$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer File: C00606846C7D0E540F5703EC90A0C331460D7ECA.cer (raw, json) Hash identifier: uU8oAjpOP+w0x8Igs9gTB/PXZMYWXfqbLJkeAht2Iu0= Subject key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7B41A506E44E4812681717B227EB07230CAD4444 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft caRepository: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 04:32:26 +0000 Certificate not after: Tue 02 Jun 2026 04:37:26 +0000 Subordinate resources: IP: 103.71.160.0/22 IP: 2406:9880::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 09:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:41:a5:06:e4:4e:48:12:68:17:17:b2:27:eb:07:23:0c:ad:44:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 04:32:26 2025 GMT Not After : Jun 2 04:37:26 2026 GMT Subject: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a7:c7:52:31:e2:15:9a:d0:08:30:0d:a2:67: 9d:11:4c:bc:20:bf:78:f4:a1:85:61:df:67:77:77: 61:77:18:de:dd:3a:f6:2d:ba:c2:ce:a9:98:39:49: ec:be:36:8c:15:73:58:77:cf:76:19:25:77:ac:68: 2c:68:d4:c5:0e:63:77:8c:e7:4f:4b:10:dd:e8:0e: 33:20:d8:b4:24:41:0e:f3:d7:19:8b:87:36:dd:09: 8f:4e:fe:30:0c:86:76:8b:2e:e8:1c:1a:df:7e:10: 3c:3a:32:82:ee:ae:1e:b4:ae:45:82:05:5e:76:84: 30:d9:17:e3:98:82:2f:e5:53:00:4f:cd:cc:b6:b8: 23:38:9d:ba:64:e3:97:0c:82:67:28:c4:c4:09:1e: 17:73:ea:1c:82:7e:bb:ba:ed:c6:69:2a:37:4f:05: ad:ee:ca:03:8b:a2:2d:1c:a6:bc:ab:01:63:6b:6f: ba:65:7c:f4:78:da:21:0c:06:cd:6a:e0:27:0d:a3: e6:9b:63:19:aa:96:97:f9:49:92:59:3b:7e:7a:95: 5b:4f:92:eb:1a:ed:cd:21:8f:b9:c2:81:33:66:a2: ac:78:6e:6e:ef:99:9c:49:21:6e:80:f4:d2:e1:6a: ac:91:4b:79:40:9e:b4:7a:7a:5d:ab:26:93:95:f9: b4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.160.0/22 IPv6: 2406:9880::/32 Signature Algorithm: sha256WithRSAEncryption 28:da:5a:b8:37:a9:5c:b1:46:32:18:36:59:e0:ff:3d:1a:6e: 4f:75:6f:9c:34:dc:84:d5:88:da:3f:7c:d4:74:02:7c:c6:ee: fe:59:33:e4:97:86:b7:91:3f:ad:65:e8:1e:c1:f1:ed:88:d1: f9:c7:37:b4:6c:5c:59:2f:c7:78:93:2d:87:9b:6a:ad:ef:33: 2b:13:8f:ab:9a:26:fb:de:c3:8f:f1:94:f5:fe:5f:a9:ab:31: 56:6a:dc:7a:c9:cb:cf:22:a9:8e:26:63:67:c2:b6:8f:6b:d8: a5:eb:b3:c1:c7:80:13:ce:bc:55:c3:eb:ce:aa:d1:94:be:4b: 2a:bf:80:c2:43:7d:27:a2:78:94:ed:e9:48:79:36:11:f1:26: a6:d9:18:12:9c:76:b9:c5:03:4a:fc:49:0d:82:54:f5:d3:ea: 98:c6:88:76:fe:f4:88:c1:90:3a:a5:8d:10:96:76:e1:1d:0f: cb:4e:9c:94:48:0a:e6:d2:6e:c4:62:25:5d:4f:77:c8:d9:72: b2:98:26:e0:6b:f7:76:42:26:3e:42:bc:85:0b:f9:6d:96:61: b0:4c:1b:7d:40:2a:89:e6:23:7a:94:6b:50:da:9c:f4:84:31: 32:01:c2:58:ba:06:c0:46:58:24:6d:6b:cf:7d:50:e7:d6:c4: da:fd:c3:25 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUe0GlBuROSBJoFxeyJ+sHIwytREQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzA0MzIyNloX DTI2MDYwMjA0MzcyNlowMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcw M0VDOTBBMEMzMzE0NjBEN0VDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO2nx1Ix4hWa0AgwDaJnnRFMvCC/ePShhWHfZ3d3YXcY3t069i26ws6pmDlJ 7L42jBVzWHfPdhkld6xoLGjUxQ5jd4znT0sQ3egOMyDYtCRBDvPXGYuHNt0Jj07+ MAyGdosu6Bwa334QPDoygu6uHrSuRYIFXnaEMNkX45iCL+VTAE/NzLa4IzidumTj lwyCZyjExAkeF3PqHIJ+u7rtxmkqN08Fre7KA4uiLRymvKsBY2tvumV89HjaIQwG zWrgJw2j5ptjGaqWl/lJklk7fnqVW0+S6xrtzSGPucKBM2airHhubu+ZnEkhboD0 0uFqrJFLeUCetHp6Xasmk5X5tJ0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMAGBoRsfQ5UD1cD7JCgwzFGDX7KMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIxMzM0ZDAz LWVhZTQtNGQyMC1iYTU0LWIxODg5ZDkyNDdhYy8wL0MwMDYwNjg0NkM3RDBFNTQw RjU3MDNFQzkwQTBDMzMxNDYwRDdFQ0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnR6AwDQQCAAIwBwMFACQGmIAwDQYJKoZIhvcNAQELBQADggEBACjaWrg3qVyx RjIYNlng/z0abk91b5w03ITViNo/fNR0AnzG7v5ZM+SXhreRP61l6B7B8e2I0fnH N7RsXFkvx3iTLYebaq3vMysTj6uaJvvew4/xlPX+X6mrMVZq3HrJy88iqY4mY2fC to9r2KXrs8HHgBPOvFXD686q0ZS+Syq/gMJDfSeieJTt6Uh5NhHxJqbZGBKcdrnF A0r8SQ2CVPXT6pjGiHb+9IjBkDqljRCWduEdD8tOnJRICubSbsRiJV1Pd8jZcrKY JuBr93ZCJj5CvIUL+W2WYbBMG31AKonmI3qUa1DanPSEMTIBwli6BsBGWCRta899 UOfWxNr9wyU= -----END CERTIFICATE-----Generated at Sun Jun 15 06:46:26 2025 by rpki-client