$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer File: 861DE86D91E4C7508D388EDBC70834681B43B5CA.cer (raw, json) Hash identifier: Rw+tjBW0FtUrJiURk7ejPQARfW1ikeV/9tcrps8IyTk= Subject key identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 289D77A8891EDF979A8EEDAC9FB8656B91CABE41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft caRepository: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 21 Jul 2025 15:08:38 +0000 Certificate not after: Mon 20 Jul 2026 15:13:38 +0000 Subordinate resources: IP: 43.230.128.0/22 IP: 103.238.200.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:9d:77:a8:89:1e:df:97:9a:8e:ed:ac:9f:b8:65:6b:91:ca:be:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 21 15:08:38 2025 GMT Not After : Jul 20 15:13:38 2026 GMT Subject: CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c2:05:38:f9:77:65:50:f3:00:78:30:e1:6d: c4:31:73:16:63:5f:c8:18:5f:a4:19:f3:70:21:8b: 70:11:a1:9d:a9:9c:0f:e3:11:47:51:fa:ae:61:86: 9f:e3:0b:58:bc:b5:15:c2:23:2a:23:bb:72:6f:30: 00:49:6e:18:be:d4:5e:b6:33:6c:d8:ca:4d:ca:39: 53:95:43:28:a7:79:11:4f:f8:68:2b:0d:52:97:65: cb:54:dc:ad:6f:86:ba:61:a9:9a:ba:e8:c0:2a:80: 44:3c:2d:49:fd:66:25:3b:46:70:9f:98:ba:e3:35: 2c:9d:dd:e8:29:18:54:25:f3:82:73:7a:54:e6:4b: 98:4d:42:fa:66:6d:a1:8f:8c:e2:54:50:c3:4f:09: 7b:8e:8c:75:2f:d6:00:63:3f:db:84:0b:08:c0:aa: c0:a4:44:13:ec:2e:29:c2:c5:62:74:86:0e:2e:ff: 33:a4:5c:cd:7f:c2:a4:d8:4c:d9:ce:60:40:0f:11: 00:cc:68:7a:8d:f4:db:32:36:bc:b6:64:d0:97:dc: ae:c6:d3:e5:8a:1c:73:f3:b5:dc:33:13:f9:9c:2d: e9:99:d8:21:0b:aa:be:d7:19:d8:d4:38:0a:1b:da: c5:06:49:d9:8e:f0:4b:b5:b4:f7:51:09:cb:31:17: 1e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.128.0/22 103.238.200.0/22 Signature Algorithm: sha256WithRSAEncryption 47:c4:c8:d9:ec:0a:60:27:8e:6a:2b:19:74:d6:47:0b:8d:dc: f2:6d:91:a8:e2:46:8d:0c:03:ad:4f:41:dc:df:3f:f2:7a:99: 3d:7f:cf:b3:01:c6:0c:f0:3c:16:d9:cb:69:cc:bf:3b:b5:70: 74:2a:67:ab:20:24:3a:2e:b1:bd:aa:00:3e:32:7a:31:85:9f: df:91:36:62:5c:16:11:a5:51:2d:e2:d6:3e:79:02:82:a8:ff: d2:57:d4:ba:ab:d2:99:e3:16:4d:aa:d4:c3:df:25:b6:45:23: e7:4a:33:16:09:37:56:f6:26:f5:b2:c2:83:40:03:93:4a:c2: c1:05:b4:90:71:74:78:4d:bc:cb:3e:67:08:35:79:e0:16:14: ed:c6:d6:72:b9:51:9e:70:c9:aa:d5:a8:69:7c:b9:8d:9d:ee: 9a:8b:d9:6e:05:0e:11:bc:ff:82:0b:4d:f7:90:b7:3d:82:e7: ed:d1:50:c8:a6:b3:08:fc:04:67:3c:55:8d:2f:22:1c:b3:c2: 68:70:69:31:4a:cd:0c:7e:02:e7:fb:95:7a:ef:5c:52:fd:00: 6d:b5:6c:a8:bf:e1:12:b5:19:a0:d2:e1:70:e7:6e:0b:bb:4b: 76:16:c6:24:09:8f:5c:83:a6:d8:88:01:fc:26:4a:44:25:54: 52:5c:cb:55 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUKJ13qIke35eaju2sn7hla5HKvkEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyMTE1MDgzOFoX DTI2MDcyMDE1MTMzOFowMzExMC8GA1UEAxMoODYxREU4NkQ5MUU0Qzc1MDhEMzg4 RURCQzcwODM0NjgxQjQzQjVDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO7CBTj5d2VQ8wB4MOFtxDFzFmNfyBhfpBnzcCGLcBGhnamcD+MRR1H6rmGG n+MLWLy1FcIjKiO7cm8wAEluGL7UXrYzbNjKTco5U5VDKKd5EU/4aCsNUpdly1Tc rW+GumGpmrrowCqARDwtSf1mJTtGcJ+YuuM1LJ3d6CkYVCXzgnN6VOZLmE1C+mZt oY+M4lRQw08Je46MdS/WAGM/24QLCMCqwKREE+wuKcLFYnSGDi7/M6RczX/CpNhM 2c5gQA8RAMxoeo302zI2vLZk0JfcrsbT5Yocc/O13DMT+Zwt6ZnYIQuqvtcZ2NQ4 ChvaxQZJ2Y7wS7W091EJyzEXHscCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIYd6G2R5MdQjTiO28cINGgbQ7XKMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NjlmMjk4OC1jYWIzLTQ1YWEtOTdlNS02Mzg1ZjA3ZmYxY2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2OWYyOTg4 LWNhYjMtNDVhYS05N2U1LTYzODVmMDdmZjFjZC8wLzg2MURFODZEOTFFNEM3NTA4 RDM4OEVEQkM3MDgzNDY4MUI0M0I1Q0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAIr5oADBAJn7sgwDQYJKoZIhvcNAQELBQADggEBAEfEyNnsCmAnjmorGXTWRwuN 3PJtkajiRo0MA61PQdzfP/J6mT1/z7MBxgzwPBbZy2nMvzu1cHQqZ6sgJDousb2q AD4yejGFn9+RNmJcFhGlUS3i1j55AoKo/9JX1Lqr0pnjFk2q1MPfJbZFI+dKMxYJ N1b2JvWywoNAA5NKwsEFtJBxdHhNvMs+Zwg1eeAWFO3G1nK5UZ5wyarVqGl8uY2d 7pqL2W4FDhG8/4ILTfeQtz2C5+3RUMimswj8BGc8VY0vIhyzwmhwaTFKzQx+Auf7 lXrvXFL9AG21bKi/4RK1GaDS4XDnbgu7S3YWxiQJj1yDptiIAfwmSkQlVFJcy1U= -----END CERTIFICATE-----Generated at Wed Aug 6 13:09:34 2025 by rpki-client