$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.cer File: EE0318C1CF5D037492EFBC172300E2E062AFEFCB.cer (raw, json) Hash identifier: JBcZeP/uXNSxR85tngbDeCqtcui39LNACMw8Ui4+Wic= Subject key identifier: EE:03:18:C1:CF:5D:03:74:92:EF:BC:17:23:00:E2:E0:62:AF:EF:CB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 584E4A1A9AB37F6B3D373FA2E44F1DE57A1F1498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.mft caRepository: rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 23 Sep 2025 13:17:44 +0000 Certificate not after: Tue 22 Sep 2026 13:22:44 +0000 Subordinate resources: IP: 43.228.175.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:4e:4a:1a:9a:b3:7f:6b:3d:37:3f:a2:e4:4f:1d:e5:7a:1f:14:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 23 13:17:44 2025 GMT Not After : Sep 22 13:22:44 2026 GMT Subject: CN=EE0318C1CF5D037492EFBC172300E2E062AFEFCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e6:d9:2a:9b:27:17:b5:14:a4:2b:d3:6b:e8: d6:c2:7a:fb:e6:47:3e:c4:67:46:ea:db:9b:e5:04: d0:e0:af:cf:d7:3f:5f:33:7e:ea:e7:88:62:55:e5: 07:9f:be:e2:78:51:4d:db:a3:e0:22:18:d7:a1:67: 29:29:1c:f4:c3:4e:5d:60:3b:d6:f3:a8:2c:28:79: 0e:37:33:a4:1b:03:88:ed:e7:d2:2e:72:64:26:6c: 3b:03:d6:4e:c5:0b:c7:81:20:3d:b5:ef:74:52:da: d8:81:55:2e:90:15:9a:30:45:80:9b:80:8c:7d:8b: cf:6b:a1:0f:e4:ee:de:ef:5b:6e:a7:7f:fa:54:39: e1:19:1e:32:e9:36:02:32:99:e4:af:02:70:10:07: 59:63:c3:90:2e:b2:5c:5a:48:9e:5f:37:33:c7:16: 4a:5a:6a:14:32:ac:d5:fb:f4:f0:62:c1:1d:5a:b9: d3:81:55:fa:b3:88:08:83:51:28:ac:4a:30:4a:d7: 19:f2:02:58:f6:70:45:69:21:1f:f6:88:a6:2f:86: af:17:01:40:12:dc:e9:45:1e:e0:42:9b:a3:3e:cb: 70:e8:9b:15:9c:f6:81:ae:62:40:b8:cd:50:e0:eb: ca:2d:32:d0:b9:94:94:48:ac:8c:14:09:b6:11:f2: 60:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EE:03:18:C1:CF:5D:03:74:92:EF:BC:17:23:00:E2:E0:62:AF:EF:CB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/611a3980-a32e-4df9-8e52-0be0d343cc0b/0/EE0318C1CF5D037492EFBC172300E2E062AFEFCB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.228.175.0/24 Signature Algorithm: sha256WithRSAEncryption 98:de:92:e8:92:d8:70:a2:c7:67:b6:0d:dc:c9:35:6e:8c:35: bb:c0:50:c5:4c:5e:c5:bc:41:1a:d9:7d:22:6c:a2:e1:22:60: a2:cd:47:5e:af:18:56:d8:85:55:0b:1a:db:9c:a7:82:88:27: 88:1b:40:41:30:f5:ec:47:61:33:23:34:1e:96:dc:d4:b8:f9: b9:92:fe:33:4a:b0:83:da:f7:7e:26:23:ac:b7:61:68:e0:21: 8a:ff:f3:ad:72:56:ad:d3:70:f1:b2:6e:13:3b:b3:1f:b3:4b: 2d:d5:f1:31:19:02:88:95:14:0c:0e:82:6e:f2:ae:c7:30:dc: 88:64:23:b0:0f:0e:91:c7:90:3b:7d:f2:5f:d8:fd:6a:ec:c4: fd:78:0f:87:3f:c7:7f:78:b8:3b:8c:f7:bc:85:41:9d:e9:2e: 7c:f8:d1:a8:ea:d2:6f:3a:6e:65:5d:75:6b:f3:b0:6e:51:5e: 8f:a7:4f:32:24:a1:42:c1:11:f4:f0:42:80:67:00:d3:54:c4: d5:af:88:a6:40:b4:77:36:7e:a7:97:37:48:5c:7f:f5:cd:7b: 7f:a7:18:7e:be:bf:f5:d5:38:da:87:bb:4c:60:e5:a5:3d:0f: 46:ca:17:2f:06:1e:13:2e:e6:8c:b9:a3:d5:25:18:e6:12:29: 5e:e3:32:44 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUWE5KGpqzf2s9Nz+i5E8d5XofFJgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyMzEzMTc0NFoX DTI2MDkyMjEzMjI0NFowMzExMC8GA1UEAxMoRUUwMzE4QzFDRjVEMDM3NDkyRUZC QzE3MjMwMEUyRTA2MkFGRUZDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOvm2SqbJxe1FKQr02vo1sJ6++ZHPsRnRurbm+UE0OCvz9c/XzN+6ueIYlXl B5++4nhRTduj4CIY16FnKSkc9MNOXWA71vOoLCh5DjczpBsDiO3n0i5yZCZsOwPW TsULx4EgPbXvdFLa2IFVLpAVmjBFgJuAjH2Lz2uhD+Tu3u9bbqd/+lQ54RkeMuk2 AjKZ5K8CcBAHWWPDkC6yXFpInl83M8cWSlpqFDKs1fv08GLBHVq504FV+rOICINR KKxKMErXGfICWPZwRWkhH/aIpi+GrxcBQBLc6UUe4EKboz7LcOibFZz2ga5iQLjN UODryi0y0LmUlEisjBQJthHyYFMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFO4DGMHPXQN0ku+8FyMA4uBir+/LMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82MTFhMzk4MC1hMzJlLTRkZjktOGU1Mi0wYmUwZDM0M2NjMGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYxMWEzOTgw LWEzMmUtNGRmOS04ZTUyLTBiZTBkMzQzY2MwYi8wL0VFMDMxOEMxQ0Y1RDAzNzQ5 MkVGQkMxNzIzMDBFMkUwNjJBRkVGQ0IubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr5K8wDQYJKoZIhvcNAQELBQADggEBAJjekuiS2HCix2e2DdzJNW6MNbvAUMVM XsW8QRrZfSJsouEiYKLNR16vGFbYhVULGtucp4KIJ4gbQEEw9exHYTMjNB6W3NS4 +bmS/jNKsIPa934mI6y3YWjgIYr/861yVq3TcPGybhM7sx+zSy3V8TEZAoiVFAwO gm7yrscw3IhkI7APDpHHkDt98l/Y/WrsxP14D4c/x394uDuM97yFQZ3pLnz40ajq 0m86bmVddWvzsG5RXo+nTzIkoULBEfTwQoBnANNUxNWviKZAtHc2fqeXN0hcf/XN e3+nGH6+v/XVONqHu0xg5aU9D0bKFy8GHhMu5oy5o9UlGOYSKV7jMkQ= -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:13 2025 by rpki-client