$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer File: E07D333345CD7D30F1DC10D98F6E73457739DF18.cer (raw, json) Hash identifier: dE5ZV+nIaeDon0kEthAc5KGADIB/RHyKx3R3ICVZeUY= Subject key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2FAE7CD77FB3E4B7EEB6375A3F8D2F28BF2D663F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft caRepository: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 16 Aug 2025 19:31:00 +0000 Certificate not after: Sat 15 Aug 2026 19:36:00 +0000 Subordinate resources: IP: 103.175.24.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ae:7c:d7:7f:b3:e4:b7:ee:b6:37:5a:3f:8d:2f:28:bf:2d:66:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 16 19:31:00 2025 GMT Not After : Aug 15 19:36:00 2026 GMT Subject: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e3:02:03:eb:59:30:72:bc:b2:df:b8:5e:fa: 2a:91:4f:fb:33:1b:9d:c2:25:f4:c8:c9:af:35:8c: 08:a9:be:e1:f9:43:ed:06:66:0c:42:9b:53:a2:73: 8e:8c:a5:45:04:67:43:ab:25:9d:b1:c5:bd:69:02: 11:96:96:fe:ac:33:ef:66:bd:bf:17:1a:7c:e2:4f: 1e:aa:7f:6c:12:b0:bd:ba:ab:c9:bc:3d:1d:21:93: d2:0e:28:75:de:2d:7f:13:12:76:d0:e3:8a:af:c2: aa:99:f9:26:88:45:22:a8:6f:2a:2c:c2:82:3c:32: 58:f4:74:af:15:f7:e7:10:d8:f1:d7:1f:6b:ec:22: 3b:49:a7:4d:fd:23:da:aa:ad:bd:b8:02:61:ba:4d: 84:29:e2:4e:56:ea:40:e4:c5:8a:da:05:82:18:01: 33:f6:0c:0c:c1:d6:a8:a0:da:4d:02:ac:b6:1f:f4: 60:e1:75:03:b9:a4:70:d6:3b:0b:7a:f8:1b:0e:d7: 46:d8:04:3a:fe:2f:7b:7e:22:c3:7d:d5:05:b4:ff: cf:38:2c:55:c3:2a:95:7b:ac:a6:35:fb:d0:d3:0f: 4f:97:a8:4f:03:d9:43:5b:28:68:b4:bb:f3:6f:7c: 46:7f:f5:1d:a7:d7:d3:74:6e:28:d3:5c:cb:ca:3f: 7b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.24.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:e6:a0:49:66:f9:ea:ca:b7:ff:b8:c9:02:ca:7a:bb:12:42: 6e:77:dd:5c:68:4b:e7:1d:ff:89:f4:a3:f1:80:e1:17:07:a6: 0f:ea:51:a6:08:8c:b3:ed:5a:81:47:c7:95:d2:4c:6e:d2:e6: 23:e9:cb:48:da:6f:87:b3:1b:83:80:7f:74:69:f4:fe:40:d6: 6a:cb:d2:35:2a:b3:5e:cc:65:49:d2:81:f2:cc:de:d7:c5:37: 17:b2:d4:38:40:13:2b:4e:cb:ce:fe:9c:c9:b7:b3:c4:a5:dd: ab:82:92:a9:93:1d:30:74:25:56:0e:bd:91:84:3c:4e:54:75: 97:6b:79:be:9d:1c:6e:e4:db:11:45:09:30:dd:44:ff:3a:1f: e7:d0:ce:2f:93:cd:99:f2:d0:3a:91:f1:71:9f:b5:e4:8d:31: 3d:78:55:12:33:4a:d5:fe:1e:d0:94:54:a4:b2:e2:b3:48:46: de:0c:bb:f3:9b:53:40:90:a3:35:3f:2d:a8:17:e5:43:cf:e0: 53:3e:59:17:85:40:86:c1:90:ed:14:16:1c:18:06:ad:f7:40: 13:48:6e:9b:47:e3:ab:a3:93:57:4d:09:69:99:3e:27:6a:23: ef:20:b0:ff:89:43:aa:3c:49:f4:f0:21:11:46:6d:84:0c:b2: 87:72:bf:d8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUL65813+z5LfutjdaP40vKL8tZj8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxNjE5MzEwMFoX DTI2MDgxNTE5MzYwMFowMzExMC8GA1UEAxMoRTA3RDMzMzM0NUNEN0QzMEYxREMx MEQ5OEY2RTczNDU3NzM5REYxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANzjAgPrWTByvLLfuF76KpFP+zMbncIl9MjJrzWMCKm+4flD7QZmDEKbU6Jz joylRQRnQ6slnbHFvWkCEZaW/qwz72a9vxcafOJPHqp/bBKwvbqrybw9HSGT0g4o dd4tfxMSdtDjiq/Cqpn5JohFIqhvKizCgjwyWPR0rxX35xDY8dcfa+wiO0mnTf0j 2qqtvbgCYbpNhCniTlbqQOTFitoFghgBM/YMDMHWqKDaTQKsth/0YOF1A7mkcNY7 C3r4Gw7XRtgEOv4ve34iw33VBbT/zzgsVcMqlXuspjX70NMPT5eoTwPZQ1soaLS7 8298Rn/1HafX03RuKNNcy8o/e48CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOB9MzNFzX0w8dwQ2Y9uc0V3Od8YMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ZTYyODgwZS1kNWYyLTQwNjktODhmZi0xMjY3YjdjYzAxYzUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlNjI4ODBl LWQ1ZjItNDA2OS04OGZmLTEyNjdiN2NjMDFjNS8wL0UwN0QzMzMzNDVDRDdEMzBG MURDMTBEOThGNkU3MzQ1NzczOURGMTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrxgwDQYJKoZIhvcNAQELBQADggEBAEvmoElm+erKt/+4yQLKersSQm533Vxo S+cd/4n0o/GA4RcHpg/qUaYIjLPtWoFHx5XSTG7S5iPpy0jab4ezG4OAf3Rp9P5A 1mrL0jUqs17MZUnSgfLM3tfFNxey1DhAEytOy87+nMm3s8Sl3auCkqmTHTB0JVYO vZGEPE5UdZdreb6dHG7k2xFFCTDdRP86H+fQzi+TzZny0DqR8XGfteSNMT14VRIz StX+HtCUVKSy4rNIRt4Mu/ObU0CQozU/LagX5UPP4FM+WReFQIbBkO0UFhwYBq33 QBNIbptH46ujk1dNCWmZPidqI+8gsP+JQ6o8SfTwIRFGbYQMsodyv9g= -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:15 2025 by rpki-client