$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer File: 8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.cer (raw, json) Hash identifier: eYE51FqPuqtqhVhQNMFXe2HsiwYVfJJt9ZJfD/9w4ak= Subject key identifier: 80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 65D0F8ABE4029FCD38645E6A7E86A6594877F1C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft caRepository: rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Jun 2025 16:05:43 +0000 Certificate not after: Thu 04 Jun 2026 16:10:43 +0000 Subordinate resources: IP: 103.189.254.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d0:f8:ab:e4:02:9f:cd:38:64:5e:6a:7e:86:a6:59:48:77:f1:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 5 16:05:43 2025 GMT Not After : Jun 4 16:10:43 2026 GMT Subject: CN=8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0e:73:e8:86:f6:8f:85:40:9d:28:f6:17:f8: 45:61:19:23:e3:0a:07:89:bb:1d:25:28:0f:66:78: 9c:4e:00:07:2a:02:39:a5:d5:c4:ab:2a:39:ae:80: 56:8a:3b:80:69:18:03:2e:27:60:80:72:a3:06:31: 6c:a1:98:75:3e:d3:b0:4a:8b:23:60:61:2a:1c:43: 6f:68:24:00:0f:5d:51:c4:87:bd:95:76:ef:62:c6: 1c:01:8e:39:d9:95:03:e8:22:1c:57:ed:fd:fd:d7: 97:b4:76:41:cc:3c:9d:2a:cd:d4:54:38:43:d3:f7: 59:ea:de:4f:16:29:bc:09:e5:8f:ec:fd:47:37:3b: 84:26:89:95:79:d6:f4:4e:68:6f:90:d7:21:cb:92: 73:56:0c:78:20:e5:3d:26:af:d4:24:3b:28:0f:f9: d5:fc:14:ff:81:9f:ca:68:de:d5:a1:fc:fb:eb:0e: ad:61:01:7b:bb:19:f0:ef:b6:88:70:93:ee:70:3e: 40:96:d5:71:d8:05:5a:bd:c6:77:51:a3:e0:aa:c8: 81:ab:4f:22:17:d1:b2:8d:34:6f:39:6f:d7:bd:93: 6c:48:db:6d:dc:03:46:b5:8a:fd:79:d0:cd:f8:62: 02:02:84:35:8f:4b:af:c2:32:5f:4d:a8:e8:8d:ef: 27:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:30:ED:8A:48:ED:98:5A:5D:D8:8E:9B:C1:C0:D0:15:F4:36:FF:DF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2c0056b4-f027-44fa-974d-4a1ed191ae56/0/8030ED8A48ED985A5DD88E9BC1C0D015F436FFDF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.254.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:db:ac:81:e6:8a:56:4a:14:15:96:ad:6f:d8:6c:e0:4e:5a: 62:36:a0:5f:17:85:34:3a:28:9d:e0:e6:1f:5d:8e:f0:85:c9: e5:a0:27:dc:41:85:19:a8:b8:4f:1f:8a:e9:e9:fa:dc:60:4b: 79:c9:64:af:2a:e8:4f:37:da:21:79:e5:31:aa:ea:84:3f:eb: c1:9f:32:79:26:33:7d:3a:25:b0:f9:af:55:2c:fa:d3:47:a8: 89:3c:f2:98:97:03:ac:65:e1:1e:59:55:5a:04:1d:22:b7:00: dd:49:99:c7:cd:ba:bb:6f:03:df:97:e0:a9:1c:8c:5e:25:b2: 9c:c0:a5:a4:ca:4d:61:fc:51:9b:68:79:6e:e9:cd:b8:d1:bb: db:91:ac:88:3c:cb:39:05:eb:1f:6d:4a:ca:51:ce:56:c7:4a: 7b:83:bb:fa:30:22:4a:76:6d:4a:6a:70:43:30:ab:2c:7b:02: eb:cd:c1:35:a6:58:97:ed:90:e5:c0:90:c9:7c:7d:b4:0f:89: a9:f7:b8:e8:13:e0:fd:99:ea:72:65:4d:3e:87:b8:77:8a:05: 8b:e7:20:ed:27:56:78:55:37:ab:ed:0b:1b:3a:d8:be:34:1b: 23:78:2b:61:d0:a0:87:ed:2f:d1:2c:e0:2c:4f:d5:80:99:9a: 21:6e:1e:86 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZdD4q+QCn804ZF5qfoamWUh38ckwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwNTE2MDU0M1oX DTI2MDYwNDE2MTA0M1owMzExMC8GA1UEAxMoODAzMEVEOEE0OEVEOTg1QTVERDg4 RTlCQzFDMEQwMTVGNDM2RkZERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOsOc+iG9o+FQJ0o9hf4RWEZI+MKB4m7HSUoD2Z4nE4AByoCOaXVxKsqOa6A Voo7gGkYAy4nYIByowYxbKGYdT7TsEqLI2BhKhxDb2gkAA9dUcSHvZV272LGHAGO OdmVA+giHFft/f3Xl7R2Qcw8nSrN1FQ4Q9P3WereTxYpvAnlj+z9Rzc7hCaJlXnW 9E5ob5DXIcuSc1YMeCDlPSav1CQ7KA/51fwU/4Gfymje1aH8++sOrWEBe7sZ8O+2 iHCT7nA+QJbVcdgFWr3Gd1Gj4KrIgatPIhfRso00bzlv172TbEjbbdwDRrWK/XnQ zfhiAgKENY9Lr8IyX02o6I3vJxkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIAw7YpI7ZhaXdiOm8HA0BX0Nv/fMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYzAwNTZiNC1mMDI3LTQ0ZmEtOTc0ZC00YTFlZDE5MWFlNTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMDA1NmI0 LWYwMjctNDRmYS05NzRkLTRhMWVkMTkxYWU1Ni8wLzgwMzBFRDhBNDhFRDk4NUE1 REQ4OEU5QkMxQzBEMDE1RjQzNkZGREYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnvf4wDQYJKoZIhvcNAQELBQADggEBAI3brIHmilZKFBWWrW/YbOBOWmI2oF8X hTQ6KJ3g5h9djvCFyeWgJ9xBhRmouE8fiunp+txgS3nJZK8q6E832iF55TGq6oQ/ 68GfMnkmM306JbD5r1Us+tNHqIk88piXA6xl4R5ZVVoEHSK3AN1JmcfNurtvA9+X 4KkcjF4lspzApaTKTWH8UZtoeW7pzbjRu9uRrIg8yzkF6x9tSspRzlbHSnuDu/ow Ikp2bUpqcEMwqyx7AuvNwTWmWJftkOXAkMl8fbQPian3uOgT4P2Z6nJlTT6HuHeK BYvnIO0nVnhVN6vtCxs62L40GyN4K2HQoIftL9Es4CxP1YCZmiFuHoY= -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:49 2025 by rpki-client