$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer File: 994DAB84DB40175C3635F0F432BAABCF20F5E80A.cer (raw, json) Hash identifier: w8FtNFgESpQKhnm+jdOI8pv1NvPblSf+itueoAmXSdM= Subject key identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 23A1DAC672AFF69D5A3D7BE664D1290EFF2DA142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft caRepository: rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Jun 2025 19:18:23 +0000 Certificate not after: Thu 04 Jun 2026 19:23:23 +0000 Subordinate resources: IP: 103.35.219.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:04:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a1:da:c6:72:af:f6:9d:5a:3d:7b:e6:64:d1:29:0e:ff:2d:a1:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 5 19:18:23 2025 GMT Not After : Jun 4 19:23:23 2026 GMT Subject: CN=994DAB84DB40175C3635F0F432BAABCF20F5E80A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:12:38:97:64:4e:45:53:a7:c5:c3:6e:a5: ce:56:58:19:27:81:35:e0:b2:f0:b1:1f:b9:93:3c: 4b:9b:b0:b4:e2:7e:ba:c3:15:34:48:92:03:69:3e: 76:af:e2:67:fd:4a:c9:c3:a5:0e:db:f4:f9:0d:b2: b6:bd:99:67:44:d5:ad:46:60:ef:06:53:f5:28:12: 05:45:0a:ec:d9:dc:fc:c5:b5:43:46:15:1a:61:0d: 2e:79:82:90:12:f4:0c:8f:01:9f:6d:ee:ad:68:a7: 96:1c:30:d5:04:80:c1:81:e2:3f:82:b5:5a:75:00: 26:55:46:96:e5:44:3c:a3:74:49:42:a9:ab:c8:d4: cf:3d:ad:ca:6d:89:34:71:dc:11:b1:a2:b2:8c:b8: c5:d1:89:80:71:e3:9a:4e:04:45:70:f9:9d:df:e3: f8:3b:cf:ec:63:9a:d3:0a:1e:33:49:6e:28:5d:26: bc:d1:dc:2c:e7:72:56:dc:86:1a:60:2f:eb:37:16: 95:bb:13:d2:6f:c6:5b:c3:1f:61:a6:d6:32:05:23: 86:9d:35:28:be:f9:01:20:8b:e6:51:bb:28:3b:06: 29:4e:8d:0e:51:e1:9f:28:04:ec:c3:73:85:53:b5: 18:8b:39:3b:e2:74:e1:d9:76:71:7c:83:51:29:39: d0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:4D:AB:84:DB:40:17:5C:36:35:F0:F4:32:BA:AB:CF:20:F5:E8:0A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d2d42a29-bd48-4ef7-af48-0aa0d35db37b/0/994DAB84DB40175C3635F0F432BAABCF20F5E80A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.35.219.0/24 Signature Algorithm: sha256WithRSAEncryption 94:14:54:f2:a1:9c:1d:60:65:94:58:72:6a:f0:c1:79:97:35: fd:ee:ba:54:f3:91:bc:a4:23:1d:fc:e7:f5:c9:c4:53:60:10: 48:60:b5:9c:70:23:f0:53:4d:92:7e:a7:af:b6:6f:fa:24:55: 3f:6e:06:87:5b:ad:54:da:76:e6:a3:d5:24:36:95:9e:f2:f6: 7e:08:a4:b8:55:76:01:4d:a1:95:f0:61:3e:85:b6:79:53:4e: a2:e4:a5:70:52:bc:29:bf:d4:4a:0a:3f:53:d0:7c:90:2f:9a: fe:47:78:3e:dd:3d:98:83:b3:5f:7b:41:9e:db:cb:6c:f3:2d: a6:02:a1:f2:14:43:74:94:e6:ac:99:ee:f3:26:d6:c3:c0:af: ba:68:2e:81:7a:d6:5a:09:d1:b5:7b:2e:55:4d:d7:7b:3b:a5: f3:ae:8d:cd:13:81:42:60:a3:52:31:cb:4d:07:04:27:42:b5: ef:4b:0b:a4:82:5d:7b:f0:da:3b:5a:23:c1:6b:4e:5c:86:80: cc:1b:79:8c:6d:0e:40:26:c7:96:09:85:f4:b6:66:dc:4e:20: 17:1e:7e:60:22:37:3f:a8:e3:ef:6a:4e:3e:41:ee:c6:52:73: 84:e9:78:c9:0e:3a:f0:78:9d:7f:37:1a:53:63:85:56:0f:37: fe:ec:ac:d5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUI6HaxnKv9p1aPXvmZNEpDv8toUIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwNTE5MTgyM1oX DTI2MDYwNDE5MjMyM1owMzExMC8GA1UEAxMoOTk0REFCODREQjQwMTc1QzM2MzVG MEY0MzJCQUFCQ0YyMEY1RTgwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2rEjiXZE5FU6fFw26lzlZYGSeBNeCy8LEfuZM8S5uwtOJ+usMVNEiSA2k+ dq/iZ/1KycOlDtv0+Q2ytr2ZZ0TVrUZg7wZT9SgSBUUK7Nnc/MW1Q0YVGmENLnmC kBL0DI8Bn23urWinlhww1QSAwYHiP4K1WnUAJlVGluVEPKN0SUKpq8jUzz2tym2J NHHcEbGisoy4xdGJgHHjmk4ERXD5nd/j+DvP7GOa0woeM0luKF0mvNHcLOdyVtyG GmAv6zcWlbsT0m/GW8MfYabWMgUjhp01KL75ASCL5lG7KDsGKU6NDlHhnygE7MNz hVO1GIs5O+J04dl2cXyDUSk50McCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJlNq4TbQBdcNjXw9DK6q88g9egKMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMmQ0MmEyOS1iZDQ4LTRlZjctYWY0OC0wYWEwZDM1ZGIzN2IvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyZDQyYTI5 LWJkNDgtNGVmNy1hZjQ4LTBhYTBkMzVkYjM3Yi8wLzk5NERBQjg0REI0MDE3NUMz NjM1RjBGNDMyQkFBQkNGMjBGNUU4MEEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnI9swDQYJKoZIhvcNAQELBQADggEBAJQUVPKhnB1gZZRYcmrwwXmXNf3uulTz kbykIx385/XJxFNgEEhgtZxwI/BTTZJ+p6+2b/okVT9uBodbrVTaduaj1SQ2lZ7y 9n4IpLhVdgFNoZXwYT6FtnlTTqLkpXBSvCm/1EoKP1PQfJAvmv5HeD7dPZiDs197 QZ7by2zzLaYCofIUQ3SU5qyZ7vMm1sPAr7poLoF61loJ0bV7LlVN13s7pfOujc0T gUJgo1Ixy00HBCdCte9LC6SCXXvw2jtaI8FrTlyGgMwbeYxtDkAmx5YJhfS2ZtxO IBcefmAiNz+o4+9qTj5B7sZSc4TpeMkOOvB4nX83GlNjhVYPN/7srNU= -----END CERTIFICATE-----Generated at Mon Jun 16 13:32:48 2025 by rpki-client