$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.cer File: 179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.cer (raw, json) Hash identifier: DuQyOYuDXKdpR+3KtriCeOnXBUlJ+aQm7t0oXHLgCMs= Subject key identifier: 17:9B:4E:B2:33:0E:26:EC:D7:7C:82:54:D8:F8:BD:DD:1C:CB:6E:7F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 788F07D327916348370E56E69D9FB5E57905A76C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.mft caRepository: rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 21 May 2025 01:54:15 +0000 Certificate not after: Wed 20 May 2026 01:59:15 +0000 Subordinate resources: IP: 103.149.140.0/23 IP: 2001:df3:2980::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:8f:07:d3:27:91:63:48:37:0e:56:e6:9d:9f:b5:e5:79:05:a7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 21 01:54:15 2025 GMT Not After : May 20 01:59:15 2026 GMT Subject: CN=179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a5:ea:25:dc:7a:b8:9a:40:32:b3:c9:ac:1f: d0:64:b9:0f:d1:11:22:ba:c5:4e:89:a7:c6:ba:5f: 32:bf:84:0c:33:3b:3e:53:56:75:47:af:ab:e5:db: 3b:18:f9:1e:2f:23:e4:91:a9:86:5a:20:ad:8d:2a: 5d:12:9a:bc:33:bf:65:51:d1:69:2e:9e:b6:54:a7: 92:d0:55:0a:3b:8f:9f:ed:a8:6d:42:59:e8:1b:ec: a0:e3:d9:6b:b5:77:7a:20:ab:d8:6f:06:b1:69:13: 05:06:12:87:47:65:b9:0b:f2:85:70:55:73:c7:6b: 48:c6:99:30:11:1a:73:7b:31:77:34:ce:f4:54:e6: 02:5c:48:97:0e:21:98:45:fd:09:22:0f:d3:d6:50: ca:8a:24:35:20:24:b4:9e:0f:3e:f3:1d:08:0f:72: b9:2a:7d:90:35:22:32:81:96:f3:09:53:83:86:ac: 0d:e0:53:ef:52:c6:93:17:d7:22:ad:e7:57:4c:3c: 3d:36:ee:61:b9:db:25:f1:a0:69:bb:14:92:1e:66: d7:a1:97:a0:e5:23:ff:af:50:cf:4f:86:51:91:35: cb:8f:9f:0c:62:b1:30:62:f9:79:98:c6:6a:83:8a: da:36:3a:5a:7f:38:3a:0f:12:c4:fb:9b:98:c3:d1: 54:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:9B:4E:B2:33:0E:26:EC:D7:7C:82:54:D8:F8:BD:DD:1C:CB:6E:7F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b57f0e6c-145a-4cf3-b283-42c4af819188/0/179B4EB2330E26ECD77C8254D8F8BDDD1CCB6E7F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.140.0/23 IPv6: 2001:df3:2980::/48 Signature Algorithm: sha256WithRSAEncryption 09:eb:53:44:c2:2d:50:f2:1f:c0:54:d0:ce:d2:b4:fd:16:28: 1b:eb:4a:6c:27:fb:82:74:ab:86:f9:80:f0:4d:09:40:aa:ad: fb:e2:90:8b:44:78:e2:8b:20:1e:9e:f9:2a:20:25:34:b3:5f: a6:df:d8:44:bc:2d:fc:6d:a8:87:7b:18:bd:e2:c3:c5:56:9a: 2e:91:28:be:4e:38:87:bb:d5:f1:16:9c:03:b4:24:b3:ac:de: 43:8e:01:43:0c:79:f0:ad:01:cc:58:93:ef:12:f3:ec:33:13: 21:82:3b:24:11:31:ab:9e:1f:94:29:ef:ab:ee:90:e0:8e:2e: 0b:84:9f:40:7b:c4:94:a4:30:27:be:17:07:3e:a0:5d:56:7d: 7a:f6:1a:80:3a:d0:d9:ac:8b:d6:32:5f:0c:7e:6b:c8:14:ef: 8d:c4:2b:1e:0f:46:79:dd:67:f8:56:eb:6c:85:2e:f3:9f:df: a1:ff:17:f6:21:d6:7e:ff:b5:95:30:7e:46:5a:d8:df:08:46: 22:e1:95:bd:62:f3:6d:ea:c2:c2:e1:24:fa:63:b6:ca:f7:e4: 6d:c1:b1:7c:b2:e2:3a:66:bf:03:43:74:55:ed:84:0e:3e:ff: e7:e9:a4:8d:9f:bd:b4:9e:e6:10:b0:68:fa:c9:42:39:59:32: e7:c8:e7:b7 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUeI8H0yeRY0g3DlbmnZ+15XkFp2wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUyMTAxNTQxNVoX DTI2MDUyMDAxNTkxNVowMzExMC8GA1UEAxMoMTc5QjRFQjIzMzBFMjZFQ0Q3N0M4 MjU0RDhGOEJEREQxQ0NCNkU3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJql6iXceriaQDKzyawf0GS5D9ERIrrFTomnxrpfMr+EDDM7PlNWdUevq+Xb Oxj5Hi8j5JGphlogrY0qXRKavDO/ZVHRaS6etlSnktBVCjuPn+2obUJZ6BvsoOPZ a7V3eiCr2G8GsWkTBQYSh0dluQvyhXBVc8drSMaZMBEac3sxdzTO9FTmAlxIlw4h mEX9CSIP09ZQyookNSAktJ4PPvMdCA9yuSp9kDUiMoGW8wlTg4asDeBT71LGkxfX Iq3nV0w8PTbuYbnbJfGgabsUkh5m16GXoOUj/69Qz0+GUZE1y4+fDGKxMGL5eZjG aoOK2jY6Wn84Og8SxPubmMPRVIkCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBebTrIzDibs13yCVNj4vd0cy25/MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNTdmMGU2Yy0xNDVhLTRjZjMtYjI4My00MmM0YWY4MTkxODgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1N2YwZTZj LTE0NWEtNGNmMy1iMjgzLTQyYzRhZjgxOTE4OC8wLzE3OUI0RUIyMzMwRTI2RUNE NzdDODI1NEQ4RjhCREREMUNDQjZFN0YubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnlYwwDwQCAAIwCQMHACABDfMpgDANBgkqhkiG9w0BAQsFAAOCAQEACetTRMIt UPIfwFTQztK0/RYoG+tKbCf7gnSrhvmA8E0JQKqt++KQi0R44osgHp75KiAlNLNf pt/YRLwt/G2oh3sYveLDxVaaLpEovk44h7vV8RacA7Qks6zeQ44BQwx58K0BzFiT 7xLz7DMTIYI7JBExq54flCnvq+6Q4I4uC4SfQHvElKQwJ74XBz6gXVZ9evYagDrQ 2ayL1jJfDH5ryBTvjcQrHg9Ged1n+FbrbIUu85/fof8X9iHWfv+1lTB+RlrY3whG IuGVvWLzberCwuEk+mO2yvfkbcGxfLLiOma/A0N0Ve2EDj7/5+mkjZ+9tJ7mELBo +slCOVky58jntw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:29 2025 by rpki-client