$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer File: 3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.cer (raw, json) Hash identifier: ZbS50cn8AYR1iCkh/QYseqdFUlwItc7uRgUiGLsi+U0= Subject key identifier: 3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5FD03D196275D8EF9D633A43BF48322BA1D44C55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft caRepository: rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 18 Jul 2025 14:20:28 +0000 Certificate not after: Fri 17 Jul 2026 14:25:28 +0000 Subordinate resources: IP: 103.10.253.0/24 IP: 103.28.163.0/24 IP: 103.65.96.0/23 IP: 2001:df0:269::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d0:3d:19:62:75:d8:ef:9d:63:3a:43:bf:48:32:2b:a1:d4:4c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 18 14:20:28 2025 GMT Not After : Jul 17 14:25:28 2026 GMT Subject: CN=3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a1:01:f0:00:12:89:d4:c3:52:41:f6:5c:79: a2:f0:dc:95:0c:49:e3:f3:7e:03:00:e5:ec:63:b1: 1f:62:d6:95:9b:64:75:4e:6c:c8:cc:c4:fe:33:8f: e3:a0:31:87:93:89:df:ec:c2:c0:c6:af:b6:1a:17: b0:89:90:ca:28:10:55:84:c0:15:4a:40:fe:45:76: 1a:95:7e:5c:21:0f:d7:f0:ee:68:f3:63:48:d5:8d: 07:2e:4d:19:51:03:6c:9e:93:08:9d:98:ba:9e:b0: b9:77:b2:c1:ec:90:b2:d0:c0:b2:2a:0c:18:0b:65: 92:73:ff:28:55:96:12:65:94:76:44:59:45:f1:9e: 97:53:1a:93:eb:b1:23:7c:e2:20:cf:38:5c:8c:8a: 03:9a:80:44:86:82:b7:8a:2e:e6:73:07:f4:4e:8d: 9b:1d:e3:b3:09:d6:1e:2d:18:78:97:da:8d:02:3b: 6f:89:9e:ef:3f:ad:b4:5f:13:16:50:2d:94:03:be: 0a:d4:51:a2:fc:62:6a:4c:38:17:09:36:32:d8:22: e9:8c:86:a7:d6:ce:69:95:c2:56:7c:f4:3e:d8:f2: fc:21:88:2f:ce:bf:68:00:a0:0b:ff:83:a1:49:ac: 26:bc:d9:ac:d9:bd:f9:86:ab:6b:08:d0:ce:7f:bb: 97:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:78:9F:AF:5F:7E:BE:69:38:C4:C7:23:DC:D2:EE:D7:85:C3:5E:4F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4d970032-08ea-4890-bdba-6309a497917d/0/3D789FAF5F7EBE6938C4C723DCD2EED785C35E4F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.10.253.0/24 103.28.163.0/24 103.65.96.0/23 IPv6: 2001:df0:269::/48 Signature Algorithm: sha256WithRSAEncryption 03:5b:4b:24:77:80:95:b4:19:db:d1:e0:65:7f:d0:63:07:39: 9b:55:b0:d5:36:cc:ba:de:9d:2c:d4:51:fa:d0:ee:78:c9:59: 42:a3:07:13:cc:ae:d5:7a:ac:23:6f:21:2e:c7:6d:54:e2:2b: 71:2f:59:73:77:c6:d8:e4:4e:6b:b3:83:4a:78:6f:7d:ae:99: 39:f9:89:cc:a8:ca:1e:34:55:df:94:4d:41:ad:5c:aa:14:a3: 49:75:1d:3b:fb:f0:81:88:11:1c:03:29:bd:51:bf:20:a6:c5: 76:a3:a9:59:ab:5a:ca:ab:64:ae:57:9d:ad:8f:f1:5e:71:19: d8:80:c3:48:7b:02:db:93:fc:95:6a:a4:96:b8:16:9e:bc:c6: 06:6c:3f:2b:44:54:71:1b:53:39:56:ed:67:8a:8c:02:c4:b2: 7f:88:aa:fd:ab:d5:31:c9:52:5d:1e:ee:c7:af:a2:70:80:ec: 0a:70:fb:8c:8f:c2:92:48:33:e9:6a:05:ef:40:38:f7:b0:ba: 5c:d6:10:51:31:4a:c9:cd:72:46:b9:ed:17:82:2a:eb:23:45: 9e:c4:14:2d:97:3e:42:80:5d:05:fe:8a:04:42:a4:59:0b:17: c1:d8:5c:05:e8:83:cd:f3:1b:94:91:4a:7a:7f:fc:f1:44:46: 67:4e:e7:42 -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUX9A9GWJ12O+dYzpDv0gyK6HUTFUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxODE0MjAyOFoX DTI2MDcxNzE0MjUyOFowMzExMC8GA1UEAxMoM0Q3ODlGQUY1RjdFQkU2OTM4QzRD NzIzRENEMkVFRDc4NUMzNUU0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANWhAfAAEonUw1JB9lx5ovDclQxJ4/N+AwDl7GOxH2LWlZtkdU5syMzE/jOP 46Axh5OJ3+zCwMavthoXsImQyigQVYTAFUpA/kV2GpV+XCEP1/DuaPNjSNWNBy5N GVEDbJ6TCJ2Yup6wuXeyweyQstDAsioMGAtlknP/KFWWEmWUdkRZRfGel1Mak+ux I3ziIM84XIyKA5qARIaCt4ou5nMH9E6Nmx3jswnWHi0YeJfajQI7b4me7z+ttF8T FlAtlAO+CtRRovxiakw4Fwk2Mtgi6YyGp9bOaZXCVnz0Ptjy/CGIL86/aACgC/+D oUmsJrzZrNm9+YarawjQzn+7l9cCAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD14n69ffr5pOMTHI9zS7teFw15PMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZDk3MDAzMi0wOGVhLTQ4OTAtYmRiYS02MzA5YTQ5NzkxN2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkOTcwMDMy LTA4ZWEtNDg5MC1iZGJhLTYzMDlhNDk3OTE3ZC8wLzNENzg5RkFGNUY3RUJFNjkz OEM0QzcyM0RDRDJFRUQ3ODVDMzVFNEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID BABnCv0DBABnHKMDBAFnQWAwDwQCAAIwCQMHACABDfACaTANBgkqhkiG9w0BAQsF AAOCAQEAA1tLJHeAlbQZ29HgZX/QYwc5m1Ww1TbMut6dLNRR+tDueMlZQqMHE8yu 1XqsI28hLsdtVOIrcS9Zc3fG2OROa7ODSnhvfa6ZOfmJzKjKHjRV35RNQa1cqhSj SXUdO/vwgYgRHAMpvVG/IKbFdqOpWatayqtkrledrY/xXnEZ2IDDSHsC25P8lWqk lrgWnrzGBmw/K0RUcRtTOVbtZ4qMAsSyf4iq/avVMclSXR7ux6+icIDsCnD7jI/C kkgz6WoF70A497C6XNYQUTFKyc1yRrntF4Iq6yNFnsQULZc+QoBdBf6KBEKkWQsX wdhcBeiDzfMblJFKen/88URGZ07nQg== -----END CERTIFICATE-----Generated at Wed Aug 6 09:35:27 2025 by rpki-client