$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer File: 3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.cer (raw, json) Hash identifier: bnt2us55fQuhia6as0g54BmmODGRKPBcR/rbOQeXEAQ= Subject key identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 763DC26763CE17457D772132D9D814068D7FD9CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft caRepository: rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 30 Sep 2025 17:17:59 +0000 Certificate not after: Tue 29 Sep 2026 17:22:59 +0000 Subordinate resources: IP: 36.50.44.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:3d:c2:67:63:ce:17:45:7d:77:21:32:d9:d8:14:06:8d:7f:d9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 30 17:17:59 2025 GMT Not After : Sep 29 17:22:59 2026 GMT Subject: CN=3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:10:5a:12:1c:60:38:18:dd:07:a8:b4:de:f9: ca:7b:8d:e7:1e:d3:85:c2:fc:b9:d7:34:fd:c2:3c: db:f0:cc:cc:c7:a0:45:4d:a7:f0:dc:e3:f9:06:ee: fa:e0:be:31:e9:7c:36:06:26:d9:cd:f0:cf:48:2e: 67:fa:8e:2e:96:80:30:58:51:3c:ee:99:64:db:15: 72:c7:bb:3c:ad:a3:7e:12:09:dc:c7:34:a1:ed:86: ac:f7:bb:c1:92:6b:21:b4:76:77:40:8a:ee:4b:19: 1a:81:3c:d6:7e:8c:39:8b:e5:49:83:b1:11:3e:03: 13:b4:ce:da:d3:28:eb:c3:a7:ec:31:b2:79:61:b9: 5e:a7:e7:55:cc:16:22:56:fe:3b:fb:06:65:32:a1: 21:f7:a7:86:df:9d:44:a5:da:b4:0d:57:e9:ac:4e: 64:01:3f:d7:d0:dd:67:f8:cf:c4:1b:00:b3:e8:5a: 04:b3:d1:d2:6d:55:a4:5a:d6:b7:8c:ec:94:91:2c: 4d:58:f7:25:d2:04:0f:fa:99:4c:9c:64:b2:87:2c: ea:c8:7f:27:bd:1b:fc:66:4c:41:3e:d9:28:a9:59: 70:5f:af:24:94:fa:a6:b0:9f:9a:b2:ed:e0:bc:9d: 34:a3:40:a4:da:80:97:dc:60:2d:b6:c0:92:57:30: d8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:EC:A6:A5:D2:B1:38:F5:E0:5C:E8:15:D6:A9:D9:05:E9:E0:7B:F4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/248ec5eb-0354-4d87-b2be-08ffad4aa06a/0/3CECA6A5D2B138F5E05CE815D6A9D905E9E07BF4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.44.0/23 Signature Algorithm: sha256WithRSAEncryption 73:19:ad:d4:1a:e1:19:f5:a8:ec:bb:ae:ec:5f:96:21:18:89: 3f:be:ef:37:ea:5c:ea:eb:52:c2:83:0c:ae:86:93:b0:69:26: 9d:bd:2d:2f:1b:57:37:b5:36:99:5c:bb:98:87:24:cc:20:96: e5:43:78:74:fc:c3:7e:d7:16:3d:c1:67:b2:dd:8d:48:07:25: 3f:b1:07:fc:84:bc:ca:d8:50:62:b9:cc:11:bc:70:e8:26:ad: d2:b9:e8:b3:77:0d:97:38:ab:6a:8c:b1:48:09:05:38:5c:76: 98:89:0c:1f:0d:c2:e7:b0:47:9c:dd:55:43:1f:f5:9e:89:0b: d4:ef:f6:3f:c8:9a:85:59:d1:5a:b8:27:ec:17:16:8d:ce:ec: 49:63:c8:ef:60:f1:80:70:35:2d:1a:a2:b2:b6:43:8f:41:6b: 08:4f:bd:7f:58:74:c2:d2:01:2b:9b:9f:2e:07:80:be:e6:23: 9f:04:69:79:5a:b2:6f:51:23:a2:4d:71:37:f4:bc:78:c8:41: 91:75:28:c0:dc:a2:64:ef:c5:37:4e:9c:64:7c:f4:8e:41:50: 79:ce:89:49:b4:d8:d5:c2:ea:b4:ad:a0:ab:31:7d:a4:3e:cf: c6:b8:46:dc:0a:f5:f8:09:d4:cb:bb:0d:5c:56:15:89:84:2e: 0b:c7:f2:f0 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdj3CZ2POF0V9dyEy2dgUBo1/2cowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkzMDE3MTc1OVoX DTI2MDkyOTE3MjI1OVowMzExMC8GA1UEAxMoM0NFQ0E2QTVEMkIxMzhGNUUwNUNF ODE1RDZBOUQ5MDVFOUUwN0JGNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOsQWhIcYDgY3QeotN75ynuN5x7ThcL8udc0/cI82/DMzMegRU2n8Nzj+Qbu +uC+Mel8NgYm2c3wz0guZ/qOLpaAMFhRPO6ZZNsVcse7PK2jfhIJ3Mc0oe2GrPe7 wZJrIbR2d0CK7ksZGoE81n6MOYvlSYOxET4DE7TO2tMo68On7DGyeWG5XqfnVcwW Ilb+O/sGZTKhIfenht+dRKXatA1X6axOZAE/19DdZ/jPxBsAs+haBLPR0m1VpFrW t4zslJEsTVj3JdIED/qZTJxksocs6sh/J70b/GZMQT7ZKKlZcF+vJJT6prCfmrLt 4LydNKNApNqAl9xgLbbAklcw2AECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDzspqXSsTj14FzoFdap2QXp4Hv0MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNDhlYzVlYi0wMzU0LTRkODctYjJiZS0wOGZmYWQ0YWEwNmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0OGVjNWVi LTAzNTQtNGQ4Ny1iMmJlLTA4ZmZhZDRhYTA2YS8wLzNDRUNBNkE1RDJCMTM4RjVF MDVDRTgxNUQ2QTlEOTA1RTlFMDdCRjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAEkMiwwDQYJKoZIhvcNAQELBQADggEBAHMZrdQa4Rn1qOy7ruxfliEYiT++7zfq XOrrUsKDDK6Gk7BpJp29LS8bVze1Nplcu5iHJMwgluVDeHT8w37XFj3BZ7LdjUgH JT+xB/yEvMrYUGK5zBG8cOgmrdK56LN3DZc4q2qMsUgJBThcdpiJDB8NwuewR5zd VUMf9Z6JC9Tv9j/ImoVZ0Vq4J+wXFo3O7EljyO9g8YBwNS0aorK2Q49BawhPvX9Y dMLSASubny4HgL7mI58EaXlasm9RI6JNcTf0vHjIQZF1KMDcomTvxTdOnGR89I5B UHnOiUm02NXC6rStoKsxfaQ+z8a4RtwK9fgJ1Mu7DVxWFYmELgvH8vA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:03:27 2025 by rpki-client