$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer File: AF52E716DE71EEA9353FEA92FBF72DA2106A594C.cer (raw, json) Hash identifier: 7MoXiI3gkrH0ILgCYnu6RnT+NQjkl3GoGmxchBs21tE= Subject key identifier: AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 57A53BB16CA4956322822DE57DB1451992C62CCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft caRepository: rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 06:54:37 +0000 Certificate not after: Tue 02 Jun 2026 06:59:37 +0000 Subordinate resources: IP: 103.15.226.0/24 IP: 103.28.52.0/23 IP: 103.55.36.0/22 IP: 103.236.201.0/24 IP: 2001:df7:7400::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a5:3b:b1:6c:a4:95:63:22:82:2d:e5:7d:b1:45:19:92:c6:2c:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 06:54:37 2025 GMT Not After : Jun 2 06:59:37 2026 GMT Subject: CN=AF52E716DE71EEA9353FEA92FBF72DA2106A594C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4b:ec:61:13:42:ab:e2:c1:9d:3f:24:e9:bb: 2f:aa:b5:fb:a1:de:9e:1f:2a:4f:69:f0:3c:f1:26: a8:a9:a3:8a:ee:47:e4:8f:e6:2d:a9:9b:e8:53:8e: 6b:32:22:2b:c1:3d:ce:da:9a:cb:c7:42:26:7f:b6: 54:ec:f0:1d:f5:1f:1b:77:a3:47:96:47:90:31:6b: fd:bd:5b:83:fb:55:c1:9a:c6:63:e0:bd:c5:f6:6e: fe:e2:bb:3b:e7:02:0c:5b:66:22:52:dd:c6:5f:03: 9a:3a:d7:dd:22:60:98:0c:15:8c:58:cb:d1:ec:11: fd:8b:5c:50:fe:b1:e7:5f:7a:8d:55:5d:6a:62:5e: 98:99:1a:44:ad:e9:69:45:3b:fe:aa:9c:bd:91:1d: 59:93:a7:88:d4:27:2d:fc:1e:92:ed:4f:22:c0:dc: 63:83:12:5f:14:14:32:6c:a1:99:08:78:c9:98:ca: 79:34:11:ca:02:3c:96:0f:02:d7:42:52:6e:2c:07: 85:1a:2f:53:87:60:46:41:ff:92:00:5e:08:5f:29: cb:0d:dc:08:f6:93:f8:b2:3e:70:3e:80:94:39:0b: d6:3a:7e:71:77:ee:51:12:c8:c0:21:a7:6f:1c:35: b3:c8:48:07:ee:0e:06:1f:b0:27:af:28:61:06:7f: 2b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:52:E7:16:DE:71:EE:A9:35:3F:EA:92:FB:F7:2D:A2:10:6A:59:4C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/52ac0ca5-5ce7-4e6e-9fff-7213ef1ef364/0/AF52E716DE71EEA9353FEA92FBF72DA2106A594C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.15.226.0/24 103.28.52.0/23 103.55.36.0/22 103.236.201.0/24 IPv6: 2001:df7:7400::/48 Signature Algorithm: sha256WithRSAEncryption 10:5a:69:d4:71:8a:4b:2a:b4:b8:4e:f5:43:9c:59:1d:43:0f: ff:7b:db:87:63:f6:eb:65:1f:7b:c5:90:65:0c:27:9e:aa:1d: a0:78:34:87:c1:96:d1:85:82:d7:8e:a4:b1:82:10:02:bd:8f: d8:01:c6:ed:3e:85:d9:20:cb:29:ed:30:07:7f:4a:59:c2:80: bd:72:f5:ba:cf:54:73:13:40:c3:31:03:ba:41:2b:03:f4:7c: d1:f4:4e:29:a8:8c:dc:0d:be:6a:50:5e:e1:ec:56:8d:37:d9: 87:50:4c:7a:7d:c9:8f:b5:bd:13:0a:2d:25:72:c7:7b:5d:23: 7d:ab:1c:b3:7c:06:a1:68:9d:12:8a:89:5b:a8:18:be:90:b9: 5d:8d:f7:dc:85:68:da:b0:ac:80:00:ce:86:5e:90:cd:0e:f1: 88:27:68:c8:31:5b:33:6e:8a:ec:94:bb:b3:fb:ff:4c:ec:32: 05:b0:9d:7f:46:7f:1b:c4:3c:f7:04:86:ed:e3:2e:81:09:fa: 0c:2a:51:76:94:f1:42:a0:05:07:42:99:cb:4a:0a:92:c8:56: 93:84:98:4c:f3:7a:40:d0:12:ab:63:ae:cc:e0:c9:fe:11:46: 1a:d1:bd:2f:12:27:d2:dd:9d:f5:ac:8d:0e:4a:e5:d6:2f:6e: c5:bc:7e:bb -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgIUV6U7sWyklWMigi3lfbFFGZLGLM8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzA2NTQzN1oX DTI2MDYwMjA2NTkzN1owMzExMC8GA1UEAxMoQUY1MkU3MTZERTcxRUVBOTM1M0ZF QTkyRkJGNzJEQTIxMDZBNTk0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxL7GETQqviwZ0/JOm7L6q1+6Henh8qT2nwPPEmqKmjiu5H5I/mLamb6FOO azIiK8E9ztqay8dCJn+2VOzwHfUfG3ejR5ZHkDFr/b1bg/tVwZrGY+C9xfZu/uK7 O+cCDFtmIlLdxl8DmjrX3SJgmAwVjFjL0ewR/YtcUP6x5196jVVdamJemJkaRK3p aUU7/qqcvZEdWZOniNQnLfweku1PIsDcY4MSXxQUMmyhmQh4yZjKeTQRygI8lg8C 10JSbiwHhRovU4dgRkH/kgBeCF8pyw3cCPaT+LI+cD6AlDkL1jp+cXfuURLIwCGn bxw1s8hIB+4OBh+wJ68oYQZ/K4ECAwEAAaOCAtswggLXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK9S5xbece6pNT/qkvv3LaIQallMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MmFjMGNhNS01Y2U3LTRlNmUtOWZmZi03MjEzZWYxZWYzNjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyYWMwY2E1 LTVjZTctNGU2ZS05ZmZmLTcyMTNlZjFlZjM2NC8wL0FGNTJFNzE2REU3MUVFQTkz NTNGRUE5MkZCRjcyREEyMTA2QTU5NEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQgYIKwYBBQUHAQcBAf8EMzAxMB4EAgABMBgD BABnD+IDBAFnHDQDBAJnNyQDBABn7MkwDwQCAAIwCQMHACABDfd0ADANBgkqhkiG 9w0BAQsFAAOCAQEAEFpp1HGKSyq0uE71Q5xZHUMP/3vbh2P262Ufe8WQZQwnnqod oHg0h8GW0YWC146ksYIQAr2P2AHG7T6F2SDLKe0wB39KWcKAvXL1us9UcxNAwzED ukErA/R80fROKaiM3A2+alBe4exWjTfZh1BMen3Jj7W9EwotJXLHe10jfascs3wG oWidEoqJW6gYvpC5XY333IVo2rCsgADOhl6QzQ7xiCdoyDFbM26K7JS7s/v/TOwy BbCdf0Z/G8Q89wSG7eMugQn6DCpRdpTxQqAFB0KZy0oKkshWk4SYTPN6QNASq2Ou zODJ/hFGGtG9LxIn0t2d9ayNDkrl1i9uxbx+uw== -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:31 2025 by rpki-client