$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer File: 365454AF0090F9E623861AF2120855412F7447D1.cer (raw, json) Hash identifier: 6LagHLC4+KPPOCByEQUxP8YmI5iiO+uzzOPzlYxXQDM= Subject key identifier: 36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 018A5886EE5469A39F1197970DF6E4211F155FE6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft caRepository: rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 15 Aug 2025 05:28:26 +0000 Certificate not after: Fri 14 Aug 2026 05:33:26 +0000 Subordinate resources: IP: 202.180.48.0/21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8a:58:86:ee:54:69:a3:9f:11:97:97:0d:f6:e4:21:1f:15:5f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 15 05:28:26 2025 GMT Not After : Aug 14 05:33:26 2026 GMT Subject: CN=365454AF0090F9E623861AF2120855412F7447D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:da:74:e0:de:4e:43:2d:74:dd:03:0d:85: b7:fa:10:b9:f8:7d:4d:3e:27:6d:5c:dd:8f:aa:56: 74:51:a2:c4:41:a7:88:90:d5:e8:4f:22:5a:c7:dd: 27:69:3b:b9:0d:c2:df:db:8b:c5:d5:74:2c:a8:a1: 4f:9e:92:82:4e:78:cf:40:90:2c:eb:ba:f5:eb:13: c7:40:c6:29:0d:f0:ed:11:2b:70:5d:49:b8:8f:07: e1:0a:ee:96:b5:93:46:92:7d:c9:14:3f:db:7a:54: dd:97:5a:41:1a:af:e4:81:3c:6e:9d:12:0f:43:0d: 1f:ca:3f:5b:2b:1a:14:55:4f:9c:6e:83:de:35:d4: f4:1c:94:b4:65:fd:d8:e4:80:1b:ef:96:80:68:19: 47:fd:46:51:8e:ee:f5:3a:96:26:44:3e:aa:38:e0: 08:12:a3:83:2b:74:28:21:b5:9f:4a:a2:5b:35:91: 51:fc:69:0d:f5:73:fc:c7:79:d5:5a:b0:89:d5:6f: fc:cc:5c:58:e5:da:15:c5:99:a4:08:8a:d4:01:43: e3:c7:a3:7d:b5:ea:a9:ba:0e:9d:19:fd:ae:4d:37: 2c:91:df:34:01:92:61:07:e8:e2:4e:73:6e:14:96: ad:5e:0c:31:45:6d:cb:51:1b:44:64:c5:f0:c9:95: 3c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.180.48.0/21 Signature Algorithm: sha256WithRSAEncryption 2d:69:2a:c7:79:63:28:5c:2b:21:c2:53:83:81:1b:30:ad:76: eb:a4:2d:dd:24:f7:2d:c3:f7:6c:19:01:66:1e:57:8a:70:7f: ae:dc:97:69:94:2a:39:eb:bf:77:1a:99:b4:87:fa:2c:d6:a2: 28:1c:37:5a:de:33:ab:ca:7b:40:8a:9f:1d:c8:98:93:78:a3: 0f:74:2d:26:15:38:41:2b:e9:62:4f:01:0f:ce:e9:01:38:0f: 6d:2c:20:8e:92:da:82:d5:54:86:fa:8c:54:87:9d:e0:05:f6: cd:c9:a3:3e:9a:d9:f2:3c:d5:7b:d2:e9:aa:6f:b5:73:d9:e1: f2:e3:99:aa:23:d8:af:bb:67:81:d1:53:10:8e:52:82:ee:de: 84:27:ed:8d:36:64:0f:34:93:ce:03:8e:45:63:b1:ce:ea:b9: a5:5b:05:b9:2c:79:fb:9b:86:6e:1f:47:64:9b:ce:62:c4:32: 1a:a9:dd:c7:25:b1:e9:66:f3:ed:74:e0:78:5f:87:50:4d:ac: d4:74:ef:c2:1f:4e:c5:93:e2:6b:61:8c:6b:c9:36:81:26:08: de:c4:ad:72:b9:13:45:bf:ac:11:57:e9:23:06:65:f9:56:9a: 30:2c:37:95:a0:db:87:e5:e9:90:da:6e:b1:24:82:97:d3:35: 79:ce:29:6d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAYpYhu5UaaOfEZeXDfbkIR8VX+YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxNTA1MjgyNloX DTI2MDgxNDA1MzMyNlowMzExMC8GA1UEAxMoMzY1NDU0QUYwMDkwRjlFNjIzODYx QUYyMTIwODU1NDEyRjc0NDdEMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL442nTg3k5DLXTdAw2Ft/oQufh9TT4nbVzdj6pWdFGixEGniJDV6E8iWsfd J2k7uQ3C39uLxdV0LKihT56Sgk54z0CQLOu69esTx0DGKQ3w7RErcF1JuI8H4Qru lrWTRpJ9yRQ/23pU3ZdaQRqv5IE8bp0SD0MNH8o/WysaFFVPnG6D3jXU9ByUtGX9 2OSAG++WgGgZR/1GUY7u9TqWJkQ+qjjgCBKjgyt0KCG1n0qiWzWRUfxpDfVz/Md5 1VqwidVv/MxcWOXaFcWZpAiK1AFD48ejfbXqqboOnRn9rk03LJHfNAGSYQfo4k5z bhSWrV4MMUVty1EbRGTF8MmVPPUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDZUVK8AkPnmI4Ya8hIIVUEvdEfRMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81Nzk4NGUzYS00OGY5LTRjZGEtYmU2Yy00MDA2YzA4ZjhmZDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3OTg0ZTNh LTQ4ZjktNGNkYS1iZTZjLTQwMDZjMDhmOGZkMi8wLzM2NTQ1NEFGMDA5MEY5RTYy Mzg2MUFGMjEyMDg1NTQxMkY3NDQ3RDEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPKtDAwDQYJKoZIhvcNAQELBQADggEBAC1pKsd5YyhcKyHCU4OBGzCtduukLd0k 9y3D92wZAWYeV4pwf67cl2mUKjnrv3cambSH+izWoigcN1reM6vKe0CKnx3ImJN4 ow90LSYVOEEr6WJPAQ/O6QE4D20sII6S2oLVVIb6jFSHneAF9s3Joz6a2fI81XvS 6apvtXPZ4fLjmaoj2K+7Z4HRUxCOUoLu3oQn7Y02ZA80k84DjkVjsc7quaVbBbks efubhm4fR2SbzmLEMhqp3cclselm8+104Hhfh1BNrNR078IfTsWT4mthjGvJNoEm CN7ErXK5E0W/rBFX6SMGZflWmjAsN5Wg24fl6ZDabrEkgpfTNXnOKW0= -----END CERTIFICATE-----Generated at Sat Aug 23 07:16:15 2025 by rpki-client