$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer File: E014E6ED03537E453565D06E7B8A31AA8A0525A1.cer (raw, json) Hash identifier: JHrI9Jg5evUF6L8XmIV/dh9Sz2Vr0ww6/5aXXiZUGVM= Subject key identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 67472444EC53F1B15ED3480B154900263B4A7B23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft caRepository: rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 02 Aug 2025 17:31:24 +0000 Certificate not after: Sat 01 Aug 2026 17:36:24 +0000 Subordinate resources: IP: 103.175.38.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:47:24:44:ec:53:f1:b1:5e:d3:48:0b:15:49:00:26:3b:4a:7b:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 2 17:31:24 2025 GMT Not After : Aug 1 17:36:24 2026 GMT Subject: CN=E014E6ED03537E453565D06E7B8A31AA8A0525A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7a:f5:c4:5c:f6:f9:4a:b9:3c:4f:8b:a0:a6: 1f:e3:d6:7d:9f:18:97:91:72:91:c0:83:19:b2:b8: ef:b6:62:ba:08:17:63:3a:03:81:76:27:9a:f1:15: a1:81:3e:a4:7e:34:aa:d3:14:6b:40:54:c0:7d:82: 9e:78:77:31:36:9c:1e:58:bf:68:c1:1a:85:51:ff: b7:5c:d3:58:43:0a:51:94:5f:40:48:66:3f:9c:9c: 2e:db:60:d9:ba:61:86:0a:e8:36:a9:cf:69:ef:f8: 45:5c:50:2b:b2:7e:eb:2f:24:d1:89:40:8e:d0:59: 8b:b6:a3:1e:05:0d:2a:fe:5a:e9:96:66:56:b1:cc: 4f:c3:38:d4:9b:d4:3a:50:9a:74:66:d3:5e:e5:f1: 1a:a9:0d:ec:af:a5:72:02:71:69:46:b7:fc:a0:f9: dd:50:a5:2f:eb:1b:6e:11:11:8e:81:76:8e:e3:43: 35:3c:e0:f0:a9:e7:d0:bf:34:0a:fa:2a:2c:96:4f: e3:70:07:93:36:0e:95:c0:d8:7b:1d:ce:26:41:d9: b1:45:9b:46:ea:5a:56:f7:7b:9e:89:a1:04:a3:7a: fd:98:94:e4:ad:ad:57:5a:bc:68:1d:e4:ab:bc:80: e2:27:57:b7:c6:ad:5c:c6:8a:b2:cc:e6:17:c9:66: a2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:14:E6:ED:03:53:7E:45:35:65:D0:6E:7B:8A:31:AA:8A:05:25:A1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/E014E6ED03537E453565D06E7B8A31AA8A0525A1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.38.0/23 Signature Algorithm: sha256WithRSAEncryption 26:c4:4f:fb:f2:e5:3b:20:3a:88:e8:ca:72:5a:70:44:aa:87: 38:97:b7:17:9c:a4:98:46:22:ed:fd:1e:9b:c3:7f:2d:ed:ea: e2:8e:96:66:4f:b4:53:27:0b:74:23:6d:9f:7f:a4:8b:9e:09: 0c:50:69:4d:66:50:81:d1:6e:41:1d:cd:75:2b:82:ed:06:21: 03:f6:8e:ca:73:95:6c:66:db:0f:dd:7a:6f:aa:45:ce:5b:e0: 2c:82:ad:42:80:c7:3e:ee:08:a3:a0:66:2a:2d:1f:0a:1c:dd: 8e:e5:91:25:37:1b:66:85:c9:bb:b5:d0:4d:bc:be:49:23:6c: d9:89:01:d7:7a:be:31:e6:31:3b:19:f8:b8:36:85:87:5e:ec: 1e:d8:0e:9a:82:30:3f:4e:d1:ef:53:be:12:0d:51:b3:1f:a9: dd:2a:95:e9:1a:87:00:5c:a3:73:a7:e9:24:f8:d5:7b:ef:e9: eb:cf:94:59:82:84:cd:4a:88:f6:28:6a:d0:19:9f:1a:55:95: e3:fe:23:e9:75:fb:c7:36:a5:14:bd:99:60:f3:31:74:78:bf: 72:c9:7c:e7:9b:2d:ae:f7:fd:c2:4e:71:8f:40:49:6e:54:8a: a9:2d:89:e5:ca:94:04:17:4e:cd:ed:b1:5e:67:f9:5b:2a:9d: 92:6e:4b:c6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZ0ckROxT8bFe00gLFUkAJjtKeyMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgwMjE3MzEyNFoX DTI2MDgwMTE3MzYyNFowMzExMC8GA1UEAxMoRTAxNEU2RUQwMzUzN0U0NTM1NjVE MDZFN0I4QTMxQUE4QTA1MjVBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ169cRc9vlKuTxPi6CmH+PWfZ8Yl5FykcCDGbK477ZiuggXYzoDgXYnmvEV oYE+pH40qtMUa0BUwH2Cnnh3MTacHli/aMEahVH/t1zTWEMKUZRfQEhmP5ycLttg 2bphhgroNqnPae/4RVxQK7J+6y8k0YlAjtBZi7ajHgUNKv5a6ZZmVrHMT8M41JvU OlCadGbTXuXxGqkN7K+lcgJxaUa3/KD53VClL+sbbhERjoF2juNDNTzg8Knn0L80 CvoqLJZP43AHkzYOlcDYex3OJkHZsUWbRupaVvd7nomhBKN6/ZiU5K2tV1q8aB3k q7yA4idXt8atXMaKsszmF8lmoisCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOAU5u0DU35FNWXQbnuKMaqKBSWhMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wYmIyOTM3OC00NWYwLTQ5ZDMtYTZhZi01NzNiZTdkY2E2ZDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBiYjI5Mzc4 LTQ1ZjAtNDlkMy1hNmFmLTU3M2JlN2RjYTZkMC8wL0UwMTRFNkVEMDM1MzdFNDUz NTY1RDA2RTdCOEEzMUFBOEEwNTI1QTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnryYwDQYJKoZIhvcNAQELBQADggEBACbET/vy5TsgOojoynJacESqhziXtxec pJhGIu39HpvDfy3t6uKOlmZPtFMnC3QjbZ9/pIueCQxQaU1mUIHRbkEdzXUrgu0G IQP2jspzlWxm2w/dem+qRc5b4CyCrUKAxz7uCKOgZiotHwoc3Y7lkSU3G2aFybu1 0E28vkkjbNmJAdd6vjHmMTsZ+Lg2hYde7B7YDpqCMD9O0e9TvhINUbMfqd0qleka hwBco3On6ST41Xvv6evPlFmChM1KiPYoatAZnxpVleP+I+l1+8c2pRS9mWDzMXR4 v3LJfOebLa73/cJOcY9ASW5UiqktieXKlAQXTs3tsV5n+VsqnZJuS8Y= -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:08 2025 by rpki-client