$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F33127B2252454B491C5DC9FE3937C56F28F8066.cer File: F33127B2252454B491C5DC9FE3937C56F28F8066.cer (raw, json) Hash identifier: svWHFVVsvKHUJRmHr7lY9aV1D8PN2m48si/6szWY9UE= Subject key identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 117036DE40945391161F15E3AA94EE1AC540C3D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft caRepository: rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 23 Oct 2025 19:41:11 +0000 Certificate not after: Thu 22 Oct 2026 19:46:11 +0000 Subordinate resources: IP: 103.71.224.0/22 IP: 103.93.224.0/21 IP: 103.94.96.0/22 IP: 202.95.128.0/19 IP: 202.182.160.0/19 IP: 203.83.26.0 -- 203.83.29.255 IP: 2001:f20::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:70:36:de:40:94:53:91:16:1f:15:e3:aa:94:ee:1a:c5:40:c3:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 23 19:41:11 2025 GMT Not After : Oct 22 19:46:11 2026 GMT Subject: CN=F33127B2252454B491C5DC9FE3937C56F28F8066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:79:ea:d5:1c:36:d6:8d:51:21:28:43:10:70: ca:0b:c4:35:97:63:2c:2b:8d:d5:ac:e5:53:86:ab: 08:77:1b:79:17:13:08:4f:ed:d4:15:fc:66:45:9b: 02:a6:a9:5b:74:63:96:f7:26:e3:59:5d:3d:59:60: 16:ec:27:20:06:99:7a:f2:7b:89:3d:e0:b8:f9:f4: 7e:49:8d:67:a1:a0:d7:82:d2:75:62:9a:b5:6c:61: 39:47:b4:f2:16:9e:a3:0f:54:b9:fd:e8:09:95:74: 81:a6:27:ad:51:73:a3:ee:e5:c8:81:25:3b:14:2d: 12:0e:7d:4b:5f:23:51:af:69:dc:c4:a8:01:ad:24: 1f:56:86:44:51:cd:a5:d0:6f:a7:29:3d:b1:0e:43: 74:83:90:d5:10:9b:21:04:9f:a1:d0:ba:60:93:3b: e1:dc:6e:01:9c:26:9a:93:e4:12:84:a8:05:cb:33: 3a:2d:0e:31:ab:97:5d:f1:53:db:69:94:7d:f1:69: 13:f6:d8:e2:e0:90:7f:50:f8:c1:e2:7a:41:10:59: 00:0e:4a:a8:f7:c1:2b:4e:a7:b8:d9:e7:87:76:5f: 02:a7:5c:fd:1a:fc:66:c6:11:23:db:73:c0:ca:3f: bf:1a:03:88:12:5b:5c:1e:7d:83:43:3b:8d:35:70: c8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F3:31:27:B2:25:24:54:B4:91:C5:DC:9F:E3:93:7C:56:F2:8F:80:66 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ebbfe776-00a3-4776-bf3f-5211946101c3/0/F33127B2252454B491C5DC9FE3937C56F28F8066.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.71.224.0/22 103.93.224.0/21 103.94.96.0/22 202.95.128.0/19 202.182.160.0/19 203.83.26.0-203.83.29.255 IPv6: 2001:f20::/32 Signature Algorithm: sha256WithRSAEncryption 4e:13:f1:c8:9e:fc:6c:32:9c:69:d1:05:25:79:3b:07:c6:33: 84:6e:c4:19:4e:3d:f8:6d:c7:12:18:99:e5:37:c2:12:3f:01: d5:21:dd:44:1c:21:f5:cd:9c:69:83:68:b4:b7:3f:e1:a5:2e: 71:e7:51:f0:04:78:0a:8f:a7:5a:6f:ad:f0:9b:75:42:be:7b: d7:0e:b0:b5:b9:3b:0f:e8:ff:2e:62:20:63:2a:5e:a0:2b:25: ff:ab:da:e3:b6:02:20:d9:80:fa:9f:50:c7:57:f9:0c:48:62: 92:ee:a9:33:a7:7d:84:f6:e6:0b:b3:94:94:23:36:63:d5:98: 92:7b:e9:47:a7:b5:3f:45:d3:42:cf:21:4d:1a:43:ff:33:bb: 4c:9b:64:fd:53:85:03:96:1c:4b:6b:fb:c0:c2:88:17:ad:93: 3c:ae:65:58:51:ae:57:24:de:4b:08:b8:50:fd:3c:ce:09:c1: 6e:a9:63:4a:3d:be:10:38:a7:9e:36:92:b6:8e:4a:55:8c:4c: 0d:cf:47:b3:1a:d2:e3:dd:d6:2f:5b:ca:61:f8:ca:5b:22:0f: 82:3e:23:f2:18:89:65:3f:65:a8:92:51:a9:a7:ab:0c:8c:73: 38:e5:82:44:b1:d8:e7:e1:39:7d:71:02:3f:a8:42:fd:b7:44: 74:30:32:90 -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUEXA23kCUU5EWHxXjqpTuGsVAw9gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyMzE5NDExMVoX DTI2MTAyMjE5NDYxMVowMzExMC8GA1UEAxMoRjMzMTI3QjIyNTI0NTRCNDkxQzVE QzlGRTM5MzdDNTZGMjhGODA2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANF56tUcNtaNUSEoQxBwygvENZdjLCuN1azlU4arCHcbeRcTCE/t1BX8ZkWb AqapW3Rjlvcm41ldPVlgFuwnIAaZevJ7iT3guPn0fkmNZ6Gg14LSdWKatWxhOUe0 8haeow9Uuf3oCZV0gaYnrVFzo+7lyIElOxQtEg59S18jUa9p3MSoAa0kH1aGRFHN pdBvpyk9sQ5DdIOQ1RCbIQSfodC6YJM74dxuAZwmmpPkEoSoBcszOi0OMauXXfFT 22mUffFpE/bY4uCQf1D4weJ6QRBZAA5KqPfBK06nuNnnh3ZfAqdc/Rr8ZsYRI9tz wMo/vxoDiBJbXB59g0M7jTVwyGkCAwEAAaOCAu0wggLpMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPMxJ7IlJFS0kcXcn+OTfFbyj4BmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYmJmZTc3Ni0wMGEzLTQ3NzYtYmYzZi01MjExOTQ2MTAxYzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViYmZlNzc2 LTAwYTMtNDc3Ni1iZjNmLTUyMTE5NDYxMDFjMy8wL0YzMzEyN0IyMjUyNDU0QjQ5 MUM1REM5RkUzOTM3QzU2RjI4RjgwNjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwVAYIKwYBBQUHAQcBAf8ERTBDMDIEAgABMCwD BAJnR+ADBANnXeADBAJnXmADBAXKX4ADBAXKtqAwDAMEActTGgMEActTHDANBAIA AjAHAwUAIAEPIDANBgkqhkiG9w0BAQsFAAOCAQEAThPxyJ78bDKcadEFJXk7B8Yz hG7EGU49+G3HEhiZ5TfCEj8B1SHdRBwh9c2caYNotLc/4aUucedR8AR4Co+nWm+t 8Jt1Qr571w6wtbk7D+j/LmIgYypeoCsl/6va47YCINmA+p9Qx1f5DEhiku6pM6d9 hPbmC7OUlCM2Y9WYknvpR6e1P0XTQs8hTRpD/zO7TJtk/VOFA5YcS2v7wMKIF62T PK5lWFGuVyTeSwi4UP08zgnBbqljSj2+EDinnjaSto5KVYxMDc9HsxrS493WL1vK YfjKWyIPgj4j8hiJZT9lqJJRqaerDIxzOOWCRLHY5+E5fXECP6hC/bdEdDAykA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:51 2025 by rpki-client