$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer File: 8D956CF1DF56850C9CF6173DF90141A9C6A46868.cer (raw, json) Hash identifier: teigh/vd/3JV9ygfdx4yDmVPG5MgPCuZiSfhj9Efs0E= Subject key identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1BE3778F2B9CAE13EF162D57CC36477841BC00F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft caRepository: rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 28 Jul 2025 20:07:07 +0000 Certificate not after: Mon 27 Jul 2026 20:12:07 +0000 Subordinate resources: IP: 103.153.96.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e3:77:8f:2b:9c:ae:13:ef:16:2d:57:cc:36:47:78:41:bc:00:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 28 20:07:07 2025 GMT Not After : Jul 27 20:12:07 2026 GMT Subject: CN=8D956CF1DF56850C9CF6173DF90141A9C6A46868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dd:02:25:16:f2:f7:0a:a3:b8:b7:37:fb:3d: 05:04:76:5a:8a:96:2e:ff:c5:0a:81:ba:96:61:5a: 68:d8:96:9a:92:9a:2a:86:4a:a1:a3:68:37:bd:25: 12:24:74:8a:71:4b:a3:bd:7f:79:d3:b7:c8:ba:33: b9:88:fa:ce:97:2f:c1:f7:36:86:72:21:84:3d:ea: cd:1d:fe:d8:19:bc:5a:a4:03:47:bc:da:f5:81:55: 32:0e:cb:33:62:0e:6e:2e:82:1f:0a:47:71:ce:c5: 98:0c:86:d1:fd:28:43:b0:30:51:05:e2:1d:99:1f: 59:d7:53:f1:92:76:9f:81:3a:2e:78:be:a4:e0:48: 21:05:63:66:c3:ff:c1:06:86:9f:2f:b8:6a:ae:bd: 69:4f:23:12:be:24:14:79:62:db:d6:57:b7:14:f4: f6:92:2e:1e:e5:a4:ab:b6:71:b5:32:f7:97:aa:a3: 07:bb:e2:95:47:64:e1:b1:b8:56:7f:86:45:3f:35: 71:e4:ad:98:48:29:f3:64:53:fe:aa:4c:40:9b:7d: 90:03:15:52:a5:e6:00:7a:c7:f3:92:84:3b:2c:c5: f9:4d:bd:b3:39:41:28:33:0c:7c:08:1c:7a:08:7b: b5:d2:e0:c0:0d:09:e0:b0:88:f7:0b:07:f4:fd:14: 76:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:95:6C:F1:DF:56:85:0C:9C:F6:17:3D:F9:01:41:A9:C6:A4:68:68 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/8D956CF1DF56850C9CF6173DF90141A9C6A46868.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.153.96.0/23 Signature Algorithm: sha256WithRSAEncryption 64:4b:5d:13:ce:10:3c:65:ac:8b:69:64:2a:d2:87:95:43:63: cd:9b:fb:69:85:e8:78:45:69:7c:f4:91:9b:27:52:b1:39:96: 7d:0f:cf:19:8a:d4:4e:74:67:64:6c:4c:eb:de:66:63:ba:d4: 67:ef:7b:4d:8e:0b:16:c9:c3:c1:64:ee:52:4b:c5:75:bb:ed: 85:24:eb:80:0b:14:40:8a:d7:74:33:d9:e5:5e:e4:3c:6c:21: cc:ed:0d:71:16:ac:81:2d:fa:89:a2:7a:0e:e8:89:51:77:23: 11:b6:56:dc:ff:16:a4:49:72:4b:5a:9a:ec:05:cb:98:97:67: 07:85:34:06:f8:3e:43:9e:d8:d3:2a:b8:e3:18:b4:82:33:bf: 46:c9:57:b5:af:8f:0e:c8:d2:3b:73:a6:ea:f7:35:11:8c:2d: a5:7b:44:38:96:24:5f:94:78:55:8a:e4:2e:a8:0a:c9:9d:28: f3:0c:96:96:99:80:e1:83:cc:40:a3:4a:f9:41:3b:75:04:68: 57:f7:f9:06:d2:ce:ca:9d:7b:da:a9:f4:14:13:84:36:61:a9: 4f:41:ab:53:48:4a:6e:cc:0d:13:eb:84:d3:6a:4b:39:20:c6: bf:6f:d9:93:7b:dd:1f:c3:d0:50:b8:2e:f0:c9:8b:ef:a6:ad: 2d:02:37:9f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUG+N3jyucrhPvFi1XzDZHeEG8APUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyODIwMDcwN1oX DTI2MDcyNzIwMTIwN1owMzExMC8GA1UEAxMoOEQ5NTZDRjFERjU2ODUwQzlDRjYx NzNERjkwMTQxQTlDNkE0Njg2ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL7dAiUW8vcKo7i3N/s9BQR2WoqWLv/FCoG6lmFaaNiWmpKaKoZKoaNoN70l EiR0inFLo71/edO3yLozuYj6zpcvwfc2hnIhhD3qzR3+2Bm8WqQDR7za9YFVMg7L M2IObi6CHwpHcc7FmAyG0f0oQ7AwUQXiHZkfWddT8ZJ2n4E6Lni+pOBIIQVjZsP/ wQaGny+4aq69aU8jEr4kFHli29ZXtxT09pIuHuWkq7ZxtTL3l6qjB7vilUdk4bG4 Vn+GRT81ceStmEgp82RT/qpMQJt9kAMVUqXmAHrH85KEOyzF+U29szlBKDMMfAgc egh7tdLgwA0J4LCI9wsH9P0UdrECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI2VbPHfVoUMnPYXPfkBQanGpGhoMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82OTZhNzRkZi1kOTA3LTRhYWYtYTgzNi00M2U0ZTE5Njg1MjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5NmE3NGRm LWQ5MDctNGFhZi1hODM2LTQzZTRlMTk2ODUyNS8wLzhEOTU2Q0YxREY1Njg1MEM5 Q0Y2MTczREY5MDE0MUE5QzZBNDY4NjgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnmWAwDQYJKoZIhvcNAQELBQADggEBAGRLXRPOEDxlrItpZCrSh5VDY82b+2mF 6HhFaXz0kZsnUrE5ln0PzxmK1E50Z2RsTOveZmO61Gfve02OCxbJw8Fk7lJLxXW7 7YUk64ALFECK13Qz2eVe5DxsIcztDXEWrIEt+omieg7oiVF3IxG2Vtz/FqRJckta muwFy5iXZweFNAb4PkOe2NMquOMYtIIzv0bJV7Wvjw7I0jtzpur3NRGMLaV7RDiW JF+UeFWK5C6oCsmdKPMMlpaZgOGDzECjSvlBO3UEaFf3+QbSzsqde9qp9BQThDZh qU9Bq1NISm7MDRPrhNNqSzkgxr9v2ZN73R/D0FC4LvDJi++mrS0CN58= -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:27 2025 by rpki-client