$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/25F283F3EEC39D541DF359689045D2073EBB3FE0.cer File: 25F283F3EEC39D541DF359689045D2073EBB3FE0.cer (raw, json) Hash identifier: 7w0hThXGWLPL8Uaw7Aiq7v8fo4SnPx6cIay2/FvZ1X4= Subject key identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 359DD42BBE2B21D2C36B3E4D4C9EF4D294F6EB59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft caRepository: rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 28 Jun 2025 06:27:50 +0000 Certificate not after: Sat 27 Jun 2026 06:32:50 +0000 Subordinate resources: IP: 103.174.122.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:9d:d4:2b:be:2b:21:d2:c3:6b:3e:4d:4c:9e:f4:d2:94:f6:eb:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 28 06:27:50 2025 GMT Not After : Jun 27 06:32:50 2026 GMT Subject: CN=25F283F3EEC39D541DF359689045D2073EBB3FE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:aa:36:c2:9d:72:5a:2c:73:a9:28:9d:da:90: b5:36:59:59:f0:1f:ce:a0:57:23:92:0e:07:17:fe: 43:63:51:7f:7e:92:93:f2:2a:e7:54:fa:fb:95:61: c5:e9:39:6f:0f:98:fc:a9:45:be:86:70:3d:b2:f5: d6:2a:d7:5f:52:70:09:a5:50:0a:49:8d:b8:1e:8d: 30:cf:1b:5d:54:7a:1d:4f:62:7b:aa:c9:63:41:fe: 4e:9c:60:b6:e6:24:f5:c6:20:f6:99:f4:ca:6f:2d: d9:eb:28:9d:3f:69:c2:ae:d8:b3:33:29:dd:47:ff: 9e:8d:66:37:7f:51:82:eb:8e:35:c6:d1:7f:5f:e9: 14:2e:38:4a:ad:a1:90:36:1a:9a:8a:22:32:30:90: c0:1a:d7:71:21:3c:1e:63:71:b2:c9:a8:66:02:08: 88:31:bf:5c:c5:c8:20:76:0b:46:b3:d0:67:f7:27: 50:af:dd:51:9b:3b:4c:ac:9e:ea:52:d1:4c:1a:2d: 8a:b5:4d:df:ec:4d:de:54:75:b1:b9:ab:c8:a9:7f: b1:a8:18:7c:46:e2:7f:a4:a7:c4:1d:52:7f:ca:50: e8:1e:1c:ea:0f:1d:12:d6:35:39:ed:b8:69:e6:ba: 73:46:57:d2:d1:31:20:d1:3f:1d:38:6e:bd:a2:36: 7c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 25:F2:83:F3:EE:C3:9D:54:1D:F3:59:68:90:45:D2:07:3E:BB:3F:E0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2273027a-096b-4e95-a656-dabe98ac6f6d/0/25F283F3EEC39D541DF359689045D2073EBB3FE0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.122.0/23 Signature Algorithm: sha256WithRSAEncryption 77:8e:83:77:37:e7:70:69:dd:46:a8:14:26:42:22:b1:2a:77: a9:b0:6d:08:0f:6e:bf:77:46:c1:c6:03:fe:ef:c4:75:cc:68: e3:48:cb:2f:91:aa:48:f6:a0:1a:6a:5d:d6:49:3e:3e:a1:0d: 0d:79:22:43:d5:b8:ab:6c:9c:60:eb:2e:df:45:d9:33:d1:67: 2c:f4:f3:57:81:24:50:61:75:8c:14:cc:cd:b0:02:5c:31:66: f0:10:de:13:b8:2a:50:4d:a1:d6:60:36:84:7f:bf:9e:ce:1f: b8:ab:91:a9:2d:64:af:ab:d3:27:26:a4:b8:b1:19:17:c1:19: ab:1f:73:12:dd:0d:5e:1d:ea:5d:b5:f9:1c:51:f2:33:6c:01: 28:61:c0:a8:5c:da:3b:37:cb:6e:a4:2a:95:dc:cc:97:e3:ae: e6:92:90:95:6d:23:2c:18:dc:c6:6b:58:86:af:6b:e5:47:8d: 46:0b:ee:07:81:cb:6a:32:5f:36:12:be:c0:99:5a:ca:a6:68: 99:00:20:e7:7e:9e:06:b8:ca:00:de:a0:d3:8e:a6:21:17:30: e1:c1:13:4a:cb:b0:ef:21:f3:5a:65:13:d3:9c:af:07:31:c0: 48:56:ce:da:e1:8a:a2:f6:7d:fb:95:90:e8:61:8d:76:8b:e5: aa:b1:15:ea -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNZ3UK74rIdLDaz5NTJ700pT261kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYyODA2Mjc1MFoX DTI2MDYyNzA2MzI1MFowMzExMC8GA1UEAxMoMjVGMjgzRjNFRUMzOUQ1NDFERjM1 OTY4OTA0NUQyMDczRUJCM0ZFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6qNsKdclosc6kondqQtTZZWfAfzqBXI5IOBxf+Q2NRf36Sk/Iq51T6+5Vh xek5bw+Y/KlFvoZwPbL11irXX1JwCaVQCkmNuB6NMM8bXVR6HU9ie6rJY0H+Tpxg tuYk9cYg9pn0ym8t2esonT9pwq7YszMp3Uf/no1mN39RguuONcbRf1/pFC44Sq2h kDYamooiMjCQwBrXcSE8HmNxssmoZgIIiDG/XMXIIHYLRrPQZ/cnUK/dUZs7TKye 6lLRTBotirVN3+xN3lR1sbmryKl/sagYfEbif6SnxB1Sf8pQ6B4c6g8dEtY1Oe24 aea6c0ZX0tExINE/HThuvaI2fAkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCXyg/Puw51UHfNZaJBF0gc+uz/gMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMjczMDI3YS0wOTZiLTRlOTUtYTY1Ni1kYWJlOThhYzZmNmQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyNzMwMjdh LTA5NmItNGU5NS1hNjU2LWRhYmU5OGFjNmY2ZC8wLzI1RjI4M0YzRUVDMzlENTQx REYzNTk2ODkwNDVEMjA3M0VCQjNGRTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrnowDQYJKoZIhvcNAQELBQADggEBAHeOg3c353Bp3UaoFCZCIrEqd6mwbQgP br93RsHGA/7vxHXMaONIyy+Rqkj2oBpqXdZJPj6hDQ15IkPVuKtsnGDrLt9F2TPR Zyz081eBJFBhdYwUzM2wAlwxZvAQ3hO4KlBNodZgNoR/v57OH7irkaktZK+r0ycm pLixGRfBGasfcxLdDV4d6l21+RxR8jNsAShhwKhc2js3y26kKpXczJfjruaSkJVt IywY3MZrWIava+VHjUYL7geBy2oyXzYSvsCZWsqmaJkAIOd+nga4ygDeoNOOpiEX MOHBE0rLsO8h81plE9OcrwcxwEhWztrhiqL2ffuVkOhhjXaL5aqxFeo= -----END CERTIFICATE-----Generated at Sun Jun 29 13:48:40 2025 by rpki-client