$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer File: DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer (raw, json) Hash identifier: Wrq1qYQL/CsN91BO9pweSQOL4Bf/eax4xWYoReiaLjQ= Subject key identifier: DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2484381CF83804F93F51335D9CBEDC72BA583660 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft caRepository: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 10 Jun 2025 08:29:20 +0000 Certificate not after: Tue 09 Jun 2026 08:34:20 +0000 Subordinate resources: IP: 43.252.144.0/23 IP: 103.14.110.0/23 IP: 103.233.88.0/23 IP: 120.89.94.0/23 IP: 192.140.224.0/23 IP: 2001:df0:222::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 09:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:84:38:1c:f8:38:04:f9:3f:51:33:5d:9c:be:dc:72:ba:58:36:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 10 08:29:20 2025 GMT Not After : Jun 9 08:34:20 2026 GMT Subject: CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8d:c6:c7:bc:a4:f8:11:b3:a5:e5:30:3c:5d: d3:b7:24:f8:4b:a7:7f:67:e2:cd:c3:43:a5:28:46: f8:2b:9e:ec:12:f3:92:60:ee:77:8e:6e:23:0e:ec: 7b:72:a4:0a:1f:d4:47:af:e4:d0:8b:91:dc:38:3e: 67:4f:ec:c5:fd:ec:a0:06:6a:aa:0a:c0:65:cc:5f: d5:4f:23:c1:68:ed:5f:db:04:c8:2c:5a:35:19:ce: d4:7c:b0:ea:d5:f1:e3:49:40:d1:1d:b4:b0:bd:0c: 81:43:5f:bf:98:37:0e:8f:b2:c2:66:d5:d0:31:1a: c5:0f:e1:d5:5d:ef:2d:17:ca:1a:77:6e:eb:53:49: 6e:6f:92:a3:10:9f:b0:63:43:8b:88:a8:ee:8d:28: dd:aa:a0:8a:a9:b3:f6:34:65:d3:c3:00:cc:71:c0: 2b:4f:b8:ba:a5:ce:6d:c0:a0:9e:44:1c:3c:29:b2: 4b:1f:05:d3:f9:fe:fa:d8:0c:b9:0c:2e:4b:65:d1: 89:57:5e:52:5e:f7:3c:fb:43:9e:1d:9c:de:61:b5: 66:82:56:cd:f9:e7:ff:54:d9:13:bd:cd:12:34:09: 6b:46:41:2b:30:e4:c0:e2:94:6f:a1:4b:68:03:19: 28:dd:a9:c0:ce:dc:42:f7:89:2b:95:c9:eb:50:f4: 67:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.252.144.0/23 103.14.110.0/23 103.233.88.0/23 120.89.94.0/23 192.140.224.0/23 IPv6: 2001:df0:222::/48 Signature Algorithm: sha256WithRSAEncryption 51:c8:da:9a:ac:d1:ad:f9:f2:88:c7:8c:fc:07:73:44:74:1b: d0:1e:df:f9:95:1e:6d:fc:10:2d:15:1d:c0:bf:57:99:fa:65: 29:a5:05:25:7e:00:e4:dc:c2:a4:09:01:2f:b6:52:54:5a:47: d6:46:d4:0b:e1:9f:80:61:48:47:ca:69:7d:6f:aa:01:fa:12: 2d:f5:01:1b:cf:35:37:f9:f9:fc:42:7d:e6:22:5c:be:06:61: 02:00:8d:64:b2:bd:b9:f3:6e:1c:17:46:4b:7b:a7:64:40:7d: be:13:e8:3a:1f:18:16:a8:1c:c5:59:71:f9:bc:e3:25:b6:07: ab:b8:77:39:c5:93:78:bc:a3:0e:ee:96:3f:0c:64:dc:9d:a1: 7d:39:91:63:56:7d:3f:f0:de:a0:5a:a4:73:37:23:00:88:f8: 73:c3:ab:dc:c3:32:47:7c:5a:e2:a2:60:f6:3f:f8:b9:0e:ec: 85:49:dc:d9:5b:a5:62:d0:af:e8:94:6b:9c:dd:24:4c:b3:d8: bc:e7:f6:b2:a6:90:d7:3b:9c:09:b5:9e:98:bb:b3:42:1c:9d: 04:7c:7f:5a:53:34:29:83:3b:d0:e7:4e:bd:32:32:5f:c9:df: 0f:9e:94:b3:e0:1b:8e:3d:3a:a2:95:3d:1f:42:04:e9:a5:97: a6:d0:d1:ab -----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgIUJIQ4HPg4BPk/UTNdnL7ccrpYNmAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxMDA4MjkyMFoX DTI2MDYwOTA4MzQyMFowMzExMC8GA1UEAxMoREYxQ0VBMDMxM0RBNzUwMEQ3MEFF MDg5MTY5QjRCQkVFNTRDQTg1OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANuNxse8pPgRs6XlMDxd07ck+Eunf2fizcNDpShG+Cue7BLzkmDud45uIw7s e3KkCh/UR6/k0IuR3Dg+Z0/sxf3soAZqqgrAZcxf1U8jwWjtX9sEyCxaNRnO1Hyw 6tXx40lA0R20sL0MgUNfv5g3Do+ywmbV0DEaxQ/h1V3vLRfKGndu61NJbm+SoxCf sGNDi4io7o0o3aqgiqmz9jRl08MAzHHAK0+4uqXObcCgnkQcPCmySx8F0/n++tgM uQwuS2XRiVdeUl73PPtDnh2c3mG1ZoJWzfnn/1TZE73NEjQJa0ZBKzDkwOKUb6FL aAMZKN2pwM7cQveJK5XJ61D0Z3ECAwEAAaOCAuEwggLdMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN8c6gMT2nUA1wrgiRabS77lTKhZMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNGZkNGJjMi00MWQ0LTQyZTYtYTdmZi01OTQ5Mzg4NTEyNmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0ZmQ0YmMy LTQxZDQtNDJlNi1hN2ZmLTU5NDkzODg1MTI2YS8wL0RGMUNFQTAzMTNEQTc1MDBE NzBBRTA4OTE2OUI0QkJFRTU0Q0E4NTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwSAYIKwYBBQUHAQcBAf8EOTA3MCQEAgABMB4D BAEr/JADBAFnDm4DBAFn6VgDBAF4WV4DBAHAjOAwDwQCAAIwCQMHACABDfACIjAN BgkqhkiG9w0BAQsFAAOCAQEAUcjamqzRrfnyiMeM/AdzRHQb0B7f+ZUebfwQLRUd wL9XmfplKaUFJX4A5NzCpAkBL7ZSVFpH1kbUC+GfgGFIR8ppfW+qAfoSLfUBG881 N/n5/EJ95iJcvgZhAgCNZLK9ufNuHBdGS3unZEB9vhPoOh8YFqgcxVlx+bzjJbYH q7h3OcWTeLyjDu6WPwxk3J2hfTmRY1Z9P/DeoFqkczcjAIj4c8Or3MMyR3xa4qJg 9j/4uQ7shUnc2VulYtCv6JRrnN0kTLPYvOf2sqaQ1zucCbWemLuzQhydBHx/WlM0 KYM70OdOvTIyX8nfD56Us+Abjj06opU9H0IE6aWXptDRqw== -----END CERTIFICATE-----Generated at Sun Jun 15 06:55:23 2025 by rpki-client