$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer File: AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.cer (raw, json) Hash identifier: VeKH5QRiBY5KpPs7fwpgiQAWizGdcYzqa3Ih4bPqUg8= Subject key identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 40147A33005070A444D9247AFE1B7B819E1925DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft caRepository: rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 03 Jul 2025 19:56:20 +0000 Certificate not after: Thu 02 Jul 2026 20:01:20 +0000 Subordinate resources: IP: 103.30.212.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:14:7a:33:00:50:70:a4:44:d9:24:7a:fe:1b:7b:81:9e:19:25:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 3 19:56:20 2025 GMT Not After : Jul 2 20:01:20 2026 GMT Subject: CN=AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:84:35:16:0c:e3:9d:4e:79:ae:cd:56:16:4b: 20:76:96:28:66:c7:ab:b3:0b:de:89:c8:48:5c:77: 11:ab:f5:01:c4:e3:89:81:dd:29:2c:f7:11:2f:f3: 58:49:bf:73:1c:a8:3d:d7:27:c8:ec:da:3c:e3:5f: 59:7f:6f:ab:c4:9c:0a:48:54:57:0d:c5:b2:05:12: 61:05:32:40:55:df:23:0a:31:a5:ac:11:ac:3d:3a: 19:68:43:57:0e:bc:3a:a4:27:ac:21:78:24:8a:25: 04:46:fc:5f:f8:2e:12:8a:79:8b:ed:ba:08:ad:a2: 95:b8:cc:03:b7:e2:5b:0b:51:14:fb:cf:d1:86:83: 36:ba:33:3a:2a:46:90:36:b2:ec:94:5b:a6:dd:94: 3c:10:21:9f:cd:13:9c:85:de:ee:23:dc:e1:b3:06: 17:a1:59:e9:87:83:73:4c:97:24:b5:9c:26:7e:36: 86:e1:aa:3c:7a:1b:16:93:d5:01:87:9e:26:ac:b3: 1e:38:5c:2c:cc:25:2b:19:f8:6e:79:1d:16:fd:38: a9:b7:78:89:ec:83:85:5b:84:b1:a9:5f:d3:29:b1: 2f:03:d9:7e:8c:85:00:55:cf:46:53:03:fc:a0:51: 6c:36:73:8a:f4:73:76:66:47:9f:10:04:90:30:cb: 9b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:CF:00:A9:0B:7E:9E:A1:E3:01:82:B0:BF:F9:34:BE:4D:C0:97:1C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2565a1cf-2950-47dc-a212-f653b8c3f5a9/0/AFCF00A90B7E9EA1E30182B0BFF934BE4DC0971C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.30.212.0/24 Signature Algorithm: sha256WithRSAEncryption 63:48:82:69:dd:33:12:5e:f0:f9:9a:49:8a:f3:66:e5:f9:4f: 1d:22:e0:f0:73:f7:08:da:d6:c6:0b:51:35:a8:23:4c:93:de: 02:3a:f3:ac:1b:b9:70:ad:ec:1c:ec:e9:fc:07:e9:eb:2f:6b: a1:08:ec:dc:9b:89:0b:a9:48:7b:ed:e4:7a:73:51:f6:d9:7d: 0b:2f:5b:ac:38:12:72:cf:8a:eb:20:21:ac:4c:a3:d6:ee:83: 9c:1a:2d:9c:c5:49:0b:de:00:7e:cd:0a:83:30:c3:db:d2:40: cb:5a:47:9a:71:27:3f:54:f4:ef:69:00:76:92:7c:ec:c0:c6: 50:76:58:33:42:ce:56:6b:0f:ed:45:4a:e3:03:36:1e:fb:11: d2:ab:2f:19:d6:6f:a8:70:5c:d9:d3:3d:55:f5:0b:f0:1c:d9: 42:e1:8b:5a:a1:ce:98:c0:9a:90:1b:72:e7:f4:13:fa:48:ea: 02:db:c3:2b:cc:b9:d4:73:9c:c7:bc:9f:8c:ac:52:9b:c9:38: 90:16:f5:c3:8e:55:26:42:ea:7a:ac:01:68:54:4d:33:75:f7: 14:6b:61:c3:52:cc:b9:d0:9e:d8:85:97:14:1d:6a:51:fc:99: b7:4d:1f:df:8b:26:51:2e:09:2b:a5:96:2e:bd:1c:33:cd:81: 98:2e:6d:4e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQBR6MwBQcKRE2SR6/ht7gZ4ZJd8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwMzE5NTYyMFoX DTI2MDcwMjIwMDEyMFowMzExMC8GA1UEAxMoQUZDRjAwQTkwQjdFOUVBMUUzMDE4 MkIwQkZGOTM0QkU0REMwOTcxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMeENRYM451Oea7NVhZLIHaWKGbHq7ML3onISFx3Eav1AcTjiYHdKSz3ES/z WEm/cxyoPdcnyOzaPONfWX9vq8ScCkhUVw3FsgUSYQUyQFXfIwoxpawRrD06GWhD Vw68OqQnrCF4JIolBEb8X/guEop5i+26CK2ilbjMA7fiWwtRFPvP0YaDNrozOipG kDay7JRbpt2UPBAhn80TnIXe7iPc4bMGF6FZ6YeDc0yXJLWcJn42huGqPHobFpPV AYeeJqyzHjhcLMwlKxn4bnkdFv04qbd4ieyDhVuEsalf0ymxLwPZfoyFAFXPRlMD /KBRbDZzivRzdmZHnxAEkDDLm6ECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK/PAKkLfp6h4wGCsL/5NL5NwJccMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNTY1YTFjZi0yOTUwLTQ3ZGMtYTIxMi1mNjUzYjhjM2Y1YTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI1NjVhMWNm LTI5NTAtNDdkYy1hMjEyLWY2NTNiOGMzZjVhOS8wL0FGQ0YwMEE5MEI3RTlFQTFF MzAxODJCMEJGRjkzNEJFNERDMDk3MUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnHtQwDQYJKoZIhvcNAQELBQADggEBAGNIgmndMxJe8PmaSYrzZuX5Tx0i4PBz 9wja1sYLUTWoI0yT3gI686wbuXCt7Bzs6fwH6esva6EI7NybiQupSHvt5HpzUfbZ fQsvW6w4EnLPiusgIaxMo9bug5waLZzFSQveAH7NCoMww9vSQMtaR5pxJz9U9O9p AHaSfOzAxlB2WDNCzlZrD+1FSuMDNh77EdKrLxnWb6hwXNnTPVX1C/Ac2ULhi1qh zpjAmpAbcuf0E/pI6gLbwyvMudRznMe8n4ysUpvJOJAW9cOOVSZC6nqsAWhUTTN1 9xRrYcNSzLnQntiFlxQdalH8mbdNH9+LJlEuCSulli69HDPNgZgubU4= -----END CERTIFICATE-----Generated at Wed Aug 6 04:14:01 2025 by rpki-client