$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer File: 08E555759AA0C18576364C83261B6CEA4BCF0CCB.cer (raw, json) Hash identifier: UtKDdHCgzwWQObDvXQ+6RDLhlk4cG+PItINxTPvWvzY= Subject key identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4364EC7FC1201BFA9F98FD187348089E51773FF9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft caRepository: rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 18 Jun 2025 04:10:11 +0000 Certificate not after: Wed 17 Jun 2026 04:15:11 +0000 Subordinate resources: IP: 103.229.184.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 21:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:64:ec:7f:c1:20:1b:fa:9f:98:fd:18:73:48:08:9e:51:77:3f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 18 04:10:11 2025 GMT Not After : Jun 17 04:15:11 2026 GMT Subject: CN=08E555759AA0C18576364C83261B6CEA4BCF0CCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:ec:48:15:24:54:3f:ba:3f:a1:52:57:bc: fa:8e:fe:40:41:85:95:57:43:6c:c5:e0:08:d7:fe: 36:1f:99:80:04:bc:a0:c9:ec:b4:63:77:c3:3c:af: a2:38:94:91:71:53:91:61:09:a0:0e:e0:8c:e4:d6: 62:97:6b:62:e5:03:a7:3f:3c:3d:f9:8f:7c:17:5f: b0:85:a7:12:ca:7d:0d:6e:4f:ef:2b:c9:60:30:5c: 8c:75:ad:4c:92:5f:ef:24:f3:d0:9d:6f:59:83:bc: 7a:52:14:3a:c4:c5:cd:75:cc:21:50:61:3d:bb:e7: d3:16:0d:d2:51:18:fe:94:ed:1a:d0:da:28:4e:bf: c3:ae:2d:37:8a:9c:8d:de:e9:41:b9:f9:dc:16:37: d3:91:de:1c:b4:aa:84:14:f5:6e:91:fc:18:61:57: 19:c3:7f:97:60:5c:3e:98:38:82:51:8a:73:a1:72: fe:66:56:27:a8:e0:06:ba:92:b5:90:d7:40:f4:1a: 7f:28:1e:c0:3f:dc:e3:15:84:08:11:12:ec:33:ba: d9:48:66:a4:d4:c1:85:39:e9:cb:ce:41:14:5e:ec: 09:47:2e:7e:3c:00:95:ae:26:a8:64:a6:cc:3b:07: af:8b:d4:9e:05:91:f4:6e:b9:1c:3c:81:b5:f5:3d: fc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 08:E5:55:75:9A:A0:C1:85:76:36:4C:83:26:1B:6C:EA:4B:CF:0C:CB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dfee82b7-c182-4e83-897c-e00f3ce1b0d2/0/08E555759AA0C18576364C83261B6CEA4BCF0CCB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.229.184.0/23 Signature Algorithm: sha256WithRSAEncryption 47:45:87:76:a9:2b:64:ec:6c:09:80:8c:ed:14:81:1c:63:53: c3:76:ee:30:52:5d:b4:d9:dd:93:92:3e:a5:0c:b8:38:35:f0: 28:f2:df:fa:9d:20:a4:9d:3e:45:8d:86:13:2e:6e:fb:3b:64: 58:3b:9f:b6:58:d9:fc:62:8a:f2:b5:de:2e:bd:3f:db:38:d6: f8:c8:c0:ac:47:2f:71:4f:4b:d6:64:6c:4c:12:f8:42:1a:b3: 3c:f0:21:f0:e6:89:3b:66:f5:be:25:3c:19:61:df:f6:e5:9e: 47:17:17:71:75:de:80:70:cd:aa:57:06:9f:55:74:85:02:9b: b5:b3:29:a1:79:f5:13:cd:da:90:68:78:c5:4b:31:7b:85:c0: 26:d9:24:9e:23:41:f5:db:4f:eb:c7:83:a7:0b:39:7c:ba:d4: e1:56:88:69:a0:9e:60:e6:a1:83:43:ab:85:45:58:d4:ea:4a: 8d:e8:57:1f:48:16:02:4d:98:0d:52:05:59:46:5a:b2:5f:5b: 9f:c4:c0:1e:fa:26:7d:39:3a:ac:4d:df:ab:a5:4b:9d:18:f0: c8:28:93:64:7a:c4:0b:19:19:df:76:26:94:c1:c4:a5:58:eb: 0d:4f:bb:12:a9:11:37:1d:0d:2d:bf:da:35:ae:51:0b:8e:be: 08:bd:a3:cf -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQ2Tsf8EgG/qfmP0Yc0gInlF3P/kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxODA0MTAxMVoX DTI2MDYxNzA0MTUxMVowMzExMC8GA1UEAxMoMDhFNTU1NzU5QUEwQzE4NTc2MzY0 QzgzMjYxQjZDRUE0QkNGMENDQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZ27EgVJFQ/uj+hUle8+o7+QEGFlVdDbMXgCNf+Nh+ZgAS8oMnstGN3wzyv ojiUkXFTkWEJoA7gjOTWYpdrYuUDpz88PfmPfBdfsIWnEsp9DW5P7yvJYDBcjHWt TJJf7yTz0J1vWYO8elIUOsTFzXXMIVBhPbvn0xYN0lEY/pTtGtDaKE6/w64tN4qc jd7pQbn53BY305HeHLSqhBT1bpH8GGFXGcN/l2BcPpg4glGKc6Fy/mZWJ6jgBrqS tZDXQPQafygewD/c4xWECBES7DO62UhmpNTBhTnpy85BFF7sCUcufjwAla4mqGSm zDsHr4vUngWR9G65HDyBtfU9/GMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAjlVXWaoMGFdjZMgyYbbOpLzwzLMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZmVlODJiNy1jMTgyLTRlODMtODk3Yy1lMDBmM2NlMWIwZDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmZWU4MmI3 LWMxODItNGU4My04OTdjLWUwMGYzY2UxYjBkMi8wLzA4RTU1NTc1OUFBMEMxODU3 NjM2NEM4MzI2MUI2Q0VBNEJDRjBDQ0IubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn5bgwDQYJKoZIhvcNAQELBQADggEBAEdFh3apK2TsbAmAjO0UgRxjU8N27jBS XbTZ3ZOSPqUMuDg18Cjy3/qdIKSdPkWNhhMubvs7ZFg7n7ZY2fxiivK13i69P9s4 1vjIwKxHL3FPS9ZkbEwS+EIaszzwIfDmiTtm9b4lPBlh3/blnkcXF3F13oBwzapX Bp9VdIUCm7WzKaF59RPN2pBoeMVLMXuFwCbZJJ4jQfXbT+vHg6cLOXy61OFWiGmg nmDmoYNDq4VFWNTqSo3oVx9IFgJNmA1SBVlGWrJfW5/EwB76Jn05OqxN36ulS50Y 8Mgok2R6xAsZGd92JpTBxKVY6w1PuxKpETcdDS2/2jWuUQuOvgi9o88= -----END CERTIFICATE-----Generated at Mon Jun 30 21:37:09 2025 by rpki-client