$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer File: 9C11A28FECE27B65C7E6475906C6CCB974C04C40.cer (raw, json) Hash identifier: wm7bN1T25il7iTQav2Hqu/9sPA0mx7JkV3MrjrxOZGc= Subject key identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3FB5A68E9D7BAA346645A9354D34874D88FA154D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft caRepository: rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 22 Jul 2025 10:49:11 +0000 Certificate not after: Tue 21 Jul 2026 10:54:11 +0000 Subordinate resources: IP: 202.90.198.0/23 IP: 2001:df0:c5::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:b5:a6:8e:9d:7b:aa:34:66:45:a9:35:4d:34:87:4d:88:fa:15:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 22 10:49:11 2025 GMT Not After : Jul 21 10:54:11 2026 GMT Subject: CN=9C11A28FECE27B65C7E6475906C6CCB974C04C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:35:fc:0f:d7:c5:32:72:c5:e1:fc:e6:15:27: d3:af:6b:c8:f5:eb:b6:f0:0f:fe:34:af:1d:38:ed: 64:2d:57:4e:27:4a:0f:c3:17:3a:6c:a5:39:dc:d6: 89:ec:02:27:ec:7d:0a:e3:dc:a9:10:1e:ed:b9:93: b1:0a:19:ca:64:f8:ed:62:42:e1:b8:c4:9e:2b:b8: a7:3e:cc:a7:c0:19:72:7d:7a:1a:d1:d7:31:8b:42: eb:f0:2c:9b:31:34:46:c5:b5:78:59:8a:94:66:61: 3f:34:88:a8:81:49:06:31:2d:8c:f0:11:c1:5f:e2: a8:3e:90:05:d5:33:a9:83:ae:5d:a2:20:5b:c7:12: cb:ab:7b:59:62:26:be:3f:17:01:57:3d:09:22:86: c7:d7:58:dd:9c:c5:75:87:58:74:45:eb:4f:eb:8e: 6a:89:0b:f2:b9:db:a8:4c:83:a7:8b:f5:db:cc:3e: ab:d5:60:4e:0f:41:d8:76:c9:fc:ae:23:2c:fa:cf: 87:8a:21:34:26:e0:10:af:2c:2f:19:a4:25:a8:8d: 00:dd:0b:86:f0:75:32:fe:09:4f:ed:77:5b:de:a1: fe:9e:70:59:84:4e:6a:5d:ac:9d:a5:23:42:1c:70: 10:47:a5:0d:9a:27:30:50:e6:21:20:33:1d:fe:3f: 12:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9C:11:A2:8F:EC:E2:7B:65:C7:E6:47:59:06:C6:CC:B9:74:C0:4C:40 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/74e1f370-f31f-47ed-8a41-b28bc8daf435/0/9C11A28FECE27B65C7E6475906C6CCB974C04C40.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.90.198.0/23 IPv6: 2001:df0:c5::/48 Signature Algorithm: sha256WithRSAEncryption 6d:cd:16:8c:24:2c:ab:1a:72:f1:c9:93:85:9d:08:72:77:20: e0:b2:52:a0:89:5c:5c:90:42:ba:7f:ec:5c:27:e7:f7:ae:59: fa:68:ce:9d:50:ca:3e:52:37:ac:bd:c9:f0:84:3e:55:35:af: 23:70:4e:50:31:35:da:c5:10:0d:b8:04:53:30:38:8f:bf:91: 66:cc:d2:6e:e7:c8:d1:3e:f3:ff:b1:a9:33:7f:32:37:f0:65: 99:7b:36:0e:c3:5b:4e:93:df:a1:a4:8d:60:33:c9:2e:a6:b7: be:7e:ac:1a:51:77:af:8c:70:0d:10:23:39:2a:b9:a6:8a:9d: 04:15:8a:d0:0f:15:14:f9:32:56:45:99:be:f8:a7:a3:de:af: a7:84:03:5d:df:ee:c8:59:5a:ef:11:69:58:38:b1:14:9a:47: e3:43:80:8a:82:43:2d:30:24:e0:ac:05:0c:06:18:7f:48:c5: 1f:d5:31:8f:42:44:6a:a6:77:6d:64:8c:6e:3e:73:71:ed:61: a4:2d:6a:b0:59:6b:e4:c3:4c:87:c0:21:ec:60:e6:d4:2d:0b: 69:00:aa:ac:83:83:17:85:7b:43:90:c9:ed:0a:0f:ab:eb:83: 70:65:a4:da:ab:ec:9c:ab:49:d2:46:65:7c:f7:8b:1d:c2:e0: 4f:88:75:3d -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUP7Wmjp17qjRmRak1TTSHTYj6FU0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyMjEwNDkxMVoX DTI2MDcyMTEwNTQxMVowMzExMC8GA1UEAxMoOUMxMUEyOEZFQ0UyN0I2NUM3RTY0 NzU5MDZDNkNDQjk3NEMwNEM0MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOs1/A/XxTJyxeH85hUn069ryPXrtvAP/jSvHTjtZC1XTidKD8MXOmylOdzW iewCJ+x9CuPcqRAe7bmTsQoZymT47WJC4bjEniu4pz7Mp8AZcn16GtHXMYtC6/As mzE0RsW1eFmKlGZhPzSIqIFJBjEtjPARwV/iqD6QBdUzqYOuXaIgW8cSy6t7WWIm vj8XAVc9CSKGx9dY3ZzFdYdYdEXrT+uOaokL8rnbqEyDp4v128w+q9VgTg9B2HbJ /K4jLPrPh4ohNCbgEK8sLxmkJaiNAN0LhvB1Mv4JT+13W96h/p5wWYROal2snaUj QhxwEEelDZonMFDmISAzHf4/EhsCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJwRoo/s4ntlx+ZHWQbGzLl0wExAMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NGUxZjM3MC1mMzFmLTQ3ZWQtOGE0MS1iMjhiYzhkYWY0MzUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0ZTFmMzcw LWYzMWYtNDdlZC04YTQxLWIyOGJjOGRhZjQzNS8wLzlDMTFBMjhGRUNFMjdCNjVD N0U2NDc1OTA2QzZDQ0I5NzRDMDRDNDAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAHKWsYwDwQCAAIwCQMHACABDfAAxTANBgkqhkiG9w0BAQsFAAOCAQEAbc0WjCQs qxpy8cmThZ0Icncg4LJSoIlcXJBCun/sXCfn965Z+mjOnVDKPlI3rL3J8IQ+VTWv I3BOUDE12sUQDbgEUzA4j7+RZszSbufI0T7z/7GpM38yN/BlmXs2DsNbTpPfoaSN YDPJLqa3vn6sGlF3r4xwDRAjOSq5poqdBBWK0A8VFPkyVkWZvvino96vp4QDXd/u yFla7xFpWDixFJpH40OAioJDLTAk4KwFDAYYf0jFH9Uxj0JEaqZ3bWSMbj5zce1h pC1qsFlr5MNMh8Ah7GDm1C0LaQCqrIODF4V7Q5DJ7QoPq+uDcGWk2qvsnKtJ0kZl fPeLHcLgT4h1PQ== -----END CERTIFICATE-----Generated at Wed Aug 6 03:59:20 2025 by rpki-client