$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer File: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer (raw, json) Hash identifier: wGtlegUckyNxFCcwVStEYbH1v0a21wwwuVBx701blZw= Subject key identifier: 7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 45858F9358DE9AF60C667BC754B66AB67BD3C575 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft caRepository: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 25 Apr 2025 11:57:44 +0000 Certificate not after: Fri 24 Apr 2026 12:02:44 +0000 Subordinate resources: IP: 103.148.2.0/23 IP: 2405:c640::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:85:8f:93:58:de:9a:f6:0c:66:7b:c7:54:b6:6a:b6:7b:d3:c5:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 25 11:57:44 2025 GMT Not After : Apr 24 12:02:44 2026 GMT Subject: CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:85:e3:48:7f:09:f0:83:e2:a6:ee:e9:06:4e: 8b:ca:06:a0:1d:74:be:c5:f8:0a:dc:80:cb:ca:9d: c1:9d:12:e1:33:77:ea:f5:df:99:ef:49:68:a5:40: 17:cd:58:8f:73:4f:28:7b:c1:96:3a:ac:27:10:c6: 77:f0:49:91:ef:7e:a1:05:fc:a7:30:3e:5e:47:31: c4:e6:0f:cf:87:38:19:ec:6f:b0:31:f5:64:1c:dd: 61:6c:c7:b5:c0:2f:78:f7:4b:f6:b7:a0:bf:c8:8b: f6:d5:bd:76:a2:fa:f9:6f:4e:ec:27:3d:08:60:a6: 68:8b:18:de:98:5f:6f:ff:f4:a9:6e:37:ea:58:14: 18:07:77:4e:46:27:90:d7:25:45:12:9c:7f:23:c9: bc:07:59:da:18:26:82:f2:b6:ad:4c:12:bd:23:62: cd:d5:32:ac:3c:87:7d:3b:62:87:3d:b4:58:10:a3: 29:4b:83:4e:fe:c0:81:ef:36:a0:eb:e5:d3:27:f9: b6:a3:b6:78:61:63:9b:8d:f7:9d:95:72:d3:6d:eb: 65:5d:af:56:06:0f:2d:03:2f:d6:43:aa:c5:c4:99: 70:2b:5f:bb:1a:ba:bc:ba:37:99:13:ab:6f:28:d7: 53:8f:4f:d3:22:53:6d:3f:5c:a4:5b:c0:20:be:6a: 00:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.2.0/23 IPv6: 2405:c640::/32 Signature Algorithm: sha256WithRSAEncryption 60:0a:c4:aa:d6:3a:76:62:51:3d:27:43:78:cd:f1:16:69:9e: 88:45:79:ab:ab:ea:77:d8:e8:29:e4:a8:39:fe:ba:6c:4a:d7: 25:8b:63:97:5c:3f:a1:24:a6:e7:8a:f7:8b:a9:8d:f3:c4:d3: c2:6d:c7:74:94:27:9f:fb:54:ad:56:23:78:7e:30:20:b9:3a: a8:45:01:8b:ba:1b:f6:76:fe:66:8d:5c:89:1c:4a:1a:e0:26: b1:c7:b6:34:c7:47:67:07:2a:60:4c:bb:d3:88:db:08:3c:58: 23:94:06:b0:ea:52:35:6a:79:c2:ca:52:bd:4b:53:1b:97:f2: f7:16:60:01:94:c7:00:24:95:b6:cc:75:57:7d:ca:76:04:cc: 6b:0d:fc:7b:1c:9f:d9:4e:bb:e3:01:1f:ae:19:75:53:67:a1: 7b:66:91:f1:da:1b:cb:6d:de:af:5f:d8:57:1a:25:31:a7:7d: 05:de:af:25:5b:83:9a:3c:99:07:0d:1e:12:e0:31:bd:92:81: fb:50:b4:fe:d5:a5:b8:3b:83:f2:10:c8:d4:28:76:c4:60:30: cb:56:aa:e8:79:67:c0:7e:24:e4:ef:32:3c:00:33:66:a5:8b: 2e:2d:a7:30:c2:d9:f2:75:19:a3:2f:85:7e:f3:4c:0a:d8:af: 89:56:3d:76 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIURYWPk1jemvYMZnvHVLZqtnvTxXUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQyNTExNTc0NFoX DTI2MDQyNDEyMDI0NFowMzExMC8GA1UEAxMoN0VFQkVGRDFBRTcyNTE5OUU0QjAy M0NEQTIyQTMwMDVFRkJGNERFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPWF40h/CfCD4qbu6QZOi8oGoB10vsX4CtyAy8qdwZ0S4TN36vXfme9JaKVA F81Yj3NPKHvBljqsJxDGd/BJke9+oQX8pzA+XkcxxOYPz4c4GexvsDH1ZBzdYWzH tcAvePdL9regv8iL9tW9dqL6+W9O7Cc9CGCmaIsY3phfb//0qW436lgUGAd3TkYn kNclRRKcfyPJvAdZ2hgmgvK2rUwSvSNizdUyrDyHfTtihz20WBCjKUuDTv7Age82 oOvl0yf5tqO2eGFjm433nZVy023rZV2vVgYPLQMv1kOqxcSZcCtfuxq6vLo3mROr byjXU49P0yJTbT9cpFvAIL5qADsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH7r79GuclGZ5LAjzaIqMAXvv03oMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZTIwZTgwMC0yNWJiLTRjNzgtYThiMy1mMGViMjVjMmU4MmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlMjBlODAw LTI1YmItNGM3OC1hOGIzLWYwZWIyNWMyZTgyYS8wLzdFRUJFRkQxQUU3MjUxOTlF NEIwMjNDREEyMkEzMDA1RUZCRjRERTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnlAIwDQQCAAIwBwMFACQFxkAwDQYJKoZIhvcNAQELBQADggEBAGAKxKrWOnZi UT0nQ3jN8RZpnohFeaur6nfY6CnkqDn+umxK1yWLY5dcP6EkpueK94upjfPE08Jt x3SUJ5/7VK1WI3h+MCC5OqhFAYu6G/Z2/maNXIkcShrgJrHHtjTHR2cHKmBMu9OI 2wg8WCOUBrDqUjVqecLKUr1LUxuX8vcWYAGUxwAklbbMdVd9ynYEzGsN/Hscn9lO u+MBH64ZdVNnoXtmkfHaG8tt3q9f2FcaJTGnfQXeryVbg5o8mQcNHhLgMb2SgftQ tP7Vpbg7g/IQyNQodsRgMMtWquh5Z8B+JOTvMjwAM2aliy4tpzDC2fJ1GaMvhX7z TArYr4lWPXY= -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:39 2025 by rpki-client