$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/77629696624E40462330DA2AF610D32809C89E5A.cer File: 77629696624E40462330DA2AF610D32809C89E5A.cer (raw, json) Hash identifier: H5hbbvUhHM8uN1yThyBnRM0OXAZfHG7O+wNTRXoFlrk= Subject key identifier: 77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3B5FFC84FA7866A129272C4E1D4401044C5B42F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft caRepository: rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 07:37:46 +0000 Certificate not after: Tue 02 Jun 2026 07:42:46 +0000 Subordinate resources: IP: 103.11.179.0/24 IP: 103.51.158.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:5f:fc:84:fa:78:66:a1:29:27:2c:4e:1d:44:01:04:4c:5b:42:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 07:37:46 2025 GMT Not After : Jun 2 07:42:46 2026 GMT Subject: CN=77629696624E40462330DA2AF610D32809C89E5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:3d:71:07:5f:85:04:a3:b3:9a:b5:50:de: de:e4:85:27:eb:b5:d1:83:c5:07:e0:65:ac:aa:f2: 8d:48:a0:29:d5:c8:85:f1:d4:93:ae:8a:b9:c7:9d: d1:96:dc:9f:59:f3:c2:e6:6a:d0:d9:f7:14:d5:6c: ef:78:4d:a1:16:c8:b3:52:f8:a7:2c:ce:0f:84:c7: b0:23:fb:59:d9:af:ff:c9:26:54:c5:07:e6:6e:31: 36:1f:b4:5e:16:bc:59:b2:bd:9f:ee:5f:a1:83:8a: 25:3e:88:cc:41:e1:5b:25:5b:97:7b:4a:18:ad:e2: 83:a9:1b:0f:b9:55:25:b2:9d:d8:86:e8:00:a9:dc: 19:3b:43:16:3b:14:08:77:d7:aa:82:03:26:7b:ad: db:40:56:3d:45:d4:dd:d3:80:c9:f1:b7:dc:99:af: fa:2c:26:db:fd:a3:3e:32:6e:59:1a:a7:74:2a:3a: c1:53:51:f2:ff:25:1e:11:bc:13:92:61:a3:e9:21: 23:b8:23:cf:b7:ad:8e:9b:84:82:c8:7d:ff:64:8d: 30:0c:fa:a3:8e:6d:dc:81:7f:13:fe:ec:c1:33:5a: 23:d6:0f:c0:3f:41:4c:99:68:66:91:ba:e7:37:c1: 41:a4:d5:45:bf:ab:e9:4f:9b:71:10:3b:de:00:05: c1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 77:62:96:96:62:4E:40:46:23:30:DA:2A:F6:10:D3:28:09:C8:9E:5A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e81f68a3-b354-4801-b949-3452e7b1f72f/0/77629696624E40462330DA2AF610D32809C89E5A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.11.179.0/24 103.51.158.0/24 Signature Algorithm: sha256WithRSAEncryption 52:40:cc:5c:96:26:5f:cc:8f:a8:8e:81:08:f0:0b:da:47:45: 16:4e:6f:12:27:75:44:e5:e2:b5:93:21:5d:5b:12:11:c6:39: fb:03:e0:37:f4:ae:9d:0d:15:38:ce:25:8c:1e:84:2a:7c:42: dc:0d:38:a4:fe:3d:54:eb:36:f8:63:45:81:15:91:2b:59:87: 95:86:9f:82:b2:10:79:a9:99:a0:05:21:dd:e1:ff:9b:5d:2f: fe:e7:70:a5:ef:ba:e4:6e:ac:bd:16:46:a9:ee:79:98:b9:f8: 6d:e3:21:4f:5e:4d:b2:d2:91:47:3b:31:b1:6c:83:36:f4:93: 77:f6:b1:42:1c:7c:d4:46:a4:85:38:e6:33:1e:1d:dd:23:cd: 7d:ad:23:dc:76:35:c7:43:7a:13:f2:e7:43:57:e4:7a:37:3f: 04:09:c3:dd:f0:58:1f:a0:a0:df:a6:e3:dd:3f:95:93:7e:7c: 01:4f:1b:95:be:25:df:b6:87:c1:4a:44:36:c1:80:f3:0a:ca: 6c:62:17:8b:b7:a3:cf:43:4d:06:0c:53:44:e2:42:65:18:21: 56:2a:54:86:9d:72:6d:f8:8f:71:28:f6:96:4c:92:1b:14:25: 2b:fa:5d:f3:5e:4a:0d:82:6b:eb:93:b8:96:91:0c:89:6b:04: 07:b8:ab:95 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUO1/8hPp4ZqEpJyxOHUQBBExbQvkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzA3Mzc0NloX DTI2MDYwMjA3NDI0NlowMzExMC8GA1UEAxMoNzc2Mjk2OTY2MjRFNDA0NjIzMzBE QTJBRjYxMEQzMjgwOUM4OUU1QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMSjPXEHX4UEo7OatVDe3uSFJ+u10YPFB+BlrKryjUigKdXIhfHUk66Kuced 0Zbcn1nzwuZq0Nn3FNVs73hNoRbIs1L4pyzOD4THsCP7Wdmv/8kmVMUH5m4xNh+0 Xha8WbK9n+5foYOKJT6IzEHhWyVbl3tKGK3ig6kbD7lVJbKd2IboAKncGTtDFjsU CHfXqoIDJnut20BWPUXU3dOAyfG33Jmv+iwm2/2jPjJuWRqndCo6wVNR8v8lHhG8 E5Jho+khI7gjz7etjpuEgsh9/2SNMAz6o45t3IF/E/7swTNaI9YPwD9BTJloZpG6 5zfBQaTVRb+r6U+bcRA73gAFwTECAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHdilpZiTkBGIzDaKvYQ0ygJyJ5aMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lODFmNjhhMy1iMzU0LTQ4MDEtYjk0OS0zNDUyZTdiMWY3MmYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4MWY2OGEz LWIzNTQtNDgwMS1iOTQ5LTM0NTJlN2IxZjcyZi8wLzc3NjI5Njk2NjI0RTQwNDYy MzMwREEyQUY2MTBEMzI4MDlDODlFNUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABnC7MDBABnM54wDQYJKoZIhvcNAQELBQADggEBAFJAzFyWJl/Mj6iOgQjwC9pH RRZObxIndUTl4rWTIV1bEhHGOfsD4Df0rp0NFTjOJYwehCp8QtwNOKT+PVTrNvhj RYEVkStZh5WGn4KyEHmpmaAFId3h/5tdL/7ncKXvuuRurL0WRqnueZi5+G3jIU9e TbLSkUc7MbFsgzb0k3f2sUIcfNRGpIU45jMeHd0jzX2tI9x2NcdDehPy50NX5Ho3 PwQJw93wWB+goN+m490/lZN+fAFPG5W+Jd+2h8FKRDbBgPMKymxiF4u3o89DTQYM U0TiQmUYIVYqVIadcm34j3Eo9pZMkhsUJSv6XfNeSg2Ca+uTuJaRDIlrBAe4q5U= -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:33 2025 by rpki-client