$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer File: CCFC496C7B175F19C9F311A3BB624A5C30B345F4.cer (raw, json) Hash identifier: PBwW/oVkymA0EWHnd1v/cMrrUvoMvS9OSMf4+UGHC2c= Subject key identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3D31397626243546C122DF7536DD184055E55941 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft caRepository: rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 03 Sep 2025 14:31:25 +0000 Certificate not after: Wed 02 Sep 2026 14:36:25 +0000 Subordinate resources: IP: 103.140.74.0/23 IP: 2404:f9c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:31:39:76:26:24:35:46:c1:22:df:75:36:dd:18:40:55:e5:59:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 3 14:31:25 2025 GMT Not After : Sep 2 14:36:25 2026 GMT Subject: CN=CCFC496C7B175F19C9F311A3BB624A5C30B345F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:e5:77:aa:d0:a8:84:a9:d0:37:bf:12:5f: ee:ee:fe:9b:15:16:f0:a9:c7:81:2a:79:69:35:ea: cb:d1:26:ed:9f:f5:ff:af:ee:66:b2:53:42:6a:b7: 50:c1:43:e5:09:dd:90:8e:44:53:fc:86:10:c9:b3: 94:7c:7b:14:f0:ae:d3:6a:94:69:1a:04:de:dd:58: 88:fb:ab:6d:05:a2:30:7c:e1:3c:cb:3f:fc:74:5c: bf:35:f3:90:d2:05:bc:65:4c:b3:f8:7d:d4:6a:2c: 7b:1a:5e:c8:21:1a:5e:6f:42:18:2f:33:cf:54:28: 77:04:bb:1c:fc:02:7e:44:56:c4:de:43:55:e4:6e: 74:ce:be:92:bd:3a:b8:d3:a1:54:a1:d4:16:40:85: 9d:84:2a:a9:c6:48:66:83:fd:eb:15:2c:66:7d:3d: 91:b9:e0:48:d5:ec:78:9f:46:b2:30:16:4f:4c:ff: dc:dc:82:30:f1:27:09:f9:76:c2:7d:95:9c:ca:3b: 68:37:06:92:60:c4:9a:ef:7f:1f:3f:8b:8f:fe:98: 13:62:31:9c:70:dc:17:67:33:94:06:6c:74:47:82: 48:95:55:d6:e8:77:23:f1:e5:c3:6a:bc:7c:ff:ad: 3b:b5:07:0a:31:fe:93:54:42:c7:39:f7:42:9a:1b: 15:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CC:FC:49:6C:7B:17:5F:19:C9:F3:11:A3:BB:62:4A:5C:30:B3:45:F4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d387e85d-b185-4334-801b-49c8c8b91844/0/CCFC496C7B175F19C9F311A3BB624A5C30B345F4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.140.74.0/23 IPv6: 2404:f9c0::/32 Signature Algorithm: sha256WithRSAEncryption 0a:ad:27:3d:21:a8:83:6a:b2:74:48:d3:ae:1c:9e:f9:0e:3a: d2:61:be:22:cc:90:34:4a:7d:86:d1:cb:77:2c:9a:bf:52:d2: 7a:e8:98:fb:83:68:fd:c0:c6:43:60:61:61:33:54:96:91:41: 8b:dd:f0:f8:87:83:5d:2c:1b:92:6a:ba:39:30:f2:7e:68:12: a2:32:eb:60:b9:6b:4f:97:30:98:b8:59:ba:d7:d0:ff:69:ef: 64:a8:25:da:2a:4f:cb:76:a9:9c:a8:e8:4f:88:07:58:79:bd: fa:cc:e9:77:80:d0:3a:1e:24:7f:f2:c7:5d:47:c2:83:56:06: 1d:17:75:0b:25:95:cb:c3:90:b4:ba:83:d0:43:a4:8b:3d:88: 2b:b7:3e:bd:b6:64:f2:8d:34:e6:53:d6:7c:6c:37:0a:76:e9: 49:8e:15:67:73:8e:33:b2:74:bc:60:83:c2:66:30:2d:7c:90: b3:bd:8e:72:3b:b6:e2:61:f4:a3:18:26:a6:2b:6e:63:97:59: f7:91:99:1d:72:4d:d4:b6:8a:f5:df:b4:77:29:63:8e:5c:75: 2a:03:b6:7e:36:54:09:35:12:9f:7b:ce:19:4e:bb:6c:e6:16: 47:15:54:b9:dd:8b:7a:d4:14:95:16:d0:4e:05:40:97:ff:85: 74:0e:7b:ff -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUPTE5diYkNUbBIt91Nt0YQFXlWUEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkwMzE0MzEyNVoX DTI2MDkwMjE0MzYyNVowMzExMC8GA1UEAxMoQ0NGQzQ5NkM3QjE3NUYxOUM5RjMx MUEzQkI2MjRBNUMzMEIzNDVGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMES5Xeq0KiEqdA3vxJf7u7+mxUW8KnHgSp5aTXqy9Em7Z/1/6/uZrJTQmq3 UMFD5QndkI5EU/yGEMmzlHx7FPCu02qUaRoE3t1YiPurbQWiMHzhPMs//HRcvzXz kNIFvGVMs/h91GosexpeyCEaXm9CGC8zz1QodwS7HPwCfkRWxN5DVeRudM6+kr06 uNOhVKHUFkCFnYQqqcZIZoP96xUsZn09kbngSNXseJ9GsjAWT0z/3NyCMPEnCfl2 wn2VnMo7aDcGkmDEmu9/Hz+Lj/6YE2IxnHDcF2czlAZsdEeCSJVV1uh3I/Hlw2q8 fP+tO7UHCjH+k1RCxzn3QpobFd8CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMz8SWx7F18ZyfMRo7tiSlwws0X0MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMzg3ZTg1ZC1iMTg1LTQzMzQtODAxYi00OWM4YzhiOTE4NDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzODdlODVk LWIxODUtNDMzNC04MDFiLTQ5YzhjOGI5MTg0NC8wL0NDRkM0OTZDN0IxNzVGMTlD OUYzMTFBM0JCNjI0QTVDMzBCMzQ1RjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnjEowDQQCAAIwBwMFACQE+cAwDQYJKoZIhvcNAQELBQADggEBAAqtJz0hqINq snRI064cnvkOOtJhviLMkDRKfYbRy3csmr9S0nromPuDaP3AxkNgYWEzVJaRQYvd 8PiHg10sG5Jqujkw8n5oEqIy62C5a0+XMJi4WbrX0P9p72SoJdoqT8t2qZyo6E+I B1h5vfrM6XeA0DoeJH/yx11HwoNWBh0XdQsllcvDkLS6g9BDpIs9iCu3Pr22ZPKN NOZT1nxsNwp26UmOFWdzjjOydLxgg8JmMC18kLO9jnI7tuJh9KMYJqYrbmOXWfeR mR1yTdS2ivXftHcpY45cdSoDtn42VAk1Ep97zhlOu2zmFkcVVLndi3rUFJUW0E4F QJf/hXQOe/8= -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:38 2025 by rpki-client