$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer File: C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer (raw, json) Hash identifier: urNsQueEgWGPk9LFX8bh9XTWgYccEynEgCJwshhz7fU= Subject key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1EEB70F5DA86008238B88EE53B61836930270320 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft caRepository: rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 12:27:45 +0000 Certificate not after: Tue 02 Jun 2026 12:32:45 +0000 Subordinate resources: IP: 103.156.16.0/23 IP: 2406:7bc0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 23:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:eb:70:f5:da:86:00:82:38:b8:8e:e5:3b:61:83:69:30:27:03:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 12:27:45 2025 GMT Not After : Jun 2 12:32:45 2026 GMT Subject: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:16:b4:aa:94:b0:e1:08:52:8f:df:47:b5:d0: bf:58:d7:34:22:93:53:5a:d6:36:d8:75:5d:ae:36: a3:06:5b:e5:5a:b1:55:15:f7:51:b6:e9:ce:7b:f1: 0f:56:b9:d0:c5:ac:12:40:f0:14:31:3f:46:24:55: d1:b8:d3:88:a4:ad:ac:bf:f5:5b:ad:d3:ec:fb:ca: 50:67:2e:d4:41:f7:ca:6e:6e:24:1b:27:1a:c9:01: 38:7e:03:1e:7e:a6:c2:f5:68:27:be:8c:80:7c:fb: 98:ce:26:79:52:b5:61:d4:01:fd:34:97:f2:b6:d2: ec:4d:70:7e:0b:08:38:dc:23:24:7d:ed:ce:0a:c5: 65:1b:50:da:4e:94:eb:8e:ef:6d:48:79:4b:26:b4: 2c:2d:cd:da:ba:af:cd:9e:18:39:d7:15:ab:9f:19: fa:36:12:a0:b8:2b:ef:f8:7a:ae:a3:16:8b:55:55: d7:e7:67:25:82:c7:57:aa:bc:ca:85:7b:75:f9:7f: ee:d4:83:a3:35:11:e7:11:9e:62:6d:9b:3e:a3:10: c3:7b:87:9b:eb:f5:e9:12:b6:30:42:c0:f4:37:e0: 3a:23:db:16:da:3a:86:2a:f1:73:ce:7f:83:bc:80: c5:ae:18:40:c9:05:53:e4:7f:6a:de:9d:8e:9c:01: a0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.16.0/23 IPv6: 2406:7bc0::/32 Signature Algorithm: sha256WithRSAEncryption 78:7f:1b:36:fe:63:62:44:93:51:47:9b:3f:5a:16:82:fe:2c: e1:5b:d9:29:3b:0c:e8:ae:4c:a5:29:2c:75:88:56:89:49:70: f1:28:93:da:29:c6:b1:65:72:b7:40:cc:4c:14:a2:db:92:3f: dc:37:b6:36:54:4d:1d:54:1e:c7:6f:25:4d:2b:c3:86:2e:fc: 2c:2b:52:55:f0:c5:4f:50:d1:5c:f6:6c:aa:da:6d:af:c3:9f: ed:7d:6a:bc:13:0f:52:e5:31:33:9e:e7:27:53:5f:f2:1b:13: aa:51:ff:fd:6f:97:86:f6:2e:03:84:cd:74:75:68:fa:fd:6f: 5a:a4:be:bd:77:a3:ff:17:c1:ab:9e:50:35:5a:50:1f:26:50: 7a:3d:a4:d6:3a:35:a0:56:4f:80:6e:df:b9:c5:52:4b:37:84: de:89:e1:27:12:df:24:cb:ec:49:14:65:8d:a9:c4:e0:7f:80: fa:3c:10:70:56:00:71:d6:73:0f:e8:a2:66:f8:55:de:53:fa: 7f:91:04:d2:f3:87:02:26:8e:b6:1b:11:1b:6e:ec:ef:33:f2: 88:99:19:e0:7b:b4:ed:2e:9c:00:69:76:fa:33:44:8e:fc:06: e8:14:89:b2:65:de:14:88:5d:51:94:08:df:a0:2c:c0:f1:8b: a4:67:65:53 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUHutw9dqGAII4uI7lO2GDaTAnAyAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzEyMjc0NVoX DTI2MDYwMjEyMzI0NVowMzExMC8GA1UEAxMoQzI1RDUwNTZBNjlDRTBEMDY4NUJB RDhFNDhGMzNBNEE2MkE1QzU4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOoWtKqUsOEIUo/fR7XQv1jXNCKTU1rWNth1Xa42owZb5VqxVRX3Ubbpznvx D1a50MWsEkDwFDE/RiRV0bjTiKStrL/1W63T7PvKUGcu1EH3ym5uJBsnGskBOH4D Hn6mwvVoJ76MgHz7mM4meVK1YdQB/TSX8rbS7E1wfgsIONwjJH3tzgrFZRtQ2k6U 647vbUh5Sya0LC3N2rqvzZ4YOdcVq58Z+jYSoLgr7/h6rqMWi1VV1+dnJYLHV6q8 yoV7dfl/7tSDozUR5xGeYm2bPqMQw3uHm+v16RK2MELA9DfgOiPbFto6hirxc85/ g7yAxa4YQMkFU+R/at6djpwBoJMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMJdUFamnODQaFutjkjzOkpipcWCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mOTY0MDFlMy05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5NjQwMWUz LTlmNjItNGIzYy1iZmZiLTc4MzM1NWFlNjc3MC8wL0MyNUQ1MDU2QTY5Q0UwRDA2 ODVCQUQ4RTQ4RjMzQTRBNjJBNUM1ODIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnnBAwDQQCAAIwBwMFACQGe8AwDQYJKoZIhvcNAQELBQADggEBAHh/Gzb+Y2JE k1FHmz9aFoL+LOFb2Sk7DOiuTKUpLHWIVolJcPEok9opxrFlcrdAzEwUotuSP9w3 tjZUTR1UHsdvJU0rw4Yu/CwrUlXwxU9Q0Vz2bKraba/Dn+19arwTD1LlMTOe5ydT X/IbE6pR//1vl4b2LgOEzXR1aPr9b1qkvr13o/8XwaueUDVaUB8mUHo9pNY6NaBW T4Bu37nFUks3hN6J4ScS3yTL7EkUZY2pxOB/gPo8EHBWAHHWcw/oomb4Vd5T+n+R BNLzhwImjrYbERtu7O8z8oiZGeB7tO0unABpdvozRI78BugUibJl3hSIXVGUCN+g LMDxi6RnZVM= -----END CERTIFICATE-----Generated at Fri Jun 20 02:24:29 2025 by rpki-client