$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer File: 149DF19912198B2C79A55C7CF1B7CB7A7579AD51.cer (raw, json) Hash identifier: ifsPzPPMQ149qZ+J4eOfDA/rdgDB0FCGpQbIUS8vYgM= Subject key identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 76725C49E3668F828E4B8561AD705D51E9D27DE7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft caRepository: rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 09 Aug 2025 03:44:30 +0000 Certificate not after: Sat 08 Aug 2026 03:49:30 +0000 Subordinate resources: IP: 103.182.80.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:72:5c:49:e3:66:8f:82:8e:4b:85:61:ad:70:5d:51:e9:d2:7d:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 9 03:44:30 2025 GMT Not After : Aug 8 03:49:30 2026 GMT Subject: CN=149DF19912198B2C79A55C7CF1B7CB7A7579AD51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:cd:d6:2c:eb:a6:a7:c2:50:9b:de:84:27: 69:7f:06:15:91:39:67:af:9a:c5:ee:11:33:a0:36: e8:8b:59:49:9b:d5:a5:9b:a7:5c:df:b6:cf:a3:5f: 93:b4:3f:0c:01:f6:b2:7b:da:94:2d:dc:f2:67:9f: 7e:6c:8e:4e:d5:16:ba:97:90:7e:bd:b1:c8:ff:d7: 03:90:32:bd:d4:34:bf:dc:64:87:9f:b5:53:2b:36: 95:76:ce:48:99:04:40:78:78:63:77:f1:f4:d9:c9: fe:83:a7:c1:b3:64:0c:32:22:11:5c:e0:c6:eb:33: e5:f5:2d:85:97:91:f6:4a:a2:ab:23:ab:7c:a9:4e: 24:71:41:28:cb:de:de:f6:b3:f3:1d:08:b9:d7:ee: bb:45:87:66:66:a1:5b:7c:58:bb:03:9f:61:f1:a3: d5:da:08:60:ea:a7:51:e9:6b:15:47:e8:1c:51:c1: 54:97:aa:a6:70:97:10:37:7b:9e:ae:35:93:7e:68: 15:fc:a3:bd:bb:51:52:51:e0:56:f3:ed:5d:2f:b2: 54:60:49:c5:1d:9f:05:ac:71:b8:c7:d6:2b:fd:88: 80:4b:f2:88:ed:8a:b5:91:eb:92:2c:c8:84:e6:72: db:0a:20:9a:6b:21:38:0a:d2:79:77:c5:b5:25:a0: 82:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:9D:F1:99:12:19:8B:2C:79:A5:5C:7C:F1:B7:CB:7A:75:79:AD:51 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5b50bac4-a6a7-456c-850f-60dcde67b499/0/149DF19912198B2C79A55C7CF1B7CB7A7579AD51.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.182.80.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:20:14:13:ae:8f:14:28:18:ef:ec:f8:af:ec:b0:0b:dd:00: b1:4c:57:bd:87:85:33:8c:51:58:62:d9:05:3e:b5:7e:1d:56: 03:7c:f2:32:42:24:c3:5c:e1:2c:c9:47:13:4b:4f:99:b5:9e: 73:cd:75:4f:c4:d3:30:98:7e:5f:b7:71:02:61:85:fc:d8:1a: 80:75:b8:4d:ef:85:07:7d:9f:67:5e:11:71:d7:f3:e1:78:c2: 64:6b:25:7f:68:b6:6a:7f:d8:09:65:53:c6:00:43:7f:0e:2a: 6d:12:14:1e:cf:25:87:99:80:b0:b1:61:0f:e1:d7:1f:6a:2a: 50:39:4c:de:9a:c1:8e:d2:13:0a:eb:01:89:73:fc:51:08:73: dc:82:34:cc:27:38:97:71:7a:31:b9:98:98:a9:c4:b8:86:a3: 54:46:e3:8b:32:82:61:93:a1:47:4f:e8:16:c6:2f:30:d6:b2: 9f:c5:6f:18:23:52:1e:27:ef:4e:e2:3d:a9:d6:4d:da:d4:63: a9:04:83:51:0c:fa:7a:92:5a:c4:f2:8c:d8:5e:ba:67:34:8a: 77:01:11:dd:10:f4:64:c2:85:0a:46:bc:3a:5e:45:58:c9:0a: f3:e3:27:96:19:52:ca:f3:f5:e3:bf:e0:0b:97:62:04:e7:59: fb:21:c1:1d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdnJcSeNmj4KOS4VhrXBdUenSfecwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgwOTAzNDQzMFoX DTI2MDgwODAzNDkzMFowMzExMC8GA1UEAxMoMTQ5REYxOTkxMjE5OEIyQzc5QTU1 QzdDRjFCN0NCN0E3NTc5QUQ1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMd5zdYs66anwlCb3oQnaX8GFZE5Z6+axe4RM6A26ItZSZvVpZunXN+2z6Nf k7Q/DAH2snvalC3c8meffmyOTtUWupeQfr2xyP/XA5AyvdQ0v9xkh5+1Uys2lXbO SJkEQHh4Y3fx9NnJ/oOnwbNkDDIiEVzgxusz5fUthZeR9kqiqyOrfKlOJHFBKMve 3vaz8x0Iudfuu0WHZmahW3xYuwOfYfGj1doIYOqnUelrFUfoHFHBVJeqpnCXEDd7 nq41k35oFfyjvbtRUlHgVvPtXS+yVGBJxR2fBaxxuMfWK/2IgEvyiO2KtZHrkizI hOZy2wogmmshOArSeXfFtSWggtcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBSd8ZkSGYsseaVcfPG3y3p1ea1RMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81YjUwYmFjNC1hNmE3LTQ1NmMtODUwZi02MGRjZGU2N2I0OTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViNTBiYWM0 LWE2YTctNDU2Yy04NTBmLTYwZGNkZTY3YjQ5OS8wLzE0OURGMTk5MTIxOThCMkM3 OUE1NUM3Q0YxQjdDQjdBNzU3OUFENTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFntlAwDQYJKoZIhvcNAQELBQADggEBAA8gFBOujxQoGO/s+K/ssAvdALFMV72H hTOMUVhi2QU+tX4dVgN88jJCJMNc4SzJRxNLT5m1nnPNdU/E0zCYfl+3cQJhhfzY GoB1uE3vhQd9n2deEXHX8+F4wmRrJX9otmp/2AllU8YAQ38OKm0SFB7PJYeZgLCx YQ/h1x9qKlA5TN6awY7SEwrrAYlz/FEIc9yCNMwnOJdxejG5mJipxLiGo1RG44sy gmGToUdP6BbGLzDWsp/FbxgjUh4n707iPanWTdrUY6kEg1EM+nqSWsTyjNheumc0 incBEd0Q9GTChQpGvDpeRVjJCvPjJ5YZUsrz9eO/4AuXYgTnWfshwR0= -----END CERTIFICATE-----Generated at Sat Aug 23 07:14:58 2025 by rpki-client