$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer File: 052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer (raw, json) Hash identifier: ugp/NSt8W2Vv+hrHgDtCUdDNSghoZ75ZMLqgyFsBbvY= Subject key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 31ABAE8F0014925F6F749A801C68611B91B08AE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft caRepository: rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 14 Jun 2025 12:39:08 +0000 Certificate not after: Sat 13 Jun 2026 12:44:08 +0000 Subordinate resources: IP: 103.161.194.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ab:ae:8f:00:14:92:5f:6f:74:9a:80:1c:68:61:1b:91:b0:8a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 14 12:39:08 2025 GMT Not After : Jun 13 12:44:08 2026 GMT Subject: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:78:07:b7:14:c2:46:35:3b:a4:5e:84:b9:48: 57:cf:37:fa:cf:b7:2e:d7:ea:3f:24:2a:e1:07:9e: 31:ef:45:ca:c6:2c:a9:f2:cb:12:6c:53:eb:c9:12: 13:62:12:db:3d:34:f1:ed:fd:79:09:8e:b4:75:f7: b7:ec:c2:1f:70:e0:a8:29:17:f5:07:c5:49:be:fb: 04:8e:20:ca:d3:35:51:ca:0f:cd:76:46:73:83:42: 16:c6:70:ea:41:82:39:b9:4c:40:f2:c1:7f:97:1b: 5c:98:e8:a7:45:71:64:17:af:75:b4:15:cc:90:89: 06:e1:ca:a0:75:b8:25:fb:1e:b3:00:18:48:d9:5c: e3:20:f9:1f:1c:22:6d:d5:0d:10:3c:f7:dc:21:16: 21:95:f8:63:32:bb:46:01:c0:84:7b:2f:17:4a:c9: 8f:8c:87:a5:d6:78:95:5a:ce:22:cc:df:bf:1d:31: 1f:1b:91:fd:6c:c8:cf:85:ca:a2:ae:37:47:b4:f1: fc:5e:ac:d2:17:c0:7c:36:31:49:aa:1b:39:96:c9: a0:4f:96:23:d8:d7:03:88:32:97:9c:98:4d:e8:0c: 8d:aa:c3:89:8d:94:e6:46:7e:2d:fd:9d:ee:86:07: e2:64:c3:a0:53:20:e4:de:7c:c6:08:24:c6:a5:1f: 30:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.194.0/23 Signature Algorithm: sha256WithRSAEncryption 72:c4:57:d2:1a:11:e7:5a:28:6d:c4:a5:2b:84:1c:1d:2d:44: 2c:dd:9b:0d:d8:aa:de:52:db:40:65:8f:e5:94:df:ab:07:3d: 2f:b3:ca:33:50:3f:45:cf:31:44:b2:1e:6c:84:01:36:e4:dd: f2:63:2a:54:0a:61:49:38:87:36:2f:3a:80:b2:f9:3f:37:df: d4:9f:41:62:81:ab:cd:09:aa:fb:ce:d2:e4:bd:a8:ed:12:4e: 66:4d:64:6e:0d:7d:c2:a0:d8:71:fe:02:ac:49:ca:a5:a5:e7: 16:2c:68:23:e0:6f:31:35:d7:2e:50:9c:b1:d0:a7:bc:44:c5: 19:58:0a:15:08:6f:b9:5e:da:58:ff:06:89:61:aa:6e:11:e1: a0:59:16:d2:d3:0e:8d:96:80:7f:13:bf:93:ce:76:12:38:1e: 32:c5:dc:25:5b:e1:21:93:0f:89:9e:ff:37:c7:76:9a:10:9f: 47:32:fc:b9:a7:d9:ba:1f:a4:c0:aa:6b:64:d1:2e:34:3e:61: 87:c0:d5:cf:69:1a:70:a9:4f:0a:93:ee:c9:25:e5:78:a4:8b: bb:4c:28:ee:90:a1:6f:c3:59:dc:96:c4:4a:3f:61:ca:f4:36: 06:0b:a8:ad:96:6e:f7:d3:cd:94:f6:b6:3a:08:1f:b3:24:d3: 89:a3:3b:3c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMauujwAUkl9vdJqAHGhhG5GwiugwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxNDEyMzkwOFoX DTI2MDYxMzEyNDQwOFowMzExMC8GA1UEAxMoMDUyRUU1OUMxRDQxNDlBNzdERjE1 NTUzMTFDMDU2RENEQkM1RkY0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANB4B7cUwkY1O6RehLlIV883+s+3LtfqPyQq4QeeMe9FysYsqfLLEmxT68kS E2IS2z008e39eQmOtHX3t+zCH3DgqCkX9QfFSb77BI4gytM1UcoPzXZGc4NCFsZw 6kGCOblMQPLBf5cbXJjop0VxZBevdbQVzJCJBuHKoHW4JfseswAYSNlc4yD5Hxwi bdUNEDz33CEWIZX4YzK7RgHAhHsvF0rJj4yHpdZ4lVrOIszfvx0xHxuR/WzIz4XK oq43R7Tx/F6s0hfAfDYxSaobOZbJoE+WI9jXA4gyl5yYTegMjarDiY2U5kZ+Lf2d 7oYH4mTDoFMg5N58xggkxqUfMDECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAUu5ZwdQUmnffFVUxHAVtzbxf9MMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jY2JmYjIyOC1mZDA1LTRhZmQtODdiZC1lZDU4MGI1NTAzNmYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYmZiMjI4 LWZkMDUtNGFmZC04N2JkLWVkNTgwYjU1MDM2Zi8wLzA1MkVFNTlDMUQ0MTQ5QTc3 REYxNTU1MzExQzA1NkRDREJDNUZGNEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnocIwDQYJKoZIhvcNAQELBQADggEBAHLEV9IaEedaKG3EpSuEHB0tRCzdmw3Y qt5S20Blj+WU36sHPS+zyjNQP0XPMUSyHmyEATbk3fJjKlQKYUk4hzYvOoCy+T83 39SfQWKBq80JqvvO0uS9qO0STmZNZG4NfcKg2HH+AqxJyqWl5xYsaCPgbzE11y5Q nLHQp7xExRlYChUIb7le2lj/Bolhqm4R4aBZFtLTDo2WgH8Tv5POdhI4HjLF3CVb 4SGTD4me/zfHdpoQn0cy/Lmn2bofpMCqa2TRLjQ+YYfA1c9pGnCpTwqT7skl5Xik i7tMKO6QoW/DWdyWxEo/Ycr0NgYLqK2WbvfTzZT2tjoIH7Mk04mjOzw= -----END CERTIFICATE-----Generated at Sun Jun 29 14:06:03 2025 by rpki-client