$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer File: D2EF21DBD545255BED30EEC34623F204A3E12D23.cer (raw, json) Hash identifier: r2p4SP6FvUTOyza+GJBi6528Wc9KkVc1/CKgWHjij54= Subject key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0379B8AB0A26936227ED1AFB21F0EC40B268B24A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft caRepository: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 02:34:20 +0000 Certificate not after: Tue 02 Jun 2026 02:39:20 +0000 Subordinate resources: IP: 103.104.204.0/22 IP: 2402:1a40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:79:b8:ab:0a:26:93:62:27:ed:1a:fb:21:f0:ec:40:b2:68:b2:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 02:34:20 2025 GMT Not After : Jun 2 02:39:20 2026 GMT Subject: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a5:64:9b:60:00:92:a4:33:76:ca:93:ca:b9: b6:e5:e8:25:92:68:4f:2e:79:b3:dc:be:a1:f1:3a: 00:fa:dd:f3:0c:64:c8:e9:8a:9b:19:ff:26:e3:ef: 9b:07:96:b0:3a:ff:52:6b:b5:98:c9:b0:5e:c9:d5: 79:72:b9:95:24:b8:38:9d:02:ea:c3:c4:a8:68:46: 39:bc:09:0a:01:41:85:5e:a2:62:5a:96:c6:4f:b0: 44:6f:e8:eb:07:24:ff:20:56:15:eb:eb:03:96:70: 65:f1:0f:af:39:8e:2b:fb:b4:21:06:84:89:84:70: 84:5d:e0:47:1b:1d:e0:c6:e1:79:f5:46:79:5e:0a: 58:eb:e8:30:e5:af:68:05:23:87:c2:1e:41:e4:57: 88:24:12:61:d9:ff:ba:db:1c:0c:f2:49:a4:71:8d: 3f:f4:46:40:5c:bd:c4:dc:52:41:1a:7a:17:ff:9c: 8d:e6:6f:4e:d5:2d:31:1c:f9:75:0f:38:7c:a1:c3: da:01:49:eb:c3:47:ed:5c:52:cc:c2:b3:b7:4f:33: a3:5a:cf:63:5e:07:3c:24:48:5a:85:22:58:25:57: 9e:fa:2c:4c:0c:ba:55:ce:02:a2:bb:7d:44:8a:d3: 96:0f:eb:44:37:70:e6:82:de:97:af:67:6c:81:e9: 9d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.104.204.0/22 IPv6: 2402:1a40::/32 Signature Algorithm: sha256WithRSAEncryption 35:e1:f0:14:d4:9e:89:73:a6:77:ce:20:6f:d1:10:6c:2d:81: 1d:e0:7f:e6:7d:7d:94:67:54:06:5f:1f:ad:af:48:c6:12:4e: 3c:3e:bd:4b:1f:23:2c:b7:6a:9b:9d:bc:cd:99:0b:63:9d:44: e5:33:9f:a5:37:ad:0a:d6:01:8a:ea:40:58:34:1e:38:fe:c8: 6f:db:b3:bb:d0:24:80:93:eb:86:aa:b4:5d:74:43:8b:02:db: ad:15:36:7d:75:be:83:ec:8a:07:42:21:b1:16:31:ee:8a:fa: ee:b0:3f:1f:f9:aa:58:9e:2a:4b:3b:19:2e:bd:1b:45:f0:40: 45:f8:a2:08:e3:b2:ad:3a:b5:9e:79:42:a8:67:c6:25:93:e5: de:77:05:7c:54:81:ed:0a:b0:a0:d1:f1:a2:18:03:fe:be:14: 63:49:41:a9:32:a9:b4:6d:ba:cc:14:09:74:ad:17:d0:fd:ae: cf:ad:23:ac:5f:51:04:21:3f:64:6f:28:c9:4c:11:b9:34:03: a3:48:01:6f:46:65:56:34:4d:d9:15:11:24:b3:be:3f:e2:1e: 0f:8c:bd:d3:38:35:03:3b:55:50:bf:6a:86:74:5b:6a:06:ff: c1:ea:6f:f6:3a:94:23:4f:01:50:38:cf:27:63:13:06:d5:4e: 82:ee:d9:a0 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUA3m4qwomk2In7Rr7IfDsQLJoskowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzAyMzQyMFoX DTI2MDYwMjAyMzkyMFowMzExMC8GA1UEAxMoRDJFRjIxREJENTQ1MjU1QkVEMzBF RUMzNDYyM0YyMDRBM0UxMkQyMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANulZJtgAJKkM3bKk8q5tuXoJZJoTy55s9y+ofE6APrd8wxkyOmKmxn/JuPv mweWsDr/Umu1mMmwXsnVeXK5lSS4OJ0C6sPEqGhGObwJCgFBhV6iYlqWxk+wRG/o 6wck/yBWFevrA5ZwZfEPrzmOK/u0IQaEiYRwhF3gRxsd4MbhefVGeV4KWOvoMOWv aAUjh8IeQeRXiCQSYdn/utscDPJJpHGNP/RGQFy9xNxSQRp6F/+cjeZvTtUtMRz5 dQ84fKHD2gFJ68NH7VxSzMKzt08zo1rPY14HPCRIWoUiWCVXnvosTAy6Vc4Cort9 RIrTlg/rRDdw5oLel69nbIHpnd8CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNLvIdvVRSVb7TDuw0Yj8gSj4S0jMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMjMxZTZiMS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyMzFlNmIx LTE4NDEtNDc2ZC1iNDZiLWI0NGI5Y2I5NjhiMC8wL0QyRUYyMURCRDU0NTI1NUJF RDMwRUVDMzQ2MjNGMjA0QTNFMTJEMjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnaMwwDQQCAAIwBwMFACQCGkAwDQYJKoZIhvcNAQELBQADggEBADXh8BTUnolz pnfOIG/REGwtgR3gf+Z9fZRnVAZfH62vSMYSTjw+vUsfIyy3apudvM2ZC2OdROUz n6U3rQrWAYrqQFg0Hjj+yG/bs7vQJICT64aqtF10Q4sC260VNn11voPsigdCIbEW Me6K+u6wPx/5qlieKks7GS69G0XwQEX4ogjjsq06tZ55QqhnxiWT5d53BXxUge0K sKDR8aIYA/6+FGNJQakyqbRtuswUCXStF9D9rs+tI6xfUQQhP2RvKMlMEbk0A6NI AW9GZVY0TdkVESSzvj/iHg+MvdM4NQM7VVC/aoZ0W2oG/8Hqb/Y6lCNPAVA4zydj EwbVToLu2aA= -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:10 2025 by rpki-client