$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/28612772543E43335B080C32808B7FDC277E71E4.cer File: 28612772543E43335B080C32808B7FDC277E71E4.cer (raw, json) Hash identifier: 039iw/WKS1Xvxy9w+CRGePE/Rjbk8zCmVY7j4poYRzY= Subject key identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5778C62E37BA452C5A4BFF9548C78B6A17F6B013 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft caRepository: rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 14 Aug 2025 17:30:33 +0000 Certificate not after: Thu 13 Aug 2026 17:35:33 +0000 Subordinate resources: IP: 103.115.164.0/24 IP: 103.121.122.0/24 IP: 103.133.56.0/24 IP: 103.142.21.0/24 IP: 2001:df7:9b00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 00:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:78:c6:2e:37:ba:45:2c:5a:4b:ff:95:48:c7:8b:6a:17:f6:b0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 14 17:30:33 2025 GMT Not After : Aug 13 17:35:33 2026 GMT Subject: CN=28612772543E43335B080C32808B7FDC277E71E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:78:a4:6d:85:a5:57:34:a7:cd:9f:27:fd:fb: 79:a5:df:0c:16:68:39:4d:ff:29:a5:8f:6d:29:44: 69:19:08:a1:ae:b8:ce:a4:c6:ab:c0:3a:1e:da:3a: 23:82:c0:04:f8:0b:23:59:68:7c:2b:8d:83:a4:f6: e8:0e:16:a4:51:3a:52:87:d5:e2:3a:48:02:eb:3d: c0:f9:c0:ff:cd:b5:b2:4f:32:29:1b:17:2d:25:21: 45:84:11:87:f1:a8:74:cc:92:21:04:c7:85:63:cd: c3:2f:10:6b:71:78:fd:53:a1:42:f0:e1:54:df:31: 2b:5b:fd:09:1b:ee:15:ce:d6:6e:a7:27:50:18:e1: c2:4f:17:5e:35:8c:2c:49:20:dd:20:74:bc:44:f1: 57:db:73:a4:1e:28:44:e2:62:cc:29:33:15:24:c3: 66:8a:56:f7:94:b3:53:e4:39:77:8f:2e:aa:e1:fa: 70:e8:0f:ab:dd:cc:37:1f:b6:16:94:5b:02:58:06: b6:b6:90:d4:e4:48:72:b7:01:c8:33:66:4c:d2:cb: 31:74:82:6e:13:76:25:4b:df:56:71:94:e0:7c:6c: 6d:f1:c0:c4:fc:82:c3:24:73:bb:57:03:86:25:cc: e6:5a:47:8d:34:ec:88:6c:e7:16:dc:c9:8a:f4:9e: cc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 28:61:27:72:54:3E:43:33:5B:08:0C:32:80:8B:7F:DC:27:7E:71:E4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7b130b75-4593-4141-a06f-57a22a023dd0/0/28612772543E43335B080C32808B7FDC277E71E4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.115.164.0/24 103.121.122.0/24 103.133.56.0/24 103.142.21.0/24 IPv6: 2001:df7:9b00::/48 Signature Algorithm: sha256WithRSAEncryption 7f:bc:8f:09:b4:a8:d9:0b:6f:38:ed:b3:fd:25:92:ee:1b:39: de:b6:ab:b8:56:c3:3f:dd:ad:ab:06:06:14:9c:2f:cf:ec:55: 91:a8:40:5c:3a:72:3d:79:59:10:6f:3d:db:f8:97:50:51:bc: 66:1c:0f:5d:5d:d5:25:81:e4:61:dc:fd:f4:1b:51:b5:c0:d2: 6e:e7:82:2c:68:c9:0b:c1:36:af:e6:dd:96:16:ea:01:fc:04: d1:0c:13:19:97:4d:d7:d3:e7:b2:c0:28:a4:00:01:a1:1d:ab: 29:6b:91:cf:ae:b4:01:84:8b:d9:eb:fb:57:2d:2c:b7:df:e9: 68:31:ea:6d:df:22:64:41:a8:29:88:9b:2a:74:e4:f4:e2:e1: 56:f6:81:44:21:28:79:db:5a:a5:70:ad:f1:46:66:0e:f2:89: 8f:ee:aa:e8:68:6f:31:31:d5:6a:15:58:f7:12:bb:b6:aa:63: 57:80:d0:4b:cc:ea:e1:80:82:f1:ec:1f:97:c5:e2:80:23:70: 31:0d:7e:c6:fe:a1:5c:c5:37:6d:4b:94:10:12:2d:d5:53:76: b0:90:61:23:e4:07:6a:d5:6a:98:60:74:68:05:9e:eb:22:a9: c0:ba:6f:ff:75:1d:37:34:7f:e3:ed:80:45:df:0a:15:ca:93: d5:66:3b:85 -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgIUV3jGLje6RSxaS/+VSMeLahf2sBMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxNDE3MzAzM1oX DTI2MDgxMzE3MzUzM1owMzExMC8GA1UEAxMoMjg2MTI3NzI1NDNFNDMzMzVCMDgw QzMyODA4QjdGREMyNzdFNzFFNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM54pG2FpVc0p82fJ/37eaXfDBZoOU3/KaWPbSlEaRkIoa64zqTGq8A6Hto6 I4LABPgLI1lofCuNg6T26A4WpFE6UofV4jpIAus9wPnA/821sk8yKRsXLSUhRYQR h/GodMySIQTHhWPNwy8Qa3F4/VOhQvDhVN8xK1v9CRvuFc7WbqcnUBjhwk8XXjWM LEkg3SB0vETxV9tzpB4oROJizCkzFSTDZopW95SzU+Q5d48uquH6cOgPq93MNx+2 FpRbAlgGtraQ1ORIcrcByDNmTNLLMXSCbhN2JUvfVnGU4HxsbfHAxPyCwyRzu1cD hiXM5lpHjTTsiGznFtzJivSezJsCAwEAAaOCAtswggLXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFChhJ3JUPkMzWwgMMoCLf9wnfnHkMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YjEzMGI3NS00NTkzLTQxNDEtYTA2Zi01N2EyMmEwMjNkZDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiMTMwYjc1 LTQ1OTMtNDE0MS1hMDZmLTU3YTIyYTAyM2RkMC8wLzI4NjEyNzcyNTQzRTQzMzM1 QjA4MEMzMjgwOEI3RkRDMjc3RTcxRTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQgYIKwYBBQUHAQcBAf8EMzAxMB4EAgABMBgD BABnc6QDBABneXoDBABnhTgDBABnjhUwDwQCAAIwCQMHACABDfebADANBgkqhkiG 9w0BAQsFAAOCAQEAf7yPCbSo2QtvOO2z/SWS7hs53raruFbDP92tqwYGFJwvz+xV kahAXDpyPXlZEG892/iXUFG8ZhwPXV3VJYHkYdz99BtRtcDSbueCLGjJC8E2r+bd lhbqAfwE0QwTGZdN19PnssAopAABoR2rKWuRz660AYSL2ev7Vy0st9/paDHqbd8i ZEGoKYibKnTk9OLhVvaBRCEoedtapXCt8UZmDvKJj+6q6GhvMTHVahVY9xK7tqpj V4DQS8zq4YCC8ewfl8XigCNwMQ1+xv6hXMU3bUuUEBIt1VN2sJBhI+QHatVqmGB0 aAWe6yKpwLpv/3UdNzR/4+2ARd8KFcqT1WY7hQ== -----END CERTIFICATE-----Generated at Wed Nov 5 03:01:06 2025 by rpki-client