$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/581E644EEC44F9523CF189893E102BCC6008F9BE.cer File: 581E644EEC44F9523CF189893E102BCC6008F9BE.cer (raw, json) Hash identifier: F/Z6TE9LN+hg+eTOuREXlqr6PN+b5JDQnotNe/pqQmI= Subject key identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4C331BEB63E20F9D99C0ED788BC47D9C8189B972 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft caRepository: rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 06 Aug 2025 01:10:56 +0000 Certificate not after: Wed 05 Aug 2026 01:15:56 +0000 Subordinate resources: IP: 103.189.120.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 22:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:33:1b:eb:63:e2:0f:9d:99:c0:ed:78:8b:c4:7d:9c:81:89:b9:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 6 01:10:56 2025 GMT Not After : Aug 5 01:15:56 2026 GMT Subject: CN=581E644EEC44F9523CF189893E102BCC6008F9BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:93:60:7a:48:8f:55:bc:67:b0:e0:5d:24:cf: 12:4e:90:67:14:43:a5:eb:c5:6a:a0:5d:c8:28:d3: 3a:14:47:56:45:29:b1:fc:b0:64:db:13:7a:c1:f5: 23:26:0f:84:7a:2d:c8:ef:40:87:77:c1:e8:b2:a4: 2d:85:bc:2f:e1:29:39:69:6a:ea:36:7c:33:60:8c: ae:68:b6:f1:8c:57:dd:fd:8f:99:0b:72:cd:69:88: 82:d2:37:78:55:2c:3d:ec:08:a3:37:fc:ff:69:bd: 5d:cc:c8:c6:98:3e:a8:be:c9:2d:46:7b:5b:9d:c5: a2:5c:7c:0b:d6:24:17:f3:03:5c:59:33:1b:21:4e: 89:63:a8:cc:05:53:fd:90:3c:fd:ea:6a:a2:95:7a: 0e:a0:26:98:3f:4e:ae:6a:21:cf:6e:cb:7b:47:7e: 7a:22:49:d9:2b:cb:e0:a3:c3:ef:df:0d:ac:4a:b4: ad:05:de:c9:fc:dd:c9:82:ee:b7:d6:2d:c8:af:86: 60:83:ae:28:1e:bd:7d:1b:bd:3b:a2:79:e9:09:d1: c1:c2:94:fe:a9:91:d4:3a:56:fe:17:48:d1:89:b2: 12:1f:38:24:69:9b:d5:1e:b0:51:72:58:46:d9:5c: a5:69:32:03:73:2a:c0:df:60:87:9b:0c:61:8f:33: 26:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:1E:64:4E:EC:44:F9:52:3C:F1:89:89:3E:10:2B:CC:60:08:F9:BE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9b7947aa-ce69-4013-a256-58799a56581c/0/581E644EEC44F9523CF189893E102BCC6008F9BE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.120.0/23 Signature Algorithm: sha256WithRSAEncryption 59:8f:af:17:4b:0b:c4:70:ee:8c:69:e1:e0:39:f1:31:d2:5c: 95:47:ed:91:3f:e7:02:77:57:f7:e4:c5:dc:f5:46:85:03:c0: cc:d1:6f:55:81:48:88:48:38:45:19:9f:76:de:f9:73:80:c1: 06:9b:54:fa:53:55:59:97:ab:18:96:97:88:07:73:0e:bd:7b: a7:03:08:84:d9:32:88:6d:1f:57:0f:b3:84:86:72:b7:65:83: df:6b:c4:4f:39:a2:28:f5:45:09:ee:d8:da:5d:c5:20:18:ed: a8:2c:ef:bc:30:4e:4a:f1:43:e8:a9:55:56:fc:bb:d2:d0:2b: 18:52:d2:57:04:c2:fa:0e:e1:ce:d9:12:37:7a:72:12:54:d7: c1:7c:cc:c6:6d:5b:00:d6:8c:39:be:c7:14:12:c1:15:38:d4: b6:35:75:90:7c:48:a9:85:f6:26:3c:27:da:00:a9:25:b1:54: ed:ec:2f:15:6e:52:e3:be:d6:44:4c:2f:ad:26:f7:26:8b:c5: 4e:5f:c5:1e:30:e2:bf:3a:9d:fd:9f:6b:2e:66:d4:df:56:3e: 2d:f3:cc:20:73:50:17:3a:0b:16:ef:8d:35:cd:6a:3a:7f:6c: c3:ab:15:7f:70:a5:f5:8c:4c:4b:2b:73:18:78:59:19:e0:53: b4:0c:72:2a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTDMb62PiD52ZwO14i8R9nIGJuXIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgwNjAxMTA1NloX DTI2MDgwNTAxMTU1NlowMzExMC8GA1UEAxMoNTgxRTY0NEVFQzQ0Rjk1MjNDRjE4 OTg5M0UxMDJCQ0M2MDA4RjlCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaTYHpIj1W8Z7DgXSTPEk6QZxRDpevFaqBdyCjTOhRHVkUpsfywZNsTesH1 IyYPhHotyO9Ah3fB6LKkLYW8L+EpOWlq6jZ8M2CMrmi28YxX3f2PmQtyzWmIgtI3 eFUsPewIozf8/2m9XczIxpg+qL7JLUZ7W53Folx8C9YkF/MDXFkzGyFOiWOozAVT /ZA8/epqopV6DqAmmD9Ormohz27Le0d+eiJJ2SvL4KPD798NrEq0rQXeyfzdyYLu t9YtyK+GYIOuKB69fRu9O6J56QnRwcKU/qmR1DpW/hdI0YmyEh84JGmb1R6wUXJY RtlcpWkyA3MqwN9gh5sMYY8zJqkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFgeZE7sRPlSPPGJiT4QK8xgCPm+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85Yjc5NDdhYS1jZTY5LTQwMTMtYTI1Ni01ODc5OWE1NjU4MWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzliNzk0N2Fh LWNlNjktNDAxMy1hMjU2LTU4Nzk5YTU2NTgxYy8wLzU4MUU2NDRFRUM0NEY5NTIz Q0YxODk4OTNFMTAyQkNDNjAwOEY5QkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvXgwDQYJKoZIhvcNAQELBQADggEBAFmPrxdLC8Rw7oxp4eA58THSXJVH7ZE/ 5wJ3V/fkxdz1RoUDwMzRb1WBSIhIOEUZn3be+XOAwQabVPpTVVmXqxiWl4gHcw69 e6cDCITZMohtH1cPs4SGcrdlg99rxE85oij1RQnu2NpdxSAY7ags77wwTkrxQ+ip VVb8u9LQKxhS0lcEwvoO4c7ZEjd6chJU18F8zMZtWwDWjDm+xxQSwRU41LY1dZB8 SKmF9iY8J9oAqSWxVO3sLxVuUuO+1kRML60m9yaLxU5fxR4w4r86nf2fay5m1N9W Pi3zzCBzUBc6CxbvjTXNajp/bMOrFX9wpfWMTEsrcxh4WRngU7QMcio= -----END CERTIFICATE-----Generated at Fri Aug 8 00:47:36 2025 by rpki-client