$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer File: 25F464020D9CBB8D18BC7C47169F978D24F4F1BE.cer (raw, json) Hash identifier: HZt5rgMq96wRLGV8lfp7lgi0rXyv+tDK9h3WtMCIb7Y= Subject key identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 11843B664EF932DA32B8CE1AB264AD93AD403C79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft caRepository: rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 31 Jul 2025 22:53:30 +0000 Certificate not after: Thu 30 Jul 2026 22:58:30 +0000 Subordinate resources: IP: 103.176.180.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:84:3b:66:4e:f9:32:da:32:b8:ce:1a:b2:64:ad:93:ad:40:3c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 22:53:30 2025 GMT Not After : Jul 30 22:58:30 2026 GMT Subject: CN=25F464020D9CBB8D18BC7C47169F978D24F4F1BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0d:01:f2:5f:e2:93:72:fc:c5:1c:e4:9a:22: 68:b7:61:89:01:82:df:a8:1b:f2:74:37:d8:c8:b5: e3:d8:76:f1:02:a6:70:e3:05:e5:03:74:97:96:0a: 5f:99:42:26:99:9c:9f:23:03:d6:c8:d4:72:5a:a2: 8d:23:41:3d:5f:9a:7e:54:e3:73:cc:a1:4d:c6:96: 62:f1:e7:3a:3e:5a:bf:a4:20:07:be:d3:36:69:d5: 49:4a:f5:9e:6f:fc:89:a7:c0:2c:a4:43:be:25:7a: c5:e4:03:b5:5b:9f:86:12:e7:a4:c0:8d:95:d9:a1: 02:f5:36:c0:63:34:5e:e6:cc:f4:b4:93:23:bb:97: c8:4c:5d:2f:0a:d0:72:a8:21:48:b7:c4:41:c7:65: b8:38:d6:a9:ce:78:48:4c:48:8a:96:ef:58:17:da: 25:a3:82:92:ac:71:8e:10:f7:fc:ab:d5:c3:1c:58: 86:20:19:28:4e:9e:65:4e:d0:11:b1:d5:fc:28:29: e0:12:58:5a:ea:e8:0f:60:08:7e:d2:db:41:d3:40: 04:f0:c4:dc:22:51:d5:f3:26:16:a2:11:cb:5d:a2: c2:08:ea:bf:18:78:6a:21:49:39:91:18:4b:d7:02: 8b:26:75:1c:c5:0d:15:1e:49:51:02:11:ff:99:5a: e6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:F4:64:02:0D:9C:BB:8D:18:BC:7C:47:16:9F:97:8D:24:F4:F1:BE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/628de86b-a26e-4b0f-a83c-05fab4a30c77/0/25F464020D9CBB8D18BC7C47169F978D24F4F1BE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.180.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:30:bb:7b:df:c3:a7:35:51:c8:22:14:e2:5b:db:5c:00:05: c3:0e:d3:58:ce:5c:69:ac:a3:ad:f3:8c:83:fe:c9:f9:67:be: 78:cb:4e:ab:31:8e:b8:b5:f8:79:2d:4e:a6:74:2a:24:b1:94: 36:3b:2e:39:23:e2:88:9f:43:8f:df:16:63:36:96:10:80:86: 08:39:4e:e5:f6:fa:88:1b:6f:04:a1:c2:fe:bd:02:79:08:5e: 02:7e:ab:52:01:f4:a4:2f:6e:64:38:38:48:55:09:9c:3e:ff: 64:15:60:6c:a0:e8:e0:92:fe:b1:5f:9f:cd:64:d5:e0:fd:03: 66:4b:17:5a:52:9f:4c:16:f3:db:d5:95:1a:f8:f1:f3:c4:0d: ba:d0:0e:9c:d5:39:34:44:c1:6e:99:f9:55:83:98:64:76:9a: ed:9b:cb:94:9f:10:37:2e:4d:9a:22:9b:1f:d5:2d:e3:3c:d4: 4a:21:97:c0:a9:87:00:06:31:98:68:ed:2a:a9:41:9c:2a:a5: dd:7e:ca:2a:50:d8:06:3c:5f:08:a3:a8:99:90:fc:05:20:97: 77:66:66:ac:98:e5:28:ab:0f:96:a2:ea:a1:1b:57:33:f4:04: cf:5e:fd:2f:5f:18:18:6b:cc:52:af:3a:a9:ef:34:6d:40:44: 50:f6:51:fe -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUEYQ7Zk75MtoyuM4asmStk61APHkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDczMTIyNTMzMFoX DTI2MDczMDIyNTgzMFowMzExMC8GA1UEAxMoMjVGNDY0MDIwRDlDQkI4RDE4QkM3 QzQ3MTY5Rjk3OEQyNEY0RjFCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0NAfJf4pNy/MUc5JoiaLdhiQGC36gb8nQ32Mi149h28QKmcOMF5QN0l5YK X5lCJpmcnyMD1sjUclqijSNBPV+aflTjc8yhTcaWYvHnOj5av6QgB77TNmnVSUr1 nm/8iafALKRDviV6xeQDtVufhhLnpMCNldmhAvU2wGM0XubM9LSTI7uXyExdLwrQ cqghSLfEQcdluDjWqc54SExIipbvWBfaJaOCkqxxjhD3/KvVwxxYhiAZKE6eZU7Q EbHV/Cgp4BJYWuroD2AIftLbQdNABPDE3CJR1fMmFqIRy12iwgjqvxh4aiFJOZEY S9cCiyZ1HMUNFR5JUQIR/5la5lUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCX0ZAINnLuNGLx8Rxafl40k9PG+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82MjhkZTg2Yi1hMjZlLTRiMGYtYTgzYy0wNWZhYjRhMzBjNzcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYyOGRlODZi LWEyNmUtNGIwZi1hODNjLTA1ZmFiNGEzMGM3Ny8wLzI1RjQ2NDAyMEQ5Q0JCOEQx OEJDN0M0NzE2OUY5NzhEMjRGNEYxQkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsLQwDQYJKoZIhvcNAQELBQADggEBAB0wu3vfw6c1UcgiFOJb21wABcMO01jO XGmso63zjIP+yflnvnjLTqsxjri1+HktTqZ0KiSxlDY7Ljkj4oifQ4/fFmM2lhCA hgg5TuX2+ogbbwShwv69AnkIXgJ+q1IB9KQvbmQ4OEhVCZw+/2QVYGyg6OCS/rFf n81k1eD9A2ZLF1pSn0wW89vVlRr48fPEDbrQDpzVOTREwW6Z+VWDmGR2mu2by5Sf EDcuTZoimx/VLeM81Eohl8CphwAGMZho7SqpQZwqpd1+yipQ2AY8XwijqJmQ/AUg l3dmZqyY5SirD5ai6qEbVzP0BM9e/S9fGBhrzFKvOqnvNG1ARFD2Uf4= -----END CERTIFICATE-----Generated at Wed Aug 6 14:22:00 2025 by rpki-client