$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/164D60A5876A6B9B50D1CB09453536273A893898.cer File: 164D60A5876A6B9B50D1CB09453536273A893898.cer (raw, json) Hash identifier: F8Z8RSp33Jx8Dbe4g9RUgvbUTeRVQdnT0jhz6Z2Rq9o= Subject key identifier: 16:4D:60:A5:87:6A:6B:9B:50:D1:CB:09:45:35:36:27:3A:89:38:98 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 260B102A8ED37896FA74B5ACFF109ED17ED2D35A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.mft caRepository: rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 12 Jun 2025 23:21:39 +0000 Certificate not after: Thu 11 Jun 2026 23:26:39 +0000 Subordinate resources: IP: 103.238.218.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 02:47:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:0b:10:2a:8e:d3:78:96:fa:74:b5:ac:ff:10:9e:d1:7e:d2:d3:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 12 23:21:39 2025 GMT Not After : Jun 11 23:26:39 2026 GMT Subject: CN=164D60A5876A6B9B50D1CB09453536273A893898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:40:6c:29:04:57:fe:36:d3:bf:72:f5:9d:05: 8f:7d:b5:9b:81:34:50:3d:84:cd:05:a2:5d:85:91: f4:16:33:94:36:08:b4:5d:94:c3:f3:47:95:eb:e4: e4:dd:09:74:95:73:b7:2e:b8:97:e4:30:d7:c6:6b: 5e:c1:fd:18:57:32:a7:85:51:52:ec:7d:2a:9f:70: 09:98:e3:d3:a0:f9:81:00:e1:6d:e4:03:7f:5e:36: a6:18:a9:1d:9a:99:40:f3:02:a7:81:51:7d:52:86: 5f:f4:53:7c:7a:c2:a4:ce:eb:37:8d:18:ef:d5:d9: f8:00:2d:fe:68:70:e1:96:2b:de:35:65:dc:48:44: 17:a6:a5:da:2d:d9:ff:04:9c:08:4e:d9:05:a5:97: 3e:3a:fe:56:e8:57:2e:02:03:f9:41:4e:93:d3:bd: ad:ff:13:fe:f4:f5:8b:c2:8d:b3:7c:32:11:da:eb: d6:96:92:a7:d9:6f:b3:03:38:0d:f2:7c:ec:55:27: c0:bf:fe:a4:b5:8d:1c:a2:85:3b:f0:c8:3a:0d:e9: da:2a:45:7f:a4:5c:80:bd:ac:f2:22:46:b4:29:19: b8:1a:04:3a:ef:38:dc:1a:9d:1c:89:f9:bc:fd:91: 13:d4:94:1d:ff:e8:0c:1c:23:b6:3b:56:e9:e2:a4: f1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:4D:60:A5:87:6A:6B:9B:50:D1:CB:09:45:35:36:27:3A:89:38:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.218.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:13:2d:30:53:d6:18:94:65:2e:6f:4d:2f:6a:9f:d0:a4:1f: 7f:3b:1b:a9:e1:6b:87:46:f4:4f:5e:1d:d5:fa:a6:10:bc:d2: 90:07:2b:e9:df:ba:25:6f:09:1c:b9:8f:15:ba:3a:07:4b:af: 38:cc:91:0a:ea:44:fc:b7:84:49:e3:1f:72:79:29:10:a5:e7: df:0f:bf:10:18:b2:1a:fc:91:7d:80:bb:9a:b6:1d:81:48:52: 27:ba:ba:3b:52:5e:29:15:51:a5:c1:03:4b:3b:d2:d1:41:7a: 89:f5:0d:5f:3b:dd:61:ca:8a:51:da:c4:db:aa:a6:0d:00:18: a7:21:81:be:fd:37:81:ef:35:5a:50:0d:7b:0d:51:c3:82:94: 6a:a1:ca:95:bd:1a:f8:ef:bd:bf:8c:90:4c:4f:49:a7:64:4a: c9:29:de:c2:3a:12:2c:20:c8:5e:44:13:ae:c1:c5:48:10:99: 67:ea:0d:fc:c9:29:27:63:09:da:88:c1:17:78:e7:57:69:1c: 6b:5c:2d:e3:49:99:e1:80:79:af:c1:42:5e:17:26:1a:fc:46: 69:5a:47:f3:be:12:85:ec:7f:9d:d1:ef:6e:f5:76:0c:88:6d: d4:46:9a:37:0b:f0:76:ae:e7:ad:fd:6f:74:5b:f4:30:5b:2b: 80:e9:51:b3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJgsQKo7TeJb6dLWs/xCe0X7S01owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxMjIzMjEzOVoX DTI2MDYxMTIzMjYzOVowMzExMC8GA1UEAxMoMTY0RDYwQTU4NzZBNkI5QjUwRDFD QjA5NDUzNTM2MjczQTg5Mzg5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtAbCkEV/42079y9Z0Fj321m4E0UD2EzQWiXYWR9BYzlDYItF2Uw/NHlevk 5N0JdJVzty64l+Qw18ZrXsH9GFcyp4VRUux9Kp9wCZjj06D5gQDhbeQDf142phip HZqZQPMCp4FRfVKGX/RTfHrCpM7rN40Y79XZ+AAt/mhw4ZYr3jVl3EhEF6al2i3Z /wScCE7ZBaWXPjr+VuhXLgID+UFOk9O9rf8T/vT1i8KNs3wyEdrr1paSp9lvswM4 DfJ87FUnwL/+pLWNHKKFO/DIOg3p2ipFf6RcgL2s8iJGtCkZuBoEOu843BqdHIn5 vP2RE9SUHf/oDBwjtjtW6eKk8UkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBZNYKWHamubUNHLCUU1Nic6iTiYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lN2IxZjE0Zi00ZDkwLTQ2YzUtOWZiYy05YzlhYTZiOWRmYTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U3YjFmMTRm LTRkOTAtNDZjNS05ZmJjLTljOWFhNmI5ZGZhNS8wLzE2NEQ2MEE1ODc2QTZCOUI1 MEQxQ0IwOTQ1MzUzNjI3M0E4OTM4OTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn7towDQYJKoZIhvcNAQELBQADggEBAFoTLTBT1hiUZS5vTS9qn9CkH387G6nh a4dG9E9eHdX6phC80pAHK+nfuiVvCRy5jxW6OgdLrzjMkQrqRPy3hEnjH3J5KRCl 598PvxAYshr8kX2Au5q2HYFIUie6ujtSXikVUaXBA0s70tFBeon1DV873WHKilHa xNuqpg0AGKchgb79N4HvNVpQDXsNUcOClGqhypW9Gvjvvb+MkExPSadkSskp3sI6 EiwgyF5EE67BxUgQmWfqDfzJKSdjCdqIwRd451dpHGtcLeNJmeGAea/BQl4XJhr8 RmlaR/O+EoXsf53R7271dgyIbdRGmjcL8Hau5639b3Rb9DBbK4DpUbM= -----END CERTIFICATE-----Generated at Wed Jun 18 02:59:31 2025 by rpki-client