$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer File: 4A906D4F534B26A0E62898882630292936CEA54A.cer (raw, json) Hash identifier: h57iTJWUoRcKAtiIjhr3qjtDwl8+PeCp5lROEox2co0= Subject key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 18F8957CF462F73951F577E76A7D2F2B25834D87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft caRepository: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 25 Aug 2025 02:36:01 +0000 Certificate not after: Mon 24 Aug 2026 02:41:01 +0000 Subordinate resources: IP: 103.171.82.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f8:95:7c:f4:62:f7:39:51:f5:77:e7:6a:7d:2f:2b:25:83:4d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 25 02:36:01 2025 GMT Not After : Aug 24 02:41:01 2026 GMT Subject: CN=4A906D4F534B26A0E62898882630292936CEA54A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:09:ea:e8:90:7c:17:61:1e:e9:94:13:f8:9a: ab:91:24:b0:88:47:98:42:cf:de:89:6d:05:6a:06: d5:c9:1f:9a:9d:31:80:80:a0:11:fa:34:c8:a6:e7: a9:ec:fc:93:3b:9c:c0:6c:36:c8:36:da:59:91:44: 63:02:65:f7:e0:ba:a4:44:64:13:2d:5b:c1:64:e2: 81:b5:53:ec:2b:3e:c9:73:58:85:dc:db:a3:b2:06: 96:0d:72:25:60:c9:ba:c7:f0:8f:75:85:fd:26:42: d9:3e:f5:67:04:76:8a:f5:ed:0c:e6:69:98:c4:91: d8:53:c4:86:de:ec:22:7c:33:c0:ff:b7:e7:65:0c: ed:d7:94:d0:55:8a:62:3f:67:48:54:23:e0:44:f5: 44:f4:8f:16:64:21:e0:fb:a8:55:1d:a8:aa:3b:a1: e1:cc:cc:5b:09:50:cc:59:0d:a2:dc:87:13:52:f6: cc:9b:ff:b7:d1:3c:aa:06:0e:ca:1f:35:a5:04:d1: 2d:51:31:b3:a5:fd:4f:58:ea:39:ad:2e:ab:a5:5a: 1c:88:1e:57:3f:5f:6f:48:da:f7:88:88:03:70:85: 21:22:0f:3e:99:ab:90:87:6a:7a:97:0d:0e:bd:5e: 68:9b:2d:3b:d1:88:a8:9f:e8:6b:ba:e5:f4:27:de: 0c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.82.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:fa:83:30:9b:8a:16:73:a6:82:f3:e8:95:82:3e:bf:dd:00: 63:42:94:c5:9a:77:37:4d:b2:81:36:e9:a9:16:df:80:f7:54: d5:09:99:48:fb:0a:0b:b4:2f:1a:8c:00:1b:40:77:62:0c:db: 8b:97:76:b6:f6:a6:2d:79:8d:d5:08:ba:13:25:2d:94:1c:17: 60:10:c4:5a:27:c0:7f:64:cf:54:19:74:5c:fa:62:a2:7c:eb: 5a:b1:7d:19:de:c9:f7:6a:2f:c9:19:7c:d2:10:a6:ba:b6:24: e9:98:bd:a1:96:13:25:29:21:92:cb:e1:f4:50:ee:5f:2c:4a: 08:f5:15:66:d2:c7:3d:8a:9c:ce:ab:8f:5e:bc:92:b9:49:b8: 91:92:32:c5:cf:fb:eb:28:cb:27:a3:ed:f8:a5:b5:64:00:05: 49:c7:c1:42:27:11:35:d2:a9:63:13:25:c3:e8:fe:05:ed:99: 4a:95:51:23:8a:0a:c8:4e:19:da:e9:1c:5d:0c:20:f2:4f:bb: 77:d7:7d:74:70:34:2a:55:ca:c9:36:6c:a1:67:41:0c:f8:50: 6e:d8:bb:d3:a5:fc:b8:7b:95:79:ea:da:a3:a8:db:d4:40:e0: ee:56:b8:f8:8c:01:0c:20:d1:72:b2:73:c9:fb:f3:22:61:fa: 32:f4:f7:59 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGPiVfPRi9zlR9Xfnan0vKyWDTYcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyNTAyMzYwMVoX DTI2MDgyNDAyNDEwMVowMzExMC8GA1UEAxMoNEE5MDZENEY1MzRCMjZBMEU2Mjg5 ODg4MjYzMDI5MjkzNkNFQTU0QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANkJ6uiQfBdhHumUE/iaq5EksIhHmELP3oltBWoG1ckfmp0xgICgEfo0yKbn qez8kzucwGw2yDbaWZFEYwJl9+C6pERkEy1bwWTigbVT7Cs+yXNYhdzbo7IGlg1y JWDJusfwj3WF/SZC2T71ZwR2ivXtDOZpmMSR2FPEht7sInwzwP+352UM7deU0FWK Yj9nSFQj4ET1RPSPFmQh4PuoVR2oqjuh4czMWwlQzFkNotyHE1L2zJv/t9E8qgYO yh81pQTRLVExs6X9T1jqOa0uq6VaHIgeVz9fb0ja94iIA3CFISIPPpmrkIdqepcN Dr1eaJstO9GIqJ/oa7rl9CfeDAMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEqQbU9TSyag5iiYiCYwKSk2zqVKMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZTg5ZTg1OS0zYzJjLTRhMDktYTRhOS0zNzMyM2VhNWRlMjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlODllODU5 LTNjMmMtNGEwOS1hNGE5LTM3MzIzZWE1ZGUyMi8wLzRBOTA2RDRGNTM0QjI2QTBF NjI4OTg4ODI2MzAyOTI5MzZDRUE1NEEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnq1IwDQYJKoZIhvcNAQELBQADggEBAF76gzCbihZzpoLz6JWCPr/dAGNClMWa dzdNsoE26akW34D3VNUJmUj7Cgu0LxqMABtAd2IM24uXdrb2pi15jdUIuhMlLZQc F2AQxFonwH9kz1QZdFz6YqJ861qxfRneyfdqL8kZfNIQprq2JOmYvaGWEyUpIZLL 4fRQ7l8sSgj1FWbSxz2KnM6rj168krlJuJGSMsXP++soyyej7filtWQABUnHwUIn ETXSqWMTJcPo/gXtmUqVUSOKCshOGdrpHF0MIPJPu3fXfXRwNCpVysk2bKFnQQz4 UG7Yu9Ol/Lh7lXnq2qOo29RA4O5WuPiMAQwg0XKyc8n78yJh+jL091k= -----END CERTIFICATE-----Generated at Tue Nov 4 02:19:03 2025 by rpki-client