$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/29BE771FE6D788CA509E787787F218ADFB43DDB2.cer File: 29BE771FE6D788CA509E787787F218ADFB43DDB2.cer (raw, json) Hash identifier: o8punJNBIHNkCYN3YTZJwUd0g1jsqYk/iye+9L31mCA= Subject key identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 69E4CB8B3076876193CE6143AE143DF106DA6A90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft caRepository: rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 06 Jun 2025 14:31:18 +0000 Certificate not after: Fri 05 Jun 2026 14:36:18 +0000 Subordinate resources: IP: 103.143.128.0/23 IP: 2405:51c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:e4:cb:8b:30:76:87:61:93:ce:61:43:ae:14:3d:f1:06:da:6a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 6 14:31:18 2025 GMT Not After : Jun 5 14:36:18 2026 GMT Subject: CN=29BE771FE6D788CA509E787787F218ADFB43DDB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ee:66:0b:fa:ae:91:af:09:a1:40:5e:f7:86: 91:be:92:8d:e6:2e:9f:16:48:22:bf:2c:d6:d9:31: 70:39:d7:10:3d:b6:19:9d:a2:11:0f:e0:9b:12:fb: 96:35:5c:80:bf:d7:d2:7f:46:f1:93:f6:2c:00:b5: 7f:76:b0:33:2f:09:f6:37:bf:b8:70:e5:b6:4d:f1: c8:1a:34:bf:ea:ae:6f:99:09:67:43:54:0b:24:3c: c0:67:53:29:39:16:e0:8e:c2:55:c5:dd:ad:19:71: bc:fd:88:8e:d7:e0:51:06:ee:44:dc:4f:06:f3:eb: de:d4:92:92:33:3c:77:91:90:92:be:e3:ba:57:c9: 45:4d:75:2a:23:e1:5f:5c:9b:c5:68:98:93:bb:9f: bf:78:75:41:cc:2a:59:d0:2b:e8:db:76:4a:e9:ab: a5:76:c5:86:51:90:a2:0b:58:b8:df:d0:44:95:cd: d9:9d:47:e9:81:01:e0:1c:4b:56:64:6b:ab:4e:1d: 92:06:60:9f:ac:6a:ad:0f:7c:fa:ab:15:56:e2:1a: a9:63:9f:c7:08:5f:3e:00:90:9c:b8:43:85:e9:dc: 1e:24:08:9e:5d:06:6e:a9:69:53:5a:90:73:a3:25: bf:08:9f:6e:be:5e:62:aa:e6:26:4b:f3:6f:72:90: 30:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 29:BE:77:1F:E6:D7:88:CA:50:9E:78:77:87:F2:18:AD:FB:43:DD:B2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e2e96bf3-d021-4d84-90d5-c24558aa495f/0/29BE771FE6D788CA509E787787F218ADFB43DDB2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.143.128.0/23 IPv6: 2405:51c0::/32 Signature Algorithm: sha256WithRSAEncryption 0b:5e:fc:32:1c:b6:06:9e:33:69:5a:d1:bc:05:03:9e:e3:36: 87:85:ef:d3:9b:68:d8:4c:4c:a7:29:20:b5:d1:6a:88:6e:9f: e8:5b:83:d8:fe:01:78:f6:09:b5:46:02:bf:85:0c:93:5b:ec: 31:d2:87:c9:7b:05:29:9d:42:6c:41:05:e5:1a:27:6d:ff:f5: d6:76:58:72:c1:29:b0:db:03:d1:68:0e:59:63:38:e1:9d:81: a7:41:d0:a9:a8:d2:71:a6:3a:b9:0b:b4:70:d1:e9:d5:07:5f: fc:a7:ec:ce:0b:90:49:ef:11:9f:d6:36:b3:89:b3:88:d2:0b: 83:01:20:52:77:31:f5:8b:d7:12:a6:f9:d6:dd:03:11:ae:6b: cc:f3:2b:03:49:b4:f6:8e:1a:f7:95:42:85:06:56:3f:42:27: 0c:99:5b:af:ed:fe:58:50:2c:91:dd:3f:a3:bc:12:8a:81:bf: 6a:f6:d2:1d:76:97:e9:97:8b:4b:e5:12:e7:00:52:a6:44:37: 4e:86:89:e3:81:04:42:40:c9:da:ec:7d:47:68:5b:15:84:20: 57:f8:10:8e:1e:80:c9:5b:ca:43:ae:a4:cb:a8:66:5e:cc:7d: 2c:9b:01:26:7a:f2:db:b6:91:20:19:de:aa:1e:19:df:72:c1: c7:31:55:cd -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUaeTLizB2h2GTzmFDrhQ98QbaapAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwNjE0MzExOFoX DTI2MDYwNTE0MzYxOFowMzExMC8GA1UEAxMoMjlCRTc3MUZFNkQ3ODhDQTUwOUU3 ODc3ODdGMjE4QURGQjQzRERCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL/uZgv6rpGvCaFAXveGkb6SjeYunxZIIr8s1tkxcDnXED22GZ2iEQ/gmxL7 ljVcgL/X0n9G8ZP2LAC1f3awMy8J9je/uHDltk3xyBo0v+qub5kJZ0NUCyQ8wGdT KTkW4I7CVcXdrRlxvP2IjtfgUQbuRNxPBvPr3tSSkjM8d5GQkr7julfJRU11KiPh X1ybxWiYk7ufv3h1QcwqWdAr6Nt2SumrpXbFhlGQogtYuN/QRJXN2Z1H6YEB4BxL VmRrq04dkgZgn6xqrQ98+qsVVuIaqWOfxwhfPgCQnLhDhencHiQInl0GbqlpU1qQ c6Mlvwifbr5eYqrmJkvzb3KQME8CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCm+dx/m14jKUJ54d4fyGK37Q92yMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMmU5NmJmMy1kMDIxLTRkODQtOTBkNS1jMjQ1NThhYTQ5NWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UyZTk2YmYz LWQwMjEtNGQ4NC05MGQ1LWMyNDU1OGFhNDk1Zi8wLzI5QkU3NzFGRTZENzg4Q0E1 MDlFNzg3Nzg3RjIxOEFERkI0M0REQjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnj4AwDQQCAAIwBwMFACQFUcAwDQYJKoZIhvcNAQELBQADggEBAAte/DIctgae M2la0bwFA57jNoeF79ObaNhMTKcpILXRaohun+hbg9j+AXj2CbVGAr+FDJNb7DHS h8l7BSmdQmxBBeUaJ23/9dZ2WHLBKbDbA9FoDlljOOGdgadB0Kmo0nGmOrkLtHDR 6dUHX/yn7M4LkEnvEZ/WNrOJs4jSC4MBIFJ3MfWL1xKm+dbdAxGua8zzKwNJtPaO GveVQoUGVj9CJwyZW6/t/lhQLJHdP6O8EoqBv2r20h12l+mXi0vlEucAUqZEN06G ieOBBEJAydrsfUdoWxWEIFf4EI4egMlbykOupMuoZl7MfSybASZ68tu2kSAZ3qoe Gd9ywccxVc0= -----END CERTIFICATE-----Generated at Sun Jun 15 17:12:32 2025 by rpki-client