$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer File: 312D6572B0C104C0D51834C1B01CB0C593DAE8B4.cer (raw, json) Hash identifier: J2XlUQIbQEIzSUZ3iyqBsT49mfWJYeaQmJcBp7cqVMo= Subject key identifier: 31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 05C2CA6ECDDF2D5A27F2A1583794DE246C273EF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft caRepository: rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 20 Sep 2025 03:53:41 +0000 Certificate not after: Sat 19 Sep 2026 03:58:41 +0000 Subordinate resources: IP: 203.175.100.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c2:ca:6e:cd:df:2d:5a:27:f2:a1:58:37:94:de:24:6c:27:3e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 20 03:53:41 2025 GMT Not After : Sep 19 03:58:41 2026 GMT Subject: CN=312D6572B0C104C0D51834C1B01CB0C593DAE8B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1b:28:ca:0a:2d:8e:eb:6e:e2:f7:bd:33:dd: 98:ef:3a:53:32:67:65:03:bd:0a:e8:82:1d:3c:08: b4:72:f9:ab:1f:1f:ad:27:db:cb:52:48:8a:ad:bb: 12:76:d1:81:77:ac:07:6f:7f:10:b1:4b:f2:5a:a6: e0:93:64:66:df:27:9b:9e:c3:4d:ec:ff:40:a1:49: 23:cb:af:c2:0d:fc:fc:f1:2c:29:5b:aa:70:35:0f: a6:a4:5f:4f:08:9b:1a:3f:9c:7f:ab:e3:c2:21:d8: 45:9e:78:7b:ba:6d:c5:79:2a:20:2f:df:95:c1:c1: aa:8e:34:53:78:b1:b8:79:32:b4:52:31:05:30:af: 36:13:c6:de:f1:ae:b5:03:e6:e8:69:68:12:5e:c9: c2:90:07:ea:8f:ee:bc:c1:58:71:33:e7:27:fc:e8: 8a:36:19:3c:d2:83:ed:63:ef:26:72:c6:3e:95:7c: 03:75:7a:81:26:69:64:2c:a5:bd:7e:85:e3:16:85: 6b:32:20:c3:39:38:81:62:d7:71:a6:75:3b:28:6c: ba:b2:04:6b:51:af:8a:8a:aa:88:02:14:b0:c1:b5: 78:5d:ce:07:02:50:53:06:27:34:f2:e6:0b:13:26: 24:dd:71:d1:df:18:79:4b:fe:48:a7:27:b8:d3:6e: 5c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:2D:65:72:B0:C1:04:C0:D5:18:34:C1:B0:1C:B0:C5:93:DA:E8:B4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c998195f-14bb-41fd-b6ed-7a967c8e43df/0/312D6572B0C104C0D51834C1B01CB0C593DAE8B4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.175.100.0/23 Signature Algorithm: sha256WithRSAEncryption 17:f6:64:f5:4e:43:58:26:0e:c3:6e:b2:51:a9:5b:e7:37:cc: c8:1f:8e:36:76:83:9c:e0:2d:55:df:f5:5d:a7:af:59:e4:60: bc:8c:aa:66:19:90:79:52:d6:bc:2b:61:80:5d:3f:25:f0:02: b2:cf:fc:91:e3:c0:b4:4f:d7:6c:96:e3:9f:b0:da:2a:e8:10: e6:fb:84:59:b9:d1:3d:3e:ff:36:c2:d1:2b:e1:9a:44:49:b0: 1d:2b:40:66:6f:16:dc:ef:36:09:dd:33:0c:f2:df:a1:56:8d: 1d:d2:00:37:11:32:44:82:73:81:35:02:1c:b1:05:2c:e4:ab: 3e:8e:2e:f9:5d:9c:c9:b2:49:1f:84:b6:07:6b:88:ff:f4:5e: 37:cc:d4:b4:0a:07:da:be:25:c9:26:e6:ac:c3:da:4e:4b:5c: f7:d9:4d:90:f9:48:e5:6d:b8:a2:68:a5:fc:f9:1a:97:9b:a6: fe:46:74:d3:ec:fc:92:fc:99:d0:e7:d5:9d:95:b0:e5:a3:9a: c4:f5:f8:5c:b0:c1:2e:e4:a2:98:95:84:f3:e0:d9:b6:f8:fe: bb:d2:5c:8c:4f:3b:78:6e:79:ac:94:55:cc:8c:38:b2:42:e3: be:2a:86:1c:42:e3:0d:e5:b3:6e:46:4b:f4:a9:e8:3b:48:b5: fe:13:f4:79 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUBcLKbs3fLVon8qFYN5TeJGwnPvMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyMDAzNTM0MVoX DTI2MDkxOTAzNTg0MVowMzExMC8GA1UEAxMoMzEyRDY1NzJCMEMxMDRDMEQ1MTgz NEMxQjAxQ0IwQzU5M0RBRThCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsbKMoKLY7rbuL3vTPdmO86UzJnZQO9CuiCHTwItHL5qx8frSfby1JIiq27 EnbRgXesB29/ELFL8lqm4JNkZt8nm57DTez/QKFJI8uvwg38/PEsKVuqcDUPpqRf TwibGj+cf6vjwiHYRZ54e7ptxXkqIC/flcHBqo40U3ixuHkytFIxBTCvNhPG3vGu tQPm6GloEl7JwpAH6o/uvMFYcTPnJ/zoijYZPNKD7WPvJnLGPpV8A3V6gSZpZCyl vX6F4xaFazIgwzk4gWLXcaZ1OyhsurIEa1GvioqqiAIUsMG1eF3OBwJQUwYnNPLm CxMmJN1x0d8YeUv+SKcnuNNuXKUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDEtZXKwwQTA1Rg0wbAcsMWT2ui0MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jOTk4MTk1Zi0xNGJiLTQxZmQtYjZlZC03YTk2N2M4ZTQzZGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5OTgxOTVm LTE0YmItNDFmZC1iNmVkLTdhOTY3YzhlNDNkZi8wLzMxMkQ2NTcyQjBDMTA0QzBE NTE4MzRDMUIwMUNCMEM1OTNEQUU4QjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHLr2QwDQYJKoZIhvcNAQELBQADggEBABf2ZPVOQ1gmDsNuslGpW+c3zMgfjjZ2 g5zgLVXf9V2nr1nkYLyMqmYZkHlS1rwrYYBdPyXwArLP/JHjwLRP12yW45+w2iro EOb7hFm50T0+/zbC0SvhmkRJsB0rQGZvFtzvNgndMwzy36FWjR3SADcRMkSCc4E1 AhyxBSzkqz6OLvldnMmySR+EtgdriP/0XjfM1LQKB9q+Jckm5qzD2k5LXPfZTZD5 SOVtuKJopfz5Gpebpv5GdNPs/JL8mdDn1Z2VsOWjmsT1+FywwS7kopiVhPPg2bb4 /rvSXIxPO3hueayUVcyMOLJC474qhhxC4w3ls25GS/Sp6DtItf4T9Hk= -----END CERTIFICATE-----Generated at Mon Oct 20 11:35:45 2025 by rpki-client