$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer File: 368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer (raw, json) Hash identifier: ldkmboJ1xh21s80G9/5LUCs5Ma6IEx34p6MFnyeb80s= Subject key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5CDD6D6EEC4A9AC129DC79579D3677C02895F158 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft caRepository: rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 02 Jun 2025 23:03:28 +0000 Certificate not after: Mon 01 Jun 2026 23:08:28 +0000 Subordinate resources: IP: 103.148.44.0/23 IP: 2405:cac0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:dd:6d:6e:ec:4a:9a:c1:29:dc:79:57:9d:36:77:c0:28:95:f1:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 2 23:03:28 2025 GMT Not After : Jun 1 23:08:28 2026 GMT Subject: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:d2:f8:2b:88:19:29:3a:dc:1f:92:f9:87: 44:c5:72:a1:52:f1:b3:ee:89:1c:45:8d:96:e8:41: e7:47:cd:91:07:34:c8:5d:a2:ab:00:07:1e:57:c0: 6b:60:c0:e6:4a:73:4b:97:df:f6:11:8a:43:6b:1d: 14:86:bb:f7:c4:17:09:4e:0d:65:9e:3a:23:1a:c3: 7e:32:70:5b:48:d9:7a:26:03:2f:3d:cb:69:02:36: d9:f4:60:2d:d1:88:88:1c:7a:79:47:27:74:4c:0a: 44:f3:c4:19:8c:8e:4d:a1:ef:35:2c:af:72:e7:aa: 1f:b6:bc:80:b0:f3:06:44:4f:e4:12:e0:37:b9:5f: 8a:8e:4c:55:2b:03:6c:9f:39:67:62:29:61:90:97: dd:c9:d7:88:b7:95:90:52:ed:9b:d2:af:50:d0:75: 7a:8a:64:39:18:c2:9a:58:6b:9c:cb:1c:b9:86:f4: cf:07:c6:26:e6:db:34:ad:92:58:79:c3:36:8d:9a: ca:7b:b1:6c:9c:e6:08:9f:35:a9:a1:dc:71:15:5d: dd:36:39:d5:a9:a4:db:c0:71:0e:c6:af:c7:2f:a9: d7:98:ea:d3:89:32:81:61:24:4e:b6:60:32:51:97: 12:f4:2a:2c:dd:65:31:ce:8a:c9:53:cc:b7:fa:6a: 31:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.44.0/23 IPv6: 2405:cac0::/32 Signature Algorithm: sha256WithRSAEncryption 37:53:c0:39:ca:6b:bc:90:48:14:1f:75:f2:39:44:8f:37:47: ee:20:ea:31:e6:91:dd:90:4b:0f:5e:67:f4:92:33:f8:43:e1: 97:c7:c3:78:f0:d6:ce:f9:86:74:a5:6b:f8:3e:b3:7e:0b:66: a8:a8:ae:64:2f:eb:1f:5b:e5:e1:ee:5b:42:ff:d6:6d:d8:24: 9d:ff:01:5a:89:7f:ae:38:bf:1f:b0:de:da:b5:9b:cf:b1:d2: 27:e6:0d:31:a4:2f:43:de:2f:b8:f8:ec:af:d7:10:ad:51:b7: 3a:bc:ad:70:e0:d1:3d:24:45:28:c5:53:25:60:7c:96:60:ae: aa:fa:f2:14:ba:34:46:0d:96:4f:d3:b7:ca:7a:3b:df:62:82: 34:80:4a:46:27:d0:bd:e0:c7:b7:33:a6:9b:4c:9c:d3:d2:6b: 3b:ca:41:8c:a6:0a:55:8f:81:c3:b1:87:af:5d:3a:ef:99:81: ab:85:bf:cb:ef:e1:ed:68:56:65:b9:ce:9f:cd:aa:59:f9:2c: 10:8d:5f:a8:e6:72:1d:ce:7b:61:85:2f:60:d7:63:77:77:dc: 5d:d4:2c:29:3e:d2:da:bd:2d:6a:ae:12:4b:58:8c:08:b1:b6: 12:32:c1:65:96:6d:86:3c:f5:45:e8:30:d1:64:6b:7e:9f:91: 7d:4c:53:e5 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUXN1tbuxKmsEp3HlXnTZ3wCiV8VgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMjIzMDMyOFoX DTI2MDYwMTIzMDgyOFowMzExMC8GA1UEAxMoMzY4MzY5RDA5NkNFMDk4MkNDRjFG MTExMDAxRjJBMkU4QTNCQjZENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIQ0vgriBkpOtwfkvmHRMVyoVLxs+6JHEWNluhB50fNkQc0yF2iqwAHHlfA a2DA5kpzS5ff9hGKQ2sdFIa798QXCU4NZZ46IxrDfjJwW0jZeiYDLz3LaQI22fRg LdGIiBx6eUcndEwKRPPEGYyOTaHvNSyvcueqH7a8gLDzBkRP5BLgN7lfio5MVSsD bJ85Z2IpYZCX3cnXiLeVkFLtm9KvUNB1eopkORjCmlhrnMscuYb0zwfGJubbNK2S WHnDNo2aynuxbJzmCJ81qaHccRVd3TY51amk28BxDsavxy+p15jq04kygWEkTrZg MlGXEvQqLN1lMc6KyVPMt/pqMQ0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDaDadCWzgmCzPHxEQAfKi6KO7bUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84OWYyNmZiOC03MmM0LTQ5ZDktOWNiZS04MjI2Mzk3MjcxYTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5ZjI2ZmI4 LTcyYzQtNDlkOS05Y2JlLTgyMjYzOTcyNzFhMi8wLzM2ODM2OUQwOTZDRTA5ODJD Q0YxRjExMTAwMUYyQTJFOEEzQkI2RDQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnlCwwDQQCAAIwBwMFACQFysAwDQYJKoZIhvcNAQELBQADggEBADdTwDnKa7yQ SBQfdfI5RI83R+4g6jHmkd2QSw9eZ/SSM/hD4ZfHw3jw1s75hnSla/g+s34LZqio rmQv6x9b5eHuW0L/1m3YJJ3/AVqJf644vx+w3tq1m8+x0ifmDTGkL0PeL7j47K/X EK1Rtzq8rXDg0T0kRSjFUyVgfJZgrqr68hS6NEYNlk/Tt8p6O99igjSASkYn0L3g x7czpptMnNPSazvKQYymClWPgcOxh69dOu+ZgauFv8vv4e1oVmW5zp/Nqln5LBCN X6jmch3Oe2GFL2DXY3d33F3ULCk+0tq9LWquEktYjAixthIywWWWbYY89UXoMNFk a36fkX1MU+U= -----END CERTIFICATE-----Generated at Tue Nov 4 02:17:05 2025 by rpki-client