$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer File: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer (raw, json) Hash identifier: c4e4dw+xkU9Npsu4BLjM8rZRyjScvFNBUPOzC3mQjr8= Subject key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7937701A1D233CBF4B6C337C90BABDF518A7B3AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft caRepository: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 04:23:58 +0000 Certificate not after: Tue 02 Jun 2026 04:28:58 +0000 Subordinate resources: IP: 103.105.217.0/24 IP: 103.107.71.0/24 IP: 103.107.84.0/23 IP: 2402:c740::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:37:70:1a:1d:23:3c:bf:4b:6c:33:7c:90:ba:bd:f5:18:a7:b3:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 04:23:58 2025 GMT Not After : Jun 2 04:28:58 2026 GMT Subject: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:2b:40:29:93:8a:21:02:54:a7:be:58:22: 6e:8d:e9:a0:04:d2:8e:94:c9:90:19:b6:84:47:b1: bd:b9:0d:b5:f7:88:74:3a:d1:57:14:7e:fb:19:ad: 93:1d:c2:01:c1:56:dd:66:6b:38:65:7c:c6:f3:f5: 66:37:0c:75:68:b7:3d:46:53:da:e5:53:d1:7c:1b: 99:43:46:98:92:83:82:d0:b3:df:7b:21:2a:b2:40: 25:1d:37:c6:7a:69:76:7d:cd:2c:e1:be:59:e4:04: d3:d2:c5:33:b4:df:8e:44:e8:9d:c4:23:80:b0:0b: e6:da:e1:ef:93:a9:a1:35:08:70:d4:17:60:45:fd: bf:21:9a:74:fd:46:46:19:53:71:c8:23:b2:2c:72: 72:ed:f8:b3:67:ca:9d:b3:9d:ad:dc:ac:fa:d5:09: 02:88:83:77:1b:26:1d:ad:8f:94:5f:91:51:a6:90: a1:c4:a1:ab:f3:4f:47:af:c5:fb:69:81:59:06:d5: 68:f0:99:46:8b:7a:83:b9:45:67:b1:71:2f:74:b8: 90:84:23:43:d4:7f:f7:21:20:7d:a2:9e:43:ef:3f: 33:4b:a2:67:d3:f6:cf:2e:fd:76:f7:dd:a7:e0:a6: 74:58:d8:f7:1b:7e:a8:dc:0a:39:3b:62:23:a2:b8: 04:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.217.0/24 103.107.71.0/24 103.107.84.0/23 IPv6: 2402:c740::/32 Signature Algorithm: sha256WithRSAEncryption 6c:10:d9:4e:05:d9:5e:f9:2c:95:33:00:19:d9:f1:59:73:6d: ae:ef:3e:5f:cf:88:69:e2:22:b4:f6:a1:a3:34:c4:2d:31:87: 68:66:7a:7d:55:87:42:b7:4a:46:cc:da:a3:cb:4e:89:94:f7: 40:0d:19:9a:f8:17:57:69:59:4b:13:fc:8e:13:fa:aa:40:35: 08:ca:64:5b:23:c5:04:89:e3:fa:c7:a0:64:43:b8:54:c7:37: d7:be:31:de:56:7b:e8:1d:e2:80:29:ca:47:63:a2:99:bb:f6: 5a:10:fa:d3:4f:dd:a8:d4:c0:bc:7b:64:20:1d:01:bc:fd:b2: 41:99:a7:b0:02:93:30:13:d1:74:33:b8:b4:31:60:3a:7f:90: 45:9f:6a:b7:9f:78:98:b5:2c:94:0e:44:5b:ed:3a:21:c9:ff: 9c:81:86:34:f5:f6:57:f4:3a:1d:23:cb:18:5c:b7:d6:14:7b: 13:35:e3:cc:4f:98:87:b7:80:11:c4:02:3c:01:8d:56:17:26: d5:f1:d5:71:9d:91:ef:97:df:0a:c7:e1:56:fd:48:06:30:e2: c5:f8:08:fc:58:9e:a8:94:8d:9c:db:6f:04:6e:88:60:de:b9: d5:76:00:c7:3b:01:30:69:44:35:f4:f1:24:c4:0b:b9:d9:cf: ef:cd:d2:64 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUeTdwGh0jPL9LbDN8kLq99Rins68wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzA0MjM1OFoX DTI2MDYwMjA0Mjg1OFowMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNC MzAzNTAxNkRDNEVDNjJDREVCMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALVWK0Apk4ohAlSnvlgibo3poATSjpTJkBm2hEexvbkNtfeIdDrRVxR++xmt kx3CAcFW3WZrOGV8xvP1ZjcMdWi3PUZT2uVT0XwbmUNGmJKDgtCz33shKrJAJR03 xnppdn3NLOG+WeQE09LFM7TfjkToncQjgLAL5trh75OpoTUIcNQXYEX9vyGadP1G RhlTccgjsixycu34s2fKnbOdrdys+tUJAoiDdxsmHa2PlF+RUaaQocShq/NPR6/F +2mBWQbVaPCZRot6g7lFZ7FxL3S4kIQjQ9R/9yEgfaKeQ+8/M0uiZ9P2zy79dvfd p+CmdFjY9xt+qNwKOTtiI6K4BEECAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCJHUg8SCMjZrDOzA1AW3E7GLN6xMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkZGYxODFm LTFlODktNDAyMi04MmY4LWUwZGJhODU5ZWUyZS8wLzIyNDc1MjBGMTIwOEM4RDlB QzMzQjMwMzUwMTZEQzRFQzYyQ0RFQjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BABnadkDBABna0cDBAFna1QwDQQCAAIwBwMFACQCx0AwDQYJKoZIhvcNAQELBQAD ggEBAGwQ2U4F2V75LJUzABnZ8Vlzba7vPl/PiGniIrT2oaM0xC0xh2hmen1Vh0K3 SkbM2qPLTomU90ANGZr4F1dpWUsT/I4T+qpANQjKZFsjxQSJ4/rHoGRDuFTHN9e+ Md5We+gd4oApykdjopm79loQ+tNP3ajUwLx7ZCAdAbz9skGZp7ACkzAT0XQzuLQx YDp/kEWfarefeJi1LJQORFvtOiHJ/5yBhjT19lf0Oh0jyxhct9YUexM148xPmIe3 gBHEAjwBjVYXJtXx1XGdke+X3wrH4Vb9SAYw4sX4CPxYnqiUjZzbbwRuiGDeudV2 AMc7ATBpRDX08STEC7nZz+/N0mQ= -----END CERTIFICATE-----Generated at Sun Jun 15 19:21:38 2025 by rpki-client