$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FF96D30557BDACE26C511E1F48A3514643130EA8.cer File: FF96D30557BDACE26C511E1F48A3514643130EA8.cer (raw, json) Hash identifier: Faxa23MsmvzGYi+BVfRu/zotx6dVAcfwPkzZ+juYAW0= Subject key identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0B7B20B6AF8454B06A9B399A4677A46A7B3DCF39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft caRepository: rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 11 Jul 2025 18:46:56 +0000 Certificate not after: Fri 10 Jul 2026 18:51:56 +0000 Subordinate resources: IP: 103.229.131.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7b:20:b6:af:84:54:b0:6a:9b:39:9a:46:77:a4:6a:7b:3d:cf:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 11 18:46:56 2025 GMT Not After : Jul 10 18:51:56 2026 GMT Subject: CN=FF96D30557BDACE26C511E1F48A3514643130EA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ab:8c:71:27:ad:3f:31:09:6d:bd:4a:e8:5f: ed:66:c0:bd:6f:e1:94:b8:c4:ca:35:80:e3:a5:0b: 5b:d4:7a:7a:3d:c1:5f:a8:9c:4f:65:02:8b:4c:6a: 34:c4:e7:71:19:14:dc:41:39:99:58:75:d9:15:94: 44:ad:b8:f9:5f:66:60:c1:88:7d:bf:15:73:84:dd: c1:39:a5:19:34:cb:e4:51:80:65:70:46:10:30:2c: d1:7a:e7:9e:f2:7d:f1:2b:45:01:31:ca:7e:e7:a5: 83:07:0c:c7:a1:05:d8:1c:64:ae:9f:23:01:03:6b: 5f:70:89:57:80:99:b5:4f:1f:01:53:99:b1:6b:30: 72:51:df:89:7a:22:3a:20:8d:3f:77:96:ad:33:64: ac:c7:9a:a3:c1:32:9a:8c:ec:51:d4:b9:98:47:0c: 47:7e:f4:ab:e3:f3:cf:37:7f:de:fc:41:7d:3d:0f: 63:5e:cb:1f:5a:76:a4:be:bf:77:d8:23:01:ca:44: 5d:ce:99:c5:07:e3:11:db:80:9f:2b:cb:de:14:ad: f7:13:14:9f:58:8e:b6:86:a0:83:53:8a:6a:ab:aa: 0d:de:52:76:7e:d1:bb:bc:4e:82:13:5e:d3:4d:0f: cd:f6:6b:2e:9f:08:7e:a7:fe:16:b0:36:de:2e:07: 23:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:96:D3:05:57:BD:AC:E2:6C:51:1E:1F:48:A3:51:46:43:13:0E:A8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/342c1f32-81ac-4118-be2f-574ca5b541ea/0/FF96D30557BDACE26C511E1F48A3514643130EA8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.229.131.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:58:8c:68:fa:65:60:25:84:70:f4:14:37:b1:9a:0c:91:7b: a0:cc:55:a7:b7:aa:98:ad:91:c2:96:28:8e:7c:fd:61:ca:07: 3d:f8:4b:c8:7c:85:4e:60:53:6e:15:4a:22:45:1c:bf:07:e9: 9d:aa:47:b5:71:23:d8:b6:6b:75:ad:10:5b:ab:e2:b1:d1:42: d2:30:7b:d0:c8:7d:26:36:1e:95:99:cf:e0:8b:7a:32:39:30: ba:a4:a2:b8:37:3f:f8:9b:0e:04:3d:8d:22:16:48:15:04:90: d3:89:e4:d8:36:3c:d4:84:fd:1f:e9:1a:9b:6c:77:4f:91:f6: d6:4e:5e:f2:be:57:d2:cb:55:2a:67:fa:0b:d1:29:f2:e8:31: 04:67:88:62:85:9b:59:ec:e8:fd:d7:6a:bd:15:66:d0:00:1a: 4a:2b:59:d1:46:88:25:d2:cf:41:99:36:61:94:92:b2:d2:d9: 5a:15:29:42:93:03:96:9d:99:d4:65:1c:26:74:38:cb:79:fd: 3f:c8:ea:ee:c1:8e:2a:3c:3a:62:b8:48:cc:50:51:cd:b1:01: d4:63:0d:10:6c:8a:c1:d1:24:7f:d9:70:8a:ac:78:33:20:ff: 4b:0f:fe:78:ec:d3:e1:66:cd:02:15:5c:64:e4:4d:07:df:2e: c4:32:5d:e6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUC3sgtq+EVLBqmzmaRnekans9zzkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxMTE4NDY1NloX DTI2MDcxMDE4NTE1NlowMzExMC8GA1UEAxMoRkY5NkQzMDU1N0JEQUNFMjZDNTEx RTFGNDhBMzUxNDY0MzEzMEVBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKCrjHEnrT8xCW29Suhf7WbAvW/hlLjEyjWA46ULW9R6ej3BX6icT2UCi0xq NMTncRkU3EE5mVh12RWURK24+V9mYMGIfb8Vc4TdwTmlGTTL5FGAZXBGEDAs0Xrn nvJ98StFATHKfuelgwcMx6EF2Bxkrp8jAQNrX3CJV4CZtU8fAVOZsWswclHfiXoi OiCNP3eWrTNkrMeao8EymozsUdS5mEcMR370q+Pzzzd/3vxBfT0PY17LH1p2pL6/ d9gjAcpEXc6ZxQfjEduAnyvL3hSt9xMUn1iOtoagg1OKaquqDd5Sdn7Ru7xOghNe 000PzfZrLp8Ifqf+FrA23i4HI7sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP+W0wVXvazibFEeH0ijUUZDEw6oMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zNDJjMWYzMi04MWFjLTQxMTgtYmUyZi01NzRjYTViNTQxZWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM0MmMxZjMy LTgxYWMtNDExOC1iZTJmLTU3NGNhNWI1NDFlYS8wL0ZGOTZEMzA1NTdCREFDRTI2 QzUxMUUxRjQ4QTM1MTQ2NDMxMzBFQTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn5YMwDQYJKoZIhvcNAQELBQADggEBADtYjGj6ZWAlhHD0FDexmgyRe6DMVae3 qpitkcKWKI58/WHKBz34S8h8hU5gU24VSiJFHL8H6Z2qR7VxI9i2a3WtEFur4rHR QtIwe9DIfSY2HpWZz+CLejI5MLqkorg3P/ibDgQ9jSIWSBUEkNOJ5Ng2PNSE/R/p Gptsd0+R9tZOXvK+V9LLVSpn+gvRKfLoMQRniGKFm1ns6P3Xar0VZtAAGkorWdFG iCXSz0GZNmGUkrLS2VoVKUKTA5admdRlHCZ0OMt5/T/I6u7Bjio8OmK4SMxQUc2x AdRjDRBsisHRJH/ZcIqseDMg/0sP/njs0+FmzQIVXGTkTQffLsQyXeY= -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:37 2025 by rpki-client