4:bc:02:71:d3:4f:92:56:c0:39:d0:a9: f1:36:87:57:f4:26:8a:83:68:b5:a2:5d:96:e8:5e:95:00:7e: af:7c:34:d5:fb:33:9b:97:74:d4:97:49:cc:0f:7c:aa:8e:36: 1e:31:ad:09:1c:a8:8c:ca:ea:2f:ac:c2:62:bd:e9:8f:f9:a4: 37:40:6e:5f -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUFe1he+/5Pe4bxutNE21tmfDX6pYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyMjA3MDcyMVoX DTI2MDgyMTA3MTIyMVowMzExMC8GA1UEAxMoMENFMUUxMTE0NkUyNTFEMENENTJC RDgzN0ExQTBBQ0RCN0UwQkEwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOUF5C/QPRlestQlDMs+pLSz3M3nGfH2ryAQfX1qO0F8S0OIrim+eN35KCGV oKjzros1ofqkzAOXibJ/EviP1o+FGUhdWCfH+qBrTZ5GFhZ4AFWQvKdMcSBADy/h ChQUvQ8WoyomtcXtvYuImZiZnzi72p739IXS6X3u7z3lG+Vo8z1qeAecFKmx7AqJ l2UaHcCSsvx8eMoboR0zD5ctjHT2Ua5FLJv1QDYaZ2jXoh3oS2bYEFZSdD4aiklO Tk2hEz59cyIsPxS8TngPC9lzEefFIsqkGtZ1qnGF93yMibAx8uDZNl/MKPvdiwpC aiZNTTZDzte/96okQEsetK6/Np0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAzh4RFG4lHQzVK9g3oaCs234LoMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMDUxNmE3YS00MTk1LTQ0YjMtYTI0ZS1jZjhlZDU3OGQ3OTEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IwNTE2YTdh LTQxOTUtNDRiMy1hMjRlLWNmOGVkNTc4ZDc5MS8wLzBDRTFFMTExNDZFMjUxRDBD RDUyQkQ4MzdBMUEwQUNEQjdFMEJBMEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnvnAwDwQCAAIwCQMHACABDfD5wDANBgkqhkiG9w0BAQsFAAOCAQEACxkZXVNV uYIPVjjVygD6F60ZR+76RM5b7LnnS+wkVrrs3pZDcCasRr3TgIIP0t45WqM6GO1S wgzGhwBT+s0JvAwbxWfKzBMxj3pB/Kao6N0whUUBHJiHgPCyU9V3NTppRv3hQbXW OG6zvSASIWrxZ4mlvR0wBqLr0UrgWNTQOZYbZKIh8wIVpLv25zPw6xbaivaAOWf5 MFa5b7aBZgHB0M+cEAE3eXAJB+rumS3kSGMDyMiTO8+eP8DMtLwCcdNPklbAOdCp 8TaHV/QmioNotaJdluhelQB+r3w01fszm5d01JdJzA98qo42HjGtCRyojMrqL6zC Yr3pj/mkN0BuXw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:05 2025 by rpki-client