$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer File: F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.cer (raw, json) Hash identifier: ocwehClh1LSwdJfjJPfe994AhkmOwfTSPTblTHxwsN4= Subject key identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1396D70D0B76028BDF315ABB64F9FB689A2A51E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft caRepository: rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 14:31:08 +0000 Certificate not after: Tue 02 Jun 2026 14:36:08 +0000 Subordinate resources: IP: 103.135.72.0/22 IP: 175.111.112.0/21 IP: 2001:df0:df::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:96:d7:0d:0b:76:02:8b:df:31:5a:bb:64:f9:fb:68:9a:2a:51:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 14:31:08 2025 GMT Not After : Jun 2 14:36:08 2026 GMT Subject: CN=F8C19A8F8CB0DDC85D1C8E55638FB43584903E17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7a:72:62:0e:91:93:9f:ff:f0:c2:fd:29:17: 0d:e2:f2:cb:10:b0:2e:f3:cb:97:4b:de:06:4c:a1: e0:fe:08:b4:64:7c:d3:65:8b:15:85:e6:92:4a:e8: 91:68:4d:ab:06:c1:78:b0:58:f9:d5:77:2e:50:6c: dd:66:d2:a6:ba:d0:94:ae:1e:cf:a1:1e:14:a2:c4: ef:14:7d:ec:4b:ca:d7:ec:a9:8a:fb:08:bd:c2:01: d1:52:3a:37:61:22:e2:4f:0f:99:aa:e1:50:73:cf: 24:ad:0b:32:7b:68:6d:47:10:95:13:4b:a3:76:b8: 7d:5a:5d:b0:83:05:85:f6:23:cc:0d:47:4a:7c:b0: 4e:4b:2d:c5:3d:d8:3b:1f:d8:26:ca:3a:38:18:f5: ed:bc:92:33:fd:6a:82:3b:39:ff:33:39:7d:51:63: e8:7d:ed:e2:4e:40:a2:94:76:2f:68:38:1c:c5:8e: 1a:3f:a6:03:6a:74:49:dc:6d:f6:b4:82:27:9d:bf: f8:7c:10:8b:e1:0d:5c:42:4b:77:8d:09:a8:19:e4: 9a:fd:c5:9c:f7:02:3f:75:05:77:7b:69:31:fa:3b: 59:36:9d:39:b4:62:78:49:11:5a:7e:a9:3d:91:bc: 30:1e:7f:7e:44:dc:9a:53:96:c7:15:01:73:fe:ae: 93:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:C1:9A:8F:8C:B0:DD:C8:5D:1C:8E:55:63:8F:B4:35:84:90:3E:17 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1ff4ebcd-29cf-4eec-a92a-d1136f5f9936/0/F8C19A8F8CB0DDC85D1C8E55638FB43584903E17.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.72.0/22 175.111.112.0/21 IPv6: 2001:df0:df::/48 Signature Algorithm: sha256WithRSAEncryption 8b:bc:73:aa:18:2c:90:27:6c:13:cb:32:89:00:21:8d:d2:b5: 15:3b:1a:c7:2f:69:6d:3a:eb:66:41:b2:45:15:9c:74:c3:e3: 77:e4:8d:1a:06:9d:89:45:a3:9f:73:90:07:f2:a6:b8:85:eb: 66:ca:3d:81:15:b1:38:97:c6:31:4a:9b:e0:08:2b:fd:d6:54: f1:33:9b:59:c8:06:21:ba:d5:1d:1b:34:77:4a:f7:99:35:7e: 12:48:28:81:49:9e:96:f7:fb:4c:f3:e5:c6:53:48:e2:8f:b2: 7e:f0:11:f8:ad:95:35:c3:3c:c9:37:31:36:e7:f8:c0:f1:01: 29:43:4f:bd:ef:ea:93:3b:03:1b:4e:94:f8:45:bc:f9:66:02: 13:06:7d:9d:4a:fa:34:c1:cf:6d:fe:34:4f:bf:b4:c6:4d:4b: 03:3a:c8:9f:2a:9e:bd:31:b4:a6:e9:89:bd:93:6f:7c:be:e9: f6:c7:4a:5f:b6:7c:48:70:65:6e:5b:bf:94:af:60:93:92:2e: f1:46:95:d1:c1:72:99:f5:62:93:b5:8d:e0:bc:78:3c:5b:4a: 80:0a:08:0e:0b:5b:55:fd:89:ac:5b:76:96:e7:eb:2b:64:6b: 81:63:7e:94:bb:fc:4c:25:65:91:46:bb:0d:df:e6:54:90:7a: 2a:ca:3c:6a -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUE5bXDQt2AovfMVq7ZPn7aJoqUeAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzE0MzEwOFoX DTI2MDYwMjE0MzYwOFowMzExMC8GA1UEAxMoRjhDMTlBOEY4Q0IwRERDODVEMUM4 RTU1NjM4RkI0MzU4NDkwM0UxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANJ6cmIOkZOf//DC/SkXDeLyyxCwLvPLl0veBkyh4P4ItGR802WLFYXmkkro kWhNqwbBeLBY+dV3LlBs3WbSprrQlK4ez6EeFKLE7xR97EvK1+ypivsIvcIB0VI6 N2Ei4k8PmarhUHPPJK0LMntobUcQlRNLo3a4fVpdsIMFhfYjzA1HSnywTkstxT3Y Ox/YJso6OBj17bySM/1qgjs5/zM5fVFj6H3t4k5AopR2L2g4HMWOGj+mA2p0Sdxt 9rSCJ52/+HwQi+ENXEJLd40JqBnkmv3FnPcCP3UFd3tpMfo7WTadObRieEkRWn6p PZG8MB5/fkTcmlOWxxUBc/6ukwECAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPjBmo+MsN3IXRyOVWOPtDWEkD4XMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZmY0ZWJjZC0yOWNmLTRlZWMtYTkyYS1kMTEzNmY1Zjk5MzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFmZjRlYmNk LTI5Y2YtNGVlYy1hOTJhLWQxMTM2ZjVmOTkzNi8wL0Y4QzE5QThGOENCMEREQzg1 RDFDOEU1NTYzOEZCNDM1ODQ5MDNFMTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BAJnh0gDBAOvb3AwDwQCAAIwCQMHACABDfAA3zANBgkqhkiG9w0BAQsFAAOCAQEA i7xzqhgskCdsE8syiQAhjdK1FTsaxy9pbTrrZkGyRRWcdMPjd+SNGgadiUWjn3OQ B/KmuIXrZso9gRWxOJfGMUqb4Agr/dZU8TObWcgGIbrVHRs0d0r3mTV+EkgogUme lvf7TPPlxlNI4o+yfvAR+K2VNcM8yTcxNuf4wPEBKUNPve/qkzsDG06U+EW8+WYC EwZ9nUr6NMHPbf40T7+0xk1LAzrInyqevTG0pumJvZNvfL7p9sdKX7Z8SHBlblu/ lK9gk5Iu8UaV0cFymfVik7WN4Lx4PFtKgAoIDgtbVf2JrFt2lufrK2RrgWN+lLv8 TCVlkUa7Dd/mVJB6Kso8ag== -----END CERTIFICATE-----Generated at Sun Jun 15 22:00:40 2025 by rpki-client