$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer File: F256ED0C68D48E70DDBE3473644FDBA420E82FBC.cer (raw, json) Hash identifier: Bj4azXPANYBzBHy1F0e2+K12L0pGzo/EVwUQ4UQTVwg= Subject key identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 12878CCEBC7FD3C4264A2CF33FEDA53CFFEC945B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft caRepository: rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 03 Oct 2025 04:38:31 +0000 Certificate not after: Fri 02 Oct 2026 04:43:31 +0000 Subordinate resources: IP: 103.161.130.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:87:8c:ce:bc:7f:d3:c4:26:4a:2c:f3:3f:ed:a5:3c:ff:ec:94:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 3 04:38:31 2025 GMT Not After : Oct 2 04:43:31 2026 GMT Subject: CN=F256ED0C68D48E70DDBE3473644FDBA420E82FBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6f:7d:54:55:ac:e6:1b:8d:e4:5c:d9:ac:d9: 17:d6:82:a1:24:94:8c:a2:03:4d:d0:39:79:8f:56: 55:ce:77:17:ed:fc:1f:7c:1b:1c:9f:ca:a6:07:0e: de:f5:5e:14:45:7a:6c:f0:5a:d5:2a:7b:e1:14:a9: 57:fa:21:fd:0b:70:97:30:ef:9f:97:33:1f:98:50: 89:74:87:9b:7a:eb:47:a5:96:76:36:78:d6:00:e8: 93:68:43:dc:0e:d0:d9:c7:8a:6e:e4:fa:f1:29:86: 23:c1:7f:8f:8a:84:b1:f6:18:8c:81:6c:cc:9a:f2: 9d:d1:2f:db:36:6e:1f:f6:cb:d5:85:ad:7c:bc:3a: cd:be:11:21:f8:7e:03:fa:b6:fd:d3:aa:a5:9c:bb: 15:1a:17:74:f5:39:58:62:12:f3:6c:99:eb:d0:33: d9:01:9c:d1:b1:79:d7:9a:4e:5f:bf:37:e0:38:98: b2:b2:f4:2e:fe:0c:71:16:0f:a1:54:54:ea:72:c4: 36:b1:22:7c:87:8f:e8:a5:17:9a:31:76:dd:b8:b7: a4:61:6d:b3:c9:12:5c:f6:28:60:1c:97:f2:c1:48: 65:b6:c3:06:4a:52:cf:91:5f:66:f3:60:14:d2:86: 27:ae:3b:94:80:8f:72:8a:b4:bc:e0:d8:47:81:2e: df:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F2:56:ED:0C:68:D4:8E:70:DD:BE:34:73:64:4F:DB:A4:20:E8:2F:BC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7e5c73cc-985e-4e92-ba69-cd8bffe4a53d/0/F256ED0C68D48E70DDBE3473644FDBA420E82FBC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.130.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:3f:6f:bf:4b:e5:02:14:a5:06:b0:88:bc:8f:80:30:44:fd: c9:31:58:37:fa:87:86:be:10:39:8d:6d:36:fd:a0:f1:16:37: 67:90:48:a7:57:bd:a5:f1:ea:0c:45:69:8b:9c:c1:b2:bc:ea: 9e:1f:03:66:35:7b:ae:71:9c:8b:97:89:1b:85:6e:cd:88:65: 9b:53:03:fd:30:ed:b4:5b:ab:ee:86:07:01:ff:01:f8:16:16: 8d:69:fa:61:53:00:74:d4:e2:62:16:97:a9:c8:d1:d3:c4:5b: 8a:2e:4e:c1:72:48:f9:68:a0:7d:f2:0d:5a:9a:ae:d1:fa:2a: ac:1a:89:d9:c9:2e:dc:3d:c2:80:00:a5:c4:33:fd:da:51:80: 16:5a:05:7f:df:30:77:19:62:21:1e:a9:3b:c0:8a:7a:1b:b4: 00:9c:be:96:71:9c:bc:fe:3a:67:53:ec:50:f6:74:04:26:4c: 9e:d4:d3:4d:24:7e:81:33:3c:0c:16:a7:ff:8b:d8:ef:51:63: c0:3b:0b:0a:a9:87:da:39:fa:6e:6e:f3:74:6d:e2:d9:dd:4c: aa:7c:4c:40:61:ff:3c:2a:b4:a4:3f:2c:b2:5f:4d:6e:8e:56: 56:17:2f:5e:4b:f7:00:48:78:b6:d3:28:d5:4f:d5:c4:ac:de: 2e:4b:e3:be -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUEoeMzrx/08QmSizzP+2lPP/slFswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAwMzA0MzgzMVoX DTI2MTAwMjA0NDMzMVowMzExMC8GA1UEAxMoRjI1NkVEMEM2OEQ0OEU3MEREQkUz NDczNjQ0RkRCQTQyMEU4MkZCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMFvfVRVrOYbjeRc2azZF9aCoSSUjKIDTdA5eY9WVc53F+38H3wbHJ/KpgcO 3vVeFEV6bPBa1Sp74RSpV/oh/QtwlzDvn5czH5hQiXSHm3rrR6WWdjZ41gDok2hD 3A7Q2ceKbuT68SmGI8F/j4qEsfYYjIFszJryndEv2zZuH/bL1YWtfLw6zb4RIfh+ A/q2/dOqpZy7FRoXdPU5WGIS82yZ69Az2QGc0bF515pOX7834DiYsrL0Lv4McRYP oVRU6nLENrEifIeP6KUXmjF23bi3pGFts8kSXPYoYByX8sFIZbbDBkpSz5FfZvNg FNKGJ647lICPcoq0vODYR4Eu31cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPJW7Qxo1I5w3b40c2RP26Qg6C+8MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83ZTVjNzNjYy05ODVlLTRlOTItYmE2OS1jZDhiZmZlNGE1M2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNWM3M2Nj LTk4NWUtNGU5Mi1iYTY5LWNkOGJmZmU0YTUzZC8wL0YyNTZFRDBDNjhENDhFNzBE REJFMzQ3MzY0NEZEQkE0MjBFODJGQkMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnoYIwDQYJKoZIhvcNAQELBQADggEBAA4/b79L5QIUpQawiLyPgDBE/ckxWDf6 h4a+EDmNbTb9oPEWN2eQSKdXvaXx6gxFaYucwbK86p4fA2Y1e65xnIuXiRuFbs2I ZZtTA/0w7bRbq+6GBwH/AfgWFo1p+mFTAHTU4mIWl6nI0dPEW4ouTsFySPlooH3y DVqartH6KqwaidnJLtw9woAApcQz/dpRgBZaBX/fMHcZYiEeqTvAinobtACcvpZx nLz+OmdT7FD2dAQmTJ7U000kfoEzPAwWp/+L2O9RY8A7Cwqph9o5+m5u83Rt4tnd TKp8TEBh/zwqtKQ/LLJfTW6OVlYXL15L9wBIeLbTKNVP1cSs3i5L474= -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:55 2025 by rpki-client