$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer File: F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.cer (raw, json) Hash identifier: xnSpGqa3A1uXaE7TmJBvs1pPMsATfL9ubzBImHl4UB8= Subject key identifier: F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2FEE241360B74131D3FC28698D9DC12A8082B185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft caRepository: rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 06 Jun 2025 22:28:08 +0000 Certificate not after: Fri 05 Jun 2026 22:33:08 +0000 Subordinate resources: IP: 103.139.112.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 09:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ee:24:13:60:b7:41:31:d3:fc:28:69:8d:9d:c1:2a:80:82:b1:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 6 22:28:08 2025 GMT Not After : Jun 5 22:33:08 2026 GMT Subject: CN=F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:94:ef:86:17:bf:4c:82:ed:01:af:46:b8:86: bb:f0:14:41:22:49:0e:74:0f:7a:37:6b:3d:a2:8b: f5:85:b9:67:27:2f:f8:5b:ae:cb:cf:e7:99:58:88: f4:22:7d:d0:20:01:4d:e5:8c:ae:52:90:2e:36:24: 02:ec:cc:c9:c0:9f:bd:70:db:ab:d0:b8:a2:fe:a8: 83:25:cb:cb:d0:38:de:1a:2c:bf:6a:68:72:5a:11: 0f:6d:78:67:85:d6:d5:4d:5f:b7:fa:27:34:39:88: 37:71:00:9a:c1:2b:66:73:8c:ba:5c:aa:c9:b3:8f: 12:47:4e:72:aa:a0:db:68:9c:eb:62:e5:dd:ec:cf: 68:1e:62:2b:aa:4c:54:cc:7f:0c:a8:6d:f4:be:9d: 67:23:7a:ec:3b:64:68:dc:2e:02:d9:35:10:95:6e: d3:04:b8:2f:06:aa:94:65:ce:a1:0d:2a:cb:b8:d1: 5d:49:c4:a5:1d:2a:a6:74:39:12:ff:a9:6e:0a:ed: e6:56:c2:de:e3:89:e0:17:bb:0d:c2:46:5f:7d:f0: 3b:bf:d0:32:b7:84:0b:9e:e3:cb:be:55:37:86:1b: 07:73:d9:4e:56:47:8d:17:77:f0:2f:3b:a8:f1:33: 28:82:32:16:c1:b9:76:03:4d:1d:b6:41:81:b8:13: 4f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:A5:DF:AF:D4:7F:54:DC:54:D5:66:83:E9:1A:5C:17:22:CB:A6:AD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/94ee2bd3-0f66-4d43-a9e7-965d33f12852/0/F5A5DFAFD47F54DC54D56683E91A5C1722CBA6AD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.112.0/24 Signature Algorithm: sha256WithRSAEncryption 63:33:80:3c:0a:c7:76:df:31:31:2f:6c:76:82:90:95:66:b9: 85:86:42:26:73:44:e7:17:1b:8f:30:e2:f0:42:a8:5e:7e:28: fa:80:bd:d6:81:11:76:26:8b:5c:a0:cc:1e:2e:c1:c6:8f:e3: 46:9a:c1:69:bf:0d:a8:c6:e8:41:0e:d8:33:19:4e:9d:c0:4c: 6e:55:fb:6d:62:dc:70:78:af:81:0c:f7:9b:10:c5:0d:0b:f3: 50:f0:0e:98:0c:8d:df:3d:ab:be:43:fd:5a:4a:dd:9c:9d:d0: d3:45:d6:e9:9f:d9:ef:c3:6b:41:53:95:49:8b:4f:f3:21:16: 1c:1f:4a:01:71:b4:a0:da:b1:08:83:cc:07:31:7b:00:66:c6: 84:5b:c5:5f:a6:7d:aa:e2:43:da:f1:14:5e:51:be:f3:0f:41: 7e:9c:d7:81:11:e6:6a:4c:b9:60:74:45:c5:97:93:bb:4a:d8: 98:93:98:2d:fe:ec:ff:ac:e2:2e:92:92:92:bc:9f:2b:4f:61: 4b:e4:0d:4c:f8:63:5a:3b:4c:bc:26:2a:28:f7:d6:b3:ff:4e: de:de:2e:c0:9f:24:1c:1a:f8:67:ea:1c:ed:8c:b5:a3:a6:0e: 13:a1:24:5b:15:ef:30:c9:95:53:57:f2:79:3f:8c:fa:a9:52: 51:af:82:5a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUL+4kE2C3QTHT/ChpjZ3BKoCCsYUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwNjIyMjgwOFoX DTI2MDYwNTIyMzMwOFowMzExMC8GA1UEAxMoRjVBNURGQUZENDdGNTREQzU0RDU2 NjgzRTkxQTVDMTcyMkNCQTZBRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMaU74YXv0yC7QGvRriGu/AUQSJJDnQPejdrPaKL9YW5Zycv+Fuuy8/nmViI 9CJ90CABTeWMrlKQLjYkAuzMycCfvXDbq9C4ov6ogyXLy9A43hosv2pocloRD214 Z4XW1U1ft/onNDmIN3EAmsErZnOMulyqybOPEkdOcqqg22ic62Ll3ezPaB5iK6pM VMx/DKht9L6dZyN67DtkaNwuAtk1EJVu0wS4LwaqlGXOoQ0qy7jRXUnEpR0qpnQ5 Ev+pbgrt5lbC3uOJ4Be7DcJGX33wO7/QMreEC57jy75VN4YbB3PZTlZHjRd38C87 qPEzKIIyFsG5dgNNHbZBgbgTTzcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPWl36/Uf1TcVNVmg+kaXBciy6atMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NGVlMmJkMy0wZjY2LTRkNDMtYTllNy05NjVkMzNmMTI4NTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0ZWUyYmQz LTBmNjYtNGQ0My1hOWU3LTk2NWQzM2YxMjg1Mi8wL0Y1QTVERkFGRDQ3RjU0REM1 NEQ1NjY4M0U5MUE1QzE3MjJDQkE2QUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABni3AwDQYJKoZIhvcNAQELBQADggEBAGMzgDwKx3bfMTEvbHaCkJVmuYWGQiZz ROcXG48w4vBCqF5+KPqAvdaBEXYmi1ygzB4uwcaP40aawWm/DajG6EEO2DMZTp3A TG5V+21i3HB4r4EM95sQxQ0L81DwDpgMjd89q75D/VpK3Zyd0NNF1umf2e/Da0FT lUmLT/MhFhwfSgFxtKDasQiDzAcxewBmxoRbxV+mfariQ9rxFF5RvvMPQX6c14ER 5mpMuWB0RcWXk7tK2JiTmC3+7P+s4i6SkpK8nytPYUvkDUz4Y1o7TLwmKij31rP/ Tt7eLsCfJBwa+GfqHO2MtaOmDhOhJFsV7zDJlVNX8nk/jPqpUlGvglo= -----END CERTIFICATE-----Generated at Sun Jun 15 06:55:53 2025 by rpki-client