$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/83C7CB5B51B0D2341C906429DBCB81393F473E08.cer File: 83C7CB5B51B0D2341C906429DBCB81393F473E08.cer (raw, json) Hash identifier: QxKfKdDDT36KYqHGw9JeRvX9RfuuP1weyYwQKbenMEc= Subject key identifier: 83:C7:CB:5B:51:B0:D2:34:1C:90:64:29:DB:CB:81:39:3F:47:3E:08 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 65B5AA2DE6F4A4B6C29F4677B706AA5B849EDBEC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.mft caRepository: rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 08 Oct 2025 18:27:57 +0000 Certificate not after: Wed 07 Oct 2026 18:32:57 +0000 Subordinate resources: IP: 103.160.147.0/24 IP: 2001:df5:a680::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b5:aa:2d:e6:f4:a4:b6:c2:9f:46:77:b7:06:aa:5b:84:9e:db:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 8 18:27:57 2025 GMT Not After : Oct 7 18:32:57 2026 GMT Subject: CN=83C7CB5B51B0D2341C906429DBCB81393F473E08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3e:ea:dc:a3:88:be:a3:e1:ed:b0:71:11:88: 36:1f:6d:87:51:a0:e8:bf:0e:63:a8:90:c2:fb:f8: 34:22:67:18:16:83:ca:2b:c1:27:bb:b5:e5:ef:90: 2e:46:94:99:85:9b:bc:c7:9e:80:6d:0f:08:27:07: 6e:12:d4:af:45:ac:43:08:c6:a5:b9:c4:ee:1d:dc: 8a:27:24:45:58:68:db:f9:13:a9:70:58:f8:29:6c: 74:4a:45:04:8a:ac:29:8e:4c:f9:bb:a7:ba:58:10: 91:64:c7:e7:2e:a3:e4:98:ae:e1:05:83:14:dc:9d: 86:7b:59:63:21:50:a1:25:89:24:7b:22:a1:0a:3d: 2d:31:6e:b2:33:d4:8f:f1:70:d2:79:36:1a:35:27: b6:0d:e3:f7:f2:39:5d:c5:a2:35:0b:bc:95:4d:d2: 50:70:99:4d:8f:a0:dc:79:cb:b0:d8:4f:83:a2:4d: 22:cf:2f:7d:d2:3c:b5:5d:eb:1b:9e:ec:45:61:13: 26:82:00:1a:7e:ec:f9:e8:db:ca:8d:65:d6:1a:8a: 17:b1:96:c9:3d:cd:9f:a4:39:0c:52:db:a1:1b:98: 14:5c:ca:2e:5d:11:a0:e5:ad:5b:ab:7d:ed:8b:85: 52:69:07:ac:9d:eb:40:a5:a8:e8:44:1c:f6:40:77: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 83:C7:CB:5B:51:B0:D2:34:1C:90:64:29:DB:CB:81:39:3F:47:3E:08 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.147.0/24 IPv6: 2001:df5:a680::/48 Signature Algorithm: sha256WithRSAEncryption 73:c3:85:9b:e7:b6:82:c7:23:2d:80:32:28:92:ca:a8:3e:7c: 05:f1:48:03:5f:1c:74:81:bc:49:35:2c:80:a0:21:d8:8f:2b: 0c:8e:84:d8:2f:c7:3c:d7:77:58:d0:83:7c:5d:12:98:c9:02: a4:48:a7:bc:74:81:cf:9c:f3:ae:97:a1:5e:5d:7e:d1:78:5e: 14:92:c0:20:0e:7f:1c:77:4c:f1:9f:62:65:11:a2:f0:2d:aa: 01:86:f1:fb:c3:47:34:da:ab:de:61:ba:04:d3:ae:61:d5:58: 69:47:b3:de:24:07:e0:ae:b0:7d:92:4b:e9:23:51:1f:59:eb: f1:5e:5f:67:31:83:1b:e4:b6:39:2c:53:93:25:e8:6b:82:6d: 54:99:9f:4d:9f:c5:80:0f:ff:f4:30:19:ee:a1:81:48:43:95: ec:c0:57:4b:5b:71:d0:98:68:87:db:d4:0a:a2:32:c6:8a:66: e0:cc:66:88:14:d2:e9:12:68:2c:40:aa:f4:10:4a:c9:d8:03: 99:e7:81:68:94:a0:d6:7b:d6:dd:92:e0:5d:4c:30:dc:2e:ab: 61:71:c8:e4:35:53:e1:bf:10:cf:47:64:26:ec:ee:82:42:fb: 92:82:21:76:b8:15:fb:f0:8e:ce:d6:ae:3b:32:d2:be:f9:5d: f2:79:25:80 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUZbWqLeb0pLbCn0Z3twaqW4Se2+wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAwODE4Mjc1N1oX DTI2MTAwNzE4MzI1N1owMzExMC8GA1UEAxMoODNDN0NCNUI1MUIwRDIzNDFDOTA2 NDI5REJDQjgxMzkzRjQ3M0UwODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANI+6tyjiL6j4e2wcRGINh9th1Gg6L8OY6iQwvv4NCJnGBaDyivBJ7u15e+Q LkaUmYWbvMeegG0PCCcHbhLUr0WsQwjGpbnE7h3ciickRVho2/kTqXBY+ClsdEpF BIqsKY5M+bunulgQkWTH5y6j5Jiu4QWDFNydhntZYyFQoSWJJHsioQo9LTFusjPU j/Fw0nk2GjUntg3j9/I5XcWiNQu8lU3SUHCZTY+g3HnLsNhPg6JNIs8vfdI8tV3r G57sRWETJoIAGn7s+ejbyo1l1hqKF7GWyT3Nn6Q5DFLboRuYFFzKLl0RoOWtW6t9 7YuFUmkHrJ3rQKWo6EQc9kB3SskCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIPHy1tRsNI0HJBkKdvLgTk/Rz4IMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lNTQyNjEyNC0wNTljLTQzYWQtYTE1MC04MjJiOWQ1ZmIzZjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1NDI2MTI0 LTA1OWMtNDNhZC1hMTUwLTgyMmI5ZDVmYjNmMy8wLzgzQzdDQjVCNTFCMEQyMzQx QzkwNjQyOURCQ0I4MTM5M0Y0NzNFMDgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnoJMwDwQCAAIwCQMHACABDfWmgDANBgkqhkiG9w0BAQsFAAOCAQEAc8OFm+e2 gscjLYAyKJLKqD58BfFIA18cdIG8STUsgKAh2I8rDI6E2C/HPNd3WNCDfF0SmMkC pEinvHSBz5zzrpehXl1+0XheFJLAIA5/HHdM8Z9iZRGi8C2qAYbx+8NHNNqr3mG6 BNOuYdVYaUez3iQH4K6wfZJL6SNRH1nr8V5fZzGDG+S2OSxTkyXoa4JtVJmfTZ/F gA//9DAZ7qGBSEOV7MBXS1tx0Jhoh9vUCqIyxopm4MxmiBTS6RJoLECq9BBKydgD meeBaJSg1nvW3ZLgXUww3C6rYXHI5DVT4b8Qz0dkJuzugkL7koIhdrgV+/COztau OzLSvvld8nklgA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:22 2025 by rpki-client