$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/53576544C2D7C29DEC5245A4A81C19686D1160AA.cer File: 53576544C2D7C29DEC5245A4A81C19686D1160AA.cer (raw, json) Hash identifier: OeVh0YLSUK+fH5IVPMiot1FBMOl9QBv7g1OMoOeEUiU= Subject key identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3CBC2F377B40A90AB21EDAB113C53A00876933B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft caRepository: rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 15 Aug 2025 05:08:12 +0000 Certificate not after: Fri 14 Aug 2026 05:13:12 +0000 Subordinate resources: IP: 103.99.136.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:bc:2f:37:7b:40:a9:0a:b2:1e:da:b1:13:c5:3a:00:87:69:33:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 15 05:08:12 2025 GMT Not After : Aug 14 05:13:12 2026 GMT Subject: CN=53576544C2D7C29DEC5245A4A81C19686D1160AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:42:5c:fa:5b:3a:ce:08:90:e1:43:ac:23:a2: a0:22:d2:00:20:f0:7b:55:61:e7:7c:f0:2b:55:93: 93:08:90:46:05:19:3b:b6:ff:ed:71:16:e0:a3:0f: 97:f2:c5:55:50:19:c5:d8:d0:46:b4:a6:37:c3:fd: 2c:34:24:e3:e4:fb:1a:1e:94:e5:4c:e7:1b:1b:0d: 7d:1a:de:24:4d:f8:31:55:95:31:9d:40:4b:46:09: f1:72:c1:51:53:a5:05:99:21:62:5d:0c:39:b9:3f: 38:f3:e0:89:4d:e8:df:15:bd:d7:f2:62:de:da:ba: 7b:89:32:f0:b3:94:47:4c:04:1a:7f:af:1b:8f:4a: 74:9e:97:0c:e3:94:f9:3b:6a:0d:c1:52:5f:9f:45: 9a:ce:9b:24:62:8f:d7:fe:3f:3c:75:e6:de:a6:93: 0d:18:90:17:10:c4:2b:4b:20:46:a4:6b:f9:06:39: cf:5a:30:88:e8:6c:59:b3:66:af:90:23:ea:0d:4b: 7b:2f:94:a7:d3:f8:4d:16:ae:cf:60:2e:44:b0:23: 0b:65:dc:12:7e:4b:66:20:93:49:7a:79:59:33:df: d3:25:ad:00:17:44:d3:49:ca:a4:3c:82:ca:48:09: af:5c:e8:7e:0e:42:3b:fe:81:e9:f0:62:6c:5e:c3: d3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:57:65:44:C2:D7:C2:9D:EC:52:45:A4:A8:1C:19:68:6D:11:60:AA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/117ea0e6-43ea-431e-a013-0b201b2c0d9e/0/53576544C2D7C29DEC5245A4A81C19686D1160AA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.99.136.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:81:dc:1b:f8:55:f2:2f:cb:8e:0e:49:7c:55:c8:af:bc:95: fe:34:ed:d5:50:e6:56:51:7d:b0:fb:26:76:68:d0:f0:75:48: e8:17:7b:6f:ea:ac:1d:84:50:ce:d5:d0:76:e3:7b:44:38:49: f7:d8:3f:e8:e6:1d:5e:64:ef:df:01:c9:5b:3d:ed:ab:b7:1c: 8e:6f:53:07:16:ca:fe:7d:96:a2:6c:b8:2b:f8:22:ec:8c:ac: 0c:01:7f:be:1e:49:d9:4c:08:76:32:b5:82:d6:73:24:d4:88: 75:80:c8:f3:40:41:61:1a:32:9f:7e:82:ba:28:bc:76:00:7e: 17:5a:e8:df:ce:2c:9d:56:5e:90:86:61:6e:f9:9f:6d:88:9a: 89:35:a6:84:83:a6:da:45:06:7e:a3:41:9b:f7:ab:d0:14:09: f9:1f:fc:86:b8:5b:f3:e3:85:1c:a1:e6:58:a5:b0:ef:f4:03: 69:a7:3d:62:60:63:08:ff:61:ee:93:9a:b1:0a:21:b8:09:1b: 45:4b:4e:6a:d4:3f:e5:a6:38:2c:d1:b9:5a:5a:0a:42:43:45: e3:06:4f:da:be:6b:1f:bd:96:71:15:70:e0:43:a2:07:4d:e5: 67:48:2c:82:18:1c:00:d0:64:b1:0d:ec:fd:d3:ba:e7:12:70: 61:47:e4:ea -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPLwvN3tAqQqyHtqxE8U6AIdpM7IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxNTA1MDgxMloX DTI2MDgxNDA1MTMxMlowMzExMC8GA1UEAxMoNTM1NzY1NDRDMkQ3QzI5REVDNTI0 NUE0QTgxQzE5Njg2RDExNjBBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKtCXPpbOs4IkOFDrCOioCLSACDwe1Vh53zwK1WTkwiQRgUZO7b/7XEW4KMP l/LFVVAZxdjQRrSmN8P9LDQk4+T7Gh6U5UznGxsNfRreJE34MVWVMZ1AS0YJ8XLB UVOlBZkhYl0MObk/OPPgiU3o3xW91/Ji3tq6e4ky8LOUR0wEGn+vG49KdJ6XDOOU +TtqDcFSX59Fms6bJGKP1/4/PHXm3qaTDRiQFxDEK0sgRqRr+QY5z1owiOhsWbNm r5Aj6g1Ley+Up9P4TRauz2AuRLAjC2XcEn5LZiCTSXp5WTPf0yWtABdE00nKpDyC ykgJr1zofg5CO/6B6fBibF7D0yMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFNXZUTC18Kd7FJFpKgcGWhtEWCqMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMTdlYTBlNi00M2VhLTQzMWUtYTAxMy0wYjIwMWIyYzBkOWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzExN2VhMGU2 LTQzZWEtNDMxZS1hMDEzLTBiMjAxYjJjMGQ5ZS8wLzUzNTc2NTQ0QzJEN0MyOURF QzUyNDVBNEE4MUMxOTY4NkQxMTYwQUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnY4gwDQYJKoZIhvcNAQELBQADggEBAE6B3Bv4VfIvy44OSXxVyK+8lf407dVQ 5lZRfbD7JnZo0PB1SOgXe2/qrB2EUM7V0Hbje0Q4SffYP+jmHV5k798ByVs97au3 HI5vUwcWyv59lqJsuCv4IuyMrAwBf74eSdlMCHYytYLWcyTUiHWAyPNAQWEaMp9+ groovHYAfhda6N/OLJ1WXpCGYW75n22Imok1poSDptpFBn6jQZv3q9AUCfkf/Ia4 W/PjhRyh5lilsO/0A2mnPWJgYwj/Ye6TmrEKIbgJG0VLTmrUP+WmOCzRuVpaCkJD ReMGT9q+ax+9lnEVcOBDogdN5WdILIIYHADQZLEN7P3TuucScGFH5Oo= -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:31 2025 by rpki-client