$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer File: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer (raw, json) Hash identifier: mOdhFPk49ukAE6SpqMDUXUWPUnfQOUtpGk078RxTlu8= Subject key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 77140FE0D7C3167DD3383DFE44BFA6C16599532A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft caRepository: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 25 Apr 2025 14:29:10 +0000 Certificate not after: Fri 24 Apr 2026 14:34:10 +0000 Subordinate resources: IP: 103.188.119.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:14:0f:e0:d7:c3:16:7d:d3:38:3d:fe:44:bf:a6:c1:65:99:53:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 25 14:29:10 2025 GMT Not After : Apr 24 14:34:10 2026 GMT Subject: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:91:c2:3a:0a:d1:5d:6b:80:4b:73:c2:d7:e9: d5:27:ea:35:0a:20:57:57:bc:02:f2:f9:09:34:a3: 41:9f:00:91:0f:0f:c6:7b:a8:f5:eb:77:d4:6e:53: de:a3:e1:c6:d6:7d:23:83:f2:a5:1e:bb:20:f7:3b: 37:46:b8:96:0e:1f:d8:03:d0:0b:39:58:4a:bf:7e: bd:ef:27:76:dd:14:ef:77:1a:07:71:b6:ba:1c:d8: ff:0f:07:15:8b:40:78:88:01:71:be:08:24:2e:45: f7:f0:3c:ee:d5:f3:52:e0:10:11:2f:28:4b:ad:0f: d7:0d:22:0c:eb:66:00:49:fe:7a:e0:7e:7e:8f:d4: 9c:ec:bb:7c:61:1c:cb:4a:92:f0:a7:1f:4e:0f:ed: ed:f9:a4:21:ba:34:28:ff:1f:4f:e8:ac:2a:f3:bf: bc:0f:83:67:b5:26:94:c0:16:a4:a1:e4:f2:0d:dc: c4:da:b4:3a:32:5c:4f:ac:1d:94:c3:47:48:4d:3d: 08:33:d1:7b:39:ed:3f:c1:91:76:54:04:8c:a6:df: 7c:b4:f1:66:2e:01:1e:6a:67:3c:e8:b9:b4:f7:b3: 07:de:ee:76:6e:b6:3b:fd:8f:c8:d9:a1:36:6c:ca: 78:a0:42:26:cb:f2:08:63:25:85:85:ee:41:a3:82: 0b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.119.0/24 Signature Algorithm: sha256WithRSAEncryption 25:a3:2e:2b:89:13:66:ff:a9:be:78:a4:bd:dd:ea:27:9a:a3: f2:5b:d3:b6:99:71:89:c6:7b:bb:0a:16:c4:d0:bd:ad:8f:f2: f6:5e:d7:7d:e0:6c:b2:cb:d8:5d:ce:fc:26:c5:e6:c5:45:ab: d9:e4:cc:51:a8:0e:f5:a3:86:5f:24:24:8b:4b:4f:f8:b7:29: cb:33:44:f9:ac:6a:54:2a:42:4f:35:84:3d:b8:e2:a2:e0:91: e9:a1:98:49:cc:8b:dc:e2:e7:c7:26:e3:60:4d:f1:e4:01:c1: 10:5d:8c:4d:81:8d:5f:4d:ac:1d:4b:0a:a0:ae:04:b9:3f:16: ef:08:d1:d1:f3:a7:86:8b:83:b1:43:02:c6:8f:23:31:c1:91: c0:cd:8b:2f:3b:aa:c4:62:40:79:4c:00:7e:77:ae:d3:99:e6: 3d:d1:6c:02:ee:db:db:e8:49:f0:1f:ab:1a:9d:91:ea:b5:13: 00:bd:ee:23:3d:62:b0:11:53:32:e5:6f:84:32:55:0c:ad:39: 2b:0d:05:96:69:b9:05:5b:e0:af:04:db:f6:47:86:aa:b8:19: 2a:a6:02:68:e6:84:ab:cf:af:d1:86:70:ac:4e:4b:4e:dc:fd: 51:04:cb:48:3c:35:37:2e:71:39:d3:8b:65:35:47:c8:61:4d: 08:26:69:f1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdxQP4NfDFn3TOD3+RL+mwWWZUyowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQyNTE0MjkxMFoX DTI2MDQyNDE0MzQxMFowMzExMC8GA1UEAxMoOEY5MTY0NzE0QTFCM0I5MDZDRjhB OEIzNzFGMzQyRUJBMzU0MENEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqRwjoK0V1rgEtzwtfp1SfqNQogV1e8AvL5CTSjQZ8AkQ8Pxnuo9et31G5T 3qPhxtZ9I4PypR67IPc7N0a4lg4f2APQCzlYSr9+ve8ndt0U73caB3G2uhzY/w8H FYtAeIgBcb4IJC5F9/A87tXzUuAQES8oS60P1w0iDOtmAEn+euB+fo/UnOy7fGEc y0qS8KcfTg/t7fmkIbo0KP8fT+isKvO/vA+DZ7UmlMAWpKHk8g3cxNq0OjJcT6wd lMNHSE09CDPRezntP8GRdlQEjKbffLTxZi4BHmpnPOi5tPezB97udm62O/2PyNmh NmzKeKBCJsvyCGMlhYXuQaOCCysCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFI+RZHFKGzuQbPios3HzQuujVAzZMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNDc1OGU4ZS00OWM4LTQ4YjgtYmRjYi0zNTMzOWUyYWU2MDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0NzU4ZThl LTQ5YzgtNDhiOC1iZGNiLTM1MzM5ZTJhZTYwMS8wLzhGOTE2NDcxNEExQjNCOTA2 Q0Y4QThCMzcxRjM0MkVCQTM1NDBDRDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnvHcwDQYJKoZIhvcNAQELBQADggEBACWjLiuJE2b/qb54pL3d6ieao/Jb07aZ cYnGe7sKFsTQva2P8vZe133gbLLL2F3O/CbF5sVFq9nkzFGoDvWjhl8kJItLT/i3 KcszRPmsalQqQk81hD244qLgkemhmEnMi9zi58cm42BN8eQBwRBdjE2BjV9NrB1L CqCuBLk/Fu8I0dHzp4aLg7FDAsaPIzHBkcDNiy87qsRiQHlMAH53rtOZ5j3RbALu 29voSfAfqxqdkeq1EwC97iM9YrARUzLlb4QyVQytOSsNBZZpuQVb4K8E2/ZHhqq4 GSqmAmjmhKvPr9GGcKxOS07c/VEEy0g8NTcucTnTi2U1R8hhTQgmafE= -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:23 2025 by rpki-client