$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer File: 428AA4240E741F27E3A21EFC29D45F0AECC7FE96.cer (raw, json) Hash identifier: DsAdEYBDDxvF4UhdM38Gr5cRcplZvJffJIIdu5RBnk0= Subject key identifier: 42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4E8EF7BA58FD40D0ECDDE313A6E4EFF309FDEC76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft caRepository: rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 09:37:26 +0000 Certificate not after: Tue 02 Jun 2026 09:42:26 +0000 Subordinate resources: IP: 27.111.32.0/19 IP: 43.229.204.0/22 IP: 103.245.180.0/22 IP: 119.235.16.0/20 IP: 202.129.184.0/21 IP: 2403:2e00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8e:f7:ba:58:fd:40:d0:ec:dd:e3:13:a6:e4:ef:f3:09:fd:ec:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 09:37:26 2025 GMT Not After : Jun 2 09:42:26 2026 GMT Subject: CN=428AA4240E741F27E3A21EFC29D45F0AECC7FE96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fe:1e:b0:16:31:2a:24:3f:c4:ed:5f:62:58: ff:9a:31:22:73:3a:ff:56:26:7a:ff:d5:e6:5c:e9: 0d:65:e4:cf:54:59:79:fc:7a:57:29:94:02:41:ad: 8d:ce:ee:a6:a1:da:e4:2c:5b:d5:ce:bd:ee:dd:88: b1:94:f1:bc:02:80:a3:c4:f7:09:13:7e:c5:93:7b: 8c:9f:c9:4e:48:aa:17:c3:67:f1:08:28:f0:79:0f: ad:ef:13:12:c1:f2:17:b4:78:97:f8:42:fc:24:8d: 0d:ef:e6:ff:7a:53:50:6e:96:1f:81:b9:ad:33:e0: 7b:02:2c:3a:f4:f3:1e:14:71:f2:4a:5c:82:31:df: 30:93:38:63:5a:0a:9d:42:76:ed:54:fc:59:48:af: d8:98:4f:3f:e5:e5:6a:df:38:cb:1d:fe:c9:22:6e: 3f:14:55:98:70:cd:6a:cc:53:33:34:80:35:25:fa: ac:86:6b:07:c4:2f:c2:29:86:0e:a2:71:5e:58:77: 64:ba:f9:3f:d1:4c:73:93:f9:ba:24:0b:f0:4c:8c: cd:fb:5d:86:2a:a6:5f:2d:90:b7:b5:2d:a0:18:1a: f8:4f:1f:7d:bd:9a:72:ad:50:02:2a:79:1b:84:c2: 37:c7:9f:b4:95:4f:e5:fb:db:5c:da:8c:6f:12:6c: e5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 42:8A:A4:24:0E:74:1F:27:E3:A2:1E:FC:29:D4:5F:0A:EC:C7:FE:96 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/943e2e67-a171-4d9e-a935-406902b1e13b/0/428AA4240E741F27E3A21EFC29D45F0AECC7FE96.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.111.32.0/19 43.229.204.0/22 103.245.180.0/22 119.235.16.0/20 202.129.184.0/21 IPv6: 2403:2e00::/32 Signature Algorithm: sha256WithRSAEncryption 79:72:df:25:33:8c:1f:8e:82:c2:84:79:d7:9c:6d:19:32:a9: 65:ee:7c:26:5b:41:c8:4e:56:5e:13:68:01:49:eb:79:ab:33: 3d:c3:ca:35:91:77:6b:6e:5f:f9:b9:66:f1:af:be:0e:a3:c8: 89:36:b5:2b:86:0b:d3:a3:0f:50:16:c9:08:d9:43:62:72:60: 4c:c4:ff:47:87:c0:94:68:84:f5:10:a1:f6:9d:88:9c:bb:54: 17:3d:d1:17:9c:ef:cb:ea:4d:eb:4d:9f:70:c6:93:96:0c:0c: 4c:5f:f5:4b:58:68:e3:5e:26:31:1b:f6:01:cf:c3:fe:8d:37: a0:2d:12:4b:8f:7c:37:c2:9a:52:11:36:e4:fb:82:42:c2:dd: 50:f2:51:ff:6c:e7:c3:20:5c:87:78:45:40:96:20:17:f4:99: 2d:8f:1f:6a:8f:df:e4:2f:8c:5d:e9:76:28:a8:da:28:6e:2c: 1c:13:f6:61:63:43:78:5a:44:d7:34:c6:e3:5f:08:31:b8:c4: f9:30:cd:11:b6:54:1b:70:8b:62:47:50:33:4c:5c:0f:e6:18: d5:bc:33:be:6b:7f:1a:c0:50:dd:38:75:0e:08:d8:54:3e:8a: 2c:5b:8c:57:8f:ce:5f:94:07:32:88:07:07:4a:dd:39:8d:44: ae:2d:7a:91 -----BEGIN CERTIFICATE----- MIIF7DCCBNSgAwIBAgIUTo73ulj9QNDs3eMTpuTv8wn97HYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzA5MzcyNloX DTI2MDYwMjA5NDIyNlowMzExMC8GA1UEAxMoNDI4QUE0MjQwRTc0MUYyN0UzQTIx RUZDMjlENDVGMEFFQ0M3RkU5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANP+HrAWMSokP8TtX2JY/5oxInM6/1Ymev/V5lzpDWXkz1RZefx6VymUAkGt jc7upqHa5Cxb1c697t2IsZTxvAKAo8T3CRN+xZN7jJ/JTkiqF8Nn8Qgo8HkPre8T EsHyF7R4l/hC/CSNDe/m/3pTUG6WH4G5rTPgewIsOvTzHhRx8kpcgjHfMJM4Y1oK nUJ27VT8WUiv2JhPP+Xlat84yx3+ySJuPxRVmHDNasxTMzSANSX6rIZrB8QvwimG DqJxXlh3ZLr5P9FMc5P5uiQL8EyMzftdhiqmXy2Qt7UtoBga+E8ffb2acq1QAip5 G4TCN8eftJVP5fvbXNqMbxJs5WECAwEAAaOCAt8wggLbMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEKKpCQOdB8n46Ie/CnUXwrsx/6WMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NDNlMmU2Ny1hMTcxLTRkOWUtYTkzNS00MDY5MDJiMWUxM2IvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0M2UyZTY3 LWExNzEtNGQ5ZS1hOTM1LTQwNjkwMmIxZTEzYi8wLzQyOEFBNDI0MEU3NDFGMjdF M0EyMUVGQzI5RDQ1RjBBRUNDN0ZFOTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwRgYIKwYBBQUHAQcBAf8ENzA1MCQEAgABMB4D BAUbbyADBAIr5cwDBAJn9bQDBAR36xADBAPKgbgwDQQCAAIwBwMFACQDLgAwDQYJ KoZIhvcNAQELBQADggEBAHly3yUzjB+OgsKEedecbRkyqWXufCZbQchOVl4TaAFJ 63mrMz3DyjWRd2tuX/m5ZvGvvg6jyIk2tSuGC9OjD1AWyQjZQ2JyYEzE/0eHwJRo hPUQofadiJy7VBc90Rec78vqTetNn3DGk5YMDExf9UtYaONeJjEb9gHPw/6NN6At EkuPfDfCmlIRNuT7gkLC3VDyUf9s58MgXId4RUCWIBf0mS2PH2qP3+QvjF3pdiio 2ihuLBwT9mFjQ3haRNc0xuNfCDG4xPkwzRG2VBtwi2JHUDNMXA/mGNW8M75rfxrA UN04dQ4I2FQ+iixbjFePzl+UBzKIBwdK3TmNRK4tepE= -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:54 2025 by rpki-client