$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/98F94938EA9072872BE06639F79DC61C000F849C.cer File: 98F94938EA9072872BE06639F79DC61C000F849C.cer (raw, json) Hash identifier: 0AvzASN9ye644QQ6cx0WZRrpI5JcBPQXmrmXsIpRU3c= Subject key identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 45DDD755AD4AADDFF309A6CCEA2D7ACBCFD71323 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft caRepository: rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 02 Jun 2025 21:07:55 +0000 Certificate not after: Mon 01 Jun 2026 21:12:55 +0000 Subordinate resources: IP: 103.121.148.0/23 IP: 2001:df6:4700::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:dd:d7:55:ad:4a:ad:df:f3:09:a6:cc:ea:2d:7a:cb:cf:d7:13:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 2 21:07:55 2025 GMT Not After : Jun 1 21:12:55 2026 GMT Subject: CN=98F94938EA9072872BE06639F79DC61C000F849C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:e3:ad:76:06:6b:b4:46:7d:26:d1:15:b0: 33:ed:d0:f4:fb:dd:a4:fc:47:8a:a0:b7:4f:41:7e: 7a:6e:96:34:b5:5e:6d:84:e6:32:05:fe:e0:bc:a2: 24:59:0a:00:40:97:0d:bf:17:74:3f:16:39:4a:6a: ad:a3:69:19:41:73:a3:24:aa:f0:69:ad:35:7a:12: b5:08:84:ed:a5:68:3a:99:6a:4c:80:68:e2:2d:77: a4:d4:80:4e:f1:7b:46:33:cc:59:9b:7c:ba:f7:52: aa:d4:70:12:c6:93:31:b2:15:dc:a1:94:78:28:81: d3:d1:a5:23:4f:7a:7f:1c:01:98:a8:65:ed:38:f5: 61:01:26:b2:ab:e2:78:87:24:cd:6e:a8:7d:00:a3: d1:50:62:54:02:85:95:58:f7:37:73:be:19:78:bf: 9a:64:19:2a:b8:ec:9d:4c:8d:58:86:06:28:db:60: a5:a3:d3:87:41:4e:f3:01:e6:97:5b:91:a4:e0:38: 86:dd:2c:69:6e:b9:47:d8:e7:b6:4c:07:29:70:88: 03:af:8a:83:98:bb:7e:53:44:fc:23:17:f4:35:1b: 15:2a:76:3c:95:b6:9a:71:aa:67:14:44:6a:2e:f2: 6f:0d:93:71:4c:1c:b9:f8:e6:93:25:b8:a3:15:6a: 2c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:F9:49:38:EA:90:72:87:2B:E0:66:39:F7:9D:C6:1C:00:0F:84:9C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/53b146a2-7715-459f-8244-8b32a364663c/0/98F94938EA9072872BE06639F79DC61C000F849C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.148.0/23 IPv6: 2001:df6:4700::/48 Signature Algorithm: sha256WithRSAEncryption 42:3e:7b:2c:1d:44:56:32:91:2f:ae:e9:30:d9:37:29:a9:ea: 21:58:09:49:4e:a7:bb:02:bc:9e:99:36:f7:6b:33:fb:0d:e0: 0e:61:90:30:35:13:50:46:c3:75:21:da:4b:40:95:fb:88:73: 0b:8a:4b:a4:48:66:e3:33:06:88:8b:85:f0:ed:54:fe:d6:8e: 52:c1:31:01:2f:5b:a8:69:4e:71:bb:ba:9e:10:d1:33:ba:3b: f8:4c:16:ad:09:1b:eb:b0:79:56:d6:12:a2:7d:9e:4a:19:83: 9d:ad:15:71:5d:e7:68:37:b0:b1:01:5d:0e:ab:20:d6:a6:51: 0f:28:6d:3a:7f:f3:1e:79:8d:ba:7f:dd:2e:b5:b2:69:63:3b: a4:0c:1c:fc:7f:53:b0:36:8d:86:59:5e:ec:21:e1:76:62:94: 3f:c9:73:af:78:f8:24:d1:f0:11:32:72:67:99:2c:a9:76:aa: 15:c4:67:79:ce:2f:21:e6:04:0e:0a:60:10:2a:d3:02:95:81: 29:4f:4c:b0:a3:bb:de:53:b5:1d:ff:0b:a2:8b:b8:08:2c:de: 2b:8d:2e:51:63:94:bd:a8:d2:be:80:5f:cb:3f:1b:c8:25:4d: af:f0:b9:69:f7:e5:96:02:86:ae:a3:0d:0f:a5:43:5c:f1:06: c8:7e:57:45 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIURd3XVa1Krd/zCabM6i16y8/XEyMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMjIxMDc1NVoX DTI2MDYwMTIxMTI1NVowMzExMC8GA1UEAxMoOThGOTQ5MzhFQTkwNzI4NzJCRTA2 NjM5Rjc5REM2MUMwMDBGODQ5QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUr4612Bmu0Rn0m0RWwM+3Q9PvdpPxHiqC3T0F+em6WNLVebYTmMgX+4Lyi JFkKAECXDb8XdD8WOUpqraNpGUFzoySq8GmtNXoStQiE7aVoOplqTIBo4i13pNSA TvF7RjPMWZt8uvdSqtRwEsaTMbIV3KGUeCiB09GlI096fxwBmKhl7Tj1YQEmsqvi eIckzW6ofQCj0VBiVAKFlVj3N3O+GXi/mmQZKrjsnUyNWIYGKNtgpaPTh0FO8wHm l1uRpOA4ht0saW65R9jntkwHKXCIA6+Kg5i7flNE/CMX9DUbFSp2PJW2mnGqZxRE ai7ybw2TcUwcufjmkyW4oxVqLO8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJj5STjqkHKHK+BmOfedxhwAD4ScMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81M2IxNDZhMi03NzE1LTQ1OWYtODI0NC04YjMyYTM2NDY2M2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUzYjE0NmEy LTc3MTUtNDU5Zi04MjQ0LThiMzJhMzY0NjYzYy8wLzk4Rjk0OTM4RUE5MDcyODcy QkUwNjYzOUY3OURDNjFDMDAwRjg0OUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFneZQwDwQCAAIwCQMHACABDfZHADANBgkqhkiG9w0BAQsFAAOCAQEAQj57LB1E VjKRL67pMNk3KanqIVgJSU6nuwK8npk292sz+w3gDmGQMDUTUEbDdSHaS0CV+4hz C4pLpEhm4zMGiIuF8O1U/taOUsExAS9bqGlOcbu6nhDRM7o7+EwWrQkb67B5VtYS on2eShmDna0VcV3naDewsQFdDqsg1qZRDyhtOn/zHnmNun/dLrWyaWM7pAwc/H9T sDaNhlle7CHhdmKUP8lzr3j4JNHwETJyZ5ksqXaqFcRnec4vIeYEDgpgECrTApWB KU9MsKO73lO1Hf8Loou4CCzeK40uUWOUvajSvoBfyz8byCVNr/C5affllgKGrqMN D6VDXPEGyH5XRQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:00 2025 by rpki-client