$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer File: E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer (raw, json) Hash identifier: cZhjRoLpgHMGYVpMYpYwcfBdrdL7zuO+A2XkNsaRM8U= Subject key identifier: E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0F945D38A5262428B1FC198A71E00BDEACE5114E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft caRepository: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 09 Jun 2025 21:27:43 +0000 Certificate not after: Mon 08 Jun 2026 21:32:43 +0000 Subordinate resources: IP: 210.79.138.0/23 IP: 2001:df3:fd40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:94:5d:38:a5:26:24:28:b1:fc:19:8a:71:e0:0b:de:ac:e5:11:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 9 21:27:43 2025 GMT Not After : Jun 8 21:32:43 2026 GMT Subject: CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:f5:53:18:aa:b5:43:03:bc:58:f5:fa:e8: 22:be:88:fd:56:05:ba:5d:be:ee:b5:29:e8:4f:ca: 8e:d5:a8:50:e3:ea:45:5e:09:dd:15:da:a1:8d:1e: 45:08:8a:d0:7d:2b:44:1a:8f:1b:79:15:bd:b2:a9: 7a:30:d6:75:9a:24:ae:7a:1e:42:1e:88:0f:6c:ce: 6d:0d:0d:d9:6e:1b:a4:82:67:de:f7:12:d2:5c:ae: 20:71:c5:d0:4a:eb:63:2a:48:a0:10:fa:2b:15:62: 37:1d:7d:83:d7:bd:52:93:24:39:90:97:db:4a:77: 1e:2e:6d:ba:7b:07:17:9b:96:e2:bd:24:6d:9f:61: fb:19:ce:ca:6c:aa:a8:21:70:03:9a:ed:89:ba:fe: 54:2d:e4:16:a5:e5:31:f5:4f:dd:0a:bb:fa:ae:08: 53:50:31:27:4b:9d:48:a8:cd:b0:e1:e8:d3:92:71: 39:d1:31:fc:1f:42:9f:ed:29:2b:e0:92:42:4e:64: 3c:66:4a:49:7e:ab:b8:d3:1a:bc:c9:83:3d:68:d6: 76:4d:70:a9:61:f0:32:aa:d9:24:e9:35:f0:c5:17: 6b:7e:ea:71:86:c2:3f:03:6c:0d:4e:aa:db:62:9a: 9b:c1:6c:e5:83:a9:78:5d:e6:00:ac:dc:c4:f4:cb: 54:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.79.138.0/23 IPv6: 2001:df3:fd40::/48 Signature Algorithm: sha256WithRSAEncryption 00:b2:d7:26:98:1f:c9:32:e4:36:75:b2:be:17:92:ae:68:bc: 69:fb:d9:86:bd:2c:ac:24:62:b7:a6:e1:5e:8a:1c:8a:14:c2: e1:a5:91:44:d3:9a:4f:cd:e2:16:b1:43:fb:6c:9e:d9:07:18: cf:cc:1c:22:16:d9:f4:e8:98:e8:1f:d3:fc:6c:1f:16:91:ef: 24:e2:15:f9:af:d2:38:62:92:70:0b:79:2a:7e:f5:26:a7:9d: e0:f1:84:f8:50:b8:bf:04:d1:ae:bd:c3:1d:14:f2:9d:21:8d: c9:5c:d3:de:eb:f9:9b:8b:f7:56:75:b7:fe:ec:32:17:aa:51: 8a:98:06:ff:a0:33:54:86:64:cb:e9:76:3d:ca:2b:71:c4:1d: f6:10:7b:b8:f3:02:b8:bd:75:1b:19:40:85:70:36:57:35:d8: c8:2f:55:66:c4:3c:f0:6b:be:51:60:dd:9b:4c:71:da:1b:b2: 0e:e8:6c:8f:2a:ec:bf:1b:2e:37:7f:cf:30:9a:0d:52:42:c2: 7f:ab:9d:4f:80:b1:bd:91:f4:a5:44:27:6e:fd:1c:06:01:37: df:b2:ce:69:67:83:a3:0c:12:4e:ca:f7:f0:95:4e:65:56:6f: 65:54:91:0b:98:62:08:bd:8a:7d:61:39:eb:98:fd:5e:f9:8a: 00:39:3e:64 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUD5RdOKUmJCix/BmKceAL3qzlEU4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwOTIxMjc0M1oX DTI2MDYwODIxMzI0M1owMzExMC8GA1UEAxMoRTA3RjBFOERFMjU3MkRDN0I4MTM3 RUMwNjc5RjQyNjQ1RDY5NUE1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmv9VMYqrVDA7xY9froIr6I/VYFul2+7rUp6E/KjtWoUOPqRV4J3RXaoY0e RQiK0H0rRBqPG3kVvbKpejDWdZokrnoeQh6ID2zObQ0N2W4bpIJn3vcS0lyuIHHF 0ErrYypIoBD6KxViNx19g9e9UpMkOZCX20p3Hi5tunsHF5uW4r0kbZ9h+xnOymyq qCFwA5rtibr+VC3kFqXlMfVP3Qq7+q4IU1AxJ0udSKjNsOHo05JxOdEx/B9Cn+0p K+CSQk5kPGZKSX6ruNMavMmDPWjWdk1wqWHwMqrZJOk18MUXa37qcYbCPwNsDU6q 22Kam8Fs5YOpeF3mAKzcxPTLVCECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOB/Do3iVy3HuBN+wGefQmRdaVpUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hOGYyODVlZi0zNDUzLTQxNzktYTU1My1mMTk1OTdkZTlkZWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4ZjI4NWVm LTM0NTMtNDE3OS1hNTUzLWYxOTU5N2RlOWRlZC8wL0UwN0YwRThERTI1NzJEQzdC ODEzN0VDMDY3OUY0MjY0NUQ2OTVBNTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAHST4owDwQCAAIwCQMHACABDfP9QDANBgkqhkiG9w0BAQsFAAOCAQEAALLXJpgf yTLkNnWyvheSrmi8afvZhr0srCRit6bhXoocihTC4aWRRNOaT83iFrFD+2ye2QcY z8wcIhbZ9OiY6B/T/GwfFpHvJOIV+a/SOGKScAt5Kn71Jqed4PGE+FC4vwTRrr3D HRTynSGNyVzT3uv5m4v3VnW3/uwyF6pRipgG/6AzVIZky+l2PcorccQd9hB7uPMC uL11GxlAhXA2VzXYyC9VZsQ88Gu+UWDdm0xx2huyDuhsjyrsvxsuN3/PMJoNUkLC f6udT4CxvZH0pUQnbv0cBgE337LOaWeDowwSTsr38JVOZVZvZVSRC5hiCL2KfWE5 65j9XvmKADk+ZA== -----END CERTIFICATE-----Generated at Sun Jun 15 17:39:33 2025 by rpki-client