$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer File: 586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.cer (raw, json) Hash identifier: YUTPDqZkHNgzVMJSrtuf2TX05bQceC13xE60gSM65ig= Subject key identifier: 58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E543F764236CA21EFB8AD0A8CC9119AE41CE263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft caRepository: rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 12 Jul 2025 13:04:28 +0000 Certificate not after: Sat 11 Jul 2026 13:09:28 +0000 Subordinate resources: IP: 103.138.127.0/24 IP: 2001:df0:3e80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:54:3f:76:42:36:ca:21:ef:b8:ad:0a:8c:c9:11:9a:e4:1c:e2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 12 13:04:28 2025 GMT Not After : Jul 11 13:09:28 2026 GMT Subject: CN=586FE8D27FF4D6BD4FA839FC58844A4B03D535DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:39:6f:41:83:75:98:df:74:f8:b8:c3:18: 92:12:78:7b:34:5c:39:78:f3:ae:50:0e:19:f2:5b: fc:10:9b:e8:7b:91:77:24:96:db:1d:c1:57:36:48: 06:d4:67:7b:10:44:f2:55:4c:64:9e:70:f7:36:aa: d5:64:ff:c7:b3:d1:6a:0a:35:0f:b1:e4:66:a2:80: dd:f7:b5:8f:ba:05:e5:61:f0:da:a3:e1:43:8b:f0: 7f:94:82:1a:ff:6e:b1:22:47:20:b9:5c:1b:82:d5: a1:5e:00:84:b8:96:c1:5e:69:13:eb:4e:05:9d:f7: ce:ed:89:cd:c6:d5:68:2d:bb:08:44:05:ae:48:17: e0:88:91:4b:4a:ed:1c:f0:36:35:4d:02:b4:e2:43: 0d:9f:51:3e:fa:49:e7:0a:1c:0a:95:97:81:a8:b8: 96:9d:69:7a:ad:45:e0:2d:99:7c:da:38:1c:ae:bb: 52:1c:bf:70:3c:5d:24:48:0c:7e:2f:d1:5e:1b:8f: 11:ae:fc:97:56:a4:2f:d9:fa:07:6a:1e:d7:da:a5: 3b:78:82:3e:c5:4c:6d:9b:b5:22:87:aa:5a:79:6a: eb:c7:b6:61:0a:87:9e:e8:ec:95:74:ed:b7:b5:b5: 35:af:e4:3c:c6:19:3d:00:8c:fa:4a:5a:61:7b:4d: 7e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 58:6F:E8:D2:7F:F4:D6:BD:4F:A8:39:FC:58:84:4A:4B:03:D5:35:DF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bc072db7-0127-4564-8d20-bced525a14b8/0/586FE8D27FF4D6BD4FA839FC58844A4B03D535DF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.127.0/24 IPv6: 2001:df0:3e80::/48 Signature Algorithm: sha256WithRSAEncryption 1f:d1:eb:be:90:3a:77:0c:78:b1:9d:3f:21:99:fc:a2:be:92: 57:6d:3b:a7:5e:f0:eb:37:d4:0c:1a:b3:7a:28:de:43:c0:68: 66:b6:ac:b1:a6:1f:50:23:13:1b:02:f8:02:f1:7a:5a:eb:73: ee:4c:01:6c:2e:0a:23:57:db:42:c0:f5:d6:6a:53:65:93:26: 20:5e:47:df:35:e8:ae:24:ed:11:75:64:cf:3a:89:62:47:3a: dc:e0:80:4e:37:24:d2:7e:f2:61:f6:da:b3:63:7f:9e:ae:86: 4f:cc:75:15:d0:0d:7d:e6:2b:e8:ef:6c:b5:2a:99:b9:55:ca: 4d:4e:55:08:c6:74:c6:5b:03:6e:fd:11:b9:3c:4b:32:91:7a: 08:b1:aa:7b:46:78:aa:dd:b8:02:cd:74:a7:ae:dc:6a:cb:74: d1:bc:22:c3:59:d2:1c:46:a8:27:fa:97:3f:ad:a1:54:37:5f: 10:f9:6f:d1:c8:7c:e1:3f:b4:21:50:5d:4c:10:6b:93:94:62: 49:6c:c0:b5:e2:d3:c8:8a:34:30:30:ac:b6:49:c5:80:ac:db: 6a:d4:2a:3f:f8:fb:7f:b1:b9:7d:9a:78:3c:90:18:20:e0:87: b1:a9:92:a7:f9:b1:65:c0:c5:00:72:93:16:0f:b9:13:a2:15: f9:08:90:a7 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIULlQ/dkI2yiHvuK0KjMkRmuQc4mMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxMjEzMDQyOFoX DTI2MDcxMTEzMDkyOFowMzExMC8GA1UEAxMoNTg2RkU4RDI3RkY0RDZCRDRGQTgz OUZDNTg4NDRBNEIwM0Q1MzVERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKiBOW9Bg3WY33T4uMMYkhJ4ezRcOXjzrlAOGfJb/BCb6HuRdySW2x3BVzZI BtRnexBE8lVMZJ5w9zaq1WT/x7PRago1D7HkZqKA3fe1j7oF5WHw2qPhQ4vwf5SC Gv9usSJHILlcG4LVoV4AhLiWwV5pE+tOBZ33zu2JzcbVaC27CEQFrkgX4IiRS0rt HPA2NU0CtOJDDZ9RPvpJ5wocCpWXgai4lp1peq1F4C2ZfNo4HK67Uhy/cDxdJEgM fi/RXhuPEa78l1akL9n6B2oe19qlO3iCPsVMbZu1IoeqWnlq68e2YQqHnujslXTt t7W1Na/kPMYZPQCM+kpaYXtNfj8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFhv6NJ/9Na9T6g5/FiESksD1TXfMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iYzA3MmRiNy0wMTI3LTQ1NjQtOGQyMC1iY2VkNTI1YTE0YjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JjMDcyZGI3 LTAxMjctNDU2NC04ZDIwLWJjZWQ1MjVhMTRiOC8wLzU4NkZFOEQyN0ZGNEQ2QkQ0 RkE4MzlGQzU4ODQ0QTRCMDNENTM1REYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnin8wDwQCAAIwCQMHACABDfA+gDANBgkqhkiG9w0BAQsFAAOCAQEAH9HrvpA6 dwx4sZ0/IZn8or6SV207p17w6zfUDBqzeijeQ8BoZrassaYfUCMTGwL4AvF6Wutz 7kwBbC4KI1fbQsD11mpTZZMmIF5H3zXoriTtEXVkzzqJYkc63OCATjck0n7yYfba s2N/nq6GT8x1FdANfeYr6O9stSqZuVXKTU5VCMZ0xlsDbv0RuTxLMpF6CLGqe0Z4 qt24As10p67cast00bwiw1nSHEaoJ/qXP62hVDdfEPlv0ch84T+0IVBdTBBrk5Ri SWzAteLTyIo0MDCstknFgKzbatQqP/j7f7G5fZp4PJAYIOCHsamSp/mxZcDFAHKT Fg+5E6IV+QiQpw== -----END CERTIFICATE-----Generated at Wed Aug 6 09:35:02 2025 by rpki-client