$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer File: 4C44F6F543BDBB858D3656D41A36660407672BDE.cer (raw, json) Hash identifier: yfTf/ERddakc0NgGT/bPYN9pLh0yt5c/5SYFLV9UsP0= Subject key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 714EEA8E67D2317B6582EB6650D6084A59437FE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft caRepository: rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 29 Oct 2025 09:01:21 +0000 Certificate not after: Wed 28 Oct 2026 09:06:21 +0000 Subordinate resources: IP: 103.11.106.0/23 IP: 103.29.184.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:4e:ea:8e:67:d2:31:7b:65:82:eb:66:50:d6:08:4a:59:43:7f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 29 09:01:21 2025 GMT Not After : Oct 28 09:06:21 2026 GMT Subject: CN=4C44F6F543BDBB858D3656D41A36660407672BDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0e:64:4b:c4:f5:a0:3c:6a:d1:c4:cc:1d:81: 6a:6b:9e:80:a7:57:01:bb:42:e1:38:a4:40:a0:e7: 8c:00:b2:0d:b3:c3:ff:12:12:f8:53:78:94:16:36: 87:4e:44:a5:3d:ad:4d:5f:88:19:cf:9e:c9:6a:c0: 80:11:0c:0f:72:fc:38:bd:05:24:4c:f2:a0:6a:9a: b4:c7:1b:f8:ac:9a:d9:0f:bf:bc:6d:c8:f2:a7:6f: 3f:44:96:ee:2e:f3:05:54:df:b0:86:63:3b:37:cb: c7:0f:c9:9f:3b:ca:98:73:db:e6:4d:ca:08:80:83: 56:60:4c:ce:1e:8e:c5:b0:6b:d1:dc:24:62:af:14: 50:0b:c1:76:ac:dc:65:4c:6d:72:ac:9b:f6:1e:09: 56:c8:33:01:c3:06:81:55:d2:2d:fb:df:4a:18:44: ad:c6:a4:27:6a:72:e1:79:fb:d3:b8:d7:02:40:b6: ea:cf:48:bc:81:49:14:b3:f2:b6:5f:e5:99:a9:a7: 60:cf:01:9b:c2:cd:48:df:9e:f6:e9:7b:c8:fd:75: 2a:ef:29:72:19:13:d4:67:31:cd:7d:a3:27:f5:16: 48:23:70:d3:7d:5f:a4:bf:b3:ac:74:08:6e:43:5a: e8:06:c8:68:d8:13:ec:34:68:cf:84:35:dd:1a:e9: 1e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.106.0/23 103.29.184.0/23 Signature Algorithm: sha256WithRSAEncryption 08:90:3d:7d:2f:b4:26:a0:77:51:fa:4f:59:53:b6:2a:a5:fa: 1f:50:77:df:50:27:02:39:04:c8:44:e1:de:ec:56:2d:6a:1d: 20:d9:1f:b4:ca:d9:e4:a7:72:f6:d2:c5:66:2f:86:2c:18:09: c4:2a:71:04:02:fc:e8:f9:aa:2b:26:c1:bc:9c:8a:9d:8c:0e: 06:13:88:1d:80:4e:42:51:c9:5e:4e:71:f4:ee:c0:0b:b9:c7: b9:f3:54:3a:fd:90:cc:a4:91:f5:6e:58:43:7e:41:9e:e8:d5: 28:c4:db:a2:f7:8c:e0:e0:2a:55:cd:fe:af:5c:f1:4b:08:1d: 8f:58:35:51:66:91:7e:30:64:e7:25:4b:b0:0e:70:d7:f2:1b: 42:4e:02:a7:7f:d4:64:08:61:16:40:4c:bb:23:3c:e9:9e:eb: 9d:4d:dc:ab:b4:b5:5c:80:cc:63:c7:49:54:55:93:75:33:17: f0:93:74:21:b8:69:b0:61:21:22:ab:ce:e7:b6:32:50:bf:3f: cd:c5:24:fa:e7:ba:b1:70:f6:b9:63:7e:6c:7f:b3:ed:5b:b8: 78:18:1f:a4:f0:e8:1e:81:b6:7d:67:0b:5d:4d:16:e2:4e:bd: 9f:34:75:67:ba:7c:4c:bb:7c:ea:ea:dd:68:bd:2f:b7:21:98: e2:f5:45:98 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUcU7qjmfSMXtlgutmUNYISllDf+MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyOTA5MDEyMVoX DTI2MTAyODA5MDYyMVowMzExMC8GA1UEAxMoNEM0NEY2RjU0M0JEQkI4NThEMzY1 NkQ0MUEzNjY2MDQwNzY3MkJERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM0OZEvE9aA8atHEzB2BamuegKdXAbtC4TikQKDnjACyDbPD/xIS+FN4lBY2 h05EpT2tTV+IGc+eyWrAgBEMD3L8OL0FJEzyoGqatMcb+Kya2Q+/vG3I8qdvP0SW 7i7zBVTfsIZjOzfLxw/JnzvKmHPb5k3KCICDVmBMzh6OxbBr0dwkYq8UUAvBdqzc ZUxtcqyb9h4JVsgzAcMGgVXSLfvfShhErcakJ2py4Xn707jXAkC26s9IvIFJFLPy tl/lmamnYM8Bm8LNSN+e9ul7yP11Ku8pchkT1GcxzX2jJ/UWSCNw031fpL+zrHQI bkNa6AbIaNgT7DRoz4Q13RrpHkkCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFExE9vVDvbuFjTZW1Bo2ZgQHZyveMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NWYyYzY2Yy0xZjg3LTRkOTgtYTQ2Ny0zMjE4YjY0NWIzYWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZjJjNjZj LTFmODctNGQ5OC1hNDY3LTMyMThiNjQ1YjNhYy8wLzRDNDRGNkY1NDNCREJCODU4 RDM2NTZENDFBMzY2NjA0MDc2NzJCREUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAFnC2oDBAFnHbgwDQYJKoZIhvcNAQELBQADggEBAAiQPX0vtCagd1H6T1lTtiql +h9Qd99QJwI5BMhE4d7sVi1qHSDZH7TK2eSncvbSxWYvhiwYCcQqcQQC/Oj5qism wbycip2MDgYTiB2ATkJRyV5OcfTuwAu5x7nzVDr9kMykkfVuWEN+QZ7o1SjE26L3 jODgKlXN/q9c8UsIHY9YNVFmkX4wZOclS7AOcNfyG0JOAqd/1GQIYRZATLsjPOme 651N3Ku0tVyAzGPHSVRVk3UzF/CTdCG4abBhISKrzue2MlC/P83FJPrnurFw9rlj fmx/s+1buHgYH6Tw6B6Btn1nC11NFuJOvZ80dWe6fEy7fOrq3Wi9L7chmOL1RZg= -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:04 2025 by rpki-client