$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer (raw, json) Hash identifier: dsNJDxxk2xGCTLBCUS3cMTEu9uMS0HiAUrwmxyIJEuM= Subject key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 71AA9E6042CF383FC5C167ECD0569F31AD291D68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft caRepository: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 12 Sep 2025 23:01:34 +0000 Certificate not after: Fri 11 Sep 2026 23:06:34 +0000 Subordinate resources: IP: 103.42.242.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:aa:9e:60:42:cf:38:3f:c5:c1:67:ec:d0:56:9f:31:ad:29:1d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 12 23:01:34 2025 GMT Not After : Sep 11 23:06:34 2026 GMT Subject: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:44:30:30:de:28:64:81:ad:80:cc:5c:7f:5b: 47:a1:33:5a:d4:98:d9:b0:fb:09:b0:a8:d8:5c:41: 75:f7:14:c8:3e:b9:9b:8d:8c:cb:8a:9e:3a:68:5f: 43:0a:aa:bb:ca:91:d2:1c:4f:56:50:91:b2:db:d9: 80:19:c6:45:af:b1:0d:36:68:a2:80:80:3a:bd:83: 91:9c:49:79:00:9b:9a:76:7e:f8:25:69:5b:bd:6b: 08:bb:f5:69:32:0c:69:b8:e8:e7:37:78:13:7d:f0: bb:d8:0e:cc:2f:d4:21:af:b0:e3:5a:7d:ad:0e:c5: 6c:67:a2:cd:b9:10:4d:24:e9:de:77:72:88:3a:ec: 4d:de:e6:f2:fa:d8:77:21:fd:5e:e5:fb:d7:2e:11: d8:0f:01:05:58:70:fe:33:c2:1c:06:fd:32:a1:96: 37:ef:20:8c:64:7d:f7:5c:c9:57:ee:4f:80:e1:1d: b5:62:55:c6:ab:94:59:7a:a5:99:0b:22:ad:78:6a: 91:fc:ae:b4:91:b4:2e:d4:22:b5:20:81:d5:2f:e5: bc:de:97:f4:01:eb:57:cf:c8:6b:2b:67:2d:b2:cf: 90:b5:5e:19:16:72:f8:a8:d1:f4:cf:b8:30:a0:e4: 8e:2d:64:bb:9f:d3:42:c8:49:42:da:a7:1a:95:e7: 6a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.242.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:65:bf:e0:2f:f0:9a:72:a1:ba:63:1f:16:28:c7:17:be:e0: d1:5b:48:f3:10:20:5c:d3:63:8a:01:92:aa:3a:5e:e9:8a:5f: 68:75:82:33:a5:f7:b3:8b:24:f4:26:67:8d:ce:b3:1b:e4:62: fe:2c:1f:08:12:78:6c:b1:3d:9f:b9:e7:86:e7:da:54:91:48: 9e:3d:f3:ac:c6:9c:0b:0e:d0:3b:6d:d6:e9:4e:3f:84:00:fe: c3:46:d1:d3:18:d0:d8:17:05:6f:c5:cd:15:46:ec:bb:34:a4: 0b:37:21:99:f3:c7:1b:3e:5e:f4:f6:d8:a1:3d:d2:45:0f:f7: 17:c3:27:48:78:0e:89:a8:f5:21:45:bd:74:ba:9b:c0:69:87: e6:42:9d:4b:59:68:b9:2f:e6:ee:6b:9f:17:b9:77:5b:0e:f0: c2:84:ac:44:a4:59:c7:34:4e:a8:91:e7:12:1c:ec:93:31:35: f3:5f:d4:c1:f2:a5:f2:b6:3a:78:51:f2:d4:0e:05:49:1a:08: 72:b2:a6:3f:b9:27:da:cc:34:a9:ee:3a:79:f6:08:14:85:82: 07:14:d9:24:ab:5b:12:37:e3:36:44:e3:1f:4c:50:67:fd:87: 84:e1:5e:50:c4:9c:1e:a4:55:d7:36:4b:dd:07:44:c3:9a:b5: 57:ce:72:5f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcaqeYELPOD/FwWfs0FafMa0pHWgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxMjIzMDEzNFoX DTI2MDkxMTIzMDYzNFowMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlD QTlGREQzMkE2NDNDODhFMDVCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNEMDDeKGSBrYDMXH9bR6EzWtSY2bD7CbCo2FxBdfcUyD65m42My4qeOmhf Qwqqu8qR0hxPVlCRstvZgBnGRa+xDTZoooCAOr2DkZxJeQCbmnZ++CVpW71rCLv1 aTIMabjo5zd4E33wu9gOzC/UIa+w41p9rQ7FbGeizbkQTSTp3ndyiDrsTd7m8vrY dyH9XuX71y4R2A8BBVhw/jPCHAb9MqGWN+8gjGR991zJV+5PgOEdtWJVxquUWXql mQsirXhqkfyutJG0LtQitSCB1S/lvN6X9AHrV8/IaytnLbLPkLVeGRZy+KjR9M+4 MKDkji1ku5/TQshJQtqnGpXnaqUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC6LrH6BkR8IoYnKn90ypkPIjgW3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyODYyNmUw LTI5ZmUtNGU4Ni04NGQ2LTY4NDc4YzVjZDllZC8wLzJFOEJBQzdFODE5MTFGMDhB MTg5Q0E5RkREMzJBNjQzQzg4RTA1QjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnKvIwDQYJKoZIhvcNAQELBQADggEBAF1lv+Av8JpyobpjHxYoxxe+4NFbSPMQ IFzTY4oBkqo6XumKX2h1gjOl97OLJPQmZ43OsxvkYv4sHwgSeGyxPZ+554bn2lSR SJ4986zGnAsO0Dtt1ulOP4QA/sNG0dMY0NgXBW/FzRVG7Ls0pAs3IZnzxxs+XvT2 2KE90kUP9xfDJ0h4Domo9SFFvXS6m8Bph+ZCnUtZaLkv5u5rnxe5d1sO8MKErESk Wcc0TqiR5xIc7JMxNfNf1MHypfK2OnhR8tQOBUkaCHKypj+5J9rMNKnuOnn2CBSF ggcU2SSrWxI34zZE4x9MUGf9h4ThXlDEnB6kVdc2S90HRMOatVfOcl8= -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:27 2025 by rpki-client