$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer File: 4E52504397B6835784BD4E67D8048C0D1CE3B242.cer (raw, json) Hash identifier: Odn0+uJKpbEGesbjKQjV8PulvspaG5gT2WglRJ0YbdE= Subject key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0211F183ED31706CED81EBC696EDDE812998ADFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft caRepository: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 01:20:41 +0000 Certificate not after: Tue 02 Jun 2026 01:25:41 +0000 Subordinate resources: IP: 43.245.188.0/22 IP: 103.29.148.0/22 IP: 202.6.208.0/20 IP: 2403:e600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:11:f1:83:ed:31:70:6c:ed:81:eb:c6:96:ed:de:81:29:98:ad:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 01:20:41 2025 GMT Not After : Jun 2 01:25:41 2026 GMT Subject: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0b:e3:ff:ec:5c:d4:18:8f:80:08:37:85:d4: 9c:26:8b:de:bf:08:7c:47:44:f9:13:c8:d3:3e:51: 5b:7d:2d:d2:aa:8b:a3:d1:d0:16:38:f0:ba:4a:2a: c5:89:fe:07:1d:f5:c6:cf:28:44:b6:51:a5:cf:58: 5d:54:6f:d1:87:71:76:06:e3:8f:78:b6:21:7c:d6: 92:fc:ce:f7:d0:00:f4:52:f3:a8:fb:54:fc:48:30: 2b:38:34:b4:cf:b1:65:80:de:ad:40:87:6c:a5:84: f0:8a:8b:32:e3:08:08:c3:a7:83:a5:2b:a1:7a:68: 22:dd:60:d0:59:72:9b:80:b5:e1:70:1f:97:9a:c8: 98:58:02:94:f9:be:fc:be:fd:84:50:d9:49:58:ad: 6f:76:80:99:2d:a8:e6:78:ee:a8:0a:99:43:54:44: 21:4c:70:7d:46:82:0c:4e:7f:39:65:60:c5:da:06: 4d:fd:4f:90:19:3d:e1:c8:a4:dd:3d:57:db:f4:55: 81:69:23:e2:e8:79:94:29:f5:70:d4:1e:66:57:01: c4:5e:4c:b1:8a:f5:b5:40:e0:68:ea:b4:9a:fb:12: 85:c5:54:dc:3d:af:d2:23:db:90:b2:8a:14:e0:26: 36:53:9e:27:53:15:20:9c:3d:4b:e2:97:49:30:e5: f8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.245.188.0/22 103.29.148.0/22 202.6.208.0/20 IPv6: 2403:e600::/32 Signature Algorithm: sha256WithRSAEncryption 64:bf:d0:1e:58:d8:46:4a:61:9f:b8:31:fc:cb:67:c5:06:b6: 54:b2:09:db:64:34:f8:fe:4c:4f:2b:f1:f8:df:0b:63:db:fe: ea:4c:39:a7:84:5b:f9:c6:e7:2c:6e:e9:3b:49:c7:59:45:01: f2:74:96:c3:32:e7:98:fe:35:a4:4f:10:34:f9:b9:be:37:01: da:28:b3:55:99:4f:24:0f:fd:ca:99:2f:9d:a9:e0:49:2d:be: 43:7d:d9:14:fa:73:6d:2a:fa:e9:b3:09:23:08:a9:52:f5:93: c3:60:48:21:29:86:65:86:20:a3:ee:4c:27:cb:a1:2a:4d:6d: 21:10:12:23:3c:ec:26:93:63:78:fb:70:19:e8:d0:09:06:f1: 4e:b8:f2:1c:40:c3:1c:c8:bc:de:97:81:1e:47:ad:b5:33:1f: ab:42:d0:43:88:72:b2:00:19:88:04:12:ec:39:79:0d:b3:7e: 1e:6c:51:88:da:46:5f:a0:cf:3c:01:1f:79:b8:b1:25:17:7c: fc:27:5b:8c:46:00:89:89:49:9a:95:0b:cc:0f:18:67:47:63: 7e:64:9f:1f:8c:15:f3:9a:c8:49:e9:b6:65:9e:93:8e:85:05: ca:5e:83:af:78:d3:44:a4:b6:e4:37:c6:81:13:ac:c4:95:7e: cb:c8:2d:c3 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUAhHxg+0xcGztgevGlu3egSmYrfowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzAxMjA0MVoX DTI2MDYwMjAxMjU0MVowMzExMC8GA1UEAxMoNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0 RTY3RDgwNDhDMEQxQ0UzQjI0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKIL4//sXNQYj4AIN4XUnCaL3r8IfEdE+RPI0z5RW30t0qqLo9HQFjjwukoq xYn+Bx31xs8oRLZRpc9YXVRv0Ydxdgbjj3i2IXzWkvzO99AA9FLzqPtU/EgwKzg0 tM+xZYDerUCHbKWE8IqLMuMICMOng6UroXpoIt1g0Flym4C14XAfl5rImFgClPm+ /L79hFDZSVitb3aAmS2o5njuqAqZQ1REIUxwfUaCDE5/OWVgxdoGTf1PkBk94cik 3T1X2/RVgWkj4uh5lCn1cNQeZlcBxF5MsYr1tUDgaOq0mvsShcVU3D2v0iPbkLKK FOAmNlOeJ1MVIJw9S+KXSTDl+IECAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE5SUEOXtoNXhL1OZ9gEjA0c47JCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5MWQzYzMw LTk1ZGMtNGI3Mi1hZTFiLWFkMWU5OGIwZTE3OS8wLzRFNTI1MDQzOTdCNjgzNTc4 NEJENEU2N0Q4MDQ4QzBEMUNFM0IyNDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAIr9bwDBAJnHZQDBATKBtAwDQQCAAIwBwMFACQD5gAwDQYJKoZIhvcNAQELBQAD ggEBAGS/0B5Y2EZKYZ+4MfzLZ8UGtlSyCdtkNPj+TE8r8fjfC2Pb/upMOaeEW/nG 5yxu6TtJx1lFAfJ0lsMy55j+NaRPEDT5ub43Adoos1WZTyQP/cqZL52p4EktvkN9 2RT6c20q+umzCSMIqVL1k8NgSCEphmWGIKPuTCfLoSpNbSEQEiM87CaTY3j7cBno 0AkG8U648hxAwxzIvN6XgR5HrbUzH6tC0EOIcrIAGYgEEuw5eQ2zfh5sUYjaRl+g zzwBH3m4sSUXfPwnW4xGAImJSZqVC8wPGGdHY35knx+MFfOayEnptmWek46FBcpe g69400SktuQ3xoETrMSVfsvILcM= -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:21 2025 by rpki-client