$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer File: CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.cer (raw, json) Hash identifier: JiQ+HOTb6Id4uUj+yPnFbwediNzr3oOnCCWXMSefJGM= Subject key identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6607C4FBEAAE5008F2E65F8C53B8C9BF300676D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft caRepository: rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 25 Oct 2025 01:23:45 +0000 Certificate not after: Sat 24 Oct 2026 01:28:45 +0000 Subordinate resources: IP: 202.47.184.0/23 IP: 2401:5520::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:07:c4:fb:ea:ae:50:08:f2:e6:5f:8c:53:b8:c9:bf:30:06:76:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 25 01:23:45 2025 GMT Not After : Oct 24 01:28:45 2026 GMT Subject: CN=CEC26429DF308615870C1F47E8CDE4F9B4A37CE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d7:86:e6:cf:bd:9e:aa:a2:43:b2:62:79:dd: 7b:96:51:75:05:39:e9:02:c0:6d:dc:9d:ce:f1:0b: eb:a1:14:de:a0:71:19:ef:9c:97:5e:99:8b:e7:fe: 86:9c:37:46:7b:8d:53:90:6b:b1:f2:3d:7b:50:1d: 8b:79:32:11:7b:09:71:12:8d:b3:c0:d5:48:4e:5f: 63:66:8a:eb:d1:66:1d:5d:b4:e4:b3:8e:9c:44:d9: 6e:8c:a4:7d:c5:5f:5d:30:95:2e:05:39:ac:e6:df: 55:fb:02:24:b2:23:c7:d7:ed:5e:0a:06:5e:61:1a: 6c:27:9a:97:3c:63:5d:3b:2e:59:4e:eb:8b:c6:ae: 43:61:2e:74:47:69:6a:6d:82:e2:2e:d4:cb:29:8c: cd:ec:30:44:e4:59:96:c3:07:e7:e8:21:6d:10:0e: 0a:e9:26:31:ca:d7:0d:a1:09:89:fe:bb:eb:7e:92: 46:02:82:15:95:24:11:91:a8:a5:71:aa:be:e2:96: 7e:ab:ea:99:95:67:41:f7:29:0f:82:0f:58:95:22: 96:88:63:88:63:b4:dc:78:10:0d:d6:77:a4:b0:1c: 46:00:53:ed:0f:78:b1:d8:cb:31:d3:79:18:16:67: d0:e8:ef:93:38:69:43:c5:75:bc:68:e1:39:dd:30: 24:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:C2:64:29:DF:30:86:15:87:0C:1F:47:E8:CD:E4:F9:B4:A3:7C:E8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6e5fdf6c-0d01-492b-8004-a48ee5a12474/0/CEC26429DF308615870C1F47E8CDE4F9B4A37CE8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.184.0/23 IPv6: 2401:5520::/32 Signature Algorithm: sha256WithRSAEncryption 08:ce:36:84:0f:93:89:48:1e:68:4a:80:bf:80:e8:09:96:86: d1:64:c3:3e:76:b5:ef:b7:29:97:4a:00:1b:03:a3:79:47:ef: 73:bb:8d:51:bb:9d:71:45:82:3c:de:19:bc:da:fc:86:fe:e4: ce:bc:fd:da:be:78:ae:e6:67:99:85:2c:1f:01:a5:ff:31:e1: a4:ac:2e:ca:f0:ad:4e:c8:67:0b:6c:78:ed:8f:64:36:64:e6: 29:b3:94:80:9b:53:97:c1:83:f0:f6:2b:83:56:a1:2e:b7:d1: 5c:0d:db:74:fa:5d:3b:19:88:03:77:61:bd:4c:01:08:63:8f: fd:35:2d:60:51:91:4d:70:e5:d8:d8:3e:31:ab:b7:d3:69:75: 81:14:69:6e:a7:fc:d6:01:db:05:74:65:e4:f3:ff:44:d8:5b: 2c:43:50:aa:36:31:29:f3:6a:c6:58:76:20:4c:9b:25:d3:3e: f9:77:31:47:8c:c9:e8:6a:87:f3:02:b5:d1:05:03:bc:c3:47: 18:07:96:1d:5c:71:d2:a0:4f:60:bf:4a:be:48:d0:41:85:85: a2:1f:63:24:6e:33:3d:cb:a6:9e:28:ee:22:0d:b0:ed:2c:6a: 27:28:37:81:ea:ba:ba:1a:4f:28:13:e0:17:6f:f9:cb:0e:d4: 20:79:62:8f -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUZgfE++quUAjy5l+MU7jJvzAGdtkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyNTAxMjM0NVoX DTI2MTAyNDAxMjg0NVowMzExMC8GA1UEAxMoQ0VDMjY0MjlERjMwODYxNTg3MEMx RjQ3RThDREU0RjlCNEEzN0NFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK3XhubPvZ6qokOyYnnde5ZRdQU56QLAbdydzvEL66EU3qBxGe+cl16Zi+f+ hpw3RnuNU5BrsfI9e1Adi3kyEXsJcRKNs8DVSE5fY2aK69FmHV205LOOnETZboyk fcVfXTCVLgU5rObfVfsCJLIjx9ftXgoGXmEabCealzxjXTsuWU7ri8auQ2EudEdp am2C4i7UyymMzewwRORZlsMH5+ghbRAOCukmMcrXDaEJif67636SRgKCFZUkEZGo pXGqvuKWfqvqmZVnQfcpD4IPWJUilohjiGO03HgQDdZ3pLAcRgBT7Q94sdjLMdN5 GBZn0OjvkzhpQ8V1vGjhOd0wJBsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM7CZCnfMIYVhwwfR+jN5Pm0o3zoMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ZTVmZGY2Yy0wZDAxLTQ5MmItODAwNC1hNDhlZTVhMTI0NzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlNWZkZjZj LTBkMDEtNDkyYi04MDA0LWE0OGVlNWExMjQ3NC8wL0NFQzI2NDI5REYzMDg2MTU4 NzBDMUY0N0U4Q0RFNEY5QjRBMzdDRTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAHKL7gwDQQCAAIwBwMFACQBVSAwDQYJKoZIhvcNAQELBQADggEBAAjONoQPk4lI HmhKgL+A6AmWhtFkwz52te+3KZdKABsDo3lH73O7jVG7nXFFgjzeGbza/Ib+5M68 /dq+eK7mZ5mFLB8Bpf8x4aSsLsrwrU7IZwtseO2PZDZk5imzlICbU5fBg/D2K4NW oS630VwN23T6XTsZiAN3Yb1MAQhjj/01LWBRkU1w5djYPjGrt9NpdYEUaW6n/NYB 2wV0ZeTz/0TYWyxDUKo2MSnzasZYdiBMmyXTPvl3MUeMyehqh/MCtdEFA7zDRxgH lh1ccdKgT2C/Sr5I0EGFhaIfYyRuMz3Lpp4o7iINsO0saicoN4HquroaTygT4Bdv +csO1CB5Yo8= -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:53 2025 by rpki-client