$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer File: 8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer (raw, json) Hash identifier: jRBExTuRu+n2JV6mE7JkNli70PVIwce/aewr5h37zos= Subject key identifier: 8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1D556E03C3FDE492BF8C69640DDE6AA8B0F771E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft caRepository: rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 31 Jul 2025 10:17:40 +0000 Certificate not after: Thu 30 Jul 2026 10:22:40 +0000 Subordinate resources: IP: 103.172.30.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:55:6e:03:c3:fd:e4:92:bf:8c:69:64:0d:de:6a:a8:b0:f7:71:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 31 10:17:40 2025 GMT Not After : Jul 30 10:22:40 2026 GMT Subject: CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:7d:25:81:5c:b7:bd:19:49:b8:44:9c:32: 3e:4a:bc:e0:04:ff:33:2b:d3:6f:f5:ef:28:4e:6f: b9:e9:7c:76:5e:92:3a:f3:af:a1:36:20:50:c0:70: 16:d9:eb:bf:15:2a:b0:24:26:67:a6:ac:4a:1d:8f: 81:c1:7a:ac:30:eb:6b:1a:e8:db:35:92:7a:77:53: 29:3a:ed:2e:7d:38:fd:4d:59:11:be:37:08:af:d0: 9e:fd:19:6f:78:fa:f4:2b:05:8f:80:73:43:2c:b4: d9:04:af:12:a4:92:fe:13:bb:46:af:24:d7:88:5a: 67:42:c7:4c:b7:1a:26:e4:71:52:c4:d9:19:2a:d9: a9:ed:2b:b9:ae:3a:25:63:84:c6:64:16:2a:5e:26: d5:4b:25:8f:b5:17:1d:13:a5:1a:38:97:5b:45:4d: 5f:d6:6a:45:ed:1f:80:bf:1d:e1:6e:bc:24:a0:f0: 47:c9:16:e0:8c:4a:9e:17:d3:a0:df:fb:56:24:20: d5:e0:15:c9:95:04:5a:1e:15:3e:79:64:a0:bb:3b: 6e:36:f3:cc:22:04:60:76:09:0c:88:0b:e3:57:2f: f5:9c:b7:a1:83:bf:4e:25:b0:7d:03:f1:77:3f:d2: c7:c2:c8:fc:34:34:4f:1e:93:f1:55:71:86:cc:c2: 05:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.30.0/24 Signature Algorithm: sha256WithRSAEncryption 69:e9:ca:ff:97:fc:75:4a:eb:e0:0f:9d:48:d0:6a:3a:7a:47: dc:87:7c:07:da:39:73:f4:8e:99:19:61:09:4a:a7:42:f4:2c: c8:76:c5:b4:18:4b:4d:68:4e:f1:d3:55:7e:b0:fa:b4:cd:c7: 6d:dc:8f:fc:cd:66:47:9d:8f:a0:fa:17:17:72:a7:b0:0f:85: 6f:f3:4a:5c:62:b7:80:7c:66:8e:ba:e3:5f:4d:f1:93:b4:23: 9b:89:62:6e:f2:eb:50:d6:4d:e5:cf:65:70:c1:ca:15:65:04: ad:8d:05:9b:76:86:b7:ab:f5:e9:b8:92:b1:22:eb:7e:01:02: a8:be:4e:bb:7b:f2:76:93:0d:a6:d5:55:e1:b2:5d:38:f5:16: b7:82:01:9d:32:7b:6c:91:3f:b1:78:ca:99:3a:35:c2:85:fd: 83:cf:dd:04:97:55:2a:4d:9b:80:e4:9d:6e:4d:ad:1b:74:c9: 15:57:a8:a0:2e:dc:f1:e8:7c:a0:a3:51:cc:0f:98:e7:11:60: 3b:e0:9c:c8:3c:4d:3b:38:e1:55:94:d4:24:33:20:82:e1:07: 4d:a5:06:e6:ff:9c:b0:cf:5a:24:36:56:36:1f:67:cd:a0:06: 34:cf:db:95:58:98:2d:a3:36:90:cc:b0:dc:c4:6e:6c:9f:56: 73:a5:05:8e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHVVuA8P95JK/jGlkDd5qqLD3ceAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDczMTEwMTc0MFoX DTI2MDczMDEwMjI0MFowMzExMC8GA1UEAxMoOERDMkVEMDg3MEEwMDUxNTI2MDZF MkU2QkVCNkI2Qzc4QTUyMkFGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALyDfSWBXLe9GUm4RJwyPkq84AT/MyvTb/XvKE5vuel8dl6SOvOvoTYgUMBw FtnrvxUqsCQmZ6asSh2PgcF6rDDraxro2zWSendTKTrtLn04/U1ZEb43CK/Qnv0Z b3j69CsFj4BzQyy02QSvEqSS/hO7Rq8k14haZ0LHTLcaJuRxUsTZGSrZqe0rua46 JWOExmQWKl4m1Uslj7UXHROlGjiXW0VNX9ZqRe0fgL8d4W68JKDwR8kW4IxKnhfT oN/7ViQg1eAVyZUEWh4VPnlkoLs7bjbzzCIEYHYJDIgL41cv9Zy3oYO/TiWwfQPx dz/Sx8LI/DQ0Tx6T8VVxhszCBUcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI3C7QhwoAUVJgbi5r62tseKUir0MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84OTE5YjgwZC00NjkzLTQwOTUtYTllMy00MTJlMTI4MjhmZjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg5MTliODBk LTQ2OTMtNDA5NS1hOWUzLTQxMmUxMjgyOGZmMi8wLzhEQzJFRDA4NzBBMDA1MTUy NjA2RTJFNkJFQjZCNkM3OEE1MjJBRjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnrB4wDQYJKoZIhvcNAQELBQADggEBAGnpyv+X/HVK6+APnUjQajp6R9yHfAfa OXP0jpkZYQlKp0L0LMh2xbQYS01oTvHTVX6w+rTNx23cj/zNZkedj6D6Fxdyp7AP hW/zSlxit4B8Zo66419N8ZO0I5uJYm7y61DWTeXPZXDByhVlBK2NBZt2hrer9em4 krEi634BAqi+Trt78naTDabVVeGyXTj1FreCAZ0ye2yRP7F4ypk6NcKF/YPP3QSX VSpNm4DknW5NrRt0yRVXqKAu3PHofKCjUcwPmOcRYDvgnMg8TTs44VWU1CQzIILh B02lBub/nLDPWiQ2VjYfZ82gBjTP25VYmC2jNpDMsNzEbmyfVnOlBY4= -----END CERTIFICATE-----Generated at Wed Aug 6 11:10:42 2025 by rpki-client