$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4412C369832E86CF255C7255EB1ECA7938910246.cer File: 4412C369832E86CF255C7255EB1ECA7938910246.cer (raw, json) Hash identifier: IVQrHY07DLgJRXuSKbqmVAn7UfSQHaoR/gTldUwtNGo= Subject key identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4844673A47B702B89505A1D09C68BAB97ED1640E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft caRepository: rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 18 Aug 2025 09:21:15 +0000 Certificate not after: Mon 17 Aug 2026 09:26:15 +0000 Subordinate resources: IP: 103.158.121.0/24 IP: 2001:df5:5280::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:44:67:3a:47:b7:02:b8:95:05:a1:d0:9c:68:ba:b9:7e:d1:64:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 18 09:21:15 2025 GMT Not After : Aug 17 09:26:15 2026 GMT Subject: CN=4412C369832E86CF255C7255EB1ECA7938910246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:47:4f:1b:19:72:1f:59:ca:76:84:6e:72: 4d:87:97:10:16:83:b0:9e:d1:93:8a:d6:4d:c9:1a: ba:93:d7:4f:77:11:4a:b0:90:28:db:16:82:85:89: a4:ad:e7:f7:1b:ad:11:0f:c4:b2:73:74:3c:ed:c4: 53:3a:99:a8:1d:b1:59:f8:9a:cc:a6:34:90:01:a0: 7d:7b:0b:cb:d5:35:f3:47:e4:51:98:51:42:f5:a7: d2:68:db:1d:20:00:0d:d8:7d:b6:2d:d1:c9:1e:ec: e8:84:0c:4c:e6:5d:9b:f9:08:97:4a:9a:6c:25:9f: ee:96:6d:bc:d9:48:aa:37:e5:5f:df:fc:c3:aa:16: c6:dc:cc:bd:41:06:36:6b:01:19:e5:a9:ea:b5:39: 7c:87:17:2c:3b:b3:37:52:f2:1f:79:ff:0f:40:56: 8b:e3:71:f9:31:a4:eb:0f:f1:1b:5a:78:24:db:8c: 66:35:63:1a:14:17:81:45:21:cc:d5:bb:62:96:54: 4e:84:44:3d:e4:0f:69:3a:b5:bd:c8:97:00:67:0d: 55:99:a0:26:73:63:3b:19:5f:b0:74:42:d9:11:2f: 38:60:5b:4a:6e:6a:49:de:05:2d:ae:7c:d8:de:be: d3:12:0e:55:52:7a:e7:57:fa:a0:e8:d1:9b:4d:08: ef:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:12:C3:69:83:2E:86:CF:25:5C:72:55:EB:1E:CA:79:38:91:02:46 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/12c511be-67a2-44c9-b182-a911ba95be00/0/4412C369832E86CF255C7255EB1ECA7938910246.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.158.121.0/24 IPv6: 2001:df5:5280::/48 Signature Algorithm: sha256WithRSAEncryption 25:3f:eb:74:94:f4:33:55:19:78:13:2d:d7:d5:26:cc:41:d4: b0:b5:3b:64:51:14:32:91:fa:8f:0d:cf:1f:39:a1:c5:8e:60: f2:a6:b7:64:9d:e3:5c:07:76:7e:32:3a:19:9e:b9:88:c5:aa: 2d:2c:09:ac:ed:c7:fe:00:5c:57:7a:e6:40:27:b8:61:b4:b4: 4e:be:02:2a:5d:76:b4:ae:2d:92:d2:f6:c6:b3:a2:9f:db:bc: b6:49:5f:50:6f:95:24:7f:55:85:6c:e5:31:a1:30:43:bd:7b: 27:2b:e0:fb:dd:ae:f2:ac:54:4e:94:aa:d5:8d:1e:17:ba:dc: f6:8a:31:95:22:62:78:c2:56:3b:67:88:42:70:b2:8c:7a:06: ff:ea:ff:0a:80:c4:c1:01:ba:b2:00:08:d4:be:35:d0:0e:1b: bb:4f:0e:cf:c7:56:7c:a7:38:c2:01:d3:a3:25:11:fa:79:4a: f1:01:f3:8c:71:14:b5:47:74:08:c5:b5:b3:24:61:55:d6:dd: 6a:a8:62:9c:f4:0d:d8:84:87:01:44:3c:15:76:9f:c4:4f:03: 8d:db:e0:6e:de:e1:dd:06:1a:81:14:93:50:0a:ad:7f:f5:e0: b8:13:9c:6c:c4:df:cf:39:69:47:d1:fd:1f:92:3f:1f:85:8f: d9:66:63:da -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUSERnOke3AriVBaHQnGi6uX7RZA4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxODA5MjExNVoX DTI2MDgxNzA5MjYxNVowMzExMC8GA1UEAxMoNDQxMkMzNjk4MzJFODZDRjI1NUM3 MjU1RUIxRUNBNzkzODkxMDI0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANQSR08bGXIfWcp2hG5yTYeXEBaDsJ7Rk4rWTckaupPXT3cRSrCQKNsWgoWJ pK3n9xutEQ/EsnN0PO3EUzqZqB2xWfiazKY0kAGgfXsLy9U180fkUZhRQvWn0mjb HSAADdh9ti3RyR7s6IQMTOZdm/kIl0qabCWf7pZtvNlIqjflX9/8w6oWxtzMvUEG NmsBGeWp6rU5fIcXLDuzN1LyH3n/D0BWi+Nx+TGk6w/xG1p4JNuMZjVjGhQXgUUh zNW7YpZUToREPeQPaTq1vciXAGcNVZmgJnNjOxlfsHRC2REvOGBbSm5qSd4FLa58 2N6+0xIOVVJ651f6oOjRm00I7/cCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEQSw2mDLobPJVxyVeseynk4kQJGMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMmM1MTFiZS02N2EyLTQ0YzktYjE4Mi1hOTExYmE5NWJlMDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEyYzUxMWJl LTY3YTItNDRjOS1iMTgyLWE5MTFiYTk1YmUwMC8wLzQ0MTJDMzY5ODMyRTg2Q0Yy NTVDNzI1NUVCMUVDQTc5Mzg5MTAyNDYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnnnkwDwQCAAIwCQMHACABDfVSgDANBgkqhkiG9w0BAQsFAAOCAQEAJT/rdJT0 M1UZeBMt19UmzEHUsLU7ZFEUMpH6jw3PHzmhxY5g8qa3ZJ3jXAd2fjI6GZ65iMWq LSwJrO3H/gBcV3rmQCe4YbS0Tr4CKl12tK4tktL2xrOin9u8tklfUG+VJH9VhWzl MaEwQ717Jyvg+92u8qxUTpSq1Y0eF7rc9ooxlSJieMJWO2eIQnCyjHoG/+r/CoDE wQG6sgAI1L410A4bu08Oz8dWfKc4wgHToyUR+nlK8QHzjHEUtUd0CMW1syRhVdbd aqhinPQN2ISHAUQ8FXafxE8Djdvgbt7h3QYagRSTUAqtf/XguBOcbMTfzzlpR9H9 H5I/H4WP2WZj2g== -----END CERTIFICATE-----Generated at Sat Aug 23 08:59:07 2025 by rpki-client