$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer File: D4D0F3E6E684847D602FC73758893CE2BB05D399.cer (raw, json) Hash identifier: XAECQ2FjHBr97dAOcFjbNAplqXsG9na31u8UeG3XwbY= Subject key identifier: D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7D2DED9B385C4055944CECB46C122602EEF1DC63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft caRepository: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 01 Nov 2025 07:13:30 +0000 Certificate not after: Sat 31 Oct 2026 07:18:30 +0000 Subordinate resources: IP: 103.29.187.0/24 IP: 103.123.14.0/23 IP: 103.234.195.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2d:ed:9b:38:5c:40:55:94:4c:ec:b4:6c:12:26:02:ee:f1:dc:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 1 07:13:30 2025 GMT Not After : Oct 31 07:18:30 2026 GMT Subject: CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b3:d1:d7:fb:9b:ed:70:e9:76:8a:8b:e1:97: 7b:c7:cf:0a:96:24:0d:0d:c2:73:99:cc:b0:e1:c7: dd:58:c9:46:27:80:4a:62:e0:13:8c:df:90:a6:ef: 83:62:72:fd:71:ac:43:99:f3:29:11:c6:e5:6c:a5: 0f:da:f6:35:d9:3c:bb:2c:86:25:bb:f1:33:94:66: be:82:4d:d2:1c:1b:b3:b6:f9:28:f9:11:90:41:58: d6:84:86:b7:30:1c:e4:b5:e7:7f:02:7f:75:da:0b: d5:15:f0:71:c1:1b:73:d9:5f:d1:a3:39:23:23:52: da:ba:96:04:50:65:a9:2f:9b:fe:ba:96:83:07:0d: c7:83:82:5d:37:c1:fb:be:ac:9d:53:17:92:12:c6: 97:e9:f1:80:3f:e9:d1:ac:30:a3:a6:fa:8f:30:26: 24:69:33:5b:bf:11:c5:28:a7:11:7a:60:57:b2:e8: aa:03:dc:47:53:21:d6:17:b3:80:7c:11:2d:9b:f1: 10:da:ce:e8:87:3a:08:68:2f:5a:8f:af:96:f6:c5: 19:25:6f:1f:96:ca:45:62:31:da:e0:73:0d:60:7a: 22:6d:3c:db:01:50:63:28:7d:46:4f:b2:55:07:2c: f8:8a:4b:96:26:b0:f8:7b:21:4f:92:42:ce:c6:15: 4e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.187.0/24 103.123.14.0/23 103.234.195.0/24 Signature Algorithm: sha256WithRSAEncryption 44:cc:c4:0a:75:7e:f2:04:70:0c:24:df:3d:4f:da:76:59:ba: 76:59:18:dc:99:a8:f1:0a:67:d1:65:a0:f6:f7:03:5b:22:6b: 6a:08:34:12:8f:2e:08:20:21:1f:3f:1b:83:c3:8b:fa:5b:8b: 30:34:3c:9c:40:84:18:a8:80:bc:71:9e:18:1f:f7:3d:92:e9: 46:43:db:25:2b:46:e3:06:8d:62:96:e9:96:f3:09:2b:29:93: 9c:74:9a:1b:54:42:b8:0e:8a:30:24:91:f6:c4:a9:9c:32:38: c5:e6:65:97:22:ab:1a:fe:b1:88:df:6e:9a:92:ce:f0:82:d9: c2:d0:d1:a0:9e:fc:47:87:f2:28:b8:51:b3:dc:d1:11:3f:46: 3d:1e:8f:f7:7c:19:66:56:44:6d:28:19:35:62:54:e3:4d:4a: 5c:d0:90:e1:7a:0b:76:a3:b1:d5:c5:5e:3f:aa:69:7f:1c:6a: 39:1b:bc:a9:e9:e7:19:cd:59:d8:31:80:b6:2d:34:99:ff:6a: 05:94:09:e7:a2:8f:5d:a3:bc:73:9a:9f:a2:3b:86:ee:ca:fb: 45:22:09:9a:34:44:11:c4:01:4c:a9:09:10:19:7f:5f:e8:ff: d7:96:0a:06:4a:2a:64:72:a6:bb:9e:19:1e:cc:52:b5:c1:40: 1d:2d:4a:9e -----BEGIN CERTIFICATE----- MIIF0TCCBLmgAwIBAgIUfS3tmzhcQFWUTOy0bBImAu7x3GMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwMTA3MTMzMFoX DTI2MTAzMTA3MTgzMFowMzExMC8GA1UEAxMoRDREMEYzRTZFNjg0ODQ3RDYwMkZD NzM3NTg4OTNDRTJCQjA1RDM5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOz0df7m+1w6XaKi+GXe8fPCpYkDQ3Cc5nMsOHH3VjJRieASmLgE4zfkKbv g2Jy/XGsQ5nzKRHG5WylD9r2Ndk8uyyGJbvxM5RmvoJN0hwbs7b5KPkRkEFY1oSG tzAc5LXnfwJ/ddoL1RXwccEbc9lf0aM5IyNS2rqWBFBlqS+b/rqWgwcNx4OCXTfB +76snVMXkhLGl+nxgD/p0awwo6b6jzAmJGkzW78RxSinEXpgV7LoqgPcR1Mh1hez gHwRLZvxENrO6Ic6CGgvWo+vlvbFGSVvH5bKRWIx2uBzDWB6Im082wFQYyh9Rk+y VQcs+IpLliaw+HshT5JCzsYVTkECAwEAAaOCAsQwggLAMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNTQ8+bmhIR9YC/HN1iJPOK7BdOZMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84MjM1MzBlYy05OTBlLTQxZDctOWQ3OC1iNzdlMjBkNzZiY2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgyMzUzMGVj LTk5MGUtNDFkNy05ZDc4LWI3N2UyMGQ3NmJjZC8wL0Q0RDBGM0U2RTY4NDg0N0Q2 MDJGQzczNzU4ODkzQ0UyQkIwNUQzOTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYBBQUHAQcBAf8EHDAaMBgEAgABMBID BABnHbsDBAFnew4DBABn6sMwDQYJKoZIhvcNAQELBQADggEBAETMxAp1fvIEcAwk 3z1P2nZZunZZGNyZqPEKZ9FloPb3A1sia2oINBKPLgggIR8/G4PDi/pbizA0PJxA hBiogLxxnhgf9z2S6UZD2yUrRuMGjWKW6ZbzCSspk5x0mhtUQrgOijAkkfbEqZwy OMXmZZciqxr+sYjfbpqSzvCC2cLQ0aCe/EeH8ii4UbPc0RE/Rj0ej/d8GWZWRG0o GTViVONNSlzQkOF6C3ajsdXFXj+qaX8cajkbvKnp5xnNWdgxgLYtNJn/agWUCeei j12jvHOan6I7hu7K+0UiCZo0RBHEAUypCRAZf1/o/9eWCgZKKmRyprueGR7MUrXB QB0tSp4= -----END CERTIFICATE-----Generated at Tue Nov 4 02:00:29 2025 by rpki-client