$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer File: 3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.cer (raw, json) Hash identifier: vak21JWzmcgDu/K2a+fZ4fR8+/C0/NFr4FGdSNSGUMA= Subject key identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6DC8AA5258F858D4C794958A9BAA58940A77BA0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft caRepository: rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 01 Mar 2025 14:27:46 +0000 Certificate not after: Sat 28 Feb 2026 14:32:46 +0000 Subordinate resources: IP: 103.210.221.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c8:aa:52:58:f8:58:d4:c7:94:95:8a:9b:aa:58:94:0a:77:ba:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 1 14:27:46 2025 GMT Not After : Feb 28 14:32:46 2026 GMT Subject: CN=3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:aa:b9:b9:95:8b:fd:7c:88:f7:04:d4:1e: 86:f6:9a:98:04:57:76:92:a6:74:de:ce:d0:78:64: 1c:e4:6a:5a:1d:49:52:4f:71:e0:fb:16:c7:14:3e: 66:6b:a7:46:45:d5:51:b7:ba:ad:45:65:5d:bc:c2: 39:4e:78:57:64:e2:57:ab:2e:bf:6a:bb:d2:03:b2: eb:a5:d4:5a:9f:f7:26:64:42:b1:36:e0:8d:d3:33: b3:f7:ef:5c:22:6f:3b:06:be:0c:92:62:df:35:65: 28:74:62:0d:d2:85:40:ee:e2:84:6e:3c:92:fb:6e: 26:40:8c:85:bb:ec:f7:ca:7f:e8:56:a8:1d:be:a9: 40:35:2f:53:84:77:2c:f6:a9:d6:b7:70:ff:c9:b3: cb:91:f8:94:a9:c8:a8:47:0b:89:eb:d6:57:4f:70: a0:66:df:fd:5c:51:05:8e:30:de:d5:db:1e:23:b1: 26:a5:93:2e:9b:d3:10:c2:43:7f:13:7e:51:1c:8b: 03:01:61:a0:1f:f9:83:1e:82:80:2e:c0:12:f4:63: 57:09:e0:8b:6e:f6:33:e8:be:c8:e7:52:5d:6e:2d: 3e:d2:2e:57:70:e4:ad:68:c8:34:b7:c4:bc:4b:61: a9:9e:54:65:99:20:bd:d8:cc:b4:b9:54:9f:87:ff: b3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:09:CF:32:EC:4F:6D:5C:4F:D2:C8:37:A1:17:4E:D3:47:21:DB:47 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d9ee209a-1193-4d6f-9dbe-8777bb8980aa/0/3A09CF32EC4F6D5C4FD2C837A1174ED34721DB47.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.210.221.0/24 Signature Algorithm: sha256WithRSAEncryption 00:72:a5:a2:20:19:eb:36:0d:c8:f1:06:0e:12:30:0e:6e:39: b4:62:f0:0f:dc:de:ed:4b:6f:85:8a:29:a0:94:6f:65:f3:09: 22:27:3e:65:88:3f:bd:72:31:4e:41:a9:39:8b:90:ac:fd:8c: e1:54:dc:42:7e:19:cc:db:2b:7b:47:26:1e:5a:14:be:38:c2: 99:c4:38:f4:6c:a2:bc:fb:e3:10:8a:88:fd:e7:47:5d:70:94: 06:c0:7f:90:f7:0a:40:f9:e9:b1:cb:ef:27:1d:65:18:b0:1a: f2:ba:03:0f:fe:be:c2:8c:97:ea:7f:0e:9a:7e:20:05:0f:08: 35:18:3a:37:e6:05:8a:5a:3c:23:d1:40:c0:f8:38:a5:3a:9c: 8b:26:4d:21:30:cd:e4:d0:bc:d1:23:6d:63:58:42:a1:41:1e: 7b:8b:52:04:39:ea:9e:e9:e7:1b:32:18:7f:7e:75:fb:ce:dc: 1b:6b:bc:f2:5c:5b:4b:26:05:62:08:63:6c:22:a0:16:cd:3b: 9d:5d:a0:34:4e:67:8f:2b:03:17:52:81:ca:c9:99:ea:1f:2e: 5f:8c:58:b8:7e:93:86:44:83:1e:b9:cc:fc:a9:9b:a9:86:8e: 6f:fe:9d:d7:dd:5f:8c:b2:2e:b3:35:e8:00:f9:3d:3f:1c:00: 04:f7:a0:a8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbciqUlj4WNTHlJWKm6pYlAp3ug0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMwMTE0Mjc0NloX DTI2MDIyODE0MzI0NlowMzExMC8GA1UEAxMoM0EwOUNGMzJFQzRGNkQ1QzRGRDJD ODM3QTExNzRFRDM0NzIxREI0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM3qqrm5lYv9fIj3BNQehvaamARXdpKmdN7O0HhkHORqWh1JUk9x4PsWxxQ+ ZmunRkXVUbe6rUVlXbzCOU54V2TiV6suv2q70gOy66XUWp/3JmRCsTbgjdMzs/fv XCJvOwa+DJJi3zVlKHRiDdKFQO7ihG48kvtuJkCMhbvs98p/6FaoHb6pQDUvU4R3 LPap1rdw/8mzy5H4lKnIqEcLievWV09woGbf/VxRBY4w3tXbHiOxJqWTLpvTEMJD fxN+URyLAwFhoB/5gx6CgC7AEvRjVwngi272M+i+yOdSXW4tPtIuV3DkrWjINLfE vEthqZ5UZZkgvdjMtLlUn4f/sx0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDoJzzLsT21cT9LIN6EXTtNHIdtHMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kOWVlMjA5YS0xMTkzLTRkNmYtOWRiZS04Nzc3YmI4OTgwYWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5ZWUyMDlh LTExOTMtNGQ2Zi05ZGJlLTg3NzdiYjg5ODBhYS8wLzNBMDlDRjMyRUM0RjZENUM0 RkQyQzgzN0ExMTc0RUQzNDcyMURCNDcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn0t0wDQYJKoZIhvcNAQELBQADggEBAABypaIgGes2DcjxBg4SMA5uObRi8A/c 3u1Lb4WKKaCUb2XzCSInPmWIP71yMU5BqTmLkKz9jOFU3EJ+GczbK3tHJh5aFL44 wpnEOPRsorz74xCKiP3nR11wlAbAf5D3CkD56bHL7ycdZRiwGvK6Aw/+vsKMl+p/ Dpp+IAUPCDUYOjfmBYpaPCPRQMD4OKU6nIsmTSEwzeTQvNEjbWNYQqFBHnuLUgQ5 6p7p5xsyGH9+dfvO3BtrvPJcW0smBWIIY2wioBbNO51doDROZ48rAxdSgcrJmeof Ll+MWLh+k4ZEgx65zPypm6mGjm/+ndfdX4yyLrM16AD5PT8cAAT3oKg= -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:12 2025 by rpki-client