$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/81498B85C0E2937290B9B2119B132DEADBB24A5C.cer File: 81498B85C0E2937290B9B2119B132DEADBB24A5C.cer (raw, json) Hash identifier: LLstfmTk0UUr8VUYo25ZppZZ1TvamnIefuFQJyoIQUs= Subject key identifier: 81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 688BBEE1A25FBDB103CC33D6F0B66E4E032B2EFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft caRepository: rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 23 May 2025 05:32:18 +0000 Certificate not after: Fri 22 May 2026 05:37:18 +0000 Subordinate resources: IP: 103.159.224.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:8b:be:e1:a2:5f:bd:b1:03:cc:33:d6:f0:b6:6e:4e:03:2b:2e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 23 05:32:18 2025 GMT Not After : May 22 05:37:18 2026 GMT Subject: CN=81498B85C0E2937290B9B2119B132DEADBB24A5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:fc:0f:f3:6f:6d:2e:dd:8f:fd:b8:e8:d6: af:7c:6f:de:96:df:aa:16:a6:aa:0f:7a:ee:c9:00: 9e:77:75:3c:62:18:66:a8:b9:96:e5:c3:6a:98:7a: ed:29:e5:69:ce:fc:58:ad:f6:1d:a1:15:ea:94:ef: d0:af:14:9d:ed:be:6d:c1:54:e9:af:4a:2e:2d:8b: 99:c1:46:be:aa:2b:86:1d:8c:47:0f:d2:b9:b8:19: 6d:01:39:51:9a:5b:87:8d:9d:36:c7:59:7a:b0:6b: 13:4a:92:e3:c4:76:b0:01:d9:a2:82:b7:97:d9:50: 9d:53:42:49:a5:99:16:54:c7:22:ff:3a:fd:a6:66: 95:73:19:d9:c2:89:0e:ef:60:3b:bb:91:6c:c5:9a: 3b:82:1f:a5:43:8e:1c:81:44:f6:db:38:36:a4:42: d8:51:10:b7:02:89:42:5f:fd:da:0b:58:65:55:df: 8f:32:42:cc:c1:60:5e:4f:e9:50:63:55:5a:99:9e: 34:22:3c:f4:64:79:cd:8c:e3:ef:de:98:2f:67:57: df:54:76:38:c9:74:51:1b:39:83:49:3c:75:79:fa: 07:50:e3:c3:42:9f:a0:93:26:2f:8d:dd:81:f4:d3: 43:12:52:28:1d:b4:59:01:fd:81:28:4a:0f:28:f4: c4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 81:49:8B:85:C0:E2:93:72:90:B9:B2:11:9B:13:2D:EA:DB:B2:4A:5C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4a48b222-6ded-428a-888f-10454b0880c2/0/81498B85C0E2937290B9B2119B132DEADBB24A5C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.224.0/23 Signature Algorithm: sha256WithRSAEncryption 03:9b:70:3f:71:c9:80:60:1c:77:75:18:1e:89:8e:b1:5a:32: f6:97:a3:2d:6d:34:80:f6:a7:be:39:2c:25:64:50:2a:95:38: e7:ad:75:f9:22:21:37:26:22:6b:12:7d:bf:1a:00:69:64:64: 41:d3:7e:e5:3b:3f:24:2b:4e:eb:f4:7e:40:ea:3e:97:2b:b0: 80:91:4f:14:57:cd:36:43:35:52:dd:57:b2:e3:ff:49:d2:b0: 0b:15:c2:26:6a:e7:31:7f:e5:7c:61:24:79:c8:9d:6f:c6:2a: be:76:ad:90:ab:9d:66:2d:9a:99:95:c4:0b:f6:cb:88:1e:18: 72:e7:5d:b5:c7:fa:67:c8:98:c0:5f:12:a2:c8:3e:25:ee:ae: 75:aa:f4:15:e2:ec:1d:a3:ea:08:51:fc:86:26:4c:fe:e1:12: a3:29:63:d5:32:c3:33:01:48:37:a9:60:4d:3d:c4:42:58:9c: 20:17:1e:11:40:49:01:c4:4f:5a:6a:87:32:c2:9f:d8:04:78: e7:45:ff:0c:82:88:8b:68:be:22:4e:6c:c5:ee:84:a2:6b:c4: 89:ec:e5:a4:7a:67:5a:2b:93:c5:7d:92:3b:fb:cc:f3:12:7f: d2:ef:34:49:97:9d:f7:c1:6a:0e:8c:96:67:bf:3e:ae:7e:3c: 69:f0:41:de -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUaIu+4aJfvbEDzDPW8LZuTgMrLvswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUyMzA1MzIxOFoX DTI2MDUyMjA1MzcxOFowMzExMC8GA1UEAxMoODE0OThCODVDMEUyOTM3MjkwQjlC MjExOUIxMzJERUFEQkIyNEE1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALDr/A/zb20u3Y/9uOjWr3xv3pbfqhamqg967skAnnd1PGIYZqi5luXDaph6 7Snlac78WK32HaEV6pTv0K8Une2+bcFU6a9KLi2LmcFGvqorhh2MRw/SubgZbQE5 UZpbh42dNsdZerBrE0qS48R2sAHZooK3l9lQnVNCSaWZFlTHIv86/aZmlXMZ2cKJ Du9gO7uRbMWaO4IfpUOOHIFE9ts4NqRC2FEQtwKJQl/92gtYZVXfjzJCzMFgXk/p UGNVWpmeNCI89GR5zYzj796YL2dX31R2OMl0URs5g0k8dXn6B1Djw0KfoJMmL43d gfTTQxJSKB20WQH9gShKDyj0xA8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIFJi4XA4pNykLmyEZsTLerbskpcMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80YTQ4YjIyMi02ZGVkLTQyOGEtODg4Zi0xMDQ1NGIwODgwYzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRhNDhiMjIy LTZkZWQtNDI4YS04ODhmLTEwNDU0YjA4ODBjMi8wLzgxNDk4Qjg1QzBFMjkzNzI5 MEI5QjIxMTlCMTMyREVBREJCMjRBNUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnn+AwDQYJKoZIhvcNAQELBQADggEBAAObcD9xyYBgHHd1GB6JjrFaMvaXoy1t NID2p745LCVkUCqVOOetdfkiITcmImsSfb8aAGlkZEHTfuU7PyQrTuv0fkDqPpcr sICRTxRXzTZDNVLdV7Lj/0nSsAsVwiZq5zF/5XxhJHnInW/GKr52rZCrnWYtmpmV xAv2y4geGHLnXbXH+mfImMBfEqLIPiXurnWq9BXi7B2j6ghR/IYmTP7hEqMpY9Uy wzMBSDepYE09xEJYnCAXHhFASQHET1pqhzLCn9gEeOdF/wyCiItoviJObMXuhKJr xIns5aR6Z1ork8V9kjv7zPMSf9LvNEmXnffBag6Mlme/Pq5+PGnwQd4= -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:45 2025 by rpki-client