$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer File: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer (raw, json) Hash identifier: rCA+Ij4WauEtVWtOnWZNuhD7RPD8fZ+70j26Du2kvj4= Subject key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7E72628B0D632948DA148E9E28D6F75CAD194B93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft caRepository: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 20 Feb 2025 06:11:48 +0000 Certificate not after: Thu 19 Feb 2026 06:16:48 +0000 Subordinate resources: IP: 103.144.46.0/23 IP: 2405:6640::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:72:62:8b:0d:63:29:48:da:14:8e:9e:28:d6:f7:5c:ad:19:4b:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 20 06:11:48 2025 GMT Not After : Feb 19 06:16:48 2026 GMT Subject: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:27:64:e7:3c:00:37:f2:d9:ec:d9:86:5e:fc: e8:e0:e0:8a:18:56:70:3a:cd:8b:47:13:34:38:9d: 90:8a:54:21:da:c7:d3:04:04:ea:81:8d:2f:53:67: f6:ff:94:31:3d:d1:a9:53:7f:7c:38:ee:c2:b5:41: 00:8b:f4:7a:ea:e7:ce:af:6a:e5:4d:7c:60:98:c6: 80:87:18:40:13:b8:af:06:85:9d:73:96:ac:29:ec: 38:dc:c5:90:d6:6d:1a:34:a0:1b:73:04:a8:57:8d: 17:98:ff:03:fd:a7:2b:ff:8e:02:11:06:cb:30:19: 4b:c2:b0:41:e2:5e:18:bd:23:a7:50:df:bb:ed:37: dd:82:2b:c5:47:fd:0d:0a:f9:6b:b3:d9:df:6d:0a: d4:05:42:af:50:5d:fb:18:ee:cf:20:f8:f6:44:3a: 51:d3:e1:82:c5:f3:3a:77:4b:24:e2:fe:dd:ea:ec: 5c:21:d1:23:b0:6d:f0:8c:df:7b:69:23:24:1d:d6: 21:7a:cd:19:23:d8:f2:6f:ca:4f:c6:0e:02:d8:bf: df:0b:0c:75:6e:c5:cb:f3:6f:a7:61:2b:26:56:3d: d2:04:1d:83:79:a1:02:69:bc:6f:9e:ce:65:e7:10: 20:33:f7:9e:c7:38:1d:d9:0e:0c:a0:22:19:d9:20: ab:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.46.0/23 IPv6: 2405:6640::/32 Signature Algorithm: sha256WithRSAEncryption 60:c7:34:8c:72:a6:d1:ba:8d:d5:e7:f6:55:9c:4c:3a:96:c7: 71:b9:ab:7a:ef:37:81:f6:90:e3:22:f6:bc:5a:72:5f:ac:97: f0:66:a6:86:38:88:1d:1b:3f:76:2a:64:a5:a3:c0:93:91:95: b9:e3:4a:07:cf:0a:e6:c1:b4:b0:fe:b6:03:d9:7e:f9:6c:e8: ef:e8:59:f6:e6:16:b3:56:cc:24:1f:3f:9d:0f:eb:2d:08:ed: 9b:38:f9:45:27:b7:fe:52:37:d6:04:8a:55:ea:6d:62:86:9c: a6:59:16:f8:d3:99:6e:f4:0e:13:55:a3:e1:5c:a6:e6:f6:17: b6:29:a1:96:84:49:c4:2b:aa:99:7f:b0:7d:30:6a:df:88:9c: b3:c4:0a:e8:1e:1f:93:61:b8:9c:53:b6:9c:1e:fa:9c:09:b2: 5a:16:96:f7:6d:eb:86:cc:4e:ec:6e:43:f6:bf:bc:bf:66:46: 7f:f4:f7:9a:88:88:7a:d8:93:01:40:c0:fd:4f:1d:81:46:11: 62:8c:14:8c:0c:f7:a8:6f:46:cc:f7:a6:c1:dc:8e:cf:14:82: 4d:f8:97:f3:b3:86:99:96:98:b9:d8:cf:55:77:db:4a:53:62: ea:13:63:f6:ae:dc:ca:fa:cc:69:05:53:31:10:67:8c:ed:62: 05:b4:bc:f8 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUfnJiiw1jKUjaFI6eKNb3XK0ZS5MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIyMDA2MTE0OFoX DTI2MDIxOTA2MTY0OFowMzExMC8GA1UEAxMoMTRDOENCOTdGRDM4MTE5MDM5MkVG NThCMkE5Q0Q4RDU2NkE1MUZENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOcnZOc8ADfy2ezZhl786ODgihhWcDrNi0cTNDidkIpUIdrH0wQE6oGNL1Nn 9v+UMT3RqVN/fDjuwrVBAIv0eurnzq9q5U18YJjGgIcYQBO4rwaFnXOWrCnsONzF kNZtGjSgG3MEqFeNF5j/A/2nK/+OAhEGyzAZS8KwQeJeGL0jp1Dfu+033YIrxUf9 DQr5a7PZ320K1AVCr1Bd+xjuzyD49kQ6UdPhgsXzOndLJOL+3ersXCHRI7Bt8Izf e2kjJB3WIXrNGSPY8m/KT8YOAti/3wsMdW7Fy/Nvp2ErJlY90gQdg3mhAmm8b57O ZecQIDP3nsc4HdkODKAiGdkgq3sCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBTIy5f9OBGQOS71iyqc2NVmpR/WMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lZGFlYzY2Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkYWVjNjZj LTllMWQtNDMyMS1iMDY5LWVlYWI0NzkzYTAwYi8wLzE0QzhDQjk3RkQzODExOTAz OTJFRjU4QjJBOUNEOEQ1NjZBNTFGRDYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnkC4wDQQCAAIwBwMFACQFZkAwDQYJKoZIhvcNAQELBQADggEBAGDHNIxyptG6 jdXn9lWcTDqWx3G5q3rvN4H2kOMi9rxacl+sl/BmpoY4iB0bP3YqZKWjwJORlbnj SgfPCubBtLD+tgPZfvls6O/oWfbmFrNWzCQfP50P6y0I7Zs4+UUnt/5SN9YEilXq bWKGnKZZFvjTmW70DhNVo+Fcpub2F7YpoZaEScQrqpl/sH0wat+InLPECugeH5Nh uJxTtpwe+pwJsloWlvdt64bMTuxuQ/a/vL9mRn/095qIiHrYkwFAwP1PHYFGEWKM FIwM96hvRsz3psHcjs8Ugk34l/OzhpmWmLnYz1V320pTYuoTY/au3Mr6zGkFUzEQ Z4ztYgW0vPg= -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:17 2025 by rpki-client