$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer File: 8E87AB0332210D864175F7A371230D7C6099AE30.cer (raw, json) Hash identifier: dCVL9Rv+QXJoNQfuTZ/mdl8p2yVTFT87ipvOkOvGlK0= Subject key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1BFEDBA93C1958A51EBB0A118CAA762B9DF02EB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft caRepository: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 18 Feb 2025 21:03:17 +0000 Certificate not after: Tue 17 Feb 2026 21:08:17 +0000 Subordinate resources: IP: 103.178.42.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:fe:db:a9:3c:19:58:a5:1e:bb:0a:11:8c:aa:76:2b:9d:f0:2e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 18 21:03:17 2025 GMT Not After : Feb 17 21:08:17 2026 GMT Subject: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:af:9c:36:25:04:59:09:01:ab:11:2d:38: ba:29:c8:79:9e:dc:e9:b0:1f:b9:e9:48:bd:58:8e: 26:4d:d1:a3:2c:e0:99:54:19:72:7d:1b:e9:e6:c9: 33:22:d1:19:65:c6:be:72:d2:7d:ca:8d:1d:08:75: 38:0d:66:c7:33:51:d5:b8:ce:d3:43:d0:d8:6e:14: 0f:d8:9a:7e:eb:dc:ff:a2:d7:0a:f5:2c:58:45:2f: 2c:61:03:b0:c0:85:7b:02:b1:8a:42:51:6c:41:62: f1:35:fd:0a:6c:b9:5f:a9:37:aa:e9:b0:15:5e:13: fa:0d:f6:be:ed:d6:30:da:a5:e6:cd:41:3c:7d:f4: 15:e9:d7:77:3d:4e:15:09:a5:2d:08:dd:27:1a:01: 76:49:35:b5:3e:02:9e:40:d6:be:45:6a:96:26:8f: ee:b9:57:66:e0:69:da:51:93:8c:a4:a4:74:d6:af: b5:cb:86:7e:93:e5:04:11:da:ee:ab:47:95:06:85: 0d:85:19:53:63:26:1f:61:e1:ea:5b:35:4a:eb:93: e8:30:53:54:fb:e6:66:b2:fc:9d:32:45:dc:6e:b9: 0f:de:59:b0:21:b6:cc:0a:0f:5b:b4:1e:33:96:eb: df:7e:51:d0:d2:72:68:c0:60:16:2e:9b:b1:0a:1d: 36:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.42.0/23 Signature Algorithm: sha256WithRSAEncryption 60:e1:10:a2:54:52:77:7f:29:bd:89:60:5e:f3:e0:87:2b:c0: 77:5f:4b:d8:9b:05:aa:2d:19:1e:3a:89:bd:21:b8:05:62:32: e1:cb:b2:81:66:63:11:db:ae:b2:ef:e8:e3:ca:77:93:50:3f: 22:65:52:1c:5a:90:14:08:48:b1:ba:db:54:f3:aa:30:f4:82: ea:d5:de:48:e7:97:a0:ba:32:9b:ac:98:2b:21:e6:16:75:5c: d7:61:76:a0:96:4f:0a:6e:69:4e:f4:5d:b2:2b:3b:72:98:e8: 64:40:c5:4b:ee:f2:50:0d:6c:57:67:64:02:c2:b5:84:4a:cb: a0:f6:1b:39:37:fa:c6:71:f6:23:d3:e0:bf:a3:05:1d:85:74: 09:f3:2b:18:29:02:29:fb:df:34:9e:16:0e:88:b8:07:25:86: f5:31:d5:ba:39:66:44:c8:ec:b1:ea:29:0d:5f:6e:a1:90:dc: 74:24:a5:53:aa:71:2a:61:a9:85:ac:ce:f4:ef:c1:07:1b:b1: 50:75:50:17:a4:5d:e1:35:49:90:41:73:71:c8:6b:6e:a8:a4: d9:ac:28:74:8b:45:8a:b4:ec:0c:96:69:a0:ee:14:8c:ff:74: 2f:23:ce:13:44:54:ba:40:89:67:6a:5b:31:4a:25:cb:c2:70: 82:f3:f7:f9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUG/7bqTwZWKUeuwoRjKp2K53wLrgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDIxODIxMDMxN1oX DTI2MDIxNzIxMDgxN1owMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVG N0EzNzEyMzBEN0M2MDk5QUUzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBer5w2JQRZCQGrES04uinIeZ7c6bAfuelIvViOJk3RoyzgmVQZcn0b6ebJ MyLRGWXGvnLSfcqNHQh1OA1mxzNR1bjO00PQ2G4UD9iafuvc/6LXCvUsWEUvLGED sMCFewKxikJRbEFi8TX9Cmy5X6k3qumwFV4T+g32vu3WMNql5s1BPH30FenXdz1O FQmlLQjdJxoBdkk1tT4CnkDWvkVqliaP7rlXZuBp2lGTjKSkdNavtcuGfpPlBBHa 7qtHlQaFDYUZU2MmH2Hh6ls1SuuT6DBTVPvmZrL8nTJF3G65D95ZsCG2zAoPW7Qe M5br335R0NJyaMBgFi6bsQodNnMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI6HqwMyIQ2GQXX3o3EjDXxgma4wMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mNTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y1MDRlNGM3 LTdhMmQtNGQ2Ni04ZmI0LTIwNTU2NTc4N2YyNC8wLzhFODdBQjAzMzIyMTBEODY0 MTc1RjdBMzcxMjMwRDdDNjA5OUFFMzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsiowDQYJKoZIhvcNAQELBQADggEBAGDhEKJUUnd/Kb2JYF7z4IcrwHdfS9ib BaotGR46ib0huAViMuHLsoFmYxHbrrLv6OPKd5NQPyJlUhxakBQISLG621TzqjD0 gurV3kjnl6C6MpusmCsh5hZ1XNdhdqCWTwpuaU70XbIrO3KY6GRAxUvu8lANbFdn ZALCtYRKy6D2Gzk3+sZx9iPT4L+jBR2FdAnzKxgpAin73zSeFg6IuAclhvUx1bo5 ZkTI7LHqKQ1fbqGQ3HQkpVOqcSphqYWszvTvwQcbsVB1UBekXeE1SZBBc3HIa26o pNmsKHSLRYq07AyWaaDuFIz/dC8jzhNEVLpAiWdqWzFKJcvCcILz9/k= -----END CERTIFICATE-----Generated at Tue Nov 4 02:17:09 2025 by rpki-client