$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3308A0FBD29F359AD61CAA389208E1D74CC28164.cer File: 3308A0FBD29F359AD61CAA389208E1D74CC28164.cer (raw, json) Hash identifier: 6oFmAyTkkjuh4uJMGSl5Q22m1W537GXzjrrNDBqZKBk= Subject key identifier: 33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 06A0317D24AC825E15764B47EBE5407A78A68B6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft caRepository: rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 03 Apr 2025 12:39:21 +0000 Certificate not after: Thu 02 Apr 2026 12:44:21 +0000 Subordinate resources: IP: 121.101.184.0/21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:a0:31:7d:24:ac:82:5e:15:76:4b:47:eb:e5:40:7a:78:a6:8b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 3 12:39:21 2025 GMT Not After : Apr 2 12:44:21 2026 GMT Subject: CN=3308A0FBD29F359AD61CAA389208E1D74CC28164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:65:8d:e6:38:3d:a6:56:bf:f4:48:44:72:fc: 3a:9f:a4:d8:02:c2:5f:02:1d:93:1c:2c:d5:77:a0: df:03:31:a9:29:eb:84:bc:da:bb:9a:3c:35:c2:ba: 54:85:4c:12:68:9d:3a:9f:50:77:5a:bc:2d:93:c0: 03:21:c2:b4:4c:bf:e2:be:01:81:de:a8:30:b9:5e: 02:af:6c:28:7d:73:c8:bc:96:c2:67:a8:58:ae:f9: de:11:2a:d8:96:34:e2:3d:b8:ba:43:ba:70:20:f9: 34:2e:bc:18:15:9d:c5:dd:2b:8a:a4:0e:bb:e9:57: ab:02:5f:d2:41:81:59:8e:9d:25:40:38:92:1e:2f: 61:0b:cd:64:51:31:9e:eb:82:4c:3a:e6:3b:27:f1: f1:72:54:b2:8d:33:90:08:3c:ba:e4:d5:7a:22:b5: c6:8b:2d:8b:82:8d:88:1c:c2:a8:22:fe:14:fe:d7: 3f:c3:5f:28:7e:cf:b2:df:b0:c2:30:b3:c7:15:5d: 22:9e:a3:59:5b:d5:43:2a:0a:b7:ca:c5:7f:0b:79: b1:d7:be:22:cc:6c:1f:92:5d:5f:2f:d9:be:09:5b: f7:e5:72:20:5f:2b:4f:6d:1f:f8:dd:02:e8:8c:23: 35:95:5c:c3:4e:80:ed:c1:f7:0e:6f:ce:07:60:5a: d7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 33:08:A0:FB:D2:9F:35:9A:D6:1C:AA:38:92:08:E1:D7:4C:C2:81:64 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a572dfbe-4ca0-4a46-8037-4968ed97cadc/0/3308A0FBD29F359AD61CAA389208E1D74CC28164.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 121.101.184.0/21 Signature Algorithm: sha256WithRSAEncryption 5f:ac:71:5f:a0:d3:59:57:ba:84:d1:b2:46:46:02:51:c2:ef: 9a:b9:38:87:46:3e:3b:02:39:40:cf:97:df:60:d5:df:ae:59: 33:cf:10:43:bb:98:35:5f:c0:69:86:b8:18:ad:d5:ac:8b:ff: 40:b0:74:8e:0d:ff:2d:1b:18:27:d4:ec:e7:3f:2a:00:16:3c: b2:e6:6c:5f:2c:ff:ee:28:c5:af:d2:8f:0d:ef:0b:a5:5a:ec: 79:39:3d:9a:70:b1:fd:60:63:e5:c7:87:f5:cb:0b:76:9c:ee: 6b:a5:3d:86:fe:02:84:ea:82:0f:7f:4f:4f:28:5a:b3:d0:b5: 21:50:b7:f8:8a:57:c9:84:f8:93:06:15:01:60:36:78:0e:01: d2:b8:ab:02:a4:f5:e4:df:c2:bd:bd:dc:08:b8:3d:39:01:6b: 5e:48:1d:1e:b9:90:2e:b2:ec:8f:8a:87:26:8c:dd:e7:83:eb: 2e:d9:f3:d8:c1:44:80:ef:a1:ae:8e:00:cb:92:3e:ba:dc:2c: 92:d4:96:3f:a2:01:6f:86:0f:00:64:76:10:f1:9d:2c:9b:06: b8:65:b1:0d:9a:da:fa:5d:2c:4a:1e:7c:52:0a:d8:24:b1:4a: 37:02:02:9c:cd:ca:93:13:c0:ce:fb:d8:f3:5e:b9:43:ac:2b: 9e:fb:3f:92 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUBqAxfSSsgl4VdktH6+VAenimi2swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQwMzEyMzkyMVoX DTI2MDQwMjEyNDQyMVowMzExMC8GA1UEAxMoMzMwOEEwRkJEMjlGMzU5QUQ2MUNB QTM4OTIwOEUxRDc0Q0MyODE2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANBljeY4PaZWv/RIRHL8Op+k2ALCXwIdkxws1Xeg3wMxqSnrhLzau5o8NcK6 VIVMEmidOp9Qd1q8LZPAAyHCtEy/4r4Bgd6oMLleAq9sKH1zyLyWwmeoWK753hEq 2JY04j24ukO6cCD5NC68GBWdxd0riqQOu+lXqwJf0kGBWY6dJUA4kh4vYQvNZFEx nuuCTDrmOyfx8XJUso0zkAg8uuTVeiK1xosti4KNiBzCqCL+FP7XP8NfKH7Pst+w wjCzxxVdIp6jWVvVQyoKt8rFfwt5sde+IsxsH5JdXy/Zvglb9+VyIF8rT20f+N0C 6IwjNZVcw06A7cH3Dm/OB2Ba10MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDMIoPvSnzWa1hyqOJII4ddMwoFkMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hNTcyZGZiZS00Y2EwLTRhNDYtODAzNy00OTY4ZWQ5N2NhZGMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1NzJkZmJl LTRjYTAtNGE0Ni04MDM3LTQ5NjhlZDk3Y2FkYy8wLzMzMDhBMEZCRDI5RjM1OUFE NjFDQUEzODkyMDhFMUQ3NENDMjgxNjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAN5ZbgwDQYJKoZIhvcNAQELBQADggEBAF+scV+g01lXuoTRskZGAlHC75q5OIdG PjsCOUDPl99g1d+uWTPPEEO7mDVfwGmGuBit1ayL/0CwdI4N/y0bGCfU7Oc/KgAW PLLmbF8s/+4oxa/Sjw3vC6Va7Hk5PZpwsf1gY+XHh/XLC3ac7mulPYb+AoTqgg9/ T08oWrPQtSFQt/iKV8mE+JMGFQFgNngOAdK4qwKk9eTfwr293Ai4PTkBa15IHR65 kC6y7I+KhyaM3eeD6y7Z89jBRIDvoa6OAMuSPrrcLJLUlj+iAW+GDwBkdhDxnSyb BrhlsQ2a2vpdLEoefFIK2CSxSjcCApzNypMTwM772PNeuUOsK577P5I= -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:23 2025 by rpki-client