$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer File: 90508FF980097E19CEF65ED72A856616A6F690AB.cer (raw, json) Hash identifier: NKldL5EGEcejtCXQ3R1xysthDJ9SkITHvSDhJY+em3o= Subject key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3B3AAEB0FFB0B89B6E9B1E1902C6199D32FEAF0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft caRepository: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 12:23:56 +0000 Certificate not after: Tue 02 Jun 2026 12:28:56 +0000 Subordinate resources: IP: 103.119.228.0/22 IP: 2001:df5:f100::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 17:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3a:ae:b0:ff:b0:b8:9b:6e:9b:1e:19:02:c6:19:9d:32:fe:af:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 12:23:56 2025 GMT Not After : Jun 2 12:28:56 2026 GMT Subject: CN=90508FF980097E19CEF65ED72A856616A6F690AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:c1:78:7c:c5:42:57:7e:92:eb:81:c9:48: b8:87:e4:36:c8:99:d6:c9:1c:88:8d:5b:7a:81:9e: f0:69:91:71:16:41:02:0f:91:5a:32:bc:4a:67:f4: ad:6a:b1:c3:6d:30:54:de:91:71:8d:c2:58:6a:0f: 2d:55:5d:e0:c8:30:f6:f3:0b:44:53:ab:7a:d6:66: 1e:0c:55:c7:7f:c2:df:18:d9:23:c4:06:65:8b:39: cc:40:a8:b9:06:0b:03:01:65:b6:03:4c:a7:e5:5c: c7:7e:ab:e5:88:80:fd:55:d0:b9:bc:b7:10:e5:75: 88:51:79:18:5d:a0:b9:bb:cb:f1:ae:d4:f0:fb:cf: 7a:21:57:31:32:45:db:b1:c6:15:ed:8e:70:49:7e: e2:ae:f5:fa:99:3c:dc:39:60:3b:1e:3d:cd:d1:d8: 4e:ad:11:19:a0:77:e4:fa:1a:6c:d8:3f:3c:90:70: 3b:c4:fe:ae:cf:0c:2a:03:27:df:83:c7:dd:8b:73: 8d:2f:80:31:08:36:5b:06:5f:fc:e2:17:26:5c:be: bc:69:5e:5d:37:6c:6a:e3:ec:ae:0b:28:dc:c7:53: e2:94:c5:a3:63:7d:a1:a4:04:72:d8:43:12:4c:41: 5c:d8:b5:da:aa:5f:52:e1:17:88:93:75:85:aa:c3: b9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.119.228.0/22 IPv6: 2001:df5:f100::/48 Signature Algorithm: sha256WithRSAEncryption 55:f2:d1:75:45:7d:e3:5b:b9:dd:16:15:3c:74:9e:b8:ab:11: 7d:60:20:68:ea:d5:a4:d2:6f:e9:2f:cd:ee:4f:57:26:40:c0: 9e:67:a7:c4:a6:dc:0c:19:65:17:d4:52:53:be:df:78:a3:ce: 8e:d9:a6:e4:9d:22:04:f9:e8:a4:23:aa:94:14:e4:02:ff:44: ba:a6:51:66:bb:50:27:28:96:d7:f9:5d:43:42:81:35:5d:c9: 39:eb:2c:cd:6f:72:63:89:dd:ad:33:2b:c1:d7:72:b4:67:4a: 74:81:e8:cd:35:4a:6e:be:b5:b5:76:7e:06:ee:40:40:b4:f6: ea:6a:38:81:de:89:fb:fb:6a:d4:13:27:b1:8a:79:95:b3:56: a4:de:eb:8c:9e:cf:40:c1:ca:c9:9f:8e:3d:00:11:cc:3f:c9: ca:e3:ef:fe:fc:06:9c:ec:b0:11:6a:63:d6:8c:66:3a:12:4a: 5e:7e:d8:f8:7a:69:48:d5:6d:2d:41:15:ae:c8:68:57:53:4e: a5:fe:5e:99:c5:47:fe:2a:62:0e:c3:2d:6c:d6:12:cd:7f:c2: 2d:9a:92:81:17:cd:f9:81:c9:cf:d3:ce:d4:c6:00:34:5c:9f: 44:31:5d:fd:47:7d:54:1a:62:d3:bd:4f:ab:6c:be:39:19:4f: 36:0c:b7:80 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUOzqusP+wuJtumx4ZAsYZnTL+rwowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzEyMjM1NloX DTI2MDYwMjEyMjg1NlowMzExMC8GA1UEAxMoOTA1MDhGRjk4MDA5N0UxOUNFRjY1 RUQ3MkE4NTY2MTZBNkY2OTBBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALYDwXh8xUJXfpLrgclIuIfkNsiZ1skciI1beoGe8GmRcRZBAg+RWjK8Smf0 rWqxw20wVN6RcY3CWGoPLVVd4Mgw9vMLRFOretZmHgxVx3/C3xjZI8QGZYs5zECo uQYLAwFltgNMp+Vcx36r5YiA/VXQuby3EOV1iFF5GF2gubvL8a7U8PvPeiFXMTJF 27HGFe2OcEl+4q71+pk83DlgOx49zdHYTq0RGaB35PoabNg/PJBwO8T+rs8MKgMn 34PH3YtzjS+AMQg2WwZf/OIXJly+vGleXTdsauPsrgso3MdT4pTFo2N9oaQEcthD EkxBXNi12qpfUuEXiJN1harDuTUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJBQj/mACX4ZzvZe1yqFZham9pCrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iODgzZTNiZS01N2UyLTQxMjUtYTBjNS05YTllYTUwMWJmMDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I4ODNlM2Jl LTU3ZTItNDEyNS1hMGM1LTlhOWVhNTAxYmYwNS8wLzkwNTA4RkY5ODAwOTdFMTlD RUY2NUVENzJBODU2NjE2QTZGNjkwQUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAJnd+QwDwQCAAIwCQMHACABDfXxADANBgkqhkiG9w0BAQsFAAOCAQEAVfLRdUV9 41u53RYVPHSeuKsRfWAgaOrVpNJv6S/N7k9XJkDAnmenxKbcDBllF9RSU77feKPO jtmm5J0iBPnopCOqlBTkAv9EuqZRZrtQJyiW1/ldQ0KBNV3JOesszW9yY4ndrTMr wddytGdKdIHozTVKbr61tXZ+Bu5AQLT26mo4gd6J+/tq1BMnsYp5lbNWpN7rjJ7P QMHKyZ+OPQARzD/JyuPv/vwGnOywEWpj1oxmOhJKXn7Y+HppSNVtLUEVrshoV1NO pf5emcVH/ipiDsMtbNYSzX/CLZqSgRfN+YHJz9PO1MYANFyfRDFd/Ud9VBpi071P q2y+ORlPNgy3gA== -----END CERTIFICATE-----Generated at Wed Nov 5 08:26:38 2025 by rpki-client