$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer File: 210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.cer (raw, json) Hash identifier: hmMrGfoz+f8Uj3XVxigMXcLBVnaaoHwVii/xyHRnGSs= Subject key identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5BA5167B6AC838972777DA7672FEA0B1070E0D89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft caRepository: rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 20:52:46 +0000 Certificate not after: Tue 02 Jun 2026 20:57:46 +0000 Subordinate resources: IP: 103.73.235.0/24 IP: 103.82.6.0/24 IP: 2001:df4:b200::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a5:16:7b:6a:c8:38:97:27:77:da:76:72:fe:a0:b1:07:0e:0d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 20:52:46 2025 GMT Not After : Jun 2 20:57:46 2026 GMT Subject: CN=210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:57:ff:b8:13:d0:e0:1f:db:1f:02:9a:93: db:70:86:3a:db:a0:ee:5f:e4:93:86:0f:6e:a1:db: e3:4b:72:18:da:d5:78:15:be:47:00:2b:69:e1:b1: c1:1c:85:4e:95:c7:79:a8:df:96:da:2a:06:68:d9: fa:63:b8:a6:9f:cc:f5:e2:c5:70:5b:e4:f7:d1:a7: 44:2a:dd:09:fc:dd:f3:63:9c:3e:e5:4c:ed:3e:84: fb:20:96:71:9f:d0:c8:51:44:90:b9:49:e9:96:cf: 50:da:77:c2:c3:8b:25:a8:b7:8c:d4:ba:67:3e:a9: 6e:92:4a:fb:bc:b9:ef:46:1d:60:e7:7a:0c:31:be: fc:3b:dd:43:aa:7c:57:4d:35:8e:28:06:9d:a8:26: f0:de:a2:4e:47:14:85:e5:73:ca:17:ab:f4:e6:42: 86:fd:61:d8:53:51:99:ae:99:ca:cf:87:30:c9:ca: 99:48:4f:43:d8:60:86:9f:0e:70:1b:f1:56:a6:90: 59:eb:69:e8:a9:23:a2:c6:85:31:1b:2a:8d:d2:02: 1e:09:7e:95:e8:63:78:61:02:91:5e:d6:87:a4:46: 01:15:4c:6c:d8:0a:db:bb:5d:c6:ca:c1:ab:d4:83: d6:65:16:2c:e7:07:99:a9:17:b6:0b:ce:ec:f7:53: 2e:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:0F:D9:8E:B4:D9:A4:D8:D0:FC:B9:B2:F3:BB:BC:7F:B8:8A:32:A9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f2788c88-ca2c-4fa0-a35f-3e7a10887228/0/210FD98EB4D9A4D8D0FCB9B2F3BBBC7FB88A32A9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.73.235.0/24 103.82.6.0/24 IPv6: 2001:df4:b200::/48 Signature Algorithm: sha256WithRSAEncryption 53:0d:8d:af:72:91:dc:52:36:5f:58:47:aa:de:82:77:41:ff: a2:34:9d:26:d0:b4:7b:3a:7a:19:a0:4a:b3:4d:71:ec:f4:62: bf:42:2b:1c:9b:c8:ce:01:0c:ad:18:e2:c0:8b:2a:ff:2b:92: ee:78:8c:00:2e:32:7d:d7:82:7e:aa:2f:10:98:be:40:9b:8c: 69:75:24:a6:be:5f:58:c9:23:38:70:80:42:41:fb:c9:fc:fb: 59:87:63:65:ec:53:1e:2d:49:63:12:be:f8:9d:df:e2:ac:cb: 7b:69:49:13:ef:14:ec:26:6a:f4:15:cd:b6:7b:be:0f:f5:1b: 71:a0:cf:b7:0c:52:0f:1d:4d:32:7b:4f:aa:b7:e1:74:69:5d: 58:9e:02:02:5d:d3:65:56:c9:1e:68:42:95:5a:60:50:f0:de: 3c:ae:05:8b:e6:37:6a:8b:da:c4:11:a1:79:e0:12:78:e1:e1: ec:e1:3b:c7:63:fc:f9:b2:34:75:62:0d:15:3c:5b:20:c5:ad: c9:e5:30:3d:80:e4:41:15:51:a9:7e:a2:91:9f:f3:59:92:44: ba:d0:21:7e:9d:a8:80:b4:54:d8:39:24:be:5d:7a:db:c5:1b: f9:07:75:05:19:81:43:3d:3c:20:3e:4f:ba:ab:fe:ec:7f:4f: e1:fd:ad:d5 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUW6UWe2rIOJcnd9p2cv6gsQcODYkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzIwNTI0NloX DTI2MDYwMjIwNTc0NlowMzExMC8GA1UEAxMoMjEwRkQ5OEVCNEQ5QTREOEQwRkNC OUIyRjNCQkJDN0ZCODhBMzJBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALLsV/+4E9DgH9sfApqT23CGOtug7l/kk4YPbqHb40tyGNrVeBW+RwAraeGx wRyFTpXHeajfltoqBmjZ+mO4pp/M9eLFcFvk99GnRCrdCfzd82OcPuVM7T6E+yCW cZ/QyFFEkLlJ6ZbPUNp3wsOLJai3jNS6Zz6pbpJK+7y570YdYOd6DDG+/DvdQ6p8 V001jigGnagm8N6iTkcUheVzyher9OZChv1h2FNRma6Zys+HMMnKmUhPQ9hghp8O cBvxVqaQWetp6KkjosaFMRsqjdICHgl+lehjeGECkV7Wh6RGARVMbNgK27tdxsrB q9SD1mUWLOcHmakXtgvO7PdTLtkCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCEP2Y602aTY0Py5svO7vH+4ijKpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMjc4OGM4OC1jYTJjLTRmYTAtYTM1Zi0zZTdhMTA4ODcyMjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyNzg4Yzg4 LWNhMmMtNGZhMC1hMzVmLTNlN2ExMDg4NzIyOC8wLzIxMEZEOThFQjREOUE0RDhE MEZDQjlCMkYzQkJCQzdGQjg4QTMyQTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BABnSesDBABnUgYwDwQCAAIwCQMHACABDfSyADANBgkqhkiG9w0BAQsFAAOCAQEA Uw2Nr3KR3FI2X1hHqt6Cd0H/ojSdJtC0ezp6GaBKs01x7PRiv0IrHJvIzgEMrRji wIsq/yuS7niMAC4yfdeCfqovEJi+QJuMaXUkpr5fWMkjOHCAQkH7yfz7WYdjZexT Hi1JYxK++J3f4qzLe2lJE+8U7CZq9BXNtnu+D/UbcaDPtwxSDx1NMntPqrfhdGld WJ4CAl3TZVbJHmhClVpgUPDePK4Fi+Y3aovaxBGheeASeOHh7OE7x2P8+bI0dWIN FTxbIMWtyeUwPYDkQRVRqX6ikZ/zWZJEutAhfp2ogLRU2Dkkvl1628Ub+Qd1BRmB Qz08ID5Puqv+7H9P4f2t1Q== -----END CERTIFICATE-----Generated at Sun Jun 15 15:53:26 2025 by rpki-client