$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E2111F10F01C17C4A322DAF5076425FBD824219D.cer File: E2111F10F01C17C4A322DAF5076425FBD824219D.cer (raw, json) Hash identifier: efA7lIAcnpI57A5Z9PMjPW3Dgq1yWWrS/xCZPOa06to= Subject key identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 27DD174FAE8689BFE6E3CFDC75C9556CC0FE670C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft caRepository: rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 21 Jul 2025 11:26:55 +0000 Certificate not after: Mon 20 Jul 2026 11:31:55 +0000 Subordinate resources: IP: 203.161.24.0/21 IP: 2405:c9c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:36:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:dd:17:4f:ae:86:89:bf:e6:e3:cf:dc:75:c9:55:6c:c0:fe:67:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 21 11:26:55 2025 GMT Not After : Jul 20 11:31:55 2026 GMT Subject: CN=E2111F10F01C17C4A322DAF5076425FBD824219D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a1:ad:20:4e:df:67:77:95:11:d9:9e:64:8a: f0:d1:ce:93:88:ec:14:c0:b1:85:b1:c3:7c:e9:a4: f9:3b:98:7d:99:0f:96:d2:ca:97:9a:e0:eb:50:03: 03:ab:c8:6f:95:70:b8:4b:de:57:c0:64:d1:27:db: 26:6c:cb:9d:09:8f:37:88:04:9f:30:e7:59:7e:49: 44:50:cf:a8:9c:b9:37:bc:bf:1a:8a:10:00:4c:77: 94:59:5c:6e:0b:18:90:d3:fe:70:bf:78:89:c9:e4: 18:bc:93:2b:f8:00:3f:57:72:47:b1:b4:4f:80:e0: 93:c5:7e:86:a6:27:55:0b:96:c4:30:6c:8a:5e:40: 2a:99:43:fb:5d:4e:d8:f0:b8:3f:54:a0:22:df:59: 26:b9:86:ac:0b:b3:c0:b6:51:e3:67:3b:f9:51:61: 4d:82:41:9a:f0:65:53:ac:bd:f8:f2:42:05:8b:66: d1:ea:b7:98:44:ee:e0:54:48:f1:d3:ec:05:37:db: 47:56:02:b1:68:2a:e6:d1:25:73:fb:a1:e9:ba:29: 2c:39:c8:1a:40:2a:dc:95:f5:18:0f:49:b7:56:a0: ca:88:f3:13:d6:12:16:d8:ba:e2:8c:1c:c3:e8:98: 5c:35:20:43:a5:d6:54:3c:76:53:20:6e:44:69:74: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E2:11:1F:10:F0:1C:17:C4:A3:22:DA:F5:07:64:25:FB:D8:24:21:9D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/02158aec-5281-42e6-979b-fca61d47c845/0/E2111F10F01C17C4A322DAF5076425FBD824219D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.161.24.0/21 IPv6: 2405:c9c0::/32 Signature Algorithm: sha256WithRSAEncryption 30:4c:7f:4a:38:5f:bf:7e:90:cb:eb:4b:1c:13:d1:3b:2c:ff: f9:ab:6b:95:ff:72:1b:29:1a:31:e2:ac:a8:64:df:ed:7f:dc: fb:e2:59:ce:d4:53:83:23:79:77:20:0b:c7:e3:53:53:e2:b9: 22:97:85:29:0e:57:90:53:1a:13:84:d1:72:c1:0e:7c:89:b0: d1:e9:60:da:98:83:7d:97:9e:3e:66:36:43:d8:c6:cd:ec:66: e6:cc:4d:fb:ba:4a:c6:cc:85:5c:5b:7f:39:ff:29:b4:9f:4c: d6:c9:19:14:a6:b5:fc:1c:ac:0a:69:76:ef:12:47:4f:ed:7a: 88:06:04:e7:af:a3:b2:db:f5:1f:83:ac:e9:33:6a:66:06:51: a5:09:cf:45:90:f9:57:d1:c9:9c:f7:a1:c6:f1:21:a5:bc:1b: bd:af:f1:3b:18:fe:e9:33:7f:b0:c4:51:bd:26:1e:e5:56:67: c6:6c:05:4e:fa:3b:f5:01:0c:92:a7:21:7c:ea:fa:08:0e:20: f2:cf:50:01:ea:f0:22:e7:7c:2f:c4:85:4d:8c:36:02:d3:4f: c8:c0:35:b7:ff:a5:2f:15:46:62:01:72:17:90:b1:ce:b1:52: 17:e3:66:9e:12:49:53:3b:52:e5:9e:1c:e0:72:b8:5d:bd:64: 01:d2:28:80 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUJ90XT66Gib/m48/cdclVbMD+ZwwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyMTExMjY1NVoX DTI2MDcyMDExMzE1NVowMzExMC8GA1UEAxMoRTIxMTFGMTBGMDFDMTdDNEEzMjJE QUY1MDc2NDI1RkJEODI0MjE5RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPKhrSBO32d3lRHZnmSK8NHOk4jsFMCxhbHDfOmk+TuYfZkPltLKl5rg61AD A6vIb5VwuEveV8Bk0SfbJmzLnQmPN4gEnzDnWX5JRFDPqJy5N7y/GooQAEx3lFlc bgsYkNP+cL94icnkGLyTK/gAP1dyR7G0T4Dgk8V+hqYnVQuWxDBsil5AKplD+11O 2PC4P1SgIt9ZJrmGrAuzwLZR42c7+VFhTYJBmvBlU6y9+PJCBYtm0eq3mETu4FRI 8dPsBTfbR1YCsWgq5tElc/uh6bopLDnIGkAq3JX1GA9Jt1agyojzE9YSFti64owc w+iYXDUgQ6XWVDx2UyBuRGl0GjcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOIRHxDwHBfEoyLa9QdkJfvYJCGdMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMjE1OGFlYy01MjgxLTQyZTYtOTc5Yi1mY2E2MWQ0N2M4NDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAyMTU4YWVj LTUyODEtNDJlNi05NzliLWZjYTYxZDQ3Yzg0NS8wL0UyMTExRjEwRjAxQzE3QzRB MzIyREFGNTA3NjQyNUZCRDgyNDIxOUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAPLoRgwDQQCAAIwBwMFACQFycAwDQYJKoZIhvcNAQELBQADggEBADBMf0o4X79+ kMvrSxwT0Tss//mra5X/chspGjHirKhk3+1/3PviWc7UU4MjeXcgC8fjU1PiuSKX hSkOV5BTGhOE0XLBDnyJsNHpYNqYg32Xnj5mNkPYxs3sZubMTfu6SsbMhVxbfzn/ KbSfTNbJGRSmtfwcrAppdu8SR0/teogGBOevo7Lb9R+DrOkzamYGUaUJz0WQ+VfR yZz3ocbxIaW8G72v8TsY/ukzf7DEUb0mHuVWZ8ZsBU76O/UBDJKnIXzq+ggOIPLP UAHq8CLnfC/EhU2MNgLTT8jANbf/pS8VRmIBcheQsc6xUhfjZp4SSVM7UuWeHOBy uF29ZAHSKIA= -----END CERTIFICATE-----Generated at Wed Aug 6 05:50:57 2025 by rpki-client