$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5E8D1116F8C66182B65521C899B56E89DDB84C57.cer File: 5E8D1116F8C66182B65521C899B56E89DDB84C57.cer (raw, json) Hash identifier: UHZGONF3IZlMVVYS0w1rWDrPixi4xqEVpQIAnvN9WLE= Subject key identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5061BD7D5602752E497B1B316D82D32500DA29D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft caRepository: rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 24 Jul 2025 06:03:24 +0000 Certificate not after: Thu 23 Jul 2026 06:08:24 +0000 Subordinate resources: IP: 43.248.24.0/22 IP: 103.10.96.0/22 IP: 103.23.240.0/22 IP: 203.128.64.0/19 IP: 203.201.50.0/23 IP: 2401:1b00::/32 IP: 2403:c600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:61:bd:7d:56:02:75:2e:49:7b:1b:31:6d:82:d3:25:00:da:29:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 24 06:03:24 2025 GMT Not After : Jul 23 06:08:24 2026 GMT Subject: CN=5E8D1116F8C66182B65521C899B56E89DDB84C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:96:42:f6:d0:5f:a4:fc:04:73:4e:1f:ab: 90:bb:ef:e9:3d:76:34:b0:ef:6f:42:0d:16:23:00: 95:07:58:aa:a3:db:a2:90:92:87:52:2d:da:93:19: 06:f4:91:18:df:db:69:a8:44:e0:49:32:64:7c:55: d7:41:5b:2f:0d:32:88:5f:66:ea:32:3a:0b:bd:8e: 46:09:0c:fc:8b:f9:3d:41:0c:25:98:fc:9f:51:0d: 03:8b:df:c9:45:78:8c:21:de:e1:e0:2c:90:f3:69: c3:c8:f7:36:27:e6:1c:17:51:8f:26:58:16:f0:94: 95:71:c5:98:fd:cd:55:0b:00:8b:48:c5:43:a9:0d: d1:e6:33:d7:a0:2b:dc:b5:05:0c:38:85:0f:82:44: a9:3f:ab:86:63:29:44:88:ef:e1:be:c3:b1:86:38: 55:e1:6c:53:f4:d3:70:00:d7:ae:a3:46:10:07:bd: 98:a0:cb:b9:1d:a0:20:c9:a4:e5:94:e6:2a:5b:d9: 89:80:4e:9f:bf:50:ff:64:55:22:4b:f4:11:b1:78: c7:91:9f:dc:27:0a:22:91:1d:7d:9f:d5:a9:23:de: dd:e6:87:bd:c0:ab:59:29:0f:7a:8c:62:70:47:44: 23:d8:96:45:a7:6f:94:00:36:1d:8a:45:11:7f:96: 61:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:8D:11:16:F8:C6:61:82:B6:55:21:C8:99:B5:6E:89:DD:B8:4C:57 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b199c1af-d9c7-4ffd-ba03-a3e1cdd8aee0/0/5E8D1116F8C66182B65521C899B56E89DDB84C57.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.24.0/22 103.10.96.0/22 103.23.240.0/22 203.128.64.0/19 203.201.50.0/23 IPv6: 2401:1b00::/32 2403:c600::/32 Signature Algorithm: sha256WithRSAEncryption 1b:a4:cd:c2:b7:98:8e:46:15:ad:7a:03:41:a2:e5:f1:37:e6: 3f:8a:af:c5:5f:2e:c6:22:24:9a:5e:eb:8f:41:6d:cd:b6:a7: b6:83:c7:ad:24:96:32:5a:ed:86:5d:55:fd:13:5d:42:dd:4d: e6:d7:87:03:c3:ce:d3:ea:5b:b2:01:09:72:3f:8a:14:74:6c: 61:f2:02:9a:0d:94:41:08:9d:e5:88:c0:87:36:43:5a:b4:8f: bb:8d:c0:da:09:d0:71:cc:c2:13:37:4a:31:aa:1e:5a:e5:5b: 18:fd:0e:b9:58:f9:dc:e8:0b:7b:5f:1a:91:86:35:3f:70:bf: d1:43:fe:96:a3:da:f5:3f:7c:9c:92:c9:64:cf:9c:59:af:2b: 20:6a:e2:b2:26:89:f7:9e:bf:3a:72:7d:46:56:b0:9b:18:1a: 21:20:70:79:06:2b:2e:79:2f:ff:c1:e3:ba:93:c5:91:b7:e8: 24:a1:53:54:ba:0d:ab:83:dc:93:f8:a9:d6:53:b7:8d:9f:e4: 72:56:09:31:22:71:67:7f:40:12:00:7c:fb:32:93:63:07:9e: 7f:18:c3:00:81:52:3e:1e:35:28:62:0f:c3:90:0b:48:44:95: 9d:ef:a1:dc:64:32:bd:a5:61:78:70:58:76:40:37:f2:16:99: 3c:6c:23:8a -----BEGIN CERTIFICATE----- MIIF8zCCBNugAwIBAgIUUGG9fVYCdS5JexsxbYLTJQDaKdUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyNDA2MDMyNFoX DTI2MDcyMzA2MDgyNFowMzExMC8GA1UEAxMoNUU4RDExMTZGOEM2NjE4MkI2NTUy MUM4OTlCNTZFODlEREI4NEM1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlIlkL20F+k/ARzTh+rkLvv6T12NLDvb0INFiMAlQdYqqPbopCSh1It2pMZ BvSRGN/baahE4EkyZHxV10FbLw0yiF9m6jI6C72ORgkM/Iv5PUEMJZj8n1ENA4vf yUV4jCHe4eAskPNpw8j3NifmHBdRjyZYFvCUlXHFmP3NVQsAi0jFQ6kN0eYz16Ar 3LUFDDiFD4JEqT+rhmMpRIjv4b7DsYY4VeFsU/TTcADXrqNGEAe9mKDLuR2gIMmk 5ZTmKlvZiYBOn79Q/2RVIkv0EbF4x5Gf3CcKIpEdfZ/VqSPe3eaHvcCrWSkPeoxi cEdEI9iWRadvlAA2HYpFEX+WYYUCAwEAAaOCAuYwggLiMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF6NERb4xmGCtlUhyJm1bonduExXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMTk5YzFhZi1kOWM3LTRmZmQtYmEwMy1hM2UxY2RkOGFlZTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IxOTljMWFm LWQ5YzctNGZmZC1iYTAzLWEzZTFjZGQ4YWVlMC8wLzVFOEQxMTE2RjhDNjYxODJC NjU1MjFDODk5QjU2RTg5RERCODRDNTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwTQYIKwYBBQUHAQcBAf8EPjA8MCQEAgABMB4D BAIr+BgDBAJnCmADBAJnF/ADBAXLgEADBAHLyTIwFAQCAAIwDgMFACQBGwADBQAk A8YAMA0GCSqGSIb3DQEBCwUAA4IBAQAbpM3Ct5iORhWtegNBouXxN+Y/iq/FXy7G IiSaXuuPQW3Ntqe2g8etJJYyWu2GXVX9E11C3U3m14cDw87T6luyAQlyP4oUdGxh 8gKaDZRBCJ3liMCHNkNatI+7jcDaCdBxzMITN0oxqh5a5VsY/Q65WPnc6At7XxqR hjU/cL/RQ/6Wo9r1P3yckslkz5xZrysgauKyJon3nr86cn1GVrCbGBohIHB5Bisu eS//weO6k8WRt+gkoVNUug2rg9yT+KnWU7eNn+RyVgkxInFnf0ASAHz7MpNjB55/ GMMAgVI+HjUoYg/DkAtIRJWd76HcZDK9pWF4cFh2QDfyFpk8bCOK -----END CERTIFICATE-----Generated at Wed Aug 6 07:58:45 2025 by rpki-client