$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer File: 21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.cer (raw, json) Hash identifier: A3VPmPgxgrmn5Tnggsg6yIUfBf7neHjSnjT4jX66c3A= Subject key identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 33CF14F52F26AC39456B173086FAC8A59B6C85D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft caRepository: rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 30 Jul 2025 00:48:17 +0000 Certificate not after: Wed 29 Jul 2026 00:53:17 +0000 Subordinate resources: IP: 103.166.8.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:cf:14:f5:2f:26:ac:39:45:6b:17:30:86:fa:c8:a5:9b:6c:85:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 00:48:17 2025 GMT Not After : Jul 29 00:53:17 2026 GMT Subject: CN=21E46FEE03A1A4CB944F6CE6828AC30217E63BA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c2:ec:8f:1c:4d:08:2c:15:3b:53:ed:ab:96: f8:f0:65:2b:84:f2:94:8a:a8:6e:90:4d:3f:00:75: 67:b3:a9:6f:54:eb:e0:b0:b9:5f:0a:09:55:60:74: da:1b:db:87:df:81:46:6f:45:1e:f4:d5:b5:14:fe: 55:ba:24:57:1f:a2:10:9f:b2:3c:f6:51:c5:cf:45: b1:b6:78:03:ad:34:c1:dc:76:70:db:25:65:f4:ec: 51:46:6e:89:be:dc:80:df:fa:dd:df:34:87:fb:af: b1:08:0c:e4:af:25:43:43:50:8f:47:2c:e6:d3:66: e8:16:e0:a5:b2:dd:64:4c:90:ae:26:2e:da:cd:3e: 85:1b:d4:d5:3c:8f:76:f1:80:bf:25:0c:ac:5d:78: 5d:83:ef:f5:49:dc:ad:f9:25:f6:ca:cf:5d:d7:df: 52:fe:fe:3f:ac:29:3a:81:e0:92:12:04:ef:96:d9: d0:ee:e8:fa:74:3e:39:09:33:1c:28:e5:f1:ec:5d: c3:76:f5:99:c2:d6:3c:07:4e:6e:36:19:b7:d1:dc: 34:e2:c3:42:6a:5e:b3:f6:eb:85:e3:18:e8:27:0e: c6:4b:c3:c5:d2:14:30:37:e7:93:09:59:ef:49:6c: 65:06:a2:8f:85:02:35:f7:a7:1e:5b:8f:d3:a7:8d: 38:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:E4:6F:EE:03:A1:A4:CB:94:4F:6C:E6:82:8A:C3:02:17:E6:3B:A1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/782212c2-3d68-4867-b99c-fc5cf4d0dbf1/0/21E46FEE03A1A4CB944F6CE6828AC30217E63BA1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.8.0/23 Signature Algorithm: sha256WithRSAEncryption 64:a1:83:aa:cc:33:bb:08:af:79:9c:66:5a:63:5d:fd:94:d2: fc:d4:7b:e5:b6:49:7c:18:90:89:5d:a6:60:5d:00:2a:f0:2e: 66:23:2b:75:2c:17:0d:bc:84:ba:f4:2b:5a:f3:7a:92:4b:a0: 62:5e:2a:2c:21:bd:be:80:14:f1:4d:57:17:a9:47:01:6c:1d: f1:9c:16:ca:70:68:8d:7b:66:63:64:ac:0d:ef:60:9f:25:1b: dd:bf:22:2e:59:30:37:0b:4f:13:07:4a:77:6d:e8:55:61:1b: 1d:69:b7:13:6c:f9:d8:0b:ef:dc:8c:80:11:72:ae:88:07:5c: 62:59:93:e0:a1:d0:8b:35:ba:96:bf:40:43:e3:e7:98:da:7c: 66:47:9a:10:1b:c5:65:cd:09:59:94:67:66:4e:1b:9e:87:81: 64:34:8f:73:87:45:00:ea:11:21:a4:ee:1d:d7:20:d6:8c:d7: ae:96:e2:dd:02:17:17:41:dc:8f:5b:ef:8e:0d:26:00:35:8a: 0e:34:41:6d:59:d1:ee:94:e9:34:1f:d0:4e:53:92:92:96:49: 77:4f:4c:2e:7f:fd:69:fe:2a:12:50:ce:5b:24:71:91:af:5d: 44:df:8f:74:f6:95:d0:56:ac:c3:66:6a:0e:d8:0c:c2:df:1a: 79:2b:3a:ef -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUM88U9S8mrDlFaxcwhvrIpZtshdMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDczMDAwNDgxN1oX DTI2MDcyOTAwNTMxN1owMzExMC8GA1UEAxMoMjFFNDZGRUUwM0ExQTRDQjk0NEY2 Q0U2ODI4QUMzMDIxN0U2M0JBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrC7I8cTQgsFTtT7auW+PBlK4TylIqobpBNPwB1Z7Opb1Tr4LC5XwoJVWB0 2hvbh9+BRm9FHvTVtRT+VbokVx+iEJ+yPPZRxc9FsbZ4A600wdx2cNslZfTsUUZu ib7cgN/63d80h/uvsQgM5K8lQ0NQj0cs5tNm6BbgpbLdZEyQriYu2s0+hRvU1TyP dvGAvyUMrF14XYPv9Uncrfkl9srPXdffUv7+P6wpOoHgkhIE75bZ0O7o+nQ+OQkz HCjl8exdw3b1mcLWPAdObjYZt9HcNOLDQmpes/brheMY6CcOxkvDxdIUMDfnkwlZ 70lsZQaij4UCNfenHluP06eNOEMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCHkb+4DoaTLlE9s5oKKwwIX5juhMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ODIyMTJjMi0zZDY4LTQ4NjctYjk5Yy1mYzVjZjRkMGRiZjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc4MjIxMmMy LTNkNjgtNDg2Ny1iOTljLWZjNWNmNGQwZGJmMS8wLzIxRTQ2RkVFMDNBMUE0Q0I5 NDRGNkNFNjgyOEFDMzAyMTdFNjNCQTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnpggwDQYJKoZIhvcNAQELBQADggEBAGShg6rMM7sIr3mcZlpjXf2U0vzUe+W2 SXwYkIldpmBdACrwLmYjK3UsFw28hLr0K1rzepJLoGJeKiwhvb6AFPFNVxepRwFs HfGcFspwaI17ZmNkrA3vYJ8lG92/Ii5ZMDcLTxMHSndt6FVhGx1ptxNs+dgL79yM gBFyrogHXGJZk+Ch0Is1upa/QEPj55jafGZHmhAbxWXNCVmUZ2ZOG56HgWQ0j3OH RQDqESGk7h3XINaM166W4t0CFxdB3I9b744NJgA1ig40QW1Z0e6U6TQf0E5TkpKW SXdPTC5//Wn+KhJQzlskcZGvXUTfj3T2ldBWrMNmag7YDMLfGnkrOu8= -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:10 2025 by rpki-client