$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/215123CDB8D789B3519CFF4175FFDD832853F5BE.cer File: 215123CDB8D789B3519CFF4175FFDD832853F5BE.cer (raw, json) Hash identifier: 1zptbG4W40qvAecQHet12ve59LP3nDBZai1wMW28vjY= Subject key identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3AE1475F083A6A1E93D641CDEFA66610790A177F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft caRepository: rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 17 Oct 2025 18:51:06 +0000 Certificate not after: Fri 16 Oct 2026 18:56:06 +0000 Subordinate resources: IP: 103.245.226.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e1:47:5f:08:3a:6a:1e:93:d6:41:cd:ef:a6:66:10:79:0a:17:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 17 18:51:06 2025 GMT Not After : Oct 16 18:56:06 2026 GMT Subject: CN=215123CDB8D789B3519CFF4175FFDD832853F5BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f0:25:79:8f:a1:29:89:08:0d:d6:79:93:96: 13:87:7b:41:da:86:cf:1b:d3:6d:84:02:a5:e2:84: 90:25:0e:f9:84:99:2d:ad:c1:a8:1f:0d:06:a2:8b: 69:f8:f1:13:1e:b4:7d:d2:87:ab:31:0f:08:d7:22: b0:25:96:3a:aa:9b:00:da:a2:42:2e:f9:f7:9a:90: 3f:f2:d6:35:3e:de:d5:59:47:56:77:8c:8d:a6:4a: c7:f0:03:38:fe:46:a4:16:a7:5a:e4:63:2b:11:3f: fd:7e:a6:b8:9a:d9:b8:f2:58:39:6a:97:5b:54:57: 48:2b:73:6b:bf:c6:ce:84:dd:13:d4:3c:fe:eb:5f: 47:59:19:32:b1:98:28:6f:88:41:7b:0c:64:6e:f6: 25:3d:a2:46:a9:ff:d3:b1:06:0e:6c:7e:e5:bf:b2: d0:15:bc:d0:10:ca:d8:22:f3:5a:9e:89:06:9e:71: 4b:a3:42:3e:84:f2:5b:ec:29:fd:06:5d:21:ce:fc: d8:eb:96:ed:a0:0d:ca:38:90:d0:20:d6:fa:e2:06: 59:14:5e:05:6b:5a:66:48:40:cf:5a:3c:1c:8a:20: d4:ca:d9:d9:bf:75:b0:f9:a4:95:84:a4:28:ac:3a: 40:7e:cb:48:19:79:de:04:bf:8c:aa:ba:24:c7:ad: b1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:51:23:CD:B8:D7:89:B3:51:9C:FF:41:75:FF:DD:83:28:53:F5:BE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3fcd2a42-92b9-40a4-a0bf-09b65a318b5e/0/215123CDB8D789B3519CFF4175FFDD832853F5BE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.226.0/24 Signature Algorithm: sha256WithRSAEncryption 68:80:f8:e0:d2:4f:f2:e2:58:a9:00:0f:94:a5:eb:dd:e0:35: 0d:32:f1:fe:7e:e0:97:66:72:18:74:db:f4:0d:ef:44:ce:de: 07:fb:d1:35:02:96:36:6c:18:92:8b:43:16:12:3d:a4:b3:f5: 8f:0b:a8:b0:0d:32:e7:9e:9b:87:3e:13:bf:d8:1c:ea:7f:6b: 42:3a:7b:ca:5b:ea:0c:0c:85:72:40:35:0f:be:d4:3a:93:44: 9f:c5:27:b5:35:ed:2b:89:23:7b:3f:d1:78:26:cd:53:3c:f8: b0:2a:9c:dd:10:cb:a6:83:36:7c:9f:ef:45:dd:92:36:7c:f1: 26:b6:09:d1:0c:94:7f:21:52:a8:84:94:16:2e:e2:19:84:90: 4e:d2:33:a9:a4:fd:de:92:ef:ff:f5:13:b9:7b:8b:69:ef:0b: 65:a1:83:95:0c:c7:9f:01:24:4f:a9:16:43:f2:3d:53:f4:d8: 42:04:70:39:4f:a1:57:43:28:e3:ab:9a:20:b3:a5:c2:7d:1c: c2:e9:f5:cf:55:34:b6:1d:1b:af:96:63:83:51:34:ce:ce:cf: bd:60:f4:d8:3b:47:9e:c4:7d:a6:a6:6f:59:69:fe:3d:ca:23: 2c:e2:70:a5:c7:18:09:6e:91:ca:bd:f4:20:d2:2a:df:51:7c: cc:50:7a:ff -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOuFHXwg6ah6T1kHN76ZmEHkKF38wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAxNzE4NTEwNloX DTI2MTAxNjE4NTYwNlowMzExMC8GA1UEAxMoMjE1MTIzQ0RCOEQ3ODlCMzUxOUNG RjQxNzVGRkREODMyODUzRjVCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKHwJXmPoSmJCA3WeZOWE4d7QdqGzxvTbYQCpeKEkCUO+YSZLa3BqB8NBqKL afjxEx60fdKHqzEPCNcisCWWOqqbANqiQi7595qQP/LWNT7e1VlHVneMjaZKx/AD OP5GpBanWuRjKxE//X6muJrZuPJYOWqXW1RXSCtza7/GzoTdE9Q8/utfR1kZMrGY KG+IQXsMZG72JT2iRqn/07EGDmx+5b+y0BW80BDK2CLzWp6JBp5xS6NCPoTyW+wp /QZdIc782OuW7aANyjiQ0CDW+uIGWRReBWtaZkhAz1o8HIog1MrZ2b91sPmklYSk KKw6QH7LSBl53gS/jKq6JMetsdMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCFRI82414mzUZz/QXX/3YMoU/W+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZmNkMmE0Mi05MmI5LTQwYTQtYTBiZi0wOWI2NWEzMThiNWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNmY2QyYTQy LTkyYjktNDBhNC1hMGJmLTA5YjY1YTMxOGI1ZS8wLzIxNTEyM0NEQjhENzg5QjM1 MTlDRkY0MTc1RkZERDgzMjg1M0Y1QkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn9eIwDQYJKoZIhvcNAQELBQADggEBAGiA+ODST/LiWKkAD5Sl693gNQ0y8f5+ 4Jdmchh02/QN70TO3gf70TUCljZsGJKLQxYSPaSz9Y8LqLANMueem4c+E7/YHOp/ a0I6e8pb6gwMhXJANQ++1DqTRJ/FJ7U17SuJI3s/0XgmzVM8+LAqnN0Qy6aDNnyf 70XdkjZ88Sa2CdEMlH8hUqiElBYu4hmEkE7SM6mk/d6S7//1E7l7i2nvC2Whg5UM x58BJE+pFkPyPVP02EIEcDlPoVdDKOOrmiCzpcJ9HMLp9c9VNLYdG6+WY4NRNM7O z71g9Ng7R57Efaamb1lp/j3KIyzicKXHGAlukcq99CDSKt9RfMxQev8= -----END CERTIFICATE-----Generated at Mon Oct 20 03:35:12 2025 by rpki-client