$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer File: 0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.cer (raw, json) Hash identifier: CyHpsL8mxg1f3KP/sCObeBKsJlKUYNof1QGAhTcT4mo= Subject key identifier: 0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1E9E1C2D68F39E730C35F25C03B793808EFCA488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft caRepository: rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 01:43:15 +0000 Certificate not after: Tue 02 Jun 2026 01:48:15 +0000 Subordinate resources: IP: 103.76.200.0/22 IP: 2001:df5:9600::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9e:1c:2d:68:f3:9e:73:0c:35:f2:5c:03:b7:93:80:8e:fc:a4:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 01:43:15 2025 GMT Not After : Jun 2 01:48:15 2026 GMT Subject: CN=0FEDA288F7275DEA469AEF4C238DCA9A61A1615C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:9f:16:98:9b:b0:c7:34:18:76:bf:de:3c: 2c:e7:a4:b5:51:a7:d1:49:b9:76:9b:2c:cc:91:d5: cb:23:3e:2d:d5:16:d9:cd:55:50:21:08:4d:a5:a4: 12:1d:43:54:ad:62:e1:a9:a0:1b:60:f6:30:df:7c: 2d:ef:e9:cc:f1:83:8b:08:e5:3c:b6:ec:7b:38:5b: 29:33:04:e8:bb:5a:d8:44:fc:1d:55:6b:c0:65:23: 23:5f:5c:11:76:9a:93:99:86:75:00:6a:c2:20:63: fc:db:e1:54:25:cd:4c:62:eb:6b:18:6a:18:7e:8b: 80:29:d7:5b:a1:57:08:fb:d5:9d:3c:91:85:08:1b: b8:4a:15:3a:08:ef:c3:15:63:c6:7a:8b:bd:49:9c: 4e:a6:2f:2c:95:92:67:10:46:4b:fd:5a:08:c2:55: a4:86:31:77:e3:23:a4:a8:c6:69:ee:21:91:9c:61: 25:54:18:b3:8c:e8:0d:08:c8:c2:0c:fe:6a:b4:64: 33:54:d3:bb:15:4e:dc:31:c4:89:2f:d5:1c:29:30: 42:73:f8:1e:72:ef:40:80:d2:65:1a:46:f6:07:e7: 5d:bb:59:01:e3:61:6f:a5:58:52:51:33:28:94:69: 79:9a:b1:35:22:47:d5:65:6a:b4:03:6f:31:22:77: c1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0F:ED:A2:88:F7:27:5D:EA:46:9A:EF:4C:23:8D:CA:9A:61:A1:61:5C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9c370e6f-f0c7-4f40-8ba4-a01e5d0c74e4/0/0FEDA288F7275DEA469AEF4C238DCA9A61A1615C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.200.0/22 IPv6: 2001:df5:9600::/48 Signature Algorithm: sha256WithRSAEncryption 6f:c6:46:59:21:cf:6d:5c:bd:6e:5f:90:fd:73:5b:f1:23:7d: 6d:c1:f3:e7:05:84:99:97:bf:2e:45:46:dd:4c:56:8a:ce:70: ca:79:84:ca:60:5a:65:91:db:57:e4:7c:ff:37:79:0f:9c:46: fc:b8:51:bc:2f:97:b6:ee:b4:83:10:8d:e8:b6:f3:e3:fb:1b: 99:d2:ef:5e:76:4c:ac:17:82:7f:ed:6b:58:31:d8:f4:17:09: ed:61:0d:24:2f:a5:b9:cd:40:d7:1f:c9:6f:de:a6:cd:f3:cc: 82:ab:df:4b:6e:5a:65:6d:3e:3b:98:d4:b8:b1:d3:d9:2c:f2: c1:e2:8a:db:4e:39:5e:d7:5f:4b:0f:cf:08:e3:b9:14:ec:d7: 1a:f7:51:a5:c8:cd:63:11:37:10:e6:55:d9:70:56:cd:10:54: 65:38:7a:f8:47:9e:79:93:a4:ee:cc:8e:42:6a:19:9b:00:7e: 73:84:86:14:19:80:ff:92:20:d4:16:f5:14:fb:ca:6d:f4:0a: f1:84:7c:53:08:ab:9c:4d:0f:6c:1f:7e:8d:47:1c:ad:62:5a: 53:dc:f7:9d:b8:fa:a3:df:3c:fb:95:78:5c:17:15:44:e5:68: 71:df:66:90:bc:47:2d:23:19:50:dc:65:43:7b:7b:5d:c2:cc: d3:b5:23:c0 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUHp4cLWjznnMMNfJcA7eTgI78pIgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzAxNDMxNVoX DTI2MDYwMjAxNDgxNVowMzExMC8GA1UEAxMoMEZFREEyODhGNzI3NURFQTQ2OUFF RjRDMjM4RENBOUE2MUExNjE1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2inxaYm7DHNBh2v948LOektVGn0Um5dpsszJHVyyM+LdUW2c1VUCEITaWk Eh1DVK1i4amgG2D2MN98Le/pzPGDiwjlPLbsezhbKTME6Lta2ET8HVVrwGUjI19c EXaak5mGdQBqwiBj/NvhVCXNTGLraxhqGH6LgCnXW6FXCPvVnTyRhQgbuEoVOgjv wxVjxnqLvUmcTqYvLJWSZxBGS/1aCMJVpIYxd+MjpKjGae4hkZxhJVQYs4zoDQjI wgz+arRkM1TTuxVO3DHEiS/VHCkwQnP4HnLvQIDSZRpG9gfnXbtZAeNhb6VYUlEz KJRpeZqxNSJH1WVqtANvMSJ3wSECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFA/tooj3J13qRprvTCONypphoWFcMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85YzM3MGU2Zi1mMGM3LTRmNDAtOGJhNC1hMDFlNWQwYzc0ZTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzljMzcwZTZm LWYwYzctNGY0MC04YmE0LWEwMWU1ZDBjNzRlNC8wLzBGRURBMjg4RjcyNzVERUE0 NjlBRUY0QzIzOERDQTlBNjFBMTYxNUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJnTMgwDwQCAAIwCQMHACABDfWWADANBgkqhkiG9w0BAQsFAAOCAQEAb8ZGWSHP bVy9bl+Q/XNb8SN9bcHz5wWEmZe/LkVG3UxWis5wynmEymBaZZHbV+R8/zd5D5xG /LhRvC+Xtu60gxCN6Lbz4/sbmdLvXnZMrBeCf+1rWDHY9BcJ7WENJC+luc1A1x/J b96mzfPMgqvfS25aZW0+O5jUuLHT2SzyweKK2045XtdfSw/PCOO5FOzXGvdRpcjN YxE3EOZV2XBWzRBUZTh6+EeeeZOk7syOQmoZmwB+c4SGFBmA/5Ig1Bb1FPvKbfQK 8YR8UwirnE0PbB9+jUccrWJaU9z3nbj6o988+5V4XBcVROVocd9mkLxHLSMZUNxl Q3t7XcLM07UjwA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:22 2025 by rpki-client