$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer File: 764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer (raw, json) Hash identifier: fY1m66pZvmtUnjt1F/Qf0sAjMhJ5obXDRobHkQZj5ms= Subject key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 24B4DF0452B8D57BE3E465363867CABD0A7BE94F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft caRepository: rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 11:44:33 +0000 Certificate not after: Tue 02 Jun 2026 11:49:33 +0000 Subordinate resources: IP: 103.49.28.0/22 IP: 2401:f980::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b4:df:04:52:b8:d5:7b:e3:e4:65:36:38:67:ca:bd:0a:7b:e9:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 11:44:33 2025 GMT Not After : Jun 2 11:49:33 2026 GMT Subject: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f3:ef:cb:e5:eb:de:8f:8f:87:71:ce:25:be: 80:fd:d6:c3:f9:24:d2:2b:1a:74:a9:56:fa:d2:ef: c7:fb:36:25:48:bc:5d:96:0b:4b:bb:58:75:4c:79: ca:26:16:b2:56:cd:6e:cf:38:75:1c:a4:0e:27:d0: 44:d5:b7:da:5c:8d:98:51:8c:30:d1:7d:6f:13:5b: bd:fd:cc:b4:be:82:ea:91:22:17:5f:bd:37:ec:c0: 30:f0:27:8c:f6:97:5d:73:86:53:fe:03:c3:88:a3: fb:08:12:7b:b8:46:36:c9:b4:4c:9b:57:a8:fd:e3: d9:53:6d:e0:7b:ee:86:9d:f6:8a:3c:d2:d8:86:ed: 7d:1f:b6:71:07:b3:cf:c1:bc:e0:89:aa:99:cd:f5: b9:9b:d3:27:9b:d0:01:f1:7e:a2:c3:30:ff:99:c3: 5b:1f:f6:3d:2e:f7:2f:9a:da:09:0b:19:5e:5c:90: bd:69:7b:d0:a1:ae:e1:c2:7e:f3:20:6c:2c:ca:01: 6a:69:52:06:60:52:19:35:b5:20:5a:bf:1c:b5:ed: d1:11:82:9e:16:11:b4:38:8d:df:a7:bd:9c:09:ca: 54:5c:3d:1f:64:57:da:11:8c:22:6e:09:58:43:9c: 7e:a9:2c:a8:1d:2b:35:12:c7:2a:2e:46:59:fd:cb: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.49.28.0/22 IPv6: 2401:f980::/32 Signature Algorithm: sha256WithRSAEncryption 5b:70:33:1b:8f:86:21:48:6d:57:ad:30:f9:e1:cf:e1:da:e0: d4:62:ad:17:72:bc:01:95:7d:0c:3a:fa:bd:03:f4:1f:cc:f1: 27:5b:04:3f:08:ed:b9:1e:54:15:94:29:22:69:a8:25:fa:65: 2c:16:6c:37:d8:89:e7:51:7e:a7:5b:1e:7d:db:ef:37:05:4c: d3:9c:f5:11:41:34:86:5e:6e:57:27:e6:83:aa:53:15:e8:ea: 58:1a:38:0b:0e:4e:2b:4d:34:11:dc:e5:cc:22:4f:ac:c2:4d: 81:92:a1:9c:7c:81:10:76:ec:16:8e:c4:0d:99:f9:24:fc:5a: 2e:e1:dc:25:fe:0f:f4:b0:f3:77:20:c5:48:3e:56:98:70:21: aa:7f:5a:e5:25:95:55:b1:27:30:09:0c:61:2f:5a:8d:eb:66: 98:97:9f:91:9d:7a:46:b9:ba:64:48:e3:b9:10:1a:66:f3:91: 21:37:19:85:58:14:31:f7:d2:7b:cc:1c:a2:2f:ee:e2:18:55: 0a:cc:46:d4:db:83:c6:1f:51:7a:8c:9d:c6:39:25:0c:8c:21: a7:46:80:7d:41:3a:67:f5:a1:19:2b:37:40:e7:c4:26:a6:00: 43:4d:7f:db:59:21:51:58:48:84:52:79:3f:fb:4b:cd:0e:49: 01:a6:22:43 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUJLTfBFK41Xvj5GU2OGfKvQp76U8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzExNDQzM1oX DTI2MDYwMjExNDkzM1owMzExMC8GA1UEAxMoNzY0QjIzRUI2QzYzRkZDQUEzMDVG MzdEQkU5QjkwNEFFMDFENjBDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/z78vl696Pj4dxziW+gP3Ww/kk0isadKlW+tLvx/s2JUi8XZYLS7tYdUx5 yiYWslbNbs84dRykDifQRNW32lyNmFGMMNF9bxNbvf3MtL6C6pEiF1+9N+zAMPAn jPaXXXOGU/4Dw4ij+wgSe7hGNsm0TJtXqP3j2VNt4Hvuhp32ijzS2IbtfR+2cQez z8G84Imqmc31uZvTJ5vQAfF+osMw/5nDWx/2PS73L5raCQsZXlyQvWl70KGu4cJ+ 8yBsLMoBamlSBmBSGTW1IFq/HLXt0RGCnhYRtDiN36e9nAnKVFw9H2RX2hGMIm4J WEOcfqksqB0rNRLHKi5GWf3L51sCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHZLI+tsY//KowXzfb6bkErgHWDJMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84N2U4MzBjOC1kNTU5LTQ1NmEtODgzNS00ZjZlYjU1MjdhYTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4 LWQ1NTktNDU2YS04ODM1LTRmNmViNTUyN2FhMi8wLzc2NEIyM0VCNkM2M0ZGQ0FB MzA1RjM3REJFOUI5MDRBRTAxRDYwQzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnMRwwDQQCAAIwBwMFACQB+YAwDQYJKoZIhvcNAQELBQADggEBAFtwMxuPhiFI bVetMPnhz+Ha4NRirRdyvAGVfQw6+r0D9B/M8SdbBD8I7bkeVBWUKSJpqCX6ZSwW bDfYiedRfqdbHn3b7zcFTNOc9RFBNIZeblcn5oOqUxXo6lgaOAsOTitNNBHc5cwi T6zCTYGSoZx8gRB27BaOxA2Z+ST8Wi7h3CX+D/Sw83cgxUg+VphwIap/WuUllVWx JzAJDGEvWo3rZpiXn5Gdeka5umRI47kQGmbzkSE3GYVYFDH30nvMHKIv7uIYVQrM RtTbg8YfUXqMncY5JQyMIadGgH1BOmf1oRkrN0DnxCamAENNf9tZIVFYSIRSeT/7 S80OSQGmIkM= -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:17 2025 by rpki-client