$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer File: 700A46F0C48E784E8CBCBA7B27E4474F86189B0C.cer (raw, json) Hash identifier: Zn61tqKYDnxkuubiIW24jGvkFXjy8eVk4PAGFYwGBK0= Subject key identifier: 70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1E2F58D7C39BF753820F00A34FCE3994429F5A32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft caRepository: rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 21 Oct 2025 01:32:16 +0000 Certificate not after: Tue 20 Oct 2026 01:37:16 +0000 Subordinate resources: IP: 103.126.238.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:2f:58:d7:c3:9b:f7:53:82:0f:00:a3:4f:ce:39:94:42:9f:5a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 21 01:32:16 2025 GMT Not After : Oct 20 01:37:16 2026 GMT Subject: CN=700A46F0C48E784E8CBCBA7B27E4474F86189B0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f9:f6:8b:07:2f:19:be:a0:f9:59:50:b3:d6: fc:ce:66:89:c2:65:e5:16:e6:3b:65:08:43:2f:ad: 08:a5:b1:fc:4f:63:79:9b:e4:ce:6a:8e:ae:cf:85: 61:70:fd:e8:da:b1:11:d0:1b:b2:32:07:63:d5:28: 82:2b:e8:50:59:f3:a0:e3:95:40:ba:1c:02:69:6c: 05:a6:b2:9d:c1:74:80:db:61:81:96:fe:cf:20:d7: cf:e5:03:fb:ee:98:cb:0f:e2:0d:53:c9:23:ff:3e: fb:8e:76:88:37:c3:be:80:f6:51:ef:fa:73:db:f6: b3:ea:1f:8f:d4:57:b6:b9:3b:5f:49:38:2a:f5:aa: da:4c:50:24:c8:6e:df:c7:e1:48:5b:ca:14:27:a8: 84:8a:a9:2f:88:70:41:47:ac:35:03:79:3a:43:e0: 16:ab:30:ec:d2:e1:b4:28:1e:6c:2e:2f:1d:7c:9b: 84:2d:02:8c:ec:c1:3f:d6:74:a1:9a:a5:ca:1b:c5: ba:b2:3b:ee:68:c4:33:a3:27:54:72:56:42:38:e9: 2f:9c:f9:ab:4f:c4:5b:96:d0:cc:5a:6e:69:b6:e8: 6c:54:16:a3:a1:2e:33:9e:cf:23:c9:a7:04:e9:07: 6c:8e:03:ff:dc:0c:90:35:06:a6:dd:ed:74:1f:e4: bf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 70:0A:46:F0:C4:8E:78:4E:8C:BC:BA:7B:27:E4:47:4F:86:18:9B:0C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/df8a315e-16f1-4f21-9bc0-269d5be73d60/0/700A46F0C48E784E8CBCBA7B27E4474F86189B0C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.238.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:77:20:05:0b:6c:50:73:16:cc:3a:6d:a5:bc:44:e1:f3:cf: 1f:ca:3d:8f:0b:b7:5f:6a:ce:14:40:8f:fb:8d:4a:50:c9:59: 15:fd:ef:bc:cd:01:ee:12:78:1c:b0:47:34:f2:8b:4e:2b:96: 53:a9:87:48:2d:13:0f:6a:d2:9e:a4:93:03:29:a3:37:ef:01: 3f:db:67:03:3e:a6:72:54:b8:a9:31:57:e8:cc:2a:d8:dc:a9: 99:06:d2:5d:aa:8d:e5:8f:05:6b:1a:1d:49:c0:6f:36:92:f7: a1:24:3c:19:84:27:42:1a:3c:ac:56:61:1e:0e:6d:74:7a:7f: 94:ee:a3:33:22:c1:43:00:69:27:87:04:8b:df:a6:41:bc:24: fc:8b:40:f6:87:d1:e6:bb:08:35:25:ff:3f:31:f9:8e:23:71: c6:01:a7:0b:ba:79:eb:fe:c5:7c:b8:21:0e:97:81:68:52:7e: 1d:52:f1:f6:26:89:b0:b1:61:1a:c2:e9:59:f4:bb:e6:e3:ba: 23:3e:52:6b:3a:70:31:38:b3:c4:89:08:c4:e2:14:bd:e7:3f: 33:9a:f0:0f:64:d2:3d:73:03:aa:25:8e:e0:32:c7:a8:36:e2: 7c:c6:46:e4:d4:d9:69:c4:f4:7a:85:44:79:71:0b:fc:59:8e: 68:15:40:50 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHi9Y18Ob91OCDwCjT845lEKfWjIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyMTAxMzIxNloX DTI2MTAyMDAxMzcxNlowMzExMC8GA1UEAxMoNzAwQTQ2RjBDNDhFNzg0RThDQkNC QTdCMjdFNDQ3NEY4NjE4OUIwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANH59osHLxm+oPlZULPW/M5micJl5RbmO2UIQy+tCKWx/E9jeZvkzmqOrs+F YXD96NqxEdAbsjIHY9UogivoUFnzoOOVQLocAmlsBaayncF0gNthgZb+zyDXz+UD ++6Yyw/iDVPJI/8++452iDfDvoD2Ue/6c9v2s+ofj9RXtrk7X0k4KvWq2kxQJMhu 38fhSFvKFCeohIqpL4hwQUesNQN5OkPgFqsw7NLhtCgebC4vHXybhC0CjOzBP9Z0 oZqlyhvFurI77mjEM6MnVHJWQjjpL5z5q0/EW5bQzFpuabbobFQWo6EuM57PI8mn BOkHbI4D/9wMkDUGpt3tdB/kv48CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHAKRvDEjnhOjLy6eyfkR0+GGJsMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZjhhMzE1ZS0xNmYxLTRmMjEtOWJjMC0yNjlkNWJlNzNkNjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmOGEzMTVl LTE2ZjEtNGYyMS05YmMwLTI2OWQ1YmU3M2Q2MC8wLzcwMEE0NkYwQzQ4RTc4NEU4 Q0JDQkE3QjI3RTQ0NzRGODYxODlCMEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnfu4wDQYJKoZIhvcNAQELBQADggEBAC53IAULbFBzFsw6baW8ROHzzx/KPY8L t19qzhRAj/uNSlDJWRX977zNAe4SeBywRzTyi04rllOph0gtEw9q0p6kkwMpozfv AT/bZwM+pnJUuKkxV+jMKtjcqZkG0l2qjeWPBWsaHUnAbzaS96EkPBmEJ0IaPKxW YR4ObXR6f5TuozMiwUMAaSeHBIvfpkG8JPyLQPaH0ea7CDUl/z8x+Y4jccYBpwu6 eev+xXy4IQ6XgWhSfh1S8fYmibCxYRrC6Vn0u+bjuiM+Ums6cDE4s8SJCMTiFL3n PzOa8A9k0j1zA6oljuAyx6g24nzGRuTU2WnE9HqFRHlxC/xZjmgVQFA= -----END CERTIFICATE-----Generated at Tue Nov 4 12:39:44 2025 by rpki-client