$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer File: 357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.cer (raw, json) Hash identifier: cHerSKAWAB1Wb+NgtnjfDUb6wB5XplRASxa1DaPkrR8= Subject key identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3DD47807BB801652B06F8B5FB99409CBFFAE2622 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft caRepository: rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 20 Jul 2025 17:27:50 +0000 Certificate not after: Sun 19 Jul 2026 17:32:50 +0000 Subordinate resources: IP: 103.167.168.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d4:78:07:bb:80:16:52:b0:6f:8b:5f:b9:94:09:cb:ff:ae:26:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 20 17:27:50 2025 GMT Not After : Jul 19 17:32:50 2026 GMT Subject: CN=357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:83:88:bd:a7:b6:a7:1c:47:a4:a6:99:75:e2: 3e:54:6d:3a:e8:12:95:b2:d3:03:a7:b4:67:44:ba: 06:68:88:9a:59:88:0b:f1:01:29:4c:2f:1a:a0:2d: 3e:cb:09:fc:bc:fd:f4:f8:12:b8:2a:c0:7b:8c:a2: bc:d1:d5:92:4a:03:ce:ea:42:49:c7:51:48:d1:3a: 33:05:e8:c9:e3:1b:3c:b3:73:c5:bb:e1:49:05:b5: 0b:65:dc:8a:7e:2c:66:02:f0:de:26:95:00:e8:31: ad:e0:aa:3f:4a:de:61:05:e4:15:a0:bc:03:4b:3b: 0b:e0:bf:f2:99:45:9e:8b:46:03:6c:81:5e:cd:9c: b5:83:80:0b:1e:84:7a:df:65:ae:8a:53:73:fc:f7: 9b:cd:28:1e:ca:15:0f:d6:c0:8d:ca:a9:bf:2f:08: 78:21:ab:3f:53:b3:9d:ec:92:2e:91:e0:3e:d2:5b: 2e:0e:73:a4:a0:9e:df:65:8d:2a:5e:96:25:32:a5: 15:c0:90:5a:33:b3:4a:33:98:a1:60:83:4a:18:fa: 13:8a:e0:d6:6c:10:4b:e4:e1:d3:c3:d3:af:db:88: 6d:27:c3:b6:80:8d:7d:81:c7:2a:13:d5:a7:c3:74: 06:b4:12:7d:22:53:3a:ac:35:6f:c4:78:67:9a:7a: be:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:7D:EA:C5:E6:C1:1B:3C:3E:15:2D:5A:24:F8:D8:31:5E:A4:3E:2B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7d4b612f-f924-4ec2-b1f1-a1305d23d53a/0/357DEAC5E6C11B3C3E152D5A24F8D8315EA43E2B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.168.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:c6:75:f7:30:be:ed:84:a9:b1:03:a9:3a:69:6a:3e:27:c3: 7a:38:46:a9:fd:e1:3c:1f:79:69:d4:ba:79:d0:6c:b6:9e:ff: 28:74:ef:e2:c2:d6:11:44:64:ff:eb:5a:3c:6a:bd:fb:44:69: 07:57:a8:4c:ea:6f:d7:cd:e8:1e:fc:ef:06:89:dc:dd:be:13: 44:66:d1:e8:7a:d3:29:ea:ac:92:46:e2:1d:29:a4:81:16:fa: eb:d7:1a:62:59:ff:51:ee:38:ce:78:76:cd:db:39:55:44:12: 79:36:1e:2c:85:70:64:8a:ac:20:2d:71:29:5c:24:71:07:a9: c8:fc:5f:ef:f9:4e:e3:6c:6b:59:36:06:c2:d5:c9:d5:25:15: a7:a4:d9:aa:75:9c:89:f8:7a:4b:d3:3f:c8:64:6c:e8:f9:14: be:5a:11:63:d4:ba:72:03:3d:ab:b2:eb:dd:84:45:fe:68:7a: e1:e3:12:8f:f8:60:37:0d:df:f8:45:5a:ec:4b:87:9f:3e:b7: 2b:91:6c:38:c9:3b:07:99:8e:e0:9c:21:24:95:d8:b5:dc:0e: 4e:01:36:81:d5:97:a8:21:2c:73:e0:4f:57:80:79:e4:c5:89: 7c:a0:4b:f9:bb:77:a7:2e:0d:f6:4c:54:51:87:25:d5:b6:08: f6:64:f2:ee -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPdR4B7uAFlKwb4tfuZQJy/+uJiIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyMDE3Mjc1MFoX DTI2MDcxOTE3MzI1MFowMzExMC8GA1UEAxMoMzU3REVBQzVFNkMxMUIzQzNFMTUy RDVBMjRGOEQ4MzE1RUE0M0UyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2DiL2ntqccR6SmmXXiPlRtOugSlbLTA6e0Z0S6BmiImlmIC/EBKUwvGqAt PssJ/Lz99PgSuCrAe4yivNHVkkoDzupCScdRSNE6MwXoyeMbPLNzxbvhSQW1C2Xc in4sZgLw3iaVAOgxreCqP0reYQXkFaC8A0s7C+C/8plFnotGA2yBXs2ctYOACx6E et9lropTc/z3m80oHsoVD9bAjcqpvy8IeCGrP1OzneySLpHgPtJbLg5zpKCe32WN Kl6WJTKlFcCQWjOzSjOYoWCDShj6E4rg1mwQS+Th08PTr9uIbSfDtoCNfYHHKhPV p8N0BrQSfSJTOqw1b8R4Z5p6vm0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDV96sXmwRs8PhUtWiT42DFepD4rMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ZDRiNjEyZi1mOTI0LTRlYzItYjFmMS1hMTMwNWQyM2Q1M2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkNGI2MTJm LWY5MjQtNGVjMi1iMWYxLWExMzA1ZDIzZDUzYS8wLzM1N0RFQUM1RTZDMTFCM0Mz RTE1MkQ1QTI0RjhEODMxNUVBNDNFMkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnp6gwDQYJKoZIhvcNAQELBQADggEBAG/Gdfcwvu2EqbEDqTppaj4nw3o4Rqn9 4TwfeWnUunnQbLae/yh07+LC1hFEZP/rWjxqvftEaQdXqEzqb9fN6B787waJ3N2+ E0Rm0eh60ynqrJJG4h0ppIEW+uvXGmJZ/1HuOM54ds3bOVVEEnk2HiyFcGSKrCAt cSlcJHEHqcj8X+/5TuNsa1k2BsLVydUlFaek2ap1nIn4ekvTP8hkbOj5FL5aEWPU unIDPauy692ERf5oeuHjEo/4YDcN3/hFWuxLh58+tyuRbDjJOweZjuCcISSV2LXc Dk4BNoHVl6ghLHPgT1eAeeTFiXygS/m7d6cuDfZMVFGHJdW2CPZk8u4= -----END CERTIFICATE-----Generated at Wed Aug 6 10:01:10 2025 by rpki-client