$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer File: CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.cer (raw, json) Hash identifier: mNsj4bVaRqKVlK6vdVaMuJZt4ueMLlXYoLIfpEHr6YE= Subject key identifier: CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6FBEFFCBB3E7BDF31B2B60866A7D997B1D6F5EE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft caRepository: rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 12 Aug 2025 00:59:05 +0000 Certificate not after: Tue 11 Aug 2026 01:04:05 +0000 Subordinate resources: IP: 103.179.180.0/24 IP: 2001:df2:2640::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:be:ff:cb:b3:e7:bd:f3:1b:2b:60:86:6a:7d:99:7b:1d:6f:5e:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 12 00:59:05 2025 GMT Not After : Aug 11 01:04:05 2026 GMT Subject: CN=CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a1:f6:e4:c2:66:6f:3e:cd:37:69:c6:30:82: b6:5a:bc:69:59:50:05:ac:00:b9:b3:e9:a1:09:02: 3e:70:07:d5:b1:c3:a5:6f:fc:f5:eb:ea:05:d0:20: 4f:ba:ec:d9:0d:51:f4:e2:80:00:a7:3d:f9:1d:f2: b7:3b:61:9a:90:45:02:a1:68:f0:3e:42:6d:42:bb: 4d:70:4f:83:48:ac:22:c2:7a:ee:f8:28:02:e7:4a: 4b:33:95:54:f7:c6:ea:4d:c1:2e:20:40:5d:fc:73: 5c:96:f4:b1:16:6f:39:b4:48:4c:d1:8f:e2:6b:a8: d7:8b:36:47:47:3e:4e:65:a9:96:7f:8f:72:f4:de: ac:41:42:30:00:77:58:36:a6:f7:c8:4a:5e:91:91: 91:8f:b9:82:fe:13:9e:eb:64:d4:6c:84:64:8c:d9: 33:3c:e7:b2:d0:db:8d:14:4f:3e:fa:86:62:6a:d3: a6:56:44:78:7f:8a:d1:15:51:a1:5e:76:dc:53:76: 8d:40:fd:4d:c6:dc:a4:ec:e1:20:24:68:b1:2a:bd: c8:ee:41:de:9e:42:2b:c6:80:10:47:34:a6:75:c2: d9:f4:c3:85:9a:77:97:26:f8:b9:49:c8:9f:b8:01: 29:17:b2:07:c7:59:3a:69:bb:07:97:e3:fc:c9:05: 94:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:E1:B5:BE:9F:8C:30:CA:71:0C:1B:7E:B2:26:C3:64:8A:72:9F:CC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c693fc8f-afcc-4def-806f-f44493d07a3f/0/CEE1B5BE9F8C30CA710C1B7EB226C3648A729FCC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.180.0/24 IPv6: 2001:df2:2640::/48 Signature Algorithm: sha256WithRSAEncryption 14:61:34:25:ed:8e:8a:f9:87:2e:3d:e2:cd:0e:a2:93:83:2e: e5:a7:e4:cf:e2:27:90:d6:37:e9:dd:5c:d2:50:ac:14:e9:7b: a7:57:0e:92:16:33:87:69:d8:06:83:18:e1:de:10:e4:88:c3: b7:c0:8f:79:87:a8:c1:d9:47:83:b4:ff:89:5b:4d:d0:4d:15: 76:34:f6:84:c2:fe:bf:f8:e5:f1:40:67:fa:89:37:d7:c9:6f: 04:42:98:c5:fa:d4:ba:25:44:83:0b:63:e7:3d:5d:43:b5:4b: ca:9e:06:7f:5b:24:be:b0:b2:86:66:fd:37:10:42:f4:66:1c: f2:ac:b5:c6:e0:a3:b7:e3:35:8a:61:a4:ac:af:f6:9f:8f:9e: 55:6e:1f:04:01:4b:8d:ed:fb:90:fc:ca:69:db:e9:62:8a:4f: cc:73:8d:9b:f6:c1:72:21:29:f7:b5:61:da:38:47:06:37:50: 6e:c8:88:32:62:86:fe:c0:3c:a5:b9:e1:62:78:0d:c6:28:b8: d1:bb:68:bc:8e:f9:7f:9a:f8:26:0b:24:95:b1:45:45:86:8e: 40:16:e1:3b:19:cd:a5:2d:c0:5f:6b:ad:e5:e8:2b:84:76:38: e3:2b:6c:23:46:db:91:ff:d3:69:aa:b3:0d:60:c9:35:47:0c: ce:89:27:59 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUb77/y7PnvfMbK2CGan2Zex1vXuMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxMjAwNTkwNVoX DTI2MDgxMTAxMDQwNVowMzExMC8GA1UEAxMoQ0VFMUI1QkU5RjhDMzBDQTcxMEMx QjdFQjIyNkMzNjQ4QTcyOUZDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM2h9uTCZm8+zTdpxjCCtlq8aVlQBawAubPpoQkCPnAH1bHDpW/89evqBdAg T7rs2Q1R9OKAAKc9+R3ytzthmpBFAqFo8D5CbUK7TXBPg0isIsJ67vgoAudKSzOV VPfG6k3BLiBAXfxzXJb0sRZvObRITNGP4muo14s2R0c+TmWpln+PcvTerEFCMAB3 WDam98hKXpGRkY+5gv4Tnutk1GyEZIzZMzznstDbjRRPPvqGYmrTplZEeH+K0RVR oV523FN2jUD9TcbcpOzhICRosSq9yO5B3p5CK8aAEEc0pnXC2fTDhZp3lyb4uUnI n7gBKReyB8dZOmm7B5fj/MkFlJkCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM7htb6fjDDKcQwbfrImw2SKcp/MMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNjkzZmM4Zi1hZmNjLTRkZWYtODA2Zi1mNDQ0OTNkMDdhM2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2OTNmYzhm LWFmY2MtNGRlZi04MDZmLWY0NDQ5M2QwN2EzZi8wL0NFRTFCNUJFOUY4QzMwQ0E3 MTBDMUI3RUIyMjZDMzY0OEE3MjlGQ0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABns7QwDwQCAAIwCQMHACABDfImQDANBgkqhkiG9w0BAQsFAAOCAQEAFGE0Je2O ivmHLj3izQ6ik4Mu5afkz+InkNY36d1c0lCsFOl7p1cOkhYzh2nYBoMY4d4Q5IjD t8CPeYeowdlHg7T/iVtN0E0VdjT2hML+v/jl8UBn+ok318lvBEKYxfrUuiVEgwtj 5z1dQ7VLyp4Gf1skvrCyhmb9NxBC9GYc8qy1xuCjt+M1imGkrK/2n4+eVW4fBAFL je37kPzKadvpYopPzHONm/bBciEp97Vh2jhHBjdQbsiIMmKG/sA8pbnhYngNxii4 0btovI75f5r4JgsklbFFRYaOQBbhOxnNpS3AX2ut5egrhHY44ytsI0bbkf/Taaqz DWDJNUcMzoknWQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:20 2025 by rpki-client