$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer (raw, json) Hash identifier: xEEZVQul4tWvt/bZ1qyGLjpTA5iMBG1A7wc57T1upAo= Subject key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 715BB085E67CD5CEF9323951BFEB15DECF634D89 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft caRepository: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 15 Jun 2025 01:03:53 +0000 Certificate not after: Sun 14 Jun 2026 01:08:53 +0000 Subordinate resources: IP: 103.164.172.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 13:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:5b:b0:85:e6:7c:d5:ce:f9:32:39:51:bf:eb:15:de:cf:63:4d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 15 01:03:53 2025 GMT Not After : Jun 14 01:08:53 2026 GMT Subject: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dd:3e:6f:2e:ea:d4:64:4d:06:08:4b:72:d1: 31:fd:53:90:e3:aa:82:24:03:3d:13:ce:61:2c:b1: 1e:94:b0:7f:cf:06:b1:9c:cd:fa:32:0b:50:b0:21: e4:ca:52:d7:e1:f5:5e:fe:f3:f4:37:34:98:91:a2: ed:86:85:1b:a9:7a:d3:c7:8f:87:53:80:1d:e1:a3: e7:6e:8a:04:41:af:28:bd:8c:eb:b2:1a:d6:80:9c: 04:8d:06:ad:40:9b:06:4e:0b:76:4f:bc:48:9b:f2: ca:3e:1e:b6:7b:61:9d:f0:ed:c0:88:02:4f:11:d1: 92:92:11:10:bd:5a:f8:9a:de:6a:ee:67:ea:dd:39: a7:79:d4:71:9f:85:13:55:ae:86:9a:fd:7c:57:e6: 51:95:d5:18:f3:d8:b4:7b:f0:71:97:65:f9:56:03: af:15:be:20:26:6a:93:ef:7d:35:9e:03:ad:f8:c0: 61:11:0d:39:2c:99:d9:b2:10:d5:c4:fd:f2:1e:1e: 5b:f1:81:51:e6:d9:0b:34:e9:8e:9e:6b:fb:d2:0a: 67:f3:be:53:ce:da:b8:72:f5:5c:12:98:21:f4:3b: 21:dd:d6:a6:6d:a5:9f:ee:f8:6e:6a:c5:e8:36:2b: b1:14:11:92:e2:ca:46:31:aa:03:ef:5f:4b:8a:00: 09:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.172.0/23 Signature Algorithm: sha256WithRSAEncryption 12:3e:eb:5f:22:18:e0:60:48:d2:ab:ea:72:e1:56:24:d6:83: 4c:ab:f5:f2:32:6f:f5:0c:aa:92:5b:3c:2d:ba:7b:80:5a:e1: 2d:11:e0:ec:84:f7:02:c2:01:b5:fc:9a:e2:d4:3b:3f:b2:91: 0e:7b:11:5b:f1:45:ee:73:8a:86:15:f8:99:0d:ba:ee:65:12: a4:47:4b:3c:b0:44:65:2f:ec:4b:d6:99:fe:bb:7b:6c:8c:dc: 2c:ba:d4:cb:cc:13:69:60:49:09:d8:86:84:e9:0d:2d:ad:a9: 60:55:31:9c:17:ee:1d:8f:8d:14:ed:e0:37:da:7b:3c:6d:75: e8:19:7a:27:8b:14:dc:3d:78:49:0a:69:0c:de:f4:d3:86:2c: 32:7c:55:29:26:9c:b2:a0:c2:b4:a6:2e:5b:a1:61:a7:85:33: f9:e1:ff:9b:33:ec:27:9e:ab:98:11:ed:fa:c9:d5:e0:de:0c: e8:0c:aa:f6:f5:ea:bf:d7:d9:a2:2f:eb:0c:6a:c5:90:25:61: 3b:17:fb:b5:3f:46:ff:92:a8:88:cc:84:4d:01:60:19:65:ce: 29:f0:51:88:b9:01:af:4f:c2:f8:a0:16:4e:d0:81:63:ef:f7: d6:da:7b:74:3a:e2:c5:bf:20:e4:f1:d1:da:f6:12:1d:e6:58: 07:5f:d6:1b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcVuwheZ81c75MjlRv+sV3s9jTYkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxNTAxMDM1M1oX DTI2MDYxNDAxMDg1M1owMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZB MzczOTlGMjBERUExOUMyRUYyQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/dPm8u6tRkTQYIS3LRMf1TkOOqgiQDPRPOYSyxHpSwf88GsZzN+jILULAh 5MpS1+H1Xv7z9Dc0mJGi7YaFG6l608ePh1OAHeGj526KBEGvKL2M67Ia1oCcBI0G rUCbBk4Ldk+8SJvyyj4etnthnfDtwIgCTxHRkpIREL1a+Jreau5n6t05p3nUcZ+F E1Wuhpr9fFfmUZXVGPPYtHvwcZdl+VYDrxW+ICZqk+99NZ4DrfjAYRENOSyZ2bIQ 1cT98h4eW/GBUebZCzTpjp5r+9IKZ/O+U87auHL1XBKYIfQ7Id3Wpm2ln+74bmrF 6DYrsRQRkuLKRjGqA+9fS4oACXkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNeFKvBd+7l6zUajc5nyDeoZwu8sMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlODlmMWI0 LWVmNjMtNDUzOS04NDU1LTk4YzY3MTk5NWNjZi8wL0Q3ODUyQUYwNURGQkI5N0FD RDQ2QTM3Mzk5RjIwREVBMTlDMkVGMkMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnpKwwDQYJKoZIhvcNAQELBQADggEBABI+618iGOBgSNKr6nLhViTWg0yr9fIy b/UMqpJbPC26e4Ba4S0R4OyE9wLCAbX8muLUOz+ykQ57EVvxRe5zioYV+JkNuu5l EqRHSzywRGUv7EvWmf67e2yM3Cy61MvME2lgSQnYhoTpDS2tqWBVMZwX7h2PjRTt 4DfaezxtdegZeieLFNw9eEkKaQze9NOGLDJ8VSkmnLKgwrSmLluhYaeFM/nh/5sz 7Ceeq5gR7frJ1eDeDOgMqvb16r/X2aIv6wxqxZAlYTsX+7U/Rv+SqIjMhE0BYBll zinwUYi5Aa9PwvigFk7QgWPv99bae3Q64sW/IOTx0dr2Eh3mWAdf1hs= -----END CERTIFICATE-----Generated at Tue Jun 17 15:04:37 2025 by rpki-client