$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer File: 71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.cer (raw, json) Hash identifier: c+qKut+r5pUrNIbskTpe1RytuWRKVuw7XoNZ8HwNU0w= Subject key identifier: 71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 50BC6AB88B6FB82D4C155FCAA093014122A70B4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft caRepository: rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 10:08:53 +0000 Certificate not after: Tue 02 Jun 2026 10:13:53 +0000 Subordinate resources: IP: 103.147.82.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 09:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:bc:6a:b8:8b:6f:b8:2d:4c:15:5f:ca:a0:93:01:41:22:a7:0b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 10:08:53 2025 GMT Not After : Jun 2 10:13:53 2026 GMT Subject: CN=71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:0c:b8:8a:48:2a:3e:7e:33:71:95:52:a7: 40:3b:eb:1d:c0:83:1a:d6:21:2b:f8:81:16:04:ae: 28:02:dc:c0:f4:7a:84:0f:a6:8c:b2:1f:ee:9f:b3: e5:91:90:10:d8:d1:fc:88:06:5d:c1:69:a8:0d:6d: 34:0e:db:28:30:b3:f3:39:a4:2b:73:4b:c2:74:a7: 56:5a:84:7a:34:af:dd:86:ff:64:c2:a2:45:7a:02: 5c:54:23:93:5e:d3:ed:c2:82:9b:be:c1:01:e5:a2: fb:cf:fd:8b:f6:e1:62:da:10:ae:bc:2e:11:aa:08: f3:6b:3c:6c:2e:9c:83:96:58:db:bd:b9:fb:d5:ff: 4f:3b:c5:6a:8c:28:c7:11:ef:a7:1f:bc:bf:d2:8d: b8:21:42:29:e7:f2:ad:3e:e6:ca:a3:62:f4:28:94: 08:67:5b:39:c9:96:f7:44:13:bd:83:3a:e3:91:60: 47:4d:ad:3f:42:ce:07:95:60:e1:48:3d:cd:c3:43: 52:a0:73:6d:83:e7:99:33:75:9d:6b:3b:53:08:7f: 67:1f:6d:18:51:97:85:3f:4a:9a:62:73:f1:84:c2: 7d:05:27:e3:6f:53:78:31:1f:4f:38:53:c8:15:17: c4:6d:f0:67:3d:8d:b0:67:eb:26:c4:44:b4:b0:b7: 68:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:FC:3F:7B:27:22:F6:A1:5C:55:7F:63:F8:F4:95:A9:CD:BC:A9:D7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/eaa5ac65-6071-46e2-bb9d-d770d117c4b4/0/71FC3F7B2722F6A15C557F63F8F495A9CDBCA9D7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.82.0/23 Signature Algorithm: sha256WithRSAEncryption 47:2d:a2:8e:37:15:89:49:3c:86:7f:c7:a6:b2:dc:8d:87:17: 7b:58:c0:be:69:c1:6c:92:28:2f:a5:75:ee:e7:1d:34:9a:90: a5:f7:61:a0:34:eb:aa:e0:9d:bc:21:89:ed:92:38:55:34:02: 1f:15:9d:89:ce:ca:5f:a5:b2:df:8e:b9:1a:02:a9:ef:c2:99: c5:2c:1b:95:26:17:2d:fd:b8:05:e1:7a:1c:57:e7:28:aa:6f: 00:aa:d7:a0:86:d2:81:df:e5:b2:62:f5:64:d2:25:d5:d3:02: f4:1a:ce:15:c2:97:67:ec:34:6c:82:a7:01:2e:e8:de:4e:ff: 6e:19:46:64:dc:3c:b4:c2:7b:b1:a3:0f:8a:00:4c:e2:7d:7d: 0d:cf:18:51:2d:00:5e:6c:c1:dc:1a:aa:7d:65:f3:36:12:b0: 70:27:66:a2:18:23:7e:3a:fc:1d:df:10:af:94:e1:d5:e7:7f: 1f:d0:b9:0f:29:87:9c:02:ce:aa:e7:98:d5:1a:6e:11:b4:97: ff:4d:2d:98:83:fe:4c:4a:ee:b0:14:a2:f1:cf:8b:79:50:0e: f5:f0:10:7e:09:11:10:10:8f:5b:d7:95:0d:1b:3d:5b:39:11: cc:17:ee:4b:b3:ca:12:1f:29:18:02:cf:04:34:1e:05:3e:87: f2:fb:48:54 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUULxquItvuC1MFV/KoJMBQSKnC0swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzEwMDg1M1oX DTI2MDYwMjEwMTM1M1owMzExMC8GA1UEAxMoNzFGQzNGN0IyNzIyRjZBMTVDNTU3 RjYzRjhGNDk1QTlDREJDQTlENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMgRDLiKSCo+fjNxlVKnQDvrHcCDGtYhK/iBFgSuKALcwPR6hA+mjLIf7p+z 5ZGQENjR/IgGXcFpqA1tNA7bKDCz8zmkK3NLwnSnVlqEejSv3Yb/ZMKiRXoCXFQj k17T7cKCm77BAeWi+8/9i/bhYtoQrrwuEaoI82s8bC6cg5ZY2725+9X/TzvFaowo xxHvpx+8v9KNuCFCKefyrT7myqNi9CiUCGdbOcmW90QTvYM645FgR02tP0LOB5Vg 4Ug9zcNDUqBzbYPnmTN1nWs7Uwh/Zx9tGFGXhT9KmmJz8YTCfQUn429TeDEfTzhT yBUXxG3wZz2NsGfrJsREtLC3aOMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHH8P3snIvahXFV/Y/j0lanNvKnXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYWE1YWM2NS02MDcxLTQ2ZTItYmI5ZC1kNzcwZDExN2M0YjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhYTVhYzY1 LTYwNzEtNDZlMi1iYjlkLWQ3NzBkMTE3YzRiNC8wLzcxRkMzRjdCMjcyMkY2QTE1 QzU1N0Y2M0Y4RjQ5NUE5Q0RCQ0E5RDcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnk1IwDQYJKoZIhvcNAQELBQADggEBAEctoo43FYlJPIZ/x6ay3I2HF3tYwL5p wWySKC+lde7nHTSakKX3YaA066rgnbwhie2SOFU0Ah8VnYnOyl+lst+OuRoCqe/C mcUsG5UmFy39uAXhehxX5yiqbwCq16CG0oHf5bJi9WTSJdXTAvQazhXCl2fsNGyC pwEu6N5O/24ZRmTcPLTCe7GjD4oATOJ9fQ3PGFEtAF5swdwaqn1l8zYSsHAnZqIY I346/B3fEK+U4dXnfx/QuQ8ph5wCzqrnmNUabhG0l/9NLZiD/kxK7rAUovHPi3lQ DvXwEH4JERAQj1vXlQ0bPVs5EcwX7kuzyhIfKRgCzwQ0HgU+h/L7SFQ= -----END CERTIFICATE-----Generated at Sun Jun 15 06:55:55 2025 by rpki-client