$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer File: 401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer (raw, json) Hash identifier: RbJnZXAVFI1M54p5ENJVMCmzlYTBtYwEZOMQ6WGx9vg= Subject key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5B2CBB912B9D04C304AEBAE9DEFB0A82AF664D74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft caRepository: rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 20 Jun 2025 13:28:20 +0000 Certificate not after: Fri 19 Jun 2026 13:33:20 +0000 Subordinate resources: IP: 103.160.68.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 18:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:2c:bb:91:2b:9d:04:c3:04:ae:ba:e9:de:fb:0a:82:af:66:4d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 20 13:28:20 2025 GMT Not After : Jun 19 13:33:20 2026 GMT Subject: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:93:e2:32:46:25:43:6f:71:57:b1:a4:87: 8d:4a:5c:b6:07:a5:30:aa:20:16:f4:68:7d:73:43: 3a:45:95:d3:ed:b6:ee:41:37:46:72:d5:3a:d8:7a: 90:f7:aa:4f:4a:f3:5d:fa:d7:3d:65:e0:7a:fd:67: d6:4c:5e:e2:2e:4e:b7:90:ed:93:0a:1f:1c:fd:d3: 1c:e6:85:eb:fc:e3:77:89:c7:69:1f:c2:f4:7d:2d: a9:2d:81:21:97:bb:c6:7e:2f:83:0e:8a:54:46:37: ec:9d:46:39:d2:d6:96:9b:ab:b6:c0:f8:98:96:d2: a6:23:68:35:93:80:f9:b1:da:4e:a4:86:a4:ad:d7: 44:d7:d4:40:f6:dc:3b:d7:47:00:ba:ad:38:af:6f: 8a:50:85:ed:b6:fe:13:12:af:f4:63:c2:a3:0b:a1: dd:04:14:78:af:8c:e1:36:b8:8b:2b:56:59:1b:47: 8f:00:fa:eb:3a:bf:7a:71:45:1a:a6:48:8d:15:99: 38:dd:8c:83:5d:f8:1c:e7:2a:16:ea:a5:44:52:2b: 76:7e:02:31:88:bb:41:32:e0:3a:c4:6e:3d:c9:5b: b4:ca:8c:8f:25:2c:d6:25:d2:3b:59:6e:cf:0b:fe: 1f:74:53:30:75:39:3b:d1:33:66:52:1b:3d:1f:8b: 5a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.68.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:39:21:53:e4:93:f6:61:0a:aa:b8:8c:62:75:f0:b3:ef:1c: 72:d2:bc:cb:52:fd:f1:52:8c:97:90:f9:00:72:63:bd:92:57: 83:11:9f:90:0b:58:5b:fc:98:d2:02:7e:27:fe:97:20:8a:a8: 0f:fa:68:c2:b3:e5:1b:a2:9c:62:67:8a:99:56:f0:32:66:a8: 0e:dc:a9:87:1e:11:23:ab:89:c2:a6:7d:c2:d1:cc:c0:b2:e2: 4c:5c:bd:f0:f6:93:7c:39:07:4d:93:da:15:a0:9c:ff:ff:07: 6a:c5:12:f9:c2:4a:70:7e:e4:03:aa:ab:ec:d1:9c:e1:b8:4d: fc:69:98:1f:c6:f0:91:7e:66:df:41:45:19:6f:43:b9:73:a0: ea:0e:9e:28:1a:5f:a8:78:62:a8:ca:7e:f5:cd:dc:3f:c0:54: 26:0d:af:80:dc:83:a6:72:31:87:23:3d:14:8c:9a:a6:9a:ec: 5f:c3:6b:fc:49:41:fe:d7:92:a4:d7:9a:20:5c:1a:a7:df:00: 7f:66:1d:57:df:90:d4:df:06:ce:5e:96:76:77:a1:52:7e:ee: 16:5b:76:61:a8:26:50:f1:e1:cc:46:4c:21:93:5a:f8:d1:4e: 50:ae:3f:9f:a1:72:29:91:f1:ce:0e:15:74:79:07:ff:dd:d2: 80:ea:f5:b7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUWyy7kSudBMMErrrp3vsKgq9mTXQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYyMDEzMjgyMFoX DTI2MDYxOTEzMzMyMFowMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFB Njg0RkZDRjUzRkZGOURERTNERDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALnik+IyRiVDb3FXsaSHjUpctgelMKogFvRofXNDOkWV0+227kE3RnLVOth6 kPeqT0rzXfrXPWXgev1n1kxe4i5Ot5DtkwofHP3THOaF6/zjd4nHaR/C9H0tqS2B IZe7xn4vgw6KVEY37J1GOdLWlpurtsD4mJbSpiNoNZOA+bHaTqSGpK3XRNfUQPbc O9dHALqtOK9vilCF7bb+ExKv9GPCowuh3QQUeK+M4Ta4iytWWRtHjwD66zq/enFF GqZIjRWZON2Mg134HOcqFuqlRFIrdn4CMYi7QTLgOsRuPclbtMqMjyUs1iXSO1lu zwv+H3RTMHU5O9EzZlIbPR+LWoECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEAapWr1mcyizXGmhP/PU//53ePdMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhYzc5ZmJl LTQ3OTAtNDZiZS1iOWIyLTAzNTliMWExOGUzMy8wLzQwMUFBNTZBRjU5OUNDQTJD RDcxQTY4NEZGQ0Y1M0ZGRjlEREUzREQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnoEQwDQYJKoZIhvcNAQELBQADggEBAAo5IVPkk/ZhCqq4jGJ18LPvHHLSvMtS /fFSjJeQ+QByY72SV4MRn5ALWFv8mNICfif+lyCKqA/6aMKz5RuinGJniplW8DJm qA7cqYceESOricKmfcLRzMCy4kxcvfD2k3w5B02T2hWgnP//B2rFEvnCSnB+5AOq q+zRnOG4TfxpmB/G8JF+Zt9BRRlvQ7lzoOoOnigaX6h4YqjKfvXN3D/AVCYNr4Dc g6ZyMYcjPRSMmqaa7F/Da/xJQf7XkqTXmiBcGqffAH9mHVffkNTfBs5elnZ3oVJ+ 7hZbdmGoJlDx4cxGTCGTWvjRTlCuP5+hcimR8c4OFXR5B//d0oDq9bc= -----END CERTIFICATE-----Generated at Mon Jun 30 11:27:21 2025 by rpki-client