$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer File: 73B96F5AC43A4212760D6629FB36B21B2E801D90.cer (raw, json) Hash identifier: t13HNv2m8rFukHjnmDVFCLy2t30HWp0ctnHIfOMnma8= Subject key identifier: 73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5F5ED68F952C756E4286B7C49222E4459FF40661 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft caRepository: rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 08 Jul 2025 11:41:17 +0000 Certificate not after: Tue 07 Jul 2026 11:46:17 +0000 Subordinate resources: IP: 103.174.232.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 07:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:5e:d6:8f:95:2c:75:6e:42:86:b7:c4:92:22:e4:45:9f:f4:06:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 8 11:41:17 2025 GMT Not After : Jul 7 11:46:17 2026 GMT Subject: CN=73B96F5AC43A4212760D6629FB36B21B2E801D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4d:fc:e8:34:96:22:f4:e4:33:70:88:eb:c2: 7f:cc:f9:38:20:ae:7e:d3:29:71:18:88:84:85:f6: ca:5e:02:6a:c0:df:94:f5:26:d7:52:2c:5c:66:3f: 32:69:e1:30:ca:60:ef:a3:84:d6:1e:94:cb:bc:14: 41:0b:8d:68:63:4b:d9:75:89:6d:51:b9:aa:b6:a3: ad:81:29:d0:7e:14:b9:a9:91:19:43:ea:0a:1e:81: d5:57:61:8c:71:c1:74:8c:79:33:49:e8:ce:38:c7: ef:68:86:3b:0b:79:4c:77:f7:1f:be:7b:bf:8c:cc: 2f:b3:65:f3:48:3d:68:9f:5d:f5:63:cd:03:6d:27: 92:66:14:13:af:54:6c:07:06:b6:ab:52:15:2c:02: d9:cc:f8:ce:a4:09:33:8f:d9:fb:d4:ec:18:61:41: fa:d1:f8:3a:0d:bd:e5:78:57:38:e4:e1:14:98:bb: 03:52:7b:bc:17:f4:30:ac:b2:a8:70:c6:ca:ee:b1: 6b:d9:44:4e:a4:9b:a4:5c:23:a1:69:f0:4e:a0:93: 96:5e:a7:1d:35:91:b4:32:bd:d0:3e:4d:c4:ea:0b: e4:61:75:21:aa:63:bc:12:5d:a0:78:67:b7:0e:f6: 2e:0c:06:2b:1f:79:c0:23:a5:83:59:50:9c:63:1f: 86:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.232.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:26:25:26:e9:cf:73:a1:2e:c5:97:d3:4d:2a:de:43:d7:04: 82:65:94:fb:bc:8f:b6:00:87:8a:81:11:e2:f0:a2:8b:9b:4b: 68:b3:7d:dc:41:a2:e6:ca:eb:42:a3:10:9b:c2:6b:08:04:78: cf:e2:a9:43:54:8d:15:db:d0:ff:31:eb:a6:58:9b:44:e8:98: ae:af:0f:15:25:ab:c8:61:c2:4c:a2:b0:a2:5c:66:58:5a:1f: 5b:f9:10:be:68:f4:f7:8f:8b:5f:b3:84:01:8d:a8:38:bb:55: d4:9a:21:6f:18:6c:20:d7:5a:ef:7b:cf:25:35:00:55:75:ce: 41:50:79:27:0a:6e:68:16:c5:da:15:23:4b:18:a3:d3:d2:75: 21:b2:df:02:cb:4d:39:fb:43:75:29:9e:ce:7c:25:e5:18:67: 2e:12:4c:f1:9f:8f:2a:e6:49:b2:4e:60:e5:86:80:d9:b1:ff: ab:9b:f3:1d:2f:2b:d8:ae:55:de:49:7b:df:4c:83:6d:b4:bf: a0:9a:d2:ad:ca:6a:e8:14:89:49:c4:9f:67:06:1e:09:c9:e6: ff:78:ce:cd:fc:66:71:0b:6d:73:bf:ef:e0:f6:ee:6c:3e:49: 58:9e:bf:cc:8b:b2:1b:ed:18:c6:b6:11:43:db:0e:60:67:1c: 35:8e:79:0a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUX17Wj5UsdW5ChrfEkiLkRZ/0BmEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwODExNDExN1oX DTI2MDcwNzExNDYxN1owMzExMC8GA1UEAxMoNzNCOTZGNUFDNDNBNDIxMjc2MEQ2 NjI5RkIzNkIyMUIyRTgwMUQ5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMdN/Og0liL05DNwiOvCf8z5OCCuftMpcRiIhIX2yl4CasDflPUm11IsXGY/ MmnhMMpg76OE1h6Uy7wUQQuNaGNL2XWJbVG5qrajrYEp0H4UuamRGUPqCh6B1Vdh jHHBdIx5M0nozjjH72iGOwt5THf3H757v4zML7Nl80g9aJ9d9WPNA20nkmYUE69U bAcGtqtSFSwC2cz4zqQJM4/Z+9TsGGFB+tH4Og295XhXOOThFJi7A1J7vBf0MKyy qHDGyu6xa9lETqSbpFwjoWnwTqCTll6nHTWRtDK90D5NxOoL5GF1IapjvBJdoHhn tw72LgwGKx95wCOlg1lQnGMfhmcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHO5b1rEOkISdg1mKfs2shsugB2QMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82Y2JlYTgxZC04NWFjLTQwYTUtYTdmNS0zZmEzNjJiMTdiY2IvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjYmVhODFk LTg1YWMtNDBhNS1hN2Y1LTNmYTM2MmIxN2JjYi8wLzczQjk2RjVBQzQzQTQyMTI3 NjBENjYyOUZCMzZCMjFCMkU4MDFEOTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrugwDQYJKoZIhvcNAQELBQADggEBAGwmJSbpz3OhLsWX000q3kPXBIJllPu8 j7YAh4qBEeLwooubS2izfdxBoubK60KjEJvCawgEeM/iqUNUjRXb0P8x66ZYm0To mK6vDxUlq8hhwkyisKJcZlhaH1v5EL5o9PePi1+zhAGNqDi7VdSaIW8YbCDXWu97 zyU1AFV1zkFQeScKbmgWxdoVI0sYo9PSdSGy3wLLTTn7Q3Upns58JeUYZy4STPGf jyrmSbJOYOWGgNmx/6ub8x0vK9iuVd5Je99Mg220v6Ca0q3KaugUiUnEn2cGHgnJ 5v94zs38ZnELbXO/7+D27mw+SViev8yLshvtGMa2EUPbDmBnHDWOeQo= -----END CERTIFICATE-----Generated at Thu Aug 7 02:03:19 2025 by rpki-client