$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer File: 473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer (raw, json) Hash identifier: DGlGTIrH7yGA1Z93yZOQANJF5ew3q6/5pbBJ+NZaanc= Subject key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0FA7B8F91BC0C02F55F399A381CBB81E797CE1E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft caRepository: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 18 Aug 2025 22:51:38 +0000 Certificate not after: Mon 17 Aug 2026 22:56:38 +0000 Subordinate resources: IP: 103.136.162.0/23 IP: 2404:97c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 17:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a7:b8:f9:1b:c0:c0:2f:55:f3:99:a3:81:cb:b8:1e:79:7c:e1:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 18 22:51:38 2025 GMT Not After : Aug 17 22:56:38 2026 GMT Subject: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:27:15:8b:2f:bc:3b:bd:93:83:a7:01:74: 33:2b:21:c5:9c:d4:e1:3f:e8:94:9e:ca:27:0e:c4: e6:2a:57:bd:f6:cc:c2:ee:3f:4b:34:f5:a3:80:90: 0b:fd:1d:ce:ee:2e:ae:2c:41:e9:22:27:12:9b:db: 82:ee:a0:e8:17:52:01:4d:20:34:34:54:95:c3:5a: 1b:54:97:04:8c:7d:f3:06:ab:48:e7:e7:75:0b:27: 6a:88:3e:ad:de:d3:0f:7b:9d:a6:9a:a1:a2:e4:d0: 79:c8:68:c1:a7:b8:1f:c2:33:1a:e2:76:be:d2:03: 06:a6:62:b2:2a:49:44:1e:8d:3e:54:09:2e:aa:98: fd:b9:14:ca:4b:82:32:16:15:e1:2b:a9:e6:5c:a7: c4:86:1b:df:fb:f6:3e:f1:a6:21:b0:1b:2d:3e:42: 92:6e:5a:20:7d:f3:5a:bd:ca:e4:46:fe:5e:99:19: b4:df:3b:42:71:6d:dd:56:15:b3:81:01:32:5a:eb: 90:af:e9:45:3d:b2:b2:db:66:87:6e:06:35:fa:3a: 03:c5:90:84:a8:44:5f:fc:7a:1d:1d:e8:c9:21:ed: af:60:0d:12:62:79:69:36:d0:42:ae:04:5e:38:1e: 08:d9:74:3c:0c:65:09:68:68:b7:4f:61:66:89:6c: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.136.162.0/23 IPv6: 2404:97c0::/32 Signature Algorithm: sha256WithRSAEncryption 33:02:55:8d:9d:19:94:ab:c5:68:a1:02:29:e1:a6:fb:4b:a6: b6:33:37:09:7a:0b:a3:e5:80:fe:cb:c9:c2:24:85:f3:78:2b: 1a:a5:85:64:26:7c:a7:a3:bd:63:2c:a5:20:f9:5b:47:98:3e: 0a:dd:5d:d9:a2:e6:26:c0:c8:d6:b3:6f:78:fc:a6:14:1c:ec: 35:79:e1:0b:7b:cc:cb:9b:b6:35:38:22:10:11:ab:2f:be:9e: 34:ed:8a:c1:41:b2:47:95:c6:4c:16:12:14:db:db:f4:86:32: 6a:4a:28:7b:9e:46:2a:fe:37:51:27:ba:b9:54:57:5d:42:22: 97:3f:b4:0f:5c:23:63:2b:d2:a4:0d:69:6d:dd:13:0c:45:df: f3:5c:26:ee:f0:0c:0f:db:82:3c:c6:67:b7:a2:f8:a7:d3:67: a7:6f:e8:a5:7e:8e:26:36:05:a0:41:10:c9:51:54:08:e5:81: 04:69:fa:7c:69:97:db:ef:1d:90:96:26:5f:c0:81:74:e6:a2: bd:22:86:45:70:7f:58:60:81:61:10:82:a8:19:1b:15:c3:2d: 2e:d0:c1:e2:40:4f:0f:56:69:62:05:f2:42:9e:02:7d:50:f4: 16:32:99:9c:5a:be:84:42:f9:21:c4:6e:b3:ba:f8:60:ad:46: 07:c2:a6:b3 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUD6e4+RvAwC9V85mjgcu4Hnl84eUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxODIyNTEzOFoX DTI2MDgxNzIyNTYzOFowMzExMC8GA1UEAxMoNDczNzQ4QjhFQjM5QkVFOTZGNjQ2 MkMzQjUzQ0VBMzkyNzI5REVFRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANIHJxWLL7w7vZODpwF0MyshxZzU4T/olJ7KJw7E5ipXvfbMwu4/SzT1o4CQ C/0dzu4urixB6SInEpvbgu6g6BdSAU0gNDRUlcNaG1SXBIx98warSOfndQsnaog+ rd7TD3udppqhouTQechowae4H8IzGuJ2vtIDBqZisipJRB6NPlQJLqqY/bkUykuC MhYV4Sup5lynxIYb3/v2PvGmIbAbLT5Ckm5aIH3zWr3K5Eb+XpkZtN87QnFt3VYV s4EBMlrrkK/pRT2ysttmh24GNfo6A8WQhKhEX/x6HR3oySHtr2ANEmJ5aTbQQq4E XjgeCNl0PAxlCWhot09hZolsrhMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEc3SLjrOb7pb2Riw7U86jknKd7uMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNjU0YThjMy0zMGM4LTQ5NTctODI5MS1hMGMxZjliMTgzOWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2NTRhOGMz LTMwYzgtNDk1Ny04MjkxLWEwYzFmOWIxODM5ZS8wLzQ3Mzc0OEI4RUIzOUJFRTk2 RjY0NjJDM0I1M0NFQTM5MjcyOURFRUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFniKIwDQQCAAIwBwMFACQEl8AwDQYJKoZIhvcNAQELBQADggEBADMCVY2dGZSr xWihAinhpvtLprYzNwl6C6PlgP7LycIkhfN4KxqlhWQmfKejvWMspSD5W0eYPgrd Xdmi5ibAyNazb3j8phQc7DV54Qt7zMubtjU4IhARqy++njTtisFBskeVxkwWEhTb 2/SGMmpKKHueRir+N1EnurlUV11CIpc/tA9cI2Mr0qQNaW3dEwxF3/NcJu7wDA/b gjzGZ7ei+KfTZ6dv6KV+jiY2BaBBEMlRVAjlgQRp+nxpl9vvHZCWJl/AgXTmor0i hkVwf1hggWEQgqgZGxXDLS7QweJATw9WaWIF8kKeAn1Q9BYymZxavoRC+SHEbrO6 +GCtRgfCprM= -----END CERTIFICATE-----Generated at Sat Aug 23 10:33:26 2025 by rpki-client