$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer File: 0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.cer (raw, json) Hash identifier: XrXi6oKfG+prLTS2BTieAe5o6ir7jFJcN9Ch7DMI+H0= Subject key identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3B3671046555FE562388659C8ED8FE07C4B77FDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft caRepository: rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 26 Feb 2025 01:17:42 +0000 Certificate not after: Wed 25 Feb 2026 01:22:42 +0000 Subordinate resources: IP: 103.112.5.0/24 IP: 103.112.44.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:36:71:04:65:55:fe:56:23:88:65:9c:8e:d8:fe:07:c4:b7:7f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 26 01:17:42 2025 GMT Not After : Feb 25 01:22:42 2026 GMT Subject: CN=0D0800F1516DA57BD9B9561FFA2A242AEB8F4853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c2:8a:4b:52:23:be:59:70:4f:f6:cb:c0:21: a7:84:dd:16:3f:72:3e:c2:45:07:c4:3e:a3:5d:c4: d6:49:8c:4f:a3:e8:16:f5:60:9e:9b:8c:54:1f:59: db:b2:c6:2f:9e:8e:95:90:09:4a:c4:67:90:90:19: 3d:54:51:a6:68:74:ec:b4:66:e6:8a:2e:86:94:af: 99:b2:80:14:34:e7:88:cf:cc:72:c8:c5:62:cb:97: 50:93:90:5c:f9:4a:fe:bd:91:d8:2d:23:ca:90:3b: ca:38:12:3e:16:45:6a:f3:f1:91:b6:ef:ee:e6:ff: 7f:84:b7:99:fd:3c:ac:06:3c:00:36:b9:2e:42:77: 5f:d4:58:d2:3a:b7:66:00:96:be:be:0d:30:1d:9f: ac:7b:f2:87:cf:c8:6b:2c:f2:fa:c0:53:cf:8d:05: a6:3a:6c:9b:46:d1:d8:f0:99:a0:9c:be:1c:72:72: 63:73:22:8a:4f:84:eb:8d:f9:66:07:9a:44:30:cb: 93:9f:71:36:ea:44:11:73:ae:59:f1:82:40:ab:de: cd:80:f2:8b:01:13:46:08:ad:9e:ba:86:04:32:d7: d5:21:f0:61:27:57:e0:87:84:e8:c4:93:cd:27:8d: 0c:b6:2d:7d:b0:61:45:41:ae:8f:5b:10:ec:80:e7: 26:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:08:00:F1:51:6D:A5:7B:D9:B9:56:1F:FA:2A:24:2A:EB:8F:48:53 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/241bc3ec-86b8-4afb-8a8f-a0a86a4c29c6/0/0D0800F1516DA57BD9B9561FFA2A242AEB8F4853.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.5.0/24 103.112.44.0/23 Signature Algorithm: sha256WithRSAEncryption 56:3d:48:cd:08:a2:0f:c5:8a:33:89:37:1d:67:14:00:1d:e7: 52:eb:7b:5b:ff:83:30:ac:b7:aa:d0:f1:76:9f:5d:13:60:99: 09:21:d5:22:76:5d:d0:72:64:a7:95:54:02:49:30:89:96:14: a6:c1:1d:f1:28:0d:36:a7:c9:19:01:f3:fa:a4:17:83:04:e0: 16:b5:8e:22:1f:70:00:90:a5:08:24:f7:cd:ef:22:94:96:ef: 62:30:60:58:6a:b0:bd:3f:94:f7:a5:c0:41:5c:0e:d1:0f:68: 37:00:46:9c:42:1b:a6:e7:ba:cf:49:b2:97:7f:5f:28:a1:ca: 3b:ed:f0:35:37:22:76:48:ee:2b:0e:a9:dd:c0:99:2a:d5:15: 0e:d9:bb:9d:af:76:c0:20:6c:d6:d9:69:03:c4:4b:e1:c5:43: da:da:b2:2b:96:b4:5c:02:e5:ee:03:80:0d:e8:d9:1f:82:7e: db:71:ca:89:47:12:9a:cd:a3:db:10:3f:3d:f0:af:fe:b4:28: f9:48:8e:a4:aa:b5:f4:fd:71:d1:b7:d1:a0:19:03:86:6a:7a: 06:18:4b:f3:1d:ba:9c:04:4e:cd:12:71:06:2d:e8:52:4d:bd: 2d:dd:5f:be:20:96:53:77:a8:54:cb:79:90:6a:f7:46:7d:ea: 24:df:38:2c -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUOzZxBGVV/lYjiGWcjtj+B8S3f9wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIyNjAxMTc0MloX DTI2MDIyNTAxMjI0MlowMzExMC8GA1UEAxMoMEQwODAwRjE1MTZEQTU3QkQ5Qjk1 NjFGRkEyQTI0MkFFQjhGNDg1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANLCiktSI75ZcE/2y8Ahp4TdFj9yPsJFB8Q+o13E1kmMT6PoFvVgnpuMVB9Z 27LGL56OlZAJSsRnkJAZPVRRpmh07LRm5oouhpSvmbKAFDTniM/McsjFYsuXUJOQ XPlK/r2R2C0jypA7yjgSPhZFavPxkbbv7ub/f4S3mf08rAY8ADa5LkJ3X9RY0jq3 ZgCWvr4NMB2frHvyh8/Iayzy+sBTz40Fpjpsm0bR2PCZoJy+HHJyY3Miik+E6435 ZgeaRDDLk59xNupEEXOuWfGCQKvezYDyiwETRgitnrqGBDLX1SHwYSdX4IeE6MST zSeNDLYtfbBhRUGuj1sQ7IDnJtMCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA0IAPFRbaV72blWH/oqJCrrj0hTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNDFiYzNlYy04NmI4LTRhZmItOGE4Zi1hMGE4NmE0YzI5YzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0MWJjM2Vj LTg2YjgtNGFmYi04YThmLWEwYTg2YTRjMjljNi8wLzBEMDgwMEYxNTE2REE1N0JE OUI5NTYxRkZBMkEyNDJBRUI4RjQ4NTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABncAUDBAFncCwwDQYJKoZIhvcNAQELBQADggEBAFY9SM0Iog/FijOJNx1nFAAd 51Lre1v/gzCst6rQ8XafXRNgmQkh1SJ2XdByZKeVVAJJMImWFKbBHfEoDTanyRkB 8/qkF4ME4Ba1jiIfcACQpQgk983vIpSW72IwYFhqsL0/lPelwEFcDtEPaDcARpxC G6bnus9Jspd/Xyihyjvt8DU3InZI7isOqd3AmSrVFQ7Zu52vdsAgbNbZaQPES+HF Q9rasiuWtFwC5e4DgA3o2R+CfttxyolHEprNo9sQPz3wr/60KPlIjqSqtfT9cdG3 0aAZA4ZqegYYS/MdupwETs0ScQYt6FJNvS3dX74gllN3qFTLeZBq90Z96iTfOCw= -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:51 2025 by rpki-client