$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer File: 08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer (raw, json) Hash identifier: VZMeEj0pKyrCY05ap7GZIRnpQw+eYClg6ACHkY9BOJw= Subject key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 776052D034C8022726BC313320FE36FA692EB507 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft caRepository: rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 00:00:21 +0000 Certificate not after: Tue 02 Jun 2026 00:05:21 +0000 Subordinate resources: IP: 103.102.12.0/22 IP: 2401:db40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:60:52:d0:34:c8:02:27:26:bc:31:33:20:fe:36:fa:69:2e:b5:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 00:00:21 2025 GMT Not After : Jun 2 00:05:21 2026 GMT Subject: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:5f:50:24:b2:db:05:2b:92:79:49:03:03: 9f:0b:3c:fd:03:48:56:ca:b7:13:88:fa:44:df:0d: d6:b4:39:57:72:1a:95:93:b0:96:1e:99:6d:f6:ce: be:49:f1:39:0e:cf:7a:0d:d3:9d:e5:4f:ad:2b:01: 15:75:f1:7e:46:b7:71:64:b4:40:6f:ff:0d:2a:bd: 4c:4e:6e:e1:09:50:56:a9:53:11:cb:9a:59:74:af: 01:be:e4:76:4d:ce:c7:8d:64:71:c4:38:02:92:3c: 7f:54:18:f8:9f:34:82:f5:ee:bc:e8:ad:ec:98:ae: cf:1a:b8:f6:26:58:e0:8c:18:66:c4:23:3e:4b:17: 44:a2:d8:2b:2b:91:52:69:03:eb:6e:a6:80:1d:86: 1f:fd:25:f7:a6:12:c5:c6:3c:87:1b:65:84:aa:33: db:37:bd:ec:eb:ea:c5:df:92:af:bf:1f:d9:ec:84: 6f:36:2c:3f:07:8f:df:a8:43:52:dc:3e:ad:5b:62: 22:87:4a:4f:f5:af:17:6a:8d:4b:5c:79:3c:23:55: b4:ea:e0:e4:b1:cf:a1:0b:bd:9c:59:7e:a6:07:4e: 99:fc:d1:34:8e:6b:b2:a9:56:62:77:88:35:83:9f: c6:52:60:39:19:c2:18:15:55:5d:b9:fc:e7:e5:fb: 92:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.12.0/22 IPv6: 2401:db40::/32 Signature Algorithm: sha256WithRSAEncryption 94:ce:61:a0:cf:10:f7:33:68:e8:df:3f:7a:29:50:df:07:08: 2a:2b:c3:f0:8c:ee:be:ef:45:0e:5e:cb:88:b0:50:8b:0b:ae: 1a:9b:6c:db:ea:67:06:fb:25:33:d0:39:42:ee:d0:51:f7:b8: e7:6c:c3:5c:57:d4:85:ab:23:f0:c8:11:ca:ff:63:8d:0f:3e: 62:1f:38:8b:ec:67:46:b8:57:56:57:a0:e8:ca:1f:62:fd:ce: e4:c0:c8:ca:57:98:e6:3d:1d:70:cf:cb:4d:41:fc:69:91:2b: 75:cb:4a:8a:ae:7e:29:a1:7a:3b:ab:12:e1:e9:33:71:85:2b: 3d:d1:63:d6:d1:5a:42:d6:b3:42:d0:00:2b:ce:21:60:02:e4: 84:b9:13:47:59:80:9d:41:0b:b5:69:4d:dd:04:e3:67:68:3d: ef:84:68:93:a1:20:58:2f:1e:d5:d6:40:a0:c2:63:67:08:c2: aa:61:a6:05:8b:30:75:0e:2a:7b:bb:ff:10:e5:fc:17:6f:e6: 94:a3:ee:8b:ed:38:2a:0d:da:1a:b7:fe:af:8e:b6:58:0a:43: 68:be:c6:bc:b0:70:24:16:12:ed:72:05:d4:8e:9d:b0:7f:2e: 85:70:30:05:51:d5:9d:6f:4e:e0:d0:92:01:cc:7d:ab:3b:8e: 94:08:1e:01 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUd2BS0DTIAicmvDEzIP42+mkutQcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzAwMDAyMVoX DTI2MDYwMjAwMDUyMVowMzExMC8GA1UEAxMoMDg3NzMxOTFGQkZDMjFBM0M4NjE1 QTNFMzZBMkFDQjE4N0Y2M0MyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMjkX1AkstsFK5J5SQMDnws8/QNIVsq3E4j6RN8N1rQ5V3IalZOwlh6ZbfbO vknxOQ7Peg3TneVPrSsBFXXxfka3cWS0QG//DSq9TE5u4QlQVqlTEcuaWXSvAb7k dk3Ox41kccQ4ApI8f1QY+J80gvXuvOit7Jiuzxq49iZY4IwYZsQjPksXRKLYKyuR UmkD626mgB2GH/0l96YSxcY8hxtlhKoz2ze97Ovqxd+Sr78f2eyEbzYsPweP36hD Utw+rVtiIodKT/WvF2qNS1x5PCNVtOrg5LHPoQu9nFl+pgdOmfzRNI5rsqlWYneI NYOfxlJgORnCGBVVXbn85+X7ktECAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAh3MZH7/CGjyGFaPjairLGH9jwlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81Zjg2YjEyZS1lNTc0LTQyNmItYWE2Yi00OTM5ZTNiMDMwYmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmODZiMTJl LWU1NzQtNDI2Yi1hYTZiLTQ5MzllM2IwMzBiYS8wLzA4NzczMTkxRkJGQzIxQTND ODYxNUEzRTM2QTJBQ0IxODdGNjNDMjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnZgwwDQQCAAIwBwMFACQB20AwDQYJKoZIhvcNAQELBQADggEBAJTOYaDPEPcz aOjfP3opUN8HCCorw/CM7r7vRQ5ey4iwUIsLrhqbbNvqZwb7JTPQOULu0FH3uOds w1xX1IWrI/DIEcr/Y40PPmIfOIvsZ0a4V1ZXoOjKH2L9zuTAyMpXmOY9HXDPy01B /GmRK3XLSoqufimhejurEuHpM3GFKz3RY9bRWkLWs0LQACvOIWAC5IS5E0dZgJ1B C7VpTd0E42doPe+EaJOhIFgvHtXWQKDCY2cIwqphpgWLMHUOKnu7/xDl/Bdv5pSj 7ovtOCoN2hq3/q+OtlgKQ2i+xrywcCQWEu1yBdSOnbB/LoVwMAVR1Z1vTuDQkgHM fas7jpQIHgE= -----END CERTIFICATE-----Generated at Sun Jun 29 20:29:14 2025 by rpki-client