$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FE47963FB6E13EFC318606E3CA31013421827343.cer File: FE47963FB6E13EFC318606E3CA31013421827343.cer (raw, json) Hash identifier: JqE+xH+qVDbeimljxk7OXxDUpegZCsJNPRnnZzZ7gII= Subject key identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1FEB4B5410F0D3537AA519015D345CCFB8FAF7A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft caRepository: rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 29 Oct 2025 19:29:55 +0000 Certificate not after: Wed 28 Oct 2026 19:34:55 +0000 Subordinate resources: IP: 103.67.49.0/24 IP: 103.162.252.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:eb:4b:54:10:f0:d3:53:7a:a5:19:01:5d:34:5c:cf:b8:fa:f7:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 29 19:29:55 2025 GMT Not After : Oct 28 19:34:55 2026 GMT Subject: CN=FE47963FB6E13EFC318606E3CA31013421827343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b1:af:aa:68:55:87:de:96:2f:29:60:d6:03: 5b:99:23:8f:50:5a:60:42:2b:3f:8a:50:65:a5:00: 8a:9e:cf:0d:70:ef:17:51:ad:3b:b9:35:8d:36:8f: b4:42:10:20:99:2c:ef:fe:f2:1b:40:a7:1d:6c:1b: 21:99:ca:2f:cf:fa:20:b1:b2:34:c8:ec:a9:9a:e9: 29:38:df:cb:aa:ac:d9:69:27:12:b9:17:da:c0:22: 5f:08:00:24:e7:ae:b3:df:f3:b3:df:88:0f:26:1c: 96:b6:e2:e2:6b:45:b4:36:02:ab:88:92:51:b5:03: 52:bf:3d:8e:6b:e3:66:c7:28:12:57:1f:38:54:6f: b3:cc:8d:f3:18:73:88:e7:05:f3:b9:d1:9e:2d:10: 70:08:38:fc:d9:bd:2b:2a:68:03:0f:c9:9e:2b:87: f4:a8:17:1e:50:25:8a:c0:d4:f7:06:89:25:29:8b: db:3e:fa:41:53:5f:a2:f1:0e:1f:10:47:31:2a:54: 6b:d8:a8:17:34:bc:fa:03:4f:bf:18:d2:3f:35:5e: 3a:ca:0f:cc:1d:fa:17:46:0d:96:a6:3d:07:99:41: 90:19:c8:33:ae:f3:68:57:b5:7d:ba:75:08:a1:5e: b6:c1:0f:87:36:c8:74:89:2b:b5:94:76:7a:f0:a1: 0d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:47:96:3F:B6:E1:3E:FC:31:86:06:E3:CA:31:01:34:21:82:73:43 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/68466889-c1ef-4410-ad9c-306c09e1be06/0/FE47963FB6E13EFC318606E3CA31013421827343.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.67.49.0/24 103.162.252.0/24 Signature Algorithm: sha256WithRSAEncryption 02:7c:55:1a:79:2c:3d:a9:e4:fa:29:57:da:a3:4d:c3:17:e9: 62:d7:b8:90:93:95:81:ee:91:4f:1a:90:a9:e8:3f:af:2f:b4: 0d:a6:e2:b1:cd:68:74:39:a8:60:bf:85:43:ca:9d:6d:81:aa: 12:8e:66:15:95:87:6d:3a:f0:28:e9:66:45:30:73:d9:4a:46: 5e:1b:46:00:24:0e:79:46:0d:ed:9c:a6:d5:39:5a:b8:c4:26: fe:6b:ca:ca:3d:6f:53:6d:ac:fc:5f:53:c8:1d:06:c2:22:f8: 64:8f:65:eb:64:7d:5d:7d:b7:7a:c0:a5:e4:67:c3:a3:a6:82: 8e:ac:26:eb:2e:74:97:d0:cf:b3:ed:1a:d3:bb:d4:20:4e:50: 3c:68:2b:1a:f6:a4:e1:a9:fe:ba:63:0d:33:55:e7:10:bb:8c: f2:b4:73:fa:23:47:18:0c:69:10:9e:53:c9:03:78:80:dd:75: 42:4a:0d:bc:3e:a8:8d:65:83:63:7e:f7:e5:b7:48:9c:c6:70: 93:9e:3a:51:08:c3:dc:53:bf:e8:1b:0d:a3:3d:e4:76:a0:f8: c8:30:e0:64:78:55:56:2c:98:d4:95:d2:20:e1:fa:e0:10:22: 8e:b3:be:3b:9f:9e:79:33:e3:8e:fb:93:52:04:08:aa:9d:b8: 93:a2:d3:3c -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUH+tLVBDw01N6pRkBXTRcz7j696EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyOTE5Mjk1NVoX DTI2MTAyODE5MzQ1NVowMzExMC8GA1UEAxMoRkU0Nzk2M0ZCNkUxM0VGQzMxODYw NkUzQ0EzMTAxMzQyMTgyNzM0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqxr6poVYfeli8pYNYDW5kjj1BaYEIrP4pQZaUAip7PDXDvF1GtO7k1jTaP tEIQIJks7/7yG0CnHWwbIZnKL8/6ILGyNMjsqZrpKTjfy6qs2WknErkX2sAiXwgA JOeus9/zs9+IDyYclrbi4mtFtDYCq4iSUbUDUr89jmvjZscoElcfOFRvs8yN8xhz iOcF87nRni0QcAg4/Nm9KypoAw/JniuH9KgXHlAlisDU9waJJSmL2z76QVNfovEO HxBHMSpUa9ioFzS8+gNPvxjSPzVeOsoPzB36F0YNlqY9B5lBkBnIM67zaFe1fbp1 CKFetsEPhzbIdIkrtZR2evChDaMCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP5Hlj+24T78MYYG48oxATQhgnNDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ODQ2Njg4OS1jMWVmLTQ0MTAtYWQ5Yy0zMDZjMDllMWJlMDYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY4NDY2ODg5 LWMxZWYtNDQxMC1hZDljLTMwNmMwOWUxYmUwNi8wL0ZFNDc5NjNGQjZFMTNFRkMz MTg2MDZFM0NBMzEwMTM0MjE4MjczNDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABnQzEDBABnovwwDQYJKoZIhvcNAQELBQADggEBAAJ8VRp5LD2p5PopV9qjTcMX 6WLXuJCTlYHukU8akKnoP68vtA2m4rHNaHQ5qGC/hUPKnW2BqhKOZhWVh2068Cjp ZkUwc9lKRl4bRgAkDnlGDe2cptU5WrjEJv5ryso9b1NtrPxfU8gdBsIi+GSPZetk fV19t3rApeRnw6Omgo6sJusudJfQz7PtGtO71CBOUDxoKxr2pOGp/rpjDTNV5xC7 jPK0c/ojRxgMaRCeU8kDeIDddUJKDbw+qI1lg2N+9+W3SJzGcJOeOlEIw9xTv+gb DaM95Hag+Mgw4GR4VVYsmNSV0iDh+uAQIo6zvjufnnkz4477k1IECKqduJOi0zw= -----END CERTIFICATE-----Generated at Tue Nov 4 02:17:05 2025 by rpki-client