$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer File: F9F45AEE2535AA139ECA272806E15BF40CC89B98.cer (raw, json) Hash identifier: dUJbqP4PjHuCnOVzfo0AP5ffJiCQSCBHBX1y5+AhzNs= Subject key identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 22BAAC2BC33C44FC211932B28D7D16986266198D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft caRepository: rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 21 May 2025 02:09:36 +0000 Certificate not after: Wed 20 May 2026 02:14:36 +0000 Subordinate resources: IP: 103.105.8.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ba:ac:2b:c3:3c:44:fc:21:19:32:b2:8d:7d:16:98:62:66:19:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 21 02:09:36 2025 GMT Not After : May 20 02:14:36 2026 GMT Subject: CN=F9F45AEE2535AA139ECA272806E15BF40CC89B98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:27:eb:db:ae:84:e0:8d:d9:8d:52:80:89:e8: 94:22:91:ad:6e:79:f9:23:42:48:ec:f9:08:0f:98: 69:c9:f2:6d:af:00:a6:dc:d7:fb:cd:b7:42:c9:ef: 21:fa:92:c3:b4:09:2a:d6:04:6a:69:27:a4:56:f3: f8:de:80:3d:4a:46:1e:23:5e:0a:48:9c:f9:3f:7c: a2:74:13:c7:fb:2c:73:ca:37:1c:2f:ad:83:b6:55: 47:01:88:9a:26:07:3f:74:00:e1:b3:bd:db:bd:d0: 8b:74:d6:8c:c6:fb:49:e6:27:61:98:22:f8:35:70: 2a:ed:f2:80:62:2e:7e:39:37:33:09:93:af:94:bb: dd:c6:a8:11:44:4f:d6:b5:47:3c:13:f4:85:a6:0e: 12:b5:9c:be:7c:cd:b6:b4:17:a5:7d:d0:d4:5d:6b: 5a:cc:65:20:1c:6d:2a:44:e2:08:67:a6:dc:45:2c: d4:62:1e:2f:65:82:54:8f:99:6a:0e:87:cd:b8:36: 94:5f:db:47:06:5a:02:0b:d1:86:a3:a0:45:91:2a: 34:e7:90:28:72:0b:37:20:06:83:93:ab:c4:58:cc: b9:2c:75:ee:f2:2f:3e:1e:8c:24:2e:fc:e1:08:ff: 81:fc:e5:e3:29:f1:57:fc:03:68:50:4f:b2:57:0e: ce:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F9:F4:5A:EE:25:35:AA:13:9E:CA:27:28:06:E1:5B:F4:0C:C8:9B:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e67a7f0e-8d07-45de-8252-3bffc05e5649/0/F9F45AEE2535AA139ECA272806E15BF40CC89B98.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.8.0/23 Signature Algorithm: sha256WithRSAEncryption 49:01:33:4a:a4:c4:fb:e2:4b:00:5a:ab:06:4a:94:61:15:d0: c6:c2:da:d1:cb:64:62:bc:07:e7:ff:e5:6c:a2:98:dc:82:e6: fb:91:8f:8e:32:ac:1e:95:20:a9:5a:0d:27:8b:bd:cc:fd:ae: 63:8d:97:f0:75:66:fd:75:68:e2:65:e4:4e:83:fe:f9:ad:09: 83:3a:7a:ab:f7:b6:c8:40:5c:ea:03:f5:1d:87:c8:54:c4:7e: a5:05:de:ac:90:1f:92:58:90:f4:3a:11:f0:28:3c:3e:95:80: d2:38:9f:2e:a1:5b:3f:4d:ea:12:8c:1f:b8:c5:84:1b:4a:37: a6:b0:84:bf:a7:2b:00:63:e4:4b:ae:4e:5a:67:cc:51:29:82: 31:4f:9a:2a:ed:40:f5:a6:0f:93:5e:2e:fb:54:38:f8:44:b3: dc:d8:90:a4:53:96:0a:a7:31:c8:01:26:5f:fc:b5:f6:50:f3: 84:e3:ef:6f:64:bf:73:08:19:14:03:62:41:bd:8a:95:5c:14: dd:eb:69:da:87:f8:60:2d:62:fc:8e:55:6d:cb:ef:a2:ca:7d: 66:2b:02:eb:9d:7d:ba:0a:96:54:73:23:b7:61:22:ef:ec:07: d2:f8:1a:3c:9f:7b:1d:8e:44:f8:0e:54:49:7f:45:ad:58:71: f2:61:74:81 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUIrqsK8M8RPwhGTKyjX0WmGJmGY0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUyMTAyMDkzNloX DTI2MDUyMDAyMTQzNlowMzExMC8GA1UEAxMoRjlGNDVBRUUyNTM1QUExMzlFQ0Ey NzI4MDZFMTVCRjQwQ0M4OUI5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANAn69uuhOCN2Y1SgInolCKRrW55+SNCSOz5CA+Yacnyba8AptzX+823Qsnv IfqSw7QJKtYEamknpFbz+N6APUpGHiNeCkic+T98onQTx/ssc8o3HC+tg7ZVRwGI miYHP3QA4bO9273Qi3TWjMb7SeYnYZgi+DVwKu3ygGIufjk3MwmTr5S73caoEURP 1rVHPBP0haYOErWcvnzNtrQXpX3Q1F1rWsxlIBxtKkTiCGem3EUs1GIeL2WCVI+Z ag6Hzbg2lF/bRwZaAgvRhqOgRZEqNOeQKHILNyAGg5OrxFjMuSx17vIvPh6MJC78 4Qj/gfzl4ynxV/wDaFBPslcOzukCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPn0Wu4lNaoTnsonKAbhW/QMyJuYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lNjdhN2YwZS04ZDA3LTQ1ZGUtODI1Mi0zYmZmYzA1ZTU2NDkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2N2E3ZjBl LThkMDctNDVkZS04MjUyLTNiZmZjMDVlNTY0OS8wL0Y5RjQ1QUVFMjUzNUFBMTM5 RUNBMjcyODA2RTE1QkY0MENDODlCOTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnaQgwDQYJKoZIhvcNAQELBQADggEBAEkBM0qkxPviSwBaqwZKlGEV0MbC2tHL ZGK8B+f/5WyimNyC5vuRj44yrB6VIKlaDSeLvcz9rmONl/B1Zv11aOJl5E6D/vmt CYM6eqv3tshAXOoD9R2HyFTEfqUF3qyQH5JYkPQ6EfAoPD6VgNI4ny6hWz9N6hKM H7jFhBtKN6awhL+nKwBj5EuuTlpnzFEpgjFPmirtQPWmD5NeLvtUOPhEs9zYkKRT lgqnMcgBJl/8tfZQ84Tj729kv3MIGRQDYkG9ipVcFN3radqH+GAtYvyOVW3L76LK fWYrAuudfboKllRzI7dhIu/sB9L4Gjyfex2ORPgOVEl/Ra1YcfJhdIE= -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:00 2025 by rpki-client