$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer File: 84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.cer (raw, json) Hash identifier: hHen80eoWYovx3Dg3182zr46oJd76CN4VOSbBMMwOpk= Subject key identifier: 84:B8:26:FE:D4:F1:D8:F7:1D:08:BA:8C:0D:4A:1D:66:26:B9:EA:60 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 67FDC3287693C6D66936090E49EABF2B209F024D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft caRepository: rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 30 Jul 2025 01:48:51 +0000 Certificate not after: Wed 29 Jul 2026 01:53:51 +0000 Subordinate resources: IP: 103.215.13.0/24 IP: 2001:df1:ce00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:fd:c3:28:76:93:c6:d6:69:36:09:0e:49:ea:bf:2b:20:9f:02:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 01:48:51 2025 GMT Not After : Jul 29 01:53:51 2026 GMT Subject: CN=84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:22:23:39:35:fc:cf:a3:62:83:94:bf:0c: 30:81:93:2d:d6:e7:0b:43:ad:1e:63:94:47:cb:ae: 0c:25:b7:7e:cf:5a:f5:30:0d:a0:ba:1f:1f:13:25: 46:12:7e:f4:60:5b:f8:a2:08:15:7d:1f:1d:2d:3e: cb:ab:b2:ee:07:db:6f:4b:3d:83:27:f7:bd:12:ee: fe:29:79:34:56:42:92:47:5e:49:f9:ad:a6:19:2f: 14:5d:2c:91:ca:45:e7:6c:f7:e2:12:75:1d:17:db: 7c:f1:e6:87:8e:45:40:29:be:3b:6d:f5:1d:c5:9b: bf:df:bf:eb:4f:91:17:c8:c6:e9:fc:48:89:00:2d: fb:94:a5:43:e9:ba:89:e9:4c:7d:69:2c:07:00:5a: b4:c9:98:d2:66:31:16:ab:94:4d:5e:03:b5:b5:25: 3f:ae:7a:7f:e9:21:0d:9e:a7:f1:b8:fb:7a:8c:17: 27:c9:af:11:04:36:40:3b:e4:c8:9c:72:6f:3c:b7: b2:3a:1f:87:0e:ae:10:cf:03:53:f8:00:25:29:64: 77:9c:e4:91:49:92:16:d1:a1:62:9d:04:59:ab:55: 7a:cb:fe:cc:68:ac:00:a1:08:a2:ac:9c:2a:b2:7c: 50:4b:c8:7e:37:7e:33:c6:aa:04:fd:69:2a:ce:50: ef:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:B8:26:FE:D4:F1:D8:F7:1D:08:BA:8C:0D:4A:1D:66:26:B9:EA:60 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c4556815-a445-4988-9fa8-24686d936f84/0/84B826FED4F1D8F71D08BA8C0D4A1D6626B9EA60.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.215.13.0/24 IPv6: 2001:df1:ce00::/48 Signature Algorithm: sha256WithRSAEncryption 53:c8:de:5e:b4:d6:66:c5:ce:c7:d4:f0:91:28:10:5d:0a:1f: f4:c3:f2:0a:f9:b6:60:a4:01:0e:73:02:f7:a1:05:8c:d8:11: 6a:34:f5:ac:69:45:7b:16:95:7a:19:aa:35:03:24:a3:a6:18: 03:88:be:fa:51:e4:ed:77:67:d0:63:bc:8b:a8:c0:34:af:e8: 97:6b:38:04:f0:f8:a2:9c:8a:a8:77:5a:66:bd:60:ee:8c:c2: 90:52:5d:66:01:9a:cd:56:28:19:d2:9b:cd:97:2a:c3:bb:ed: 32:b0:cc:5d:55:a7:98:ed:c6:5e:e0:ed:fb:97:64:33:9a:17: 64:cf:a3:65:60:a4:75:b3:08:56:d3:36:33:fa:65:8a:e4:a8: 34:9f:2c:8b:03:f3:01:2a:b9:e5:b2:0f:38:3c:64:57:79:fb: 2e:92:58:9e:81:18:00:b6:58:cc:01:e7:b3:5a:eb:c5:db:de: f5:df:e1:e6:da:42:12:87:bf:ad:dd:90:39:df:a3:8f:da:8b: 03:4c:3e:03:d8:43:a1:81:df:17:1b:75:01:ea:e4:62:b4:08: 11:07:02:7d:07:2d:88:35:10:e6:e6:ea:24:88:89:fa:53:51: 94:19:22:d3:6d:08:0e:1a:ea:60:22:1e:e3:77:72:7b:5b:65: 9a:c7:7b:d5 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUZ/3DKHaTxtZpNgkOSeq/KyCfAk0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDczMDAxNDg1MVoX DTI2MDcyOTAxNTM1MVowMzExMC8GA1UEAxMoODRCODI2RkVENEYxRDhGNzFEMDhC QThDMEQ0QTFENjYyNkI5RUE2MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMWgIiM5NfzPo2KDlL8MMIGTLdbnC0OtHmOUR8uuDCW3fs9a9TANoLofHxMl RhJ+9GBb+KIIFX0fHS0+y6uy7gfbb0s9gyf3vRLu/il5NFZCkkdeSfmtphkvFF0s kcpF52z34hJ1HRfbfPHmh45FQCm+O231HcWbv9+/60+RF8jG6fxIiQAt+5SlQ+m6 ielMfWksBwBatMmY0mYxFquUTV4DtbUlP656f+khDZ6n8bj7eowXJ8mvEQQ2QDvk yJxybzy3sjofhw6uEM8DU/gAJSlkd5zkkUmSFtGhYp0EWatVesv+zGisAKEIoqyc KrJ8UEvIfjd+M8aqBP1pKs5Q7xsCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIS4Jv7U8dj3HQi6jA1KHWYmuepgMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNDU1NjgxNS1hNDQ1LTQ5ODgtOWZhOC0yNDY4NmQ5MzZmODQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M0NTU2ODE1 LWE0NDUtNDk4OC05ZmE4LTI0Njg2ZDkzNmY4NC8wLzg0QjgyNkZFRDRGMUQ4Rjcx RDA4QkE4QzBENEExRDY2MjZCOUVBNjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABn1w0wDwQCAAIwCQMHACABDfHOADANBgkqhkiG9w0BAQsFAAOCAQEAU8jeXrTW ZsXOx9TwkSgQXQof9MPyCvm2YKQBDnMC96EFjNgRajT1rGlFexaVehmqNQMko6YY A4i++lHk7Xdn0GO8i6jANK/ol2s4BPD4opyKqHdaZr1g7ozCkFJdZgGazVYoGdKb zZcqw7vtMrDMXVWnmO3GXuDt+5dkM5oXZM+jZWCkdbMIVtM2M/pliuSoNJ8siwPz ASq55bIPODxkV3n7LpJYnoEYALZYzAHns1rrxdve9d/h5tpCEoe/rd2QOd+jj9qL A0w+A9hDoYHfFxt1AerkYrQIEQcCfQctiDUQ5ubqJIiJ+lNRlBki020IDhrqYCIe 43dye1tlmsd71Q== -----END CERTIFICATE-----Generated at Wed Aug 6 05:50:56 2025 by rpki-client