$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer File: E1FE69A34216C24D1870F5CED3A4309234A0F1B2.cer (raw, json) Hash identifier: BUjGiyOwoiv2NQ3tUz3OQZ9Ez+rxo4qUcef5h2fDB6I= Subject key identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5938CA9F748521DEAA0D72F5F2D293E6CCC06398 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft caRepository: rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 20 Sep 2025 03:31:16 +0000 Certificate not after: Sat 19 Sep 2026 03:36:16 +0000 Subordinate resources: IP: 103.189.222.0/23 IP: 2001:df1:9ec0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:38:ca:9f:74:85:21:de:aa:0d:72:f5:f2:d2:93:e6:cc:c0:63:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 20 03:31:16 2025 GMT Not After : Sep 19 03:36:16 2026 GMT Subject: CN=E1FE69A34216C24D1870F5CED3A4309234A0F1B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ea:15:5f:28:04:89:07:32:2b:bc:3b:03:2f: 27:96:c5:f3:05:b5:5d:ec:de:84:fa:f3:8d:0a:58: 51:d5:4e:a9:b9:dc:60:ec:78:e3:cf:dc:55:a0:e9: 7c:01:80:31:8c:d1:9e:07:a7:47:07:39:a9:0d:43: c0:05:cc:fe:1e:7b:4b:63:95:4d:28:93:2d:4f:e6: 02:6a:d2:aa:1f:93:11:38:81:f7:38:fa:c3:1b:50: e8:ec:25:f2:43:30:ec:14:92:bc:38:39:7b:83:b0: 69:a4:af:91:d1:46:6d:2f:1a:d1:47:26:6a:4a:e8: ad:ba:fd:08:91:9c:5e:f3:0c:cc:34:dd:96:16:c9: c6:33:1e:0a:19:f5:6d:8e:05:3f:97:77:5b:b0:91: bf:d6:09:c9:1b:73:0f:97:32:49:a0:36:fc:16:0b: 45:56:36:cb:2a:37:ef:86:26:a3:01:55:01:29:5a: 3f:ac:d9:f7:40:20:e9:b4:c2:9c:1d:6d:8a:b2:b3: 2d:2a:b7:7c:5e:ca:5f:d9:e1:da:08:03:3e:a3:0d: 9d:f1:a1:f5:52:98:bd:f7:9f:d7:39:a8:b5:b4:f5: cf:4c:70:06:4e:e4:49:18:7c:f5:59:42:b5:82:1a: f3:28:40:3f:44:60:9e:e8:43:8c:0e:2f:8c:60:39: df:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E1:FE:69:A3:42:16:C2:4D:18:70:F5:CE:D3:A4:30:92:34:A0:F1:B2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/188e3a17-1c91-4793-83c4-211d4210aea8/0/E1FE69A34216C24D1870F5CED3A4309234A0F1B2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.222.0/23 IPv6: 2001:df1:9ec0::/48 Signature Algorithm: sha256WithRSAEncryption 1d:3a:97:9a:c8:20:c3:91:cc:d4:2f:40:63:bc:d1:f0:c3:45: ec:88:27:5c:b4:4f:c6:5a:47:e2:a4:8d:21:df:54:ab:37:de: a8:48:2f:ea:c9:27:97:cb:5b:7b:4f:54:3e:aa:ae:80:fb:a6: 82:f8:64:66:da:e4:d1:51:e4:e9:36:00:d2:9f:47:4a:c2:e8: b2:97:0f:a8:44:e8:f1:bd:ea:7e:e9:0d:7e:e7:0f:e6:f9:81: 21:5c:04:f2:92:ce:28:d4:2c:fb:f5:05:1b:84:d9:3f:a3:aa: a7:f2:77:36:9d:39:02:c3:ff:fa:a6:78:ce:e2:11:d2:32:c5: df:db:34:6b:1d:b4:2d:6b:5a:3e:3b:6a:d8:e5:5d:ff:2b:11: a7:9e:a0:ce:e5:b4:d2:be:2f:63:f0:c3:b2:43:f1:ad:79:65: f8:74:a1:89:d1:75:54:c6:1c:c4:34:a4:bf:95:ee:cd:a3:52: da:64:da:8d:a8:53:1f:4d:b4:3d:e8:16:02:8f:95:3c:ab:23: f2:e9:3e:c0:00:72:4b:0d:28:cb:fa:c4:36:f8:1e:40:16:70: d4:c9:4b:66:35:64:e1:19:e4:2f:e8:59:53:92:65:44:6a:e3: cc:74:7e:57:be:ff:94:a2:f4:f9:17:69:0c:f8:f5:f7:d3:13: 7f:7e:d2:29 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUWTjKn3SFId6qDXL18tKT5szAY5gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyMDAzMzExNloX DTI2MDkxOTAzMzYxNlowMzExMC8GA1UEAxMoRTFGRTY5QTM0MjE2QzI0RDE4NzBG NUNFRDNBNDMwOTIzNEEwRjFCMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANzqFV8oBIkHMiu8OwMvJ5bF8wW1XezehPrzjQpYUdVOqbncYOx448/cVaDp fAGAMYzRngenRwc5qQ1DwAXM/h57S2OVTSiTLU/mAmrSqh+TETiB9zj6wxtQ6Owl 8kMw7BSSvDg5e4OwaaSvkdFGbS8a0Ucmakrorbr9CJGcXvMMzDTdlhbJxjMeChn1 bY4FP5d3W7CRv9YJyRtzD5cySaA2/BYLRVY2yyo374YmowFVASlaP6zZ90Ag6bTC nB1tirKzLSq3fF7KX9nh2ggDPqMNnfGh9VKYvfef1zmotbT1z0xwBk7kSRh89VlC tYIa8yhAP0RgnuhDjA4vjGA53+8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOH+aaNCFsJNGHD1ztOkMJI0oPGyMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xODhlM2ExNy0xYzkxLTQ3OTMtODNjNC0yMTFkNDIxMGFlYTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4OGUzYTE3 LTFjOTEtNDc5My04M2M0LTIxMWQ0MjEwYWVhOC8wL0UxRkU2OUEzNDIxNkMyNEQx ODcwRjVDRUQzQTQzMDkyMzRBMEYxQjIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnvd4wDwQCAAIwCQMHACABDfGewDANBgkqhkiG9w0BAQsFAAOCAQEAHTqXmsgg w5HM1C9AY7zR8MNF7IgnXLRPxlpH4qSNId9UqzfeqEgv6sknl8tbe09UPqqugPum gvhkZtrk0VHk6TYA0p9HSsLospcPqETo8b3qfukNfucP5vmBIVwE8pLOKNQs+/UF G4TZP6Oqp/J3Np05AsP/+qZ4zuIR0jLF39s0ax20LWtaPjtq2OVd/ysRp56gzuW0 0r4vY/DDskPxrXll+HShidF1VMYcxDSkv5XuzaNS2mTajahTH020PegWAo+VPKsj 8uk+wABySw0oy/rENvgeQBZw1MlLZjVk4RnkL+hZU5JlRGrjzHR+V77/lKL0+Rdp DPj199MTf37SKQ== -----END CERTIFICATE-----Generated at Tue Nov 4 02:17:12 2025 by rpki-client