$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE387D3C00A87B7E355ABF1EE524AADF74148.cer File: 523EE387D3C00A87B7E355ABF1EE524AADF74148.cer (raw, json) Hash identifier: fiY8NGEAMDUHhtnv+6HiLxJy6iyF+2dQ9vUY/2y4Zf8= Subject key identifier: 52:3E:E3:87:D3:C0:0A:87:B7:E3:55:AB:F1:EE:52:4A:AD:F7:41:48 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7771B07354085F69D6BD0E4C79D2BA31751FC473 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/523EE387D3C00A87B7E355ABF1EE524AADF74148.mft caRepository: rsync://repo-rpki.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 15:02:08 +0000 Certificate not after: Tue 02 Jun 2026 15:07:08 +0000 Subordinate resources: IP: 103.153.60.0/23 IP: 2001:df4:3680::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:71:b0:73:54:08:5f:69:d6:bd:0e:4c:79:d2:ba:31:75:1f:c4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 15:02:08 2025 GMT Not After : Jun 2 15:07:08 2026 GMT Subject: CN=523EE387D3C00A87B7E355ABF1EE524AADF74148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:95:68:69:3f:a2:c0:33:56:6b:3d:66:f4:8f: dc:01:43:d0:df:c5:a2:04:9d:dd:16:01:dd:06:59: d2:14:b2:a4:08:48:f8:25:de:e9:e3:a4:57:fa:5f: ce:cf:32:f4:6c:e7:03:55:5b:62:3c:eb:30:3a:5b: 5f:dd:86:a1:df:b0:6e:c8:59:c1:2c:c5:20:40:5f: 07:e3:e0:83:f8:e5:81:cf:68:29:b3:35:b1:cd:00: e5:39:2f:68:3d:a9:d1:69:31:83:84:f8:7e:91:10: 63:ac:a3:7b:62:df:31:84:c8:f7:b0:e4:c0:08:6f: 9d:38:f2:15:2c:89:39:af:a3:41:20:ef:e1:7f:0c: bd:85:e5:8c:ac:e9:4f:c6:3f:a7:2a:c6:dc:81:f1: ec:3c:6e:2c:61:ed:f1:7c:06:36:80:1d:4c:e8:62: aa:3f:f6:f2:d4:55:ae:56:80:6e:cf:38:7d:e2:83: 33:4b:87:db:33:1c:90:2a:34:21:a1:96:e6:af:b1: 44:bb:f5:6a:96:28:89:a3:9c:c0:1b:a6:30:ae:11: 12:54:21:94:cb:2d:9d:f3:23:d5:5b:80:20:ea:76: 7f:4d:28:72:18:9c:4d:a5:b9:11:20:96:b5:d8:60: e8:79:c3:13:a4:f9:a7:03:0e:48:b8:39:82:1f:39: 6d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 52:3E:E3:87:D3:C0:0A:87:B7:E3:55:AB:F1:EE:52:4A:AD:F7:41:48 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1a9520fd-8de5-4a69-85f1-c44897ae6121/0/523EE387D3C00A87B7E355ABF1EE524AADF74148.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.60.0/23 IPv6: 2001:df4:3680::/48 Signature Algorithm: sha256WithRSAEncryption 3a:86:67:f8:a1:e6:b6:04:2f:0f:a0:a9:20:4b:ed:8a:82:49: 14:9d:3b:4d:0b:e2:02:f5:17:ae:9b:1e:33:7a:39:81:39:7a: a4:3d:8e:b7:5f:06:06:18:e0:fd:ad:22:b3:fa:d7:12:19:70: 5b:02:03:0e:82:cf:d1:6c:9a:4b:1d:a2:c9:98:93:6c:33:cd: a2:62:62:0c:f5:71:c7:1e:0c:87:50:db:b7:20:20:8a:ec:34: e1:ee:0b:bd:df:dc:84:5b:47:fa:f6:0e:ee:1b:74:c8:33:f4: 54:fb:9c:2b:4b:63:29:01:e3:e6:47:04:c5:d5:25:82:73:fc: 33:d3:e0:b4:cc:1f:c3:0c:0a:99:77:fd:5f:67:5d:d6:25:ba: e8:e4:c4:cf:ab:54:3a:7b:19:cc:e0:9c:93:cc:88:91:8e:01: 0d:f5:97:b0:3f:04:2b:29:e5:34:4e:db:8c:4a:44:68:4b:5b: 2f:4e:06:bb:58:54:ce:99:09:4a:be:2a:d1:64:c4:8b:15:31: df:e1:60:21:43:ac:a9:a9:22:dd:8f:0d:f8:98:d8:23:7a:c8: 51:3c:d6:74:ee:ca:63:59:12:64:b3:08:34:7b:b3:b2:9d:4c: 98:ea:41:6e:30:ef:e1:85:83:07:5c:08:1b:79:7b:4e:5e:36: 76:70:7e:d3 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUd3Gwc1QIX2nWvQ5MedK6MXUfxHMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzE1MDIwOFoX DTI2MDYwMjE1MDcwOFowMzExMC8GA1UEAxMoNTIzRUUzODdEM0MwMEE4N0I3RTM1 NUFCRjFFRTUyNEFBREY3NDE0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJuVaGk/osAzVms9ZvSP3AFD0N/FogSd3RYB3QZZ0hSypAhI+CXe6eOkV/pf zs8y9GznA1VbYjzrMDpbX92God+wbshZwSzFIEBfB+Pgg/jlgc9oKbM1sc0A5Tkv aD2p0Wkxg4T4fpEQY6yje2LfMYTI97DkwAhvnTjyFSyJOa+jQSDv4X8MvYXljKzp T8Y/pyrG3IHx7DxuLGHt8XwGNoAdTOhiqj/28tRVrlaAbs84feKDM0uH2zMckCo0 IaGW5q+xRLv1apYoiaOcwBumMK4RElQhlMstnfMj1VuAIOp2f00ochicTaW5ESCW tdhg6HnDE6T5pwMOSLg5gh85bWMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFI+44fTwAqHt+NVq/HuUkqt90FIMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xYTk1MjBmZC04ZGU1LTRhNjktODVmMS1jNDQ4OTdhZTYxMjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFhOTUyMGZk LThkZTUtNGE2OS04NWYxLWM0NDg5N2FlNjEyMS8wLzUyM0VFMzg3RDNDMDBBODdC N0UzNTVBQkYxRUU1MjRBQURGNzQxNDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnmTwwDwQCAAIwCQMHACABDfQ2gDANBgkqhkiG9w0BAQsFAAOCAQEAOoZn+KHm tgQvD6CpIEvtioJJFJ07TQviAvUXrpseM3o5gTl6pD2Ot18GBhjg/a0is/rXEhlw WwIDDoLP0WyaSx2iyZiTbDPNomJiDPVxxx4Mh1DbtyAgiuw04e4Lvd/chFtH+vYO 7ht0yDP0VPucK0tjKQHj5kcExdUlgnP8M9PgtMwfwwwKmXf9X2dd1iW66OTEz6tU OnsZzOCck8yIkY4BDfWXsD8EKynlNE7bjEpEaEtbL04Gu1hUzpkJSr4q0WTEixUx 3+FgIUOsqaki3Y8N+JjYI3rIUTzWdO7KY1kSZLMINHuzsp1MmOpBbjDv4YWDB1wI G3l7Tl42dnB+0w== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:26 2025 by rpki-client