$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer File: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer (raw, json) Hash identifier: bHoVPKhx8Ce3rIWrdBb7gROU18QkUXDFoC2SiQbgXE4= Subject key identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1208E1FAA5A297436539F6ED8C446A75E6312DFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft caRepository: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 27 Jun 2025 11:43:53 +0000 Certificate not after: Fri 26 Jun 2026 11:48:53 +0000 Subordinate resources: IP: 103.20.88.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:08:e1:fa:a5:a2:97:43:65:39:f6:ed:8c:44:6a:75:e6:31:2d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 27 11:43:53 2025 GMT Not After : Jun 26 11:48:53 2026 GMT Subject: CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:09:af:83:18:f9:bb:5f:46:b0:3e:6e:5a: 21:ac:82:07:a4:a1:4a:60:6c:12:92:90:4f:d7:a1: be:ee:a6:91:6a:77:3d:4c:99:88:d6:f5:2c:33:2c: 9d:1c:99:ab:bf:ae:bd:be:b6:97:0d:8b:11:0d:e5: 7a:58:42:35:d0:2a:87:91:00:c8:9f:17:88:6a:cf: 92:e5:f1:02:54:98:36:c2:6e:1d:f2:cc:f1:f0:93: be:ba:c0:8d:25:e8:b1:8f:e3:72:fe:a9:16:ee:4d: b5:a6:e0:90:00:a9:9e:26:75:9f:4f:cf:f9:69:bd: c4:0e:0e:ac:eb:9d:91:65:fb:dc:c7:ff:4a:27:1c: 79:85:fd:00:19:17:8c:b5:60:33:07:41:79:0a:2e: b9:59:c0:a0:07:a7:c1:27:52:2a:89:28:73:c5:a5: 04:4c:04:e0:1a:13:0e:5b:0c:82:ca:9a:f6:40:92: bf:b3:74:a7:34:9e:2f:15:fc:23:33:6e:3c:cc:5c: 97:3f:13:c8:47:0e:78:bc:6a:39:f7:e8:fc:7d:b9: f9:ae:0b:8b:ca:80:16:59:43:a5:63:74:68:19:af: e0:90:85:8b:b1:ea:26:76:14:df:7a:c7:e7:30:f8: ea:8d:ca:7c:13:73:91:fa:2c:8e:e5:d3:05:0f:b9: b2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.88.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:4d:3c:3b:7f:57:4c:29:ff:cd:45:17:4c:26:76:c5:ed:64: b2:88:30:3a:b1:5c:a6:81:aa:dd:02:75:91:a7:02:6f:0e:83: c2:21:0d:f0:30:01:2b:84:44:3a:af:42:27:46:5a:05:5b:f8: 2a:1d:d9:9f:65:11:97:a9:e1:5b:d0:79:8e:22:3a:2e:87:e7: d0:26:16:ea:fe:c3:ac:02:67:90:0f:8f:36:a6:e1:a4:6e:c1: 30:e6:ae:7f:0e:9a:eb:f5:d6:ee:61:72:3f:2a:ea:81:ca:f2: ef:6f:45:80:72:ac:fd:c6:f7:c8:fc:a6:74:af:b8:30:a4:f8: e0:28:0f:9b:37:71:f1:ed:c2:ab:ee:22:99:10:2b:02:84:fa: 9e:28:66:90:b0:b1:24:44:ef:8f:86:74:3b:40:4d:d3:0b:92: 42:96:a6:e5:46:fb:4c:18:c0:cf:7f:31:3c:0b:31:65:8c:fc: 42:9a:16:4e:90:0b:19:31:4c:19:b9:6e:91:36:a7:4d:15:a1: e0:c5:65:eb:10:ac:e3:39:e0:12:e7:db:b3:ea:db:d0:b5:7e: a7:71:cf:6c:14:a4:9d:85:6d:50:e0:9c:35:e8:b2:62:4b:38: 3a:25:20:cf:40:03:5d:7c:93:cd:49:b5:ae:ba:ad:03:13:f5: 5d:5d:a4:31 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUEgjh+qWil0NlOfbtjERqdeYxLfowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYyNzExNDM1M1oX DTI2MDYyNjExNDg1M1owMzExMC8GA1UEAxMoMUE4RDVDNUM5NURBMUJBQjU5M0FB NzFEMENCNkIyMjY4NDE2MTYzMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmKCa+DGPm7X0awPm5aIayCB6ShSmBsEpKQT9ehvu6mkWp3PUyZiNb1LDMs nRyZq7+uvb62lw2LEQ3lelhCNdAqh5EAyJ8XiGrPkuXxAlSYNsJuHfLM8fCTvrrA jSXosY/jcv6pFu5NtabgkACpniZ1n0/P+Wm9xA4OrOudkWX73Mf/SicceYX9ABkX jLVgMwdBeQouuVnAoAenwSdSKokoc8WlBEwE4BoTDlsMgsqa9kCSv7N0pzSeLxX8 IzNuPMxclz8TyEcOeLxqOffo/H25+a4Li8qAFllDpWN0aBmv4JCFi7HqJnYU33rH 5zD46o3KfBNzkfosjuXTBQ+5spkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBqNXFyV2hurWTqnHQy2siaEFhYzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZmNjMWVmNi03NjlmLTRhYWYtOWQxNC0yZTViMTVhNmZmMjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmY2MxZWY2 LTc2OWYtNGFhZi05ZDE0LTJlNWIxNWE2ZmYyMy8wLzFBOEQ1QzVDOTVEQTFCQUI1 OTNBQTcxRDBDQjZCMjI2ODQxNjE2MzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnFFgwDQYJKoZIhvcNAQELBQADggEBADtNPDt/V0wp/81FF0wmdsXtZLKIMDqx XKaBqt0CdZGnAm8Og8IhDfAwASuERDqvQidGWgVb+Cod2Z9lEZep4VvQeY4iOi6H 59AmFur+w6wCZ5APjzam4aRuwTDmrn8Omuv11u5hcj8q6oHK8u9vRYByrP3G98j8 pnSvuDCk+OAoD5s3cfHtwqvuIpkQKwKE+p4oZpCwsSRE74+GdDtATdMLkkKWpuVG +0wYwM9/MTwLMWWM/EKaFk6QCxkxTBm5bpE2p00VoeDFZesQrOM54BLn27Pq29C1 fqdxz2wUpJ2FbVDgnDXosmJLODolIM9AA118k81Jta66rQMT9V1dpDE= -----END CERTIFICATE-----Generated at Sun Jun 29 12:31:14 2025 by rpki-client