$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer File: C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.cer (raw, json) Hash identifier: tEHDI/9PWUpQVswWjAQXGUk0wi677GT65iU7Z7vajQo= Subject key identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 10983A0B1BB241D6C82444467D7746811B89E63C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft caRepository: rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 19:39:36 +0000 Certificate not after: Tue 02 Jun 2026 19:44:36 +0000 Subordinate resources: IP: 103.133.60.0/22 IP: 2404:48c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 12:15:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:98:3a:0b:1b:b2:41:d6:c8:24:44:46:7d:77:46:81:1b:89:e6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 19:39:36 2025 GMT Not After : Jun 2 19:44:36 2026 GMT Subject: CN=C3F80A35C1C6877BBE49719B908D029FBFCDDBB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:22:9f:b4:b7:32:d6:a1:3f:2d:13:b0:2e:9b: a4:e9:58:16:2a:5b:2e:c3:95:78:6e:4c:0b:ae:b6: a4:b5:66:0c:b5:ac:a8:db:d2:3e:23:35:35:0e:d9: ab:0c:37:c2:74:2c:08:0e:de:96:27:23:29:d2:e8: 92:4f:c6:08:c5:74:39:01:e3:c8:8a:ff:6b:31:23: 5d:54:6a:6d:d8:cb:fe:80:58:7f:6b:4d:6e:e9:74: af:64:a8:de:aa:36:3c:c7:c9:a0:99:d5:0b:a7:ba: e2:7e:56:c6:0f:9f:a3:fc:8b:0e:ff:da:6e:0a:f5: 69:cb:6d:0e:5a:ff:6c:18:5d:4a:27:5c:b0:4e:20: 4d:5a:b7:0b:de:d7:10:87:87:51:bd:fd:13:1f:d9: c1:07:0a:88:18:35:0f:d8:37:58:5a:b6:9d:fb:d8: f8:0c:d5:4e:e2:d4:1f:65:b5:c8:b5:44:6d:65:d4: fb:55:7b:7d:7b:45:eb:08:7d:2a:7d:8b:6d:8b:35: 9d:eb:da:0b:a7:03:73:23:21:85:6b:e6:eb:27:b9: 47:e7:10:2d:60:76:f0:f2:2c:f3:43:f5:e8:a8:4c: 45:e9:3e:59:e8:e2:62:4b:ee:90:56:01:1f:a8:1c: 6d:72:30:43:a7:28:32:51:5f:20:e8:4d:ea:c2:54: 03:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:F8:0A:35:C1:C6:87:7B:BE:49:71:9B:90:8D:02:9F:BF:CD:DB:B0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ccf68aba-9515-4d12-aac2-8cee5db2a48f/0/C3F80A35C1C6877BBE49719B908D029FBFCDDBB0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.133.60.0/22 IPv6: 2404:48c0::/32 Signature Algorithm: sha256WithRSAEncryption 17:6e:15:a5:b8:95:ec:75:df:78:a3:0c:2d:c8:60:34:34:b6: bb:99:bb:b1:29:98:63:7c:6f:0d:51:e4:47:78:51:50:7d:72: 61:2e:d4:17:15:f4:14:08:36:a9:de:1e:88:9e:75:47:b8:1f: 56:c5:06:c9:74:ca:7f:e1:b6:54:df:61:83:3a:f7:a3:01:8c: a1:80:05:3c:57:b2:b6:c0:7c:83:c4:37:17:89:a0:41:0f:70: b3:87:0e:22:da:b9:65:e2:90:41:85:1e:a1:1f:02:90:ca:33: f7:0e:cf:cd:35:6c:a5:aa:9f:1b:c5:9a:64:8a:2d:77:89:11: 31:1d:d6:e2:7d:4b:ed:e0:4c:fc:d3:45:34:9f:df:b5:bb:9b: 4d:73:10:9f:46:83:ce:b2:cf:9e:ef:6d:12:34:34:6a:86:b2: ba:90:b4:a5:1f:4b:88:9e:57:ec:7b:2a:b1:e4:1f:b8:4e:b6: 7f:ce:aa:78:53:d8:2b:fc:48:25:5b:88:87:21:39:ca:df:f7: 05:40:32:49:da:59:cb:10:50:d3:a6:02:b7:3b:61:8d:28:8c: e5:cf:a8:f0:32:72:bc:a5:95:16:ab:7d:76:f7:ef:80:9e:9a: aa:3a:74:d9:e1:d3:cd:0a:e1:95:0b:39:87:6b:c5:36:48:15: 2b:fd:e5:d8 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUEJg6CxuyQdbIJERGfXdGgRuJ5jwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzE5MzkzNloX DTI2MDYwMjE5NDQzNlowMzExMC8GA1UEAxMoQzNGODBBMzVDMUM2ODc3QkJFNDk3 MTlCOTA4RDAyOUZCRkNEREJCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANYin7S3MtahPy0TsC6bpOlYFipbLsOVeG5MC662pLVmDLWsqNvSPiM1NQ7Z qww3wnQsCA7elicjKdLokk/GCMV0OQHjyIr/azEjXVRqbdjL/oBYf2tNbul0r2So 3qo2PMfJoJnVC6e64n5Wxg+fo/yLDv/abgr1acttDlr/bBhdSidcsE4gTVq3C97X EIeHUb39Ex/ZwQcKiBg1D9g3WFq2nfvY+AzVTuLUH2W1yLVEbWXU+1V7fXtF6wh9 Kn2LbYs1nevaC6cDcyMhhWvm6ye5R+cQLWB28PIs80P16KhMRek+WejiYkvukFYB H6gcbXIwQ6coMlFfIOhN6sJUA+0CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMP4CjXBxod7vklxm5CNAp+/zduwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jY2Y2OGFiYS05NTE1LTRkMTItYWFjMi04Y2VlNWRiMmE0OGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjZjY4YWJh LTk1MTUtNGQxMi1hYWMyLThjZWU1ZGIyYTQ4Zi8wL0MzRjgwQTM1QzFDNjg3N0JC RTQ5NzE5QjkwOEQwMjlGQkZDRERCQjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnhTwwDQQCAAIwBwMFACQESMAwDQYJKoZIhvcNAQELBQADggEBABduFaW4lex1 33ijDC3IYDQ0truZu7EpmGN8bw1R5Ed4UVB9cmEu1BcV9BQINqneHoiedUe4H1bF Bsl0yn/htlTfYYM696MBjKGABTxXsrbAfIPENxeJoEEPcLOHDiLauWXikEGFHqEf ApDKM/cOz801bKWqnxvFmmSKLXeJETEd1uJ9S+3gTPzTRTSf37W7m01zEJ9Gg86y z57vbRI0NGqGsrqQtKUfS4ieV+x7KrHkH7hOtn/OqnhT2Cv8SCVbiIchOcrf9wVA MknaWcsQUNOmArc7YY0ojOXPqPAycryllRarfXb374Cemqo6dNnh080K4ZULOYdr xTZIFSv95dg= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:12 2025 by rpki-client