$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/16CD7877C91A179A0A6751085603DA8E7DE539F0.cer File: 16CD7877C91A179A0A6751085603DA8E7DE539F0.cer (raw, json) Hash identifier: v0AbT2OHVI3+1pPcuvFx5gxpHzTeg/8C38+ndgpeeJE= Subject key identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 70AC2FB85749A285F3C01F68AC7E8065EC93162C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft caRepository: rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 29 Aug 2025 09:14:18 +0000 Certificate not after: Fri 28 Aug 2026 09:19:18 +0000 Subordinate resources: IP: 103.147.134.0/23 IP: 2405:b940::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ac:2f:b8:57:49:a2:85:f3:c0:1f:68:ac:7e:80:65:ec:93:16:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 29 09:14:18 2025 GMT Not After : Aug 28 09:19:18 2026 GMT Subject: CN=16CD7877C91A179A0A6751085603DA8E7DE539F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:51:fe:8e:c1:ba:0d:65:55:a5:51:29:b4: a3:2f:dd:c7:d9:30:15:ce:8b:1f:0e:6e:92:06:95: f5:aa:6a:64:a9:fe:6d:3f:53:97:e9:1c:10:60:a8: 92:90:6b:d5:13:af:02:b5:a5:43:1b:6d:5e:b9:7e: f6:4c:f7:f7:73:eb:88:38:d3:00:ff:94:d3:6d:71: fa:f5:27:ab:a1:44:60:e2:3e:ae:54:14:07:28:a9: da:2f:02:25:37:6b:e4:e9:37:a3:0c:44:0a:b7:e1: 82:2d:a1:3e:b4:cd:58:49:9e:f2:da:18:7a:9c:88: cf:e8:5a:b0:d6:3d:ea:eb:c0:1a:48:01:ed:e0:8f: c0:15:b6:8d:3e:e9:4b:71:52:dd:93:67:78:7a:d1: 2a:ee:18:46:c5:44:97:8b:3f:ce:44:83:ad:9f:4b: ac:f8:66:21:f9:a4:4f:95:bc:a2:ef:d1:f0:5d:21: cc:61:eb:56:e8:a9:08:21:54:52:17:be:98:47:f9: bf:0e:75:dd:c4:1d:71:ec:12:13:ca:11:3d:4a:72: 6d:95:26:3c:7d:4f:91:4b:0c:05:12:07:cd:62:1c: 30:bf:a4:20:d8:04:dd:c5:d9:e3:39:72:49:c3:51: d2:2c:ef:a8:bf:9c:50:c7:db:62:1e:f7:30:70:2b: fe:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 16:CD:78:77:C9:1A:17:9A:0A:67:51:08:56:03:DA:8E:7D:E5:39:F0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/648b6583-4122-469d-8384-3af1bcc6607f/0/16CD7877C91A179A0A6751085603DA8E7DE539F0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.134.0/23 IPv6: 2405:b940::/32 Signature Algorithm: sha256WithRSAEncryption 04:f7:1a:58:e7:27:0f:92:b0:85:31:fa:a2:93:d8:9f:f4:cb: 06:17:59:d8:9d:c4:51:81:22:11:71:93:14:c9:af:11:58:18: 6f:21:b5:9d:75:cb:e1:c9:22:9f:4d:a7:c4:6b:e1:70:7b:1b: fa:c0:5f:10:46:0c:a5:73:b6:84:5c:ed:4d:96:ed:d4:c5:55: f0:34:16:28:dd:0f:6a:3b:53:b5:65:fb:9a:3a:3b:12:25:61: 42:13:bd:7c:d6:6a:07:9b:b9:03:45:88:63:1e:4a:5e:d8:6d: 37:0a:8f:75:5a:60:d6:22:b4:97:8f:c4:0b:1b:37:4f:89:ef: ee:1f:98:cd:8f:37:0f:9a:3d:46:c9:95:c4:ec:d0:4c:bf:25: 66:9a:d3:7e:4e:cb:ce:65:63:15:0d:e3:da:02:55:71:eb:c7: 73:17:24:8b:06:a8:aa:51:7d:87:31:e7:56:0c:74:86:b8:cb: a9:67:a9:c7:0c:3e:60:f8:7e:f4:2f:07:da:92:0a:b5:c8:0e: 51:00:b2:ab:9b:aa:45:79:f9:97:10:7b:d3:8b:4f:4c:0f:2b: 49:eb:35:81:ba:4d:5c:91:6c:e2:be:6d:3b:27:ca:62:c5:71: 77:14:c1:a9:40:98:38:56:e5:e1:a6:92:b3:ec:93:b3:0b:95: 0c:96:60:f9 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUcKwvuFdJooXzwB9orH6AZeyTFiwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyOTA5MTQxOFoX DTI2MDgyODA5MTkxOFowMzExMC8GA1UEAxMoMTZDRDc4NzdDOTFBMTc5QTBBNjc1 MTA4NTYwM0RBOEU3REU1MzlGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMYWUf6OwboNZVWlUSm0oy/dx9kwFc6LHw5ukgaV9apqZKn+bT9Tl+kcEGCo kpBr1ROvArWlQxttXrl+9kz393PriDjTAP+U021x+vUnq6FEYOI+rlQUByip2i8C JTdr5Ok3owxECrfhgi2hPrTNWEme8toYepyIz+hasNY96uvAGkgB7eCPwBW2jT7p S3FS3ZNneHrRKu4YRsVEl4s/zkSDrZ9LrPhmIfmkT5W8ou/R8F0hzGHrVuipCCFU Uhe+mEf5vw513cQdcewSE8oRPUpybZUmPH1PkUsMBRIHzWIcML+kINgE3cXZ4zly ScNR0izvqL+cUMfbYh73MHAr/i8CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBbNeHfJGheaCmdRCFYD2o595TnwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82NDhiNjU4My00MTIyLTQ2OWQtODM4NC0zYWYxYmNjNjYwN2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY0OGI2NTgz LTQxMjItNDY5ZC04Mzg0LTNhZjFiY2M2NjA3Zi8wLzE2Q0Q3ODc3QzkxQTE3OUEw QTY3NTEwODU2MDNEQThFN0RFNTM5RjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnk4YwDQQCAAIwBwMFACQFuUAwDQYJKoZIhvcNAQELBQADggEBAAT3GljnJw+S sIUx+qKT2J/0ywYXWdidxFGBIhFxkxTJrxFYGG8htZ11y+HJIp9Np8Rr4XB7G/rA XxBGDKVztoRc7U2W7dTFVfA0FijdD2o7U7Vl+5o6OxIlYUITvXzWagebuQNFiGMe Sl7YbTcKj3VaYNYitJePxAsbN0+J7+4fmM2PNw+aPUbJlcTs0Ey/JWaa035Oy85l YxUN49oCVXHrx3MXJIsGqKpRfYcx51YMdIa4y6lnqccMPmD4fvQvB9qSCrXIDlEA squbqkV5+ZcQe9OLT0wPK0nrNYG6TVyRbOK+bTsnymLFcXcUwalAmDhW5eGmkrPs k7MLlQyWYPk= -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:23 2025 by rpki-client