$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer (raw, json) Hash identifier: yXXslmT5makdsvi3RepYYfAI0HL7CpdxXZGQUOoZaXc= Subject key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 743880D7307773F1607D54CE91290E7468F8DB85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft caRepository: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 11 Apr 2025 02:06:29 +0000 Certificate not after: Fri 10 Apr 2026 02:11:29 +0000 Subordinate resources: IP: 103.170.236.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 18:12:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:38:80:d7:30:77:73:f1:60:7d:54:ce:91:29:0e:74:68:f8:db:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 11 02:06:29 2025 GMT Not After : Apr 10 02:11:29 2026 GMT Subject: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:61:2c:22:2b:de:95:9c:75:65:39:6a:ae:30: c1:f5:a8:2b:33:ed:96:6f:7e:5f:89:84:45:81:67: 30:1c:e1:db:ef:2f:9e:9c:fd:94:0d:03:d8:fd:99: d1:e9:29:63:b6:84:e1:48:19:5f:f4:ce:17:4a:87: 5c:e0:62:0a:c3:1b:3f:14:d3:22:89:31:d5:29:16: d3:3e:13:1c:f5:bd:6d:6f:3c:76:5e:0e:ca:75:7f: 92:51:3e:df:19:59:72:96:b2:a3:d2:88:83:7e:ad: e5:e0:f3:6d:c6:d2:f8:5f:a8:7c:64:bf:29:d3:0b: d8:97:76:ff:5d:04:87:5a:24:cb:49:62:eb:6f:b2: 3b:c3:cb:35:b5:27:d0:5b:ee:b8:db:2a:10:e2:a6: 54:05:dc:f2:8c:3b:aa:26:a0:40:ae:94:3e:1d:2d: cb:4a:1b:fc:01:96:0b:d5:01:11:31:55:52:1e:18: c2:ee:45:51:8f:cf:60:03:4c:30:f6:af:bb:aa:80: a4:b5:34:50:99:39:e6:45:ce:9e:ce:a5:20:17:f1: 72:4e:a7:c3:79:b5:60:7b:be:a4:a7:8c:24:21:10: eb:3b:54:24:c5:61:09:b6:80:04:43:b7:b7:c3:0f: dc:0a:1e:14:8b:ef:29:e5:d4:d2:e3:a0:ec:bc:ff: cc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.236.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:9a:94:b2:44:bf:94:4b:b6:b2:78:94:69:fa:c2:9a:54:30: 4f:a1:32:c4:75:37:0b:97:84:be:c1:e5:e7:b7:a0:1a:ab:21: 2e:da:5d:49:cb:85:d7:6b:b2:f3:f3:94:73:8e:19:9a:05:4e: df:68:0a:37:bd:d3:4d:47:6c:b9:81:c1:a3:38:ab:3d:eb:b1: 30:97:1d:8b:75:bb:0a:2d:d6:ad:78:f6:17:3a:3b:ce:06:e5: 52:62:e9:f7:95:f0:44:3f:80:cd:c7:09:c4:ee:41:82:f9:74: 91:b6:f1:ca:09:f1:c6:6d:6a:70:0c:36:ae:cd:12:b3:cc:8a: 76:88:92:d7:d6:5e:42:38:db:c7:3a:66:37:e0:13:1f:a8:d7: 30:0e:c8:78:b0:27:c0:51:dd:02:0c:86:02:79:7f:c5:c4:c2: e9:dd:95:6f:92:b5:7d:cb:3c:48:dd:29:f5:1c:c9:fa:da:45: 3e:02:79:f5:58:27:54:b8:e7:33:f4:6f:90:dd:be:fc:16:ac: 97:af:f0:ef:e4:de:fc:6d:24:71:29:62:ce:a9:16:08:f8:27: 55:8a:9f:35:6c:31:34:81:5a:b2:79:e8:63:59:fa:52:25:af: 46:c7:28:df:d5:3a:f6:b2:a7:3b:68:46:1d:d7:e4:5c:86:92: 51:73:91:5d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdDiA1zB3c/FgfVTOkSkOdGj424UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxMTAyMDYyOVoX DTI2MDQxMDAyMTEyOVowMzExMC8GA1UEAxMoOUYwMkE5Qjg3Q0M1RjgxQTIyRThF NThEMkVDMTJFNkUwNjU4OEEwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOBhLCIr3pWcdWU5aq4wwfWoKzPtlm9+X4mERYFnMBzh2+8vnpz9lA0D2P2Z 0ekpY7aE4UgZX/TOF0qHXOBiCsMbPxTTIokx1SkW0z4THPW9bW88dl4OynV/klE+ 3xlZcpayo9KIg36t5eDzbcbS+F+ofGS/KdML2Jd2/10Eh1oky0li62+yO8PLNbUn 0FvuuNsqEOKmVAXc8ow7qiagQK6UPh0ty0ob/AGWC9UBETFVUh4Ywu5FUY/PYANM MPavu6qApLU0UJk55kXOns6lIBfxck6nw3m1YHu+pKeMJCEQ6ztUJMVhCbaABEO3 t8MP3AoeFIvvKeXU0uOg7Lz/zDkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ8Cqbh8xfgaIujljS7BLm4GWIoDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YmZhNDI2NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZiZmE0MjY1 LWJiNTgtNDZlMi04MzA5LTNhZDM5ODFhMzUxNi8wLzlGMDJBOUI4N0NDNUY4MUEy MkU4RTU4RDJFQzEyRTZFMDY1ODhBMDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnquwwDQYJKoZIhvcNAQELBQADggEBAJqalLJEv5RLtrJ4lGn6wppUME+hMsR1 NwuXhL7B5ee3oBqrIS7aXUnLhddrsvPzlHOOGZoFTt9oCje9001HbLmBwaM4qz3r sTCXHYt1uwot1q149hc6O84G5VJi6feV8EQ/gM3HCcTuQYL5dJG28coJ8cZtanAM Nq7NErPMinaIktfWXkI428c6ZjfgEx+o1zAOyHiwJ8BR3QIMhgJ5f8XEwundlW+S tX3LPEjdKfUcyfraRT4CefVYJ1S45zP0b5DdvvwWrJev8O/k3vxtJHEpYs6pFgj4 J1WKnzVsMTSBWrJ56GNZ+lIlr0bHKN/VOvaypztoRh3X5FyGklFzkV0= -----END CERTIFICATE-----Generated at Wed Nov 5 15:04:34 2025 by rpki-client