$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer File: F9C4820743DB001E8F69D44C19320E1BF09F8F88.cer (raw, json) Hash identifier: uvL8St+REjR4cyhwLrvsP1BNUG6ZV7qJCgpaJTRFMaA= Subject key identifier: F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 62331FD63ADFAED4C4CC8D779DEE5B7767330FA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft caRepository: rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 04 Jul 2025 16:27:43 +0000 Certificate not after: Fri 03 Jul 2026 16:32:43 +0000 Subordinate resources: IP: 103.154.170.0/23 IP: 2001:df4:9280::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:33:1f:d6:3a:df:ae:d4:c4:cc:8d:77:9d:ee:5b:77:67:33:0f:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 4 16:27:43 2025 GMT Not After : Jul 3 16:32:43 2026 GMT Subject: CN=F9C4820743DB001E8F69D44C19320E1BF09F8F88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f7:19:84:52:75:79:ae:05:75:0b:5e:de:57: 54:b5:e2:2b:1e:7a:1d:4f:83:0d:31:40:c0:e9:0e: 9f:05:6c:95:fc:cb:50:36:fe:de:53:95:97:31:ff: 91:c7:9e:a3:49:ce:3c:4a:1d:23:8b:07:65:1a:03: 62:66:2b:ef:13:eb:38:fa:42:d2:9c:ef:a7:6f:9e: 26:fc:21:7a:64:26:38:b9:6f:36:86:bd:76:aa:6c: 8b:36:99:0d:01:fd:d0:ad:9a:52:0f:2b:5a:1c:95: 8b:d2:c7:bd:41:54:0e:80:0c:40:54:3e:ae:0f:cb: 7f:58:6e:5c:5e:c6:0a:f0:8c:89:d9:dc:b1:c1:54: 29:8d:06:a9:f2:a3:17:05:e6:78:41:f7:ef:ce:d0: d0:a3:23:fa:9c:53:63:7b:4c:d3:98:94:8f:d2:9b: 2e:2f:1b:a9:92:1e:98:17:ea:df:c9:9d:66:40:c0: 9a:3e:17:71:e3:4e:69:9b:b8:d9:eb:6c:8c:40:0b: 31:7e:8d:e8:9c:37:f6:46:e9:42:9a:8c:c5:67:11: 10:9e:2b:af:cc:d7:09:8f:1f:6f:34:90:9a:79:cd: 72:e3:f3:cb:dc:97:7e:b1:59:31:45:73:4c:c0:33: 06:76:fa:f0:ce:cc:32:05:3c:21:21:1e:63:a7:07: c2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:C4:82:07:43:DB:00:1E:8F:69:D4:4C:19:32:0E:1B:F0:9F:8F:88 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1251d6cf-c7b1-4687-9203-d161cc40b6a2/0/F9C4820743DB001E8F69D44C19320E1BF09F8F88.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.170.0/23 IPv6: 2001:df4:9280::/48 Signature Algorithm: sha256WithRSAEncryption 86:b9:43:e3:6c:dc:c6:79:94:2e:93:d5:51:b3:d3:37:9e:c8: 79:52:8b:21:c1:0c:47:ff:30:c8:36:40:e1:d9:14:87:f5:ea: 33:4f:01:fc:bc:2a:43:35:be:62:51:bc:25:26:e5:1f:85:c8: 42:4a:51:a2:31:1c:2d:0e:41:14:5c:13:81:10:73:dc:8b:ee: 9a:a0:e9:a9:48:5a:9e:3b:50:61:a7:8f:2c:9b:83:2b:fb:d4: 4a:40:dd:bc:f9:db:21:b2:55:e4:3d:86:db:0e:59:d0:e3:22: b8:43:dd:11:50:e2:0c:5d:31:b4:3e:24:c0:97:09:b2:d6:1c: 16:c7:99:c1:01:ba:3b:d9:80:0e:2a:ed:03:92:16:28:b4:ce: de:36:59:c9:e2:c1:a6:2f:94:bc:c4:67:0f:7b:2c:7d:78:99: a6:73:5e:9d:1b:0e:04:32:7d:2c:b9:dc:e5:40:bc:22:cd:eb: dd:22:36:d2:f7:95:4d:f5:0b:89:69:91:1d:be:dc:59:6e:42: ec:14:ca:0e:c4:d1:e2:b5:ac:e3:76:c6:36:ea:25:ae:9f:56: 2a:49:da:95:7c:da:5d:4c:ae:94:25:c0:64:dc:0a:c0:54:0e: 9b:f0:d5:1b:c6:ed:05:ab:e0:c2:c8:ab:3f:c8:26:43:7d:79: ef:e6:8d:c9 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUYjMf1jrfrtTEzI13ne5bd2czD6gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwNDE2Mjc0M1oX DTI2MDcwMzE2MzI0M1owMzExMC8GA1UEAxMoRjlDNDgyMDc0M0RCMDAxRThGNjlE NDRDMTkzMjBFMUJGMDlGOEY4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/3GYRSdXmuBXULXt5XVLXiKx56HU+DDTFAwOkOnwVslfzLUDb+3lOVlzH/ kceeo0nOPEodI4sHZRoDYmYr7xPrOPpC0pzvp2+eJvwhemQmOLlvNoa9dqpsizaZ DQH90K2aUg8rWhyVi9LHvUFUDoAMQFQ+rg/Lf1huXF7GCvCMidncscFUKY0GqfKj FwXmeEH3787Q0KMj+pxTY3tM05iUj9KbLi8bqZIemBfq38mdZkDAmj4XceNOaZu4 2etsjEALMX6N6Jw39kbpQpqMxWcREJ4rr8zXCY8fbzSQmnnNcuPzy9yXfrFZMUVz TMAzBnb68M7MMgU8ISEeY6cHwicCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPnEggdD2wAej2nUTBkyDhvwn4+IMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMjUxZDZjZi1jN2IxLTQ2ODctOTIwMy1kMTYxY2M0MGI2YTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyNTFkNmNm LWM3YjEtNDY4Ny05MjAzLWQxNjFjYzQwYjZhMi8wL0Y5QzQ4MjA3NDNEQjAwMUU4 RjY5RDQ0QzE5MzIwRTFCRjA5RjhGODgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnmqowDwQCAAIwCQMHACABDfSSgDANBgkqhkiG9w0BAQsFAAOCAQEAhrlD42zc xnmULpPVUbPTN57IeVKLIcEMR/8wyDZA4dkUh/XqM08B/LwqQzW+YlG8JSblH4XI QkpRojEcLQ5BFFwTgRBz3IvumqDpqUhanjtQYaePLJuDK/vUSkDdvPnbIbJV5D2G 2w5Z0OMiuEPdEVDiDF0xtD4kwJcJstYcFseZwQG6O9mADirtA5IWKLTO3jZZyeLB pi+UvMRnD3ssfXiZpnNenRsOBDJ9LLnc5UC8Is3r3SI20veVTfULiWmRHb7cWW5C 7BTKDsTR4rWs43bGNuolrp9WKknalXzaXUyulCXAZNwKwFQOm/DVG8btBavgwsir P8gmQ3157+aNyQ== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:13 2025 by rpki-client