$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3E788037924369AA3B8E52A5857804BE5D285FA2.cer File: 3E788037924369AA3B8E52A5857804BE5D285FA2.cer (raw, json) Hash identifier: J992+7Fonhq/NEIPdrxYxvmoI94fFut4UGlo2CamNoQ= Subject key identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 48E27DBCDF6B9E55466EFAD49997BD195C2E38E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft caRepository: rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 01 Oct 2025 22:42:31 +0000 Certificate not after: Wed 30 Sep 2026 22:47:31 +0000 Subordinate resources: IP: 103.162.54.0/24 IP: 103.179.117.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e2:7d:bc:df:6b:9e:55:46:6e:fa:d4:99:97:bd:19:5c:2e:38:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 1 22:42:31 2025 GMT Not After : Sep 30 22:47:31 2026 GMT Subject: CN=3E788037924369AA3B8E52A5857804BE5D285FA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e9:6f:03:7a:e8:6e:39:7b:34:df:12:4c:4d: aa:c9:40:67:2b:c8:6e:b8:b2:55:33:d7:1d:9b:f9: f1:99:65:11:67:b7:52:4b:d9:2e:b7:12:53:17:d2: d6:c5:69:e0:15:9a:e4:98:fe:63:0a:ab:b9:38:99: 86:63:44:3f:0e:df:dd:f5:31:f2:44:43:70:35:16: f8:81:ad:0f:19:65:f8:59:8d:7c:50:8e:72:1d:bc: 58:6e:bf:a8:5b:75:03:e2:ae:53:d5:8e:9f:c8:4d: 4c:9b:5d:19:72:2c:db:50:9a:4a:5f:21:f0:40:1d: 69:cf:99:e3:0c:54:99:15:42:ae:51:08:a0:8b:a2: dc:9a:d8:37:25:86:11:b0:60:ad:01:4a:9a:07:a4: 27:72:f6:24:61:77:63:55:8c:b5:03:81:54:8a:00: cf:9b:0a:12:9c:18:e1:8f:d0:96:d7:c3:c0:9e:3f: 2f:18:c5:ae:07:30:c5:b1:74:e4:2a:d1:49:ba:43: df:e0:b0:4a:7d:ca:d5:84:d6:78:5c:a8:0d:03:06: 5c:02:db:58:06:14:14:f2:e8:bf:14:db:17:37:cc: 49:52:fc:28:a7:ca:3c:d4:3f:e2:45:97:33:b6:2d: 3b:71:f8:b5:83:32:30:72:65:9d:d7:e9:2d:7d:c7: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3E:78:80:37:92:43:69:AA:3B:8E:52:A5:85:78:04:BE:5D:28:5F:A2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b853afdd-2e09-4773-8be4-6fd0ee90b040/0/3E788037924369AA3B8E52A5857804BE5D285FA2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.54.0/24 103.179.117.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:59:15:2f:b0:ad:67:39:d3:89:ed:e0:fd:1a:aa:d7:86:9d: f4:97:93:de:79:34:0a:98:c9:92:0f:54:a2:74:86:50:b7:75: d7:02:16:b3:d8:bb:43:04:e7:1a:47:36:df:be:f8:3a:4b:ef: 54:7d:89:b7:3d:62:9f:1e:80:42:70:42:cb:e8:4d:02:ff:ab: 78:14:d0:ce:34:fc:6e:d2:a5:7a:26:86:d6:ec:c6:b4:f6:53: b8:be:81:fb:50:2d:26:c9:4c:46:71:0f:2d:73:54:e6:97:ce: 35:b4:2b:f2:f6:35:e5:de:ce:b4:b2:6d:cb:e1:60:07:01:f3: 55:35:a1:5f:5e:b0:a3:c4:a9:bf:76:81:ce:a7:22:8c:dd:16: b1:81:30:5e:f4:92:b5:45:54:64:0c:d1:02:16:3d:8f:19:e2: 9c:28:88:30:10:68:c8:e1:59:2b:62:d9:b3:1f:69:1e:17:05: 3d:57:39:85:33:e0:48:9c:5d:ae:04:fc:45:fb:fa:c1:a8:96: bd:6e:8c:20:39:dc:c7:62:33:e2:a4:b9:d7:c5:9d:40:6f:36: d1:66:42:e9:c0:0e:ee:cf:c2:ba:a9:c5:85:e4:a8:f7:67:1a: b8:3a:dc:d3:97:30:ba:e9:e5:b6:ed:32:18:59:e4:34:a8:6c: bf:2f:52:02 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUSOJ9vN9rnlVGbvrUmZe9GVwuOOcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAwMTIyNDIzMVoX DTI2MDkzMDIyNDczMVowMzExMC8GA1UEAxMoM0U3ODgwMzc5MjQzNjlBQTNCOEU1 MkE1ODU3ODA0QkU1RDI4NUZBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALfpbwN66G45ezTfEkxNqslAZyvIbriyVTPXHZv58ZllEWe3UkvZLrcSUxfS 1sVp4BWa5Jj+YwqruTiZhmNEPw7f3fUx8kRDcDUW+IGtDxll+FmNfFCOch28WG6/ qFt1A+KuU9WOn8hNTJtdGXIs21CaSl8h8EAdac+Z4wxUmRVCrlEIoIui3JrYNyWG EbBgrQFKmgekJ3L2JGF3Y1WMtQOBVIoAz5sKEpwY4Y/QltfDwJ4/LxjFrgcwxbF0 5CrRSbpD3+CwSn3K1YTWeFyoDQMGXALbWAYUFPLovxTbFzfMSVL8KKfKPNQ/4kWX M7YtO3H4tYMyMHJlndfpLX3HZX0CAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD54gDeSQ2mqO45SpYV4BL5dKF+iMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iODUzYWZkZC0yZTA5LTQ3NzMtOGJlNC02ZmQwZWU5MGIwNDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I4NTNhZmRk LTJlMDktNDc3My04YmU0LTZmZDBlZTkwYjA0MC8wLzNFNzg4MDM3OTI0MzY5QUEz QjhFNTJBNTg1NzgwNEJFNUQyODVGQTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABnojYDBABns3UwDQYJKoZIhvcNAQELBQADggEBAF5ZFS+wrWc504nt4P0aqteG nfSXk955NAqYyZIPVKJ0hlC3ddcCFrPYu0ME5xpHNt+++DpL71R9ibc9Yp8egEJw QsvoTQL/q3gU0M40/G7SpXomhtbsxrT2U7i+gftQLSbJTEZxDy1zVOaXzjW0K/L2 NeXezrSybcvhYAcB81U1oV9esKPEqb92gc6nIozdFrGBMF70krVFVGQM0QIWPY8Z 4pwoiDAQaMjhWSti2bMfaR4XBT1XOYUz4EicXa4E/EX7+sGolr1ujCA53MdiM+Kk udfFnUBvNtFmQunADu7PwrqpxYXkqPdnGrg63NOXMLrp5bbtMhhZ5DSobL8vUgI= -----END CERTIFICATE-----Generated at Mon Oct 20 16:15:36 2025 by rpki-client