$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer File: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer (raw, json) Hash identifier: ckYrhBcAuloXEkTY1CDk++w2YvwpYgadK+LTIyrhxS4= Subject key identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 32A30FFD91285FF51928432CBE04E00CF469F7CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft caRepository: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 26 Sep 2025 15:31:53 +0000 Certificate not after: Fri 25 Sep 2026 15:36:53 +0000 Subordinate resources: IP: 103.129.152.0/24 IP: 2001:df6:7500::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a3:0f:fd:91:28:5f:f5:19:28:43:2c:be:04:e0:0c:f4:69:f7:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 26 15:31:53 2025 GMT Not After : Sep 25 15:36:53 2026 GMT Subject: CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:79:71:45:29:88:18:d4:a1:9b:7a:d0:ce:9a: e6:06:e8:0f:50:4d:d1:ce:b7:23:50:1d:e4:79:00: 76:53:39:a2:4f:ba:15:f7:8b:1b:bc:23:ac:d5:3d: 06:31:69:32:ee:93:83:a0:d9:d4:30:32:a4:c5:7a: f5:2c:27:eb:18:7f:01:40:a4:dc:01:82:f0:a7:56: 21:fc:86:d9:ee:c4:a9:68:86:e6:a6:d0:7f:ae:49: 41:88:91:98:a5:2a:20:ab:7a:a4:96:48:b3:12:04: 54:e2:6a:58:c0:45:93:34:c8:6f:e0:78:b9:30:cc: 80:2f:cf:08:84:7d:50:4c:4e:dd:e5:f7:0a:ff:8c: 46:c4:d1:8e:05:69:36:bb:6e:d1:5c:be:bd:f9:cd: 57:82:84:91:cb:e5:6f:56:a2:f0:ef:f3:28:58:52: 27:62:dd:f9:52:31:44:6b:73:26:68:73:28:c1:b7: 1c:0d:b3:9f:64:0d:c1:a2:88:d4:09:af:94:ed:88: 95:f1:e5:15:62:7e:be:b8:33:23:75:65:1f:03:9f: 1d:af:6e:16:70:29:92:a2:2e:a2:bb:96:ea:aa:3a: fb:16:45:68:c8:b4:4d:25:c7:42:f1:74:43:53:ad: 66:7f:b4:55:bc:a3:d2:bb:ce:9a:29:71:49:6b:91: c4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.129.152.0/24 IPv6: 2001:df6:7500::/48 Signature Algorithm: sha256WithRSAEncryption 54:25:3f:1b:78:72:cb:f4:05:b1:10:c0:b9:46:3f:57:85:6a: 3b:2b:4a:8d:17:a1:d2:82:b1:3b:b1:70:b8:3b:1f:01:de:d6: 22:d0:63:c7:73:a4:f2:58:25:30:59:98:82:48:d5:a6:aa:54: d7:f9:71:6d:0e:57:50:b4:bd:89:92:70:dc:cf:db:90:a7:91: 79:6d:54:bb:b2:9c:e9:73:39:fe:af:19:89:d2:a0:ed:2a:64: c8:47:a5:56:33:92:8a:ca:8f:c8:b5:fc:ee:2e:8a:41:e8:38: 37:2e:f2:6d:f8:b5:95:df:2b:12:8d:b6:9d:0a:1d:ab:a0:37: 71:ec:ce:d6:de:a3:7a:f5:63:78:61:d2:57:15:0c:a0:cd:39: 15:f0:09:f3:df:29:a2:79:e9:fb:4f:4e:66:86:1d:78:39:c6: d9:ec:d2:24:4a:ca:0e:5c:8c:24:2f:b6:dc:2c:dd:a6:11:15: 94:31:b0:d1:6b:6c:ce:af:c3:4d:26:3c:55:de:d7:6e:b8:6c: 6d:b7:26:6b:14:29:cf:1c:8f:32:26:07:4f:6a:bd:88:88:6a: f8:1c:9c:af:81:0d:1b:d7:b2:71:e0:2e:a4:1a:16:ba:5b:82: 6f:17:0b:cb:94:1e:02:57:4b:c0:56:00:bd:59:b8:2b:7e:4e: dd:03:28:df -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUMqMP/ZEoX/UZKEMsvgTgDPRp980wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyNjE1MzE1M1oX DTI2MDkyNTE1MzY1M1owMzExMC8GA1UEAxMoMEFGRDhGNkIwMjQwNUY0REU5QTk0 Njg0MENDNUFFMkU2QUM4RTQwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPN5cUUpiBjUoZt60M6a5gboD1BN0c63I1Ad5HkAdlM5ok+6FfeLG7wjrNU9 BjFpMu6Tg6DZ1DAypMV69Swn6xh/AUCk3AGC8KdWIfyG2e7EqWiG5qbQf65JQYiR mKUqIKt6pJZIsxIEVOJqWMBFkzTIb+B4uTDMgC/PCIR9UExO3eX3Cv+MRsTRjgVp Nrtu0Vy+vfnNV4KEkcvlb1ai8O/zKFhSJ2Ld+VIxRGtzJmhzKMG3HA2zn2QNwaKI 1AmvlO2IlfHlFWJ+vrgzI3VlHwOfHa9uFnApkqIuoruW6qo6+xZFaMi0TSXHQvF0 Q1OtZn+0Vbyj0rvOmilxSWuRxHMCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAr9j2sCQF9N6alGhAzFri5qyOQMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NDdjNmVjYi0wYmFlLTQ1YzMtYWFkYS00M2E2YTE3MWMwNDYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0N2M2ZWNi LTBiYWUtNDVjMy1hYWRhLTQzYTZhMTcxYzA0Ni8wLzBBRkQ4RjZCMDI0MDVGNERF OUE5NDY4NDBDQzVBRTJFNkFDOEU0MEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABngZgwDwQCAAIwCQMHACABDfZ1ADANBgkqhkiG9w0BAQsFAAOCAQEAVCU/G3hy y/QFsRDAuUY/V4VqOytKjReh0oKxO7FwuDsfAd7WItBjx3Ok8lglMFmYgkjVpqpU 1/lxbQ5XULS9iZJw3M/bkKeReW1Uu7Kc6XM5/q8ZidKg7SpkyEelVjOSisqPyLX8 7i6KQeg4Ny7ybfi1ld8rEo22nQodq6A3cezO1t6jevVjeGHSVxUMoM05FfAJ898p onnp+09OZoYdeDnG2ezSJErKDlyMJC+23CzdphEVlDGw0Wtszq/DTSY8Vd7Xbrhs bbcmaxQpzxyPMiYHT2q9iIhq+Bycr4ENG9eyceAupBoWuluCbxcLy5QeAldLwFYA vVm4K35O3QMo3w== -----END CERTIFICATE-----Generated at Mon Oct 20 16:15:16 2025 by rpki-client