$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer File: E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer (raw, json) Hash identifier: +ZW2/ZyrrDdGtQB/JrNq454YFbtjcl2pMd6L5JexI5g= Subject key identifier: E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 366C096E5A5897BC35A25E66E92CD719E5692E4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft caRepository: rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 04:37:52 +0000 Certificate not after: Tue 02 Jun 2026 04:42:52 +0000 Subordinate resources: IP: 202.162.32.0/20 IP: 2402:a600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:6c:09:6e:5a:58:97:bc:35:a2:5e:66:e9:2c:d7:19:e5:69:2e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 04:37:52 2025 GMT Not After : Jun 2 04:42:52 2026 GMT Subject: CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:19:5a:6c:1a:76:d6:d3:f2:4f:2c:53:07:b2: 6c:38:6e:06:67:b8:c9:9b:5d:1e:e8:8c:1f:e5:f6: 62:42:57:0e:c6:85:80:0a:b0:fe:f9:00:28:1c:65: d7:5c:2d:f3:15:e2:81:f0:f5:8c:ca:58:f5:80:ba: 06:55:67:7f:d0:3a:af:85:be:54:f7:4f:a8:be:92: 57:6a:ad:fa:0f:b2:b7:11:58:f2:f3:51:00:8d:5b: bc:4c:df:71:27:c4:00:b0:b8:15:03:b0:cf:b2:14: 5b:bb:9d:20:f9:28:5a:35:2e:71:8d:c1:1b:3a:c3: df:dc:e5:74:2b:67:14:25:3e:69:7f:12:65:db:01: c8:78:a5:28:3e:7a:3a:4a:4b:96:c9:06:17:9a:0e: c1:ad:42:23:e6:82:e0:54:84:bf:04:4b:1f:15:ef: 98:0c:2a:dc:9b:c4:cb:9f:8b:a5:f5:c9:ee:c1:77: c5:e9:2f:62:f3:80:e4:37:e1:0a:3a:66:c0:6f:a0: 7d:6a:e9:30:6b:96:be:b1:dd:d9:e9:71:50:cf:83: 8a:f7:2e:dd:2f:cd:03:e1:e3:73:fe:3d:58:f4:79: fa:7b:be:65:be:37:2e:bb:53:f1:ee:1c:a9:58:05: 85:95:b0:04:11:d4:a3:db:76:78:93:14:33:33:20: c8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.162.32.0/20 IPv6: 2402:a600::/32 Signature Algorithm: sha256WithRSAEncryption 89:bd:21:13:3e:d2:df:33:35:fb:02:98:46:e1:34:b8:dc:ce: cc:f7:84:2d:fe:98:0f:06:c9:d7:bf:2b:a7:75:f0:15:ec:96: 8e:56:44:95:42:f3:b4:b8:2e:89:65:0d:90:38:76:36:ed:ae: a6:6e:46:e1:c8:b3:d0:88:11:29:04:3c:09:41:ff:3a:dd:2f: 1a:93:90:be:17:76:fd:f4:5d:57:d8:8b:9d:a6:98:a5:9f:b2: ed:bc:83:de:53:62:a3:60:bb:2a:65:90:98:68:6f:e5:f0:48: 7b:49:32:80:35:3f:dc:62:42:63:60:08:5a:c0:59:83:a9:52: 44:8a:eb:a7:7a:f5:84:74:8a:a9:4b:8b:3c:a8:8f:0a:0b:06: 65:a4:f5:de:b4:1c:e3:ed:dd:33:f6:7d:81:89:c9:a9:d7:f1: 10:a8:39:0f:9c:50:04:73:6b:8f:0b:e7:2e:b6:17:90:73:da: 41:d6:24:f6:dc:be:cf:2d:c4:47:69:69:ed:f0:04:c5:e1:83: f2:32:ae:98:68:27:15:64:45:8d:f4:e1:0c:16:e3:42:a5:2e: b1:d1:bf:c9:bc:69:a3:32:7c:85:6e:98:97:6c:30:7d:ed:8d: 6e:09:0c:f6:3d:c0:12:c3:56:d8:23:16:51:24:86:16:27:84: e8:17:3d:2c -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUNmwJblpYl7w1ol5m6SzXGeVpLkswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzA0Mzc1MloX DTI2MDYwMjA0NDI1MlowMzExMC8GA1UEAxMoRTUzMEE3QjQzQzBDNzlGRDg3MDcw MDcwODBFMkY3QUVBNDc4RkQxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAZWmwadtbT8k8sUweybDhuBme4yZtdHuiMH+X2YkJXDsaFgAqw/vkAKBxl 11wt8xXigfD1jMpY9YC6BlVnf9A6r4W+VPdPqL6SV2qt+g+ytxFY8vNRAI1bvEzf cSfEALC4FQOwz7IUW7udIPkoWjUucY3BGzrD39zldCtnFCU+aX8SZdsByHilKD56 OkpLlskGF5oOwa1CI+aC4FSEvwRLHxXvmAwq3JvEy5+LpfXJ7sF3xekvYvOA5Dfh CjpmwG+gfWrpMGuWvrHd2elxUM+Divcu3S/NA+Hjc/49WPR5+nu+Zb43LrtT8e4c qVgFhZWwBBHUo9t2eJMUMzMgyLkCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOUwp7Q8DHn9hwcAcIDi966keP0cMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jM2QyZjJmOC0zNTEyLTQzZTUtYmUxNy1iMTFiNThmOTYwODMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzZDJmMmY4 LTM1MTItNDNlNS1iZTE3LWIxMWI1OGY5NjA4My8wL0U1MzBBN0I0M0MwQzc5RkQ4 NzA3MDA3MDgwRTJGN0FFQTQ3OEZEMUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BATKoiAwDQQCAAIwBwMFACQCpgAwDQYJKoZIhvcNAQELBQADggEBAIm9IRM+0t8z NfsCmEbhNLjczsz3hC3+mA8Gyde/K6d18BXslo5WRJVC87S4LollDZA4djbtrqZu RuHIs9CIESkEPAlB/zrdLxqTkL4Xdv30XVfYi52mmKWfsu28g95TYqNguyplkJho b+XwSHtJMoA1P9xiQmNgCFrAWYOpUkSK66d69YR0iqlLizyojwoLBmWk9d60HOPt 3TP2fYGJyanX8RCoOQ+cUARza48L5y62F5Bz2kHWJPbcvs8txEdpae3wBMXhg/Iy rphoJxVkRY304QwW40KlLrHRv8m8aaMyfIVumJdsMH3tjW4JDPY9wBLDVtgjFlEk hhYnhOgXPSw= -----END CERTIFICATE-----Generated at Tue Nov 4 16:51:51 2025 by rpki-client