$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer File: 2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer (raw, json) Hash identifier: Gx/9+EgW+LP/gMTKypNUhh+DffTZnv2SsIkXiPa+05w= Subject key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5E083A09174F6938EE3A007801FAA50A485DDBA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft caRepository: rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 02 May 2025 14:55:39 +0000 Certificate not after: Fri 01 May 2026 15:00:39 +0000 Subordinate resources: IP: 103.209.184.0/22 IP: 103.247.211.0/24 IP: 119.47.93.0/24 IP: 203.96.228.0/22 IP: 2404:5980::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 02:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:08:3a:09:17:4f:69:38:ee:3a:00:78:01:fa:a5:0a:48:5d:db:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 2 14:55:39 2025 GMT Not After : May 1 15:00:39 2026 GMT Subject: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f7:51:cb:2e:c5:4a:54:0a:a7:a8:91:ed:9a: 0a:f6:52:28:82:93:f6:6a:83:5d:68:d5:06:ca:e6: f6:88:e4:20:7e:92:62:94:ae:2e:a2:67:25:08:9b: e8:f2:43:a4:e5:c8:c3:f0:04:0b:89:ee:15:68:87: e8:25:43:13:25:7e:db:c1:3a:95:94:ae:0d:81:3a: 55:4a:6b:4e:96:1c:bc:c6:56:3a:9a:89:52:d8:40: 26:43:8f:f6:2b:0a:7d:d6:d0:63:8b:cb:08:89:e8: 0b:19:65:dd:dd:1f:6e:33:5e:b3:58:92:d5:9e:05: 59:2c:70:bf:b9:fd:29:db:a4:2c:b4:d8:6a:30:25: 08:c4:7c:59:c1:4c:7c:61:94:55:df:68:30:58:aa: 0b:56:8e:7c:87:e4:cf:af:ef:20:2b:34:2b:a7:ca: 75:33:37:89:de:42:46:51:61:0b:b3:61:9f:87:52: 3b:ff:21:9f:6b:79:24:fd:10:96:f3:9d:a1:bb:cc: d6:b8:de:d9:e7:bf:a4:b3:83:c6:e5:a4:7f:28:93: bc:45:e8:ee:0a:9d:ec:84:f9:d0:77:e8:f5:1e:96: e6:53:aa:b4:15:33:60:aa:67:84:5a:c6:db:b8:57: 2e:bc:08:e2:67:7c:58:da:55:e5:de:8b:a8:13:cf: 0d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.209.184.0/22 103.247.211.0/24 119.47.93.0/24 203.96.228.0/22 IPv6: 2404:5980::/32 Signature Algorithm: sha256WithRSAEncryption 7a:e3:b5:ab:d5:a5:70:3c:bd:ff:8a:c3:8f:57:d0:09:15:a7: 5a:d7:9c:82:4c:18:ca:4d:ef:ee:b7:53:6a:45:12:24:8a:7c: e8:29:55:c8:0a:e7:f9:69:5a:2b:b7:ba:27:df:ac:ab:d3:43: be:b6:e8:de:a8:a9:af:4a:4f:51:0e:18:0a:15:85:e3:3a:55: 3d:ba:52:f7:f0:58:fb:b2:ba:c8:40:33:48:69:25:be:dd:50: 95:99:97:85:ab:03:90:fe:66:c9:d3:ba:c4:ab:6d:1f:75:f7: e7:05:86:c6:b0:1f:0e:3a:b9:59:93:79:a6:0c:e9:aa:2f:d9: 00:fc:0a:25:fe:0c:c4:ac:d1:71:27:a6:99:35:e2:a4:a7:c5: 89:26:74:f8:04:5e:82:95:77:af:1c:8c:c7:c5:f0:49:47:73: 87:f8:08:3a:8e:17:01:8f:15:34:b3:26:43:69:6f:22:b7:38: 34:9d:01:30:63:46:28:89:4f:55:3d:06:5b:c9:4f:3d:ab:d1: 0e:e4:86:82:dc:39:b7:9a:78:a0:e1:04:90:2d:35:0c:50:e5: 26:eb:46:87:93:1c:65:c2:61:6f:47:8f:bc:52:54:b5:7b:96: 44:97:d0:48:fb:3f:d7:15:01:33:94:93:74:e0:74:1a:29:e4: 30:09:aa:23 -----BEGIN CERTIFICATE----- MIIF5jCCBM6gAwIBAgIUXgg6CRdPaTjuOgB4AfqlCkhd26EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUwMjE0NTUzOVoX DTI2MDUwMTE1MDAzOVowMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4 QzVCMkM5RkNGQkE4QTNCNkU3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMD3UcsuxUpUCqeoke2aCvZSKIKT9mqDXWjVBsrm9ojkIH6SYpSuLqJnJQib 6PJDpOXIw/AEC4nuFWiH6CVDEyV+28E6lZSuDYE6VUprTpYcvMZWOpqJUthAJkOP 9isKfdbQY4vLCInoCxll3d0fbjNes1iS1Z4FWSxwv7n9KdukLLTYajAlCMR8WcFM fGGUVd9oMFiqC1aOfIfkz6/vICs0K6fKdTM3id5CRlFhC7Nhn4dSO/8hn2t5JP0Q lvOdobvM1rje2ee/pLODxuWkfyiTvEXo7gqd7IT50Hfo9R6W5lOqtBUzYKpnhFrG 27hXLrwI4md8WNpV5d6LqBPPDTUCAwEAAaOCAtkwggLVMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCFGzc16PHoZFbeMWyyfz7qKO255MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5MzlkYmYx LTMwNzUtNDUxOS1iYTkwLWNlZThkMzk3OWZjZC8wLzIxNDZDRENEN0EzQzdBMTkx NUI3OEM1QjJDOUZDRkJBOEEzQjZFNzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgD BAJn0bgDBABn99MDBAB3L10DBALLYOQwDQQCAAIwBwMFACQEWYAwDQYJKoZIhvcN AQELBQADggEBAHrjtavVpXA8vf+Kw49X0AkVp1rXnIJMGMpN7+63U2pFEiSKfOgp VcgK5/lpWiu3uiffrKvTQ7626N6oqa9KT1EOGAoVheM6VT26UvfwWPuyushAM0hp Jb7dUJWZl4WrA5D+ZsnTusSrbR919+cFhsawHw46uVmTeaYM6aov2QD8CiX+DMSs 0XEnppk14qSnxYkmdPgEXoKVd68cjMfF8ElHc4f4CDqOFwGPFTSzJkNpbyK3ODSd ATBjRiiJT1U9BlvJTz2r0Q7khoLcObeaeKDhBJAtNQxQ5SbrRoeTHGXCYW9Hj7xS VLV7lkSX0Ej7P9cVATOUk3TgdBop5DAJqiM= -----END CERTIFICATE-----Generated at Wed Nov 5 17:00:01 2025 by rpki-client