$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer File: D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.cer (raw, json) Hash identifier: z839yGBGhV7GW5MbUlnUUoY8jZTZJRAXxwoGC8rkd7c= Subject key identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4081C875ED0B6E630538A07D5302C0231B2F3655 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft caRepository: rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 27 Jun 2025 11:40:14 +0000 Certificate not after: Fri 26 Jun 2026 11:45:14 +0000 Subordinate resources: IP: 103.211.4.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:81:c8:75:ed:0b:6e:63:05:38:a0:7d:53:02:c0:23:1b:2f:36:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 27 11:40:14 2025 GMT Not After : Jun 26 11:45:14 2026 GMT Subject: CN=D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:aa:26:a3:5e:ff:ec:6a:91:41:7a:b9:aa: 4e:3f:9d:70:63:9a:ea:1c:11:c1:ce:0e:51:c9:89: a3:ee:a7:7e:27:88:a3:b5:eb:cc:e4:e0:e1:f6:53: 69:e7:80:7d:3f:72:37:7a:10:7f:17:e8:3f:78:67: 33:91:d8:f5:0f:57:2c:ed:8b:d8:44:72:99:ea:6e: 88:16:3b:23:d8:ee:0a:61:fa:74:a3:8f:bd:21:15: f8:df:db:18:59:19:cd:d9:68:4c:a2:9f:d5:04:fb: ea:d7:dc:61:86:18:a7:70:97:04:62:ff:d2:9a:04: 54:32:d4:b3:03:04:80:9d:f4:af:e9:ec:9e:d2:ed: 2f:fc:8f:6d:18:ad:5d:f8:d6:87:ce:05:da:65:09: 39:0e:9a:ce:6a:bb:de:42:e4:2b:f2:d2:f2:0a:10: 62:0b:46:5b:b2:59:b7:f8:9a:86:5a:86:58:d0:15: c1:4a:9f:71:77:e2:ef:d8:5b:08:ee:ac:c1:b6:ee: 67:ea:b2:69:d3:46:0f:38:f5:dd:bc:95:80:3b:f9: 02:30:67:0e:c8:65:e9:43:50:cc:05:82:26:ab:29: 82:b2:75:6a:be:3b:cc:d1:83:93:c5:ea:74:28:8a: 92:d6:52:c3:7a:da:21:37:ea:58:b6:1e:d2:a5:d3: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D0:43:C2:A2:B3:95:E6:A7:BC:8A:32:F1:AE:6C:19:34:B0:23:5F:A7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/33ad3757-93a0-4b33-9128-24aa61304eff/0/D043C2A2B395E6A7BC8A32F1AE6C1934B0235FA7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.4.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:6d:81:0e:60:d4:22:d1:a7:a5:d1:46:92:2f:10:48:97:6d: c7:06:1b:bc:a9:98:c4:62:10:bc:e7:51:3a:3b:98:a0:f0:90: 15:1c:90:81:e0:c4:a7:ca:a0:6b:23:6d:cc:a1:32:9d:1f:3b: 0e:c4:db:54:09:86:d9:8a:4a:20:eb:9a:52:0f:45:e9:69:81: 93:03:c2:b7:b8:26:00:39:c1:d7:11:90:28:12:68:2b:f4:fa: 28:d8:eb:3c:a4:ec:61:9b:c8:a9:50:39:4f:02:65:ce:61:29: 7f:b4:df:de:ef:c7:6b:12:f2:28:51:c8:85:1f:68:9f:fc:20: f8:67:30:fa:95:19:77:73:cd:fc:1d:45:37:18:7c:db:a1:f0: e8:6c:a8:12:54:81:96:ca:03:6e:65:9f:43:42:40:15:ee:71: 5f:a3:3b:39:2b:83:89:43:ef:4e:01:64:92:35:5b:a7:0e:12: 3d:22:3a:97:15:1e:a6:f2:a8:90:01:50:73:40:3b:59:dc:3f: 37:5b:ca:95:7f:80:d1:ad:98:ae:17:24:f6:6b:73:bc:06:e0: f4:ef:82:3c:ab:3f:3d:3c:2a:0f:43:32:8f:c1:03:a6:04:4c: 6e:75:e5:3f:80:40:e3:a9:8f:30:2a:9a:b1:32:9a:47:a9:7f: 7c:86:fa:7c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQIHIde0LbmMFOKB9UwLAIxsvNlUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYyNzExNDAxNFoX DTI2MDYyNjExNDUxNFowMzExMC8GA1UEAxMoRDA0M0MyQTJCMzk1RTZBN0JDOEEz MkYxQUU2QzE5MzRCMDIzNUZBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALunqiajXv/sapFBermqTj+dcGOa6hwRwc4OUcmJo+6nfieIo7XrzOTg4fZT aeeAfT9yN3oQfxfoP3hnM5HY9Q9XLO2L2ERymepuiBY7I9juCmH6dKOPvSEV+N/b GFkZzdloTKKf1QT76tfcYYYYp3CXBGL/0poEVDLUswMEgJ30r+nsntLtL/yPbRit XfjWh84F2mUJOQ6azmq73kLkK/LS8goQYgtGW7JZt/iahlqGWNAVwUqfcXfi79hb CO6swbbuZ+qyadNGDzj13byVgDv5AjBnDshl6UNQzAWCJqspgrJ1ar47zNGDk8Xq dCiKktZSw3raITfqWLYe0qXTctMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNBDwqKzleanvIoy8a5sGTSwI1+nMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zM2FkMzc1Ny05M2EwLTRiMzMtOTEyOC0yNGFhNjEzMDRlZmYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzYWQzNzU3 LTkzYTAtNGIzMy05MTI4LTI0YWE2MTMwNGVmZi8wL0QwNDNDMkEyQjM5NUU2QTdC QzhBMzJGMUFFNkMxOTM0QjAyMzVGQTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn0wQwDQYJKoZIhvcNAQELBQADggEBABttgQ5g1CLRp6XRRpIvEEiXbccGG7yp mMRiELznUTo7mKDwkBUckIHgxKfKoGsjbcyhMp0fOw7E21QJhtmKSiDrmlIPRelp gZMDwre4JgA5wdcRkCgSaCv0+ijY6zyk7GGbyKlQOU8CZc5hKX+0397vx2sS8ihR yIUfaJ/8IPhnMPqVGXdzzfwdRTcYfNuh8OhsqBJUgZbKA25ln0NCQBXucV+jOzkr g4lD704BZJI1W6cOEj0iOpcVHqbyqJABUHNAO1ncPzdbypV/gNGtmK4XJPZrc7wG 4PTvgjyrPz08Kg9DMo/BA6YETG515T+AQOOpjzAqmrEymkepf3yG+nw= -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:36 2025 by rpki-client