$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer File: 307A408E2AA82268DAD36E6F145D64C8061A7B1C.cer (raw, json) Hash identifier: +WTmKQ3DjKA8P9ate0U6hoekWQKlYEPEV5xfBW85KzE= Subject key identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 270ED926E0A6EC8B85E641B20C1B2F970B99FE99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft caRepository: rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 30 Jun 2025 13:07:41 +0000 Certificate not after: Mon 29 Jun 2026 13:12:41 +0000 Subordinate resources: IP: 103.42.242.0/24 IP: 2001:df3:4b40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:0e:d9:26:e0:a6:ec:8b:85:e6:41:b2:0c:1b:2f:97:0b:99:fe:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 30 13:07:41 2025 GMT Not After : Jun 29 13:12:41 2026 GMT Subject: CN=307A408E2AA82268DAD36E6F145D64C8061A7B1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:33:45:a2:a1:ab:dc:91:d1:d2:4a:38:91:ba: 7d:9f:a8:1a:13:a7:91:5c:f5:86:2f:be:0b:e1:99: 54:3a:ac:d4:c6:6d:17:0c:6c:1f:75:29:b1:0d:af: 35:eb:15:c0:29:77:18:3a:72:39:40:2f:30:e8:9e: b6:f4:42:09:af:b2:cd:6d:2a:49:69:57:0f:69:7b: 32:fc:4c:30:d9:8a:fe:be:df:d9:59:77:a3:0b:f6: 34:ac:dd:b3:c7:d1:a0:ee:60:3c:da:99:17:77:d5: b6:ca:1c:51:c1:62:e6:9c:7e:c1:47:a0:e9:0a:8f: 3f:81:fc:c2:ec:f1:c8:ac:57:79:f4:b1:40:32:3a: 93:f5:96:56:2b:0e:f1:96:c0:e5:b7:cb:33:dc:a3: 9b:98:fc:6d:f7:88:0f:74:74:bc:99:b8:92:e2:28: 3f:cc:f2:20:b7:1c:09:c1:15:fe:00:b4:32:b5:76: 93:98:82:69:d7:91:75:3e:ea:16:fe:56:02:b4:73: b1:10:60:7e:fb:78:5f:e1:09:de:a7:18:85:ce:ff: 02:8d:d4:08:78:04:20:05:05:2d:b6:e6:42:ce:49: 6f:d2:8b:d6:95:37:bd:d4:d5:47:4b:56:65:bd:40: f9:fe:d7:ad:3c:46:64:12:a3:7f:ad:37:ff:b0:3c: 96:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:7A:40:8E:2A:A8:22:68:DA:D3:6E:6F:14:5D:64:C8:06:1A:7B:1C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b57f1f43-ce7e-4970-aad0-782b019bd03e/0/307A408E2AA82268DAD36E6F145D64C8061A7B1C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.242.0/24 IPv6: 2001:df3:4b40::/48 Signature Algorithm: sha256WithRSAEncryption 38:69:7d:58:27:4e:4b:8b:cc:52:08:1f:07:c8:b9:8d:17:cb: 5c:1e:01:9a:89:7d:0e:50:f9:ee:04:12:02:a6:a7:6c:e2:a1: c0:ec:5b:c6:32:c3:01:cc:05:22:9f:38:8e:70:43:12:25:4e: 64:f8:f2:cc:0a:c8:00:26:8c:23:be:2c:20:98:ed:36:68:d8: 0f:25:38:ea:c1:3d:1e:f8:11:e3:ea:15:8e:38:2a:37:56:9b: 2c:49:bc:91:80:0b:69:e6:3c:9c:0b:68:97:5b:59:e8:b1:d4: 8a:bc:e0:ea:c7:76:9e:7c:13:9d:be:8e:ee:7c:83:b0:e5:6c: 6c:12:6f:b4:ef:00:37:c4:e4:bf:d5:c0:27:b5:9f:9e:88:af: fb:8f:60:ec:bb:b6:25:a9:12:88:68:0c:ad:65:ef:fb:c1:c9: 81:02:03:df:3b:28:a1:23:bc:53:b5:e1:74:f1:ac:44:41:10: cb:3d:81:ea:51:44:8e:b3:03:0e:bb:06:9e:fe:a9:24:8c:7c: 38:96:b9:d6:ca:ac:69:21:29:0b:28:34:ca:ca:c7:c7:0d:2f: 0e:ab:1a:0f:de:45:06:03:f6:10:8e:54:99:0d:7d:e4:78:f8: 03:7e:89:11:18:71:f3:86:ea:01:e7:d8:a8:5a:fc:1f:69:32: 19:85:cd:5b -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUJw7ZJuCm7IuF5kGyDBsvlwuZ/pkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYzMDEzMDc0MVoX DTI2MDYyOTEzMTI0MVowMzExMC8GA1UEAxMoMzA3QTQwOEUyQUE4MjI2OERBRDM2 RTZGMTQ1RDY0QzgwNjFBN0IxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKozRaKhq9yR0dJKOJG6fZ+oGhOnkVz1hi++C+GZVDqs1MZtFwxsH3UpsQ2v NesVwCl3GDpyOUAvMOietvRCCa+yzW0qSWlXD2l7MvxMMNmK/r7f2Vl3owv2NKzd s8fRoO5gPNqZF3fVtsocUcFi5px+wUeg6QqPP4H8wuzxyKxXefSxQDI6k/WWVisO 8ZbA5bfLM9yjm5j8bfeID3R0vJm4kuIoP8zyILccCcEV/gC0MrV2k5iCadeRdT7q Fv5WArRzsRBgfvt4X+EJ3qcYhc7/Ao3UCHgEIAUFLbbmQs5Jb9KL1pU3vdTVR0tW Zb1A+f7XrTxGZBKjf603/7A8lkMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDB6QI4qqCJo2tNubxRdZMgGGnscMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNTdmMWY0My1jZTdlLTQ5NzAtYWFkMC03ODJiMDE5YmQwM2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1N2YxZjQz LWNlN2UtNDk3MC1hYWQwLTc4MmIwMTliZDAzZS8wLzMwN0E0MDhFMkFBODIyNjhE QUQzNkU2RjE0NUQ2NEM4MDYxQTdCMUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnKvIwDwQCAAIwCQMHACABDfNLQDANBgkqhkiG9w0BAQsFAAOCAQEAOGl9WCdO S4vMUggfB8i5jRfLXB4Bmol9DlD57gQSAqanbOKhwOxbxjLDAcwFIp84jnBDEiVO ZPjyzArIACaMI74sIJjtNmjYDyU46sE9HvgR4+oVjjgqN1abLEm8kYALaeY8nAto l1tZ6LHUirzg6sd2nnwTnb6O7nyDsOVsbBJvtO8AN8Tkv9XAJ7Wfnoiv+49g7Lu2 JakSiGgMrWXv+8HJgQID3zsooSO8U7XhdPGsREEQyz2B6lFEjrMDDrsGnv6pJIx8 OJa51sqsaSEpCyg0ysrHxw0vDqsaD95FBgP2EI5UmQ195Hj4A36JERhx84bqAefY qFr8H2kyGYXNWw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:22 2025 by rpki-client