$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer File: 8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.cer (raw, json) Hash identifier: sdYxf+PV7lcrpiGep1wghDb3dErrHqHusklPBH6PfwA= Subject key identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0F2F316EF8A1E943978CAF0859D9C71CCED7D863 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft caRepository: rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 02 Jun 2025 22:33:29 +0000 Certificate not after: Mon 01 Jun 2026 22:38:29 +0000 Subordinate resources: IP: 103.247.12.0/22 IP: 121.101.128.0/21 IP: 2402:e300::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 18:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:2f:31:6e:f8:a1:e9:43:97:8c:af:08:59:d9:c7:1c:ce:d7:d8:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 2 22:33:29 2025 GMT Not After : Jun 1 22:38:29 2026 GMT Subject: CN=8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a1:df:5d:18:71:f4:dc:be:a7:e3:09:63:56: ba:8e:07:b2:a5:ee:ef:52:9c:3e:90:28:ec:ef:1f: 0b:2c:a5:28:a9:28:b1:83:55:96:9d:c8:7d:87:da: ef:e9:75:65:23:26:ad:4f:9b:76:ba:1a:2c:1e:d0: e0:99:ef:5d:f7:2f:dd:36:10:2c:7c:58:a8:6e:d8: 4b:d3:cb:b0:e2:d8:4d:53:45:13:c0:5e:ea:f8:10: 2f:17:5c:18:e7:af:9e:93:7f:8a:d3:67:eb:82:02: f0:fd:bd:6b:5f:0e:55:db:3d:1e:ce:98:a9:59:b3: e6:4e:f9:7d:ba:a9:fa:34:86:df:d0:4c:bc:d0:89: 57:a5:6e:48:36:ca:28:42:aa:d4:af:62:04:f1:8c: 8d:fa:ed:42:89:5b:9c:a4:99:dc:16:70:48:6e:4a: 77:ef:08:6b:93:67:f7:8d:94:7e:f6:6e:81:58:f7: 06:d5:ae:8a:db:bf:05:44:42:be:3c:7a:dc:8f:80: 4a:c4:81:53:0c:17:2a:47:9f:6b:6b:3a:fd:5a:ce: be:96:27:b9:b1:e5:db:be:d6:e0:ef:6a:51:ee:bc: 2c:54:b9:71:f2:ec:a0:2c:00:b9:f5:96:85:6b:21: 0e:0f:2c:5f:f0:cd:12:85:de:a9:47:be:e3:69:03: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8D:ED:AB:AD:21:AD:1A:6B:EF:27:E9:1F:CE:E3:04:65:56:3D:FE:72 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/927a6f34-1b6e-4e92-b2d2-0b9301a666a5/0/8DEDABAD21AD1A6BEF27E91FCEE30465563DFE72.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.247.12.0/22 121.101.128.0/21 IPv6: 2402:e300::/32 Signature Algorithm: sha256WithRSAEncryption 37:98:8d:48:9c:a8:6a:b0:b3:d8:ca:bf:36:70:ec:10:44:f7: 17:74:e1:52:95:82:0a:4f:d2:4d:eb:5b:6e:7a:fe:fb:a0:06: 7c:7c:49:2a:89:4f:06:f8:e0:f1:47:0a:12:a7:24:df:b7:5e: 33:82:a8:e2:9a:3a:26:2f:5a:9c:bd:89:09:a6:e3:c1:b1:ff: 43:1e:e8:a1:6a:ff:ac:08:62:4c:b2:79:12:71:b2:70:06:02: 5d:58:23:dd:50:b9:aa:3c:5e:8b:f6:25:3e:17:4d:95:47:60: d7:3f:6a:5e:fa:76:32:64:a7:47:81:c3:66:7b:ae:f3:63:91: 59:1b:33:22:bf:29:c6:c3:3f:92:20:81:47:73:eb:b1:94:6e: 3b:cd:08:ee:67:ef:0a:fd:5c:28:5a:c9:e4:0f:69:f4:77:4d: ff:79:ca:70:0c:98:57:04:59:70:d1:89:7c:45:95:b6:c5:c1: 01:6c:f6:9d:fb:ac:55:14:bb:4e:7e:2a:fa:e6:bb:9c:ae:f3: f8:9d:86:1e:ca:99:fc:1d:dd:66:7b:8f:4f:53:40:52:0e:20: 50:e3:2e:00:1b:83:a1:61:28:8d:d6:a4:c4:d2:d4:9e:d1:45: 8d:b9:b1:41:ec:43:40:ba:00:fc:63:6c:ad:8d:e0:95:88:ae: ba:42:4a:52 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUDy8xbvih6UOXjK8IWdnHHM7X2GMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMjIyMzMyOVoX DTI2MDYwMTIyMzgyOVowMzExMC8GA1UEAxMoOERFREFCQUQyMUFEMUE2QkVGMjdF OTFGQ0VFMzA0NjU1NjNERkU3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2h310YcfTcvqfjCWNWuo4HsqXu71KcPpAo7O8fCyylKKkosYNVlp3IfYfa 7+l1ZSMmrU+bdroaLB7Q4JnvXfcv3TYQLHxYqG7YS9PLsOLYTVNFE8Be6vgQLxdc GOevnpN/itNn64IC8P29a18OVds9Hs6YqVmz5k75fbqp+jSG39BMvNCJV6VuSDbK KEKq1K9iBPGMjfrtQolbnKSZ3BZwSG5Kd+8Ia5Nn942UfvZugVj3BtWuitu/BURC vjx63I+ASsSBUwwXKkefa2s6/VrOvpYnubHl277W4O9qUe68LFS5cfLsoCwAufWW hWshDg8sX/DNEoXeqUe+42kDvRkCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI3tq60hrRpr7yfpH87jBGVWPf5yMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85MjdhNmYzNC0xYjZlLTRlOTItYjJkMi0wYjkzMDFhNjY2YTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyN2E2ZjM0 LTFiNmUtNGU5Mi1iMmQyLTBiOTMwMWE2NjZhNS8wLzhERURBQkFEMjFBRDFBNkJF RjI3RTkxRkNFRTMwNDY1NTYzREZFNzIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAJn9wwDBAN5ZYAwDQQCAAIwBwMFACQC4wAwDQYJKoZIhvcNAQELBQADggEBADeY jUicqGqws9jKvzZw7BBE9xd04VKVggpP0k3rW256/vugBnx8SSqJTwb44PFHChKn JN+3XjOCqOKaOiYvWpy9iQmm48Gx/0Me6KFq/6wIYkyyeRJxsnAGAl1YI91Quao8 Xov2JT4XTZVHYNc/al76djJkp0eBw2Z7rvNjkVkbMyK/KcbDP5IggUdz67GUbjvN CO5n7wr9XChayeQPafR3Tf95ynAMmFcEWXDRiXxFlbbFwQFs9p37rFUUu05+Kvrm u5yu8/idhh7Kmfwd3WZ7j09TQFIOIFDjLgAbg6FhKI3WpMTS1J7RRY25sUHsQ0C6 APxjbK2N4JWIrrpCSlI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:47:11 2025 by rpki-client