$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer File: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer (raw, json) Hash identifier: h/cm7O3ONTrrAMTacMN2Hi9NE6+WIQNOSmaBZGiEZ4s= Subject key identifier: 49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6EF77439611C8C3B242A1F5CEA92C8D8E0483763 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft caRepository: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 14 Aug 2025 14:37:52 +0000 Certificate not after: Thu 13 Aug 2026 14:42:52 +0000 Subordinate resources: IP: 103.230.188.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 17:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:f7:74:39:61:1c:8c:3b:24:2a:1f:5c:ea:92:c8:d8:e0:48:37:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 14 14:37:52 2025 GMT Not After : Aug 13 14:42:52 2026 GMT Subject: CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:29:35:5b:ba:3a:df:11:af:17:a9:fd:c5: ac:ab:60:1d:ab:b0:38:5a:9c:69:12:b0:3c:de:b3: 89:f0:26:e8:ac:e7:8f:ce:d6:c8:90:b0:33:21:9c: cc:1f:95:70:01:e8:c4:34:41:a3:58:08:78:b4:94: ef:03:d0:cd:00:6e:6f:5d:55:a4:ce:e0:f3:a4:d1: 52:66:4e:7c:fa:c1:4a:00:ea:49:9b:9b:cf:38:4f: 86:a3:5b:a6:8a:cb:25:51:fb:95:d6:ce:a1:06:81: 12:91:09:b7:ef:da:9b:25:f1:3d:63:a3:17:58:39: 58:d0:5e:7e:ec:f1:17:50:d3:32:b7:48:8e:9b:08: 1b:12:af:84:22:8b:a0:d2:42:c9:64:b9:14:10:75: 45:1d:9c:0a:57:0e:c2:8e:b9:2e:d7:0c:57:d8:72: 97:b6:72:61:90:d8:66:0b:c3:d6:77:5c:3a:e5:f4: 36:d0:2c:b1:f0:88:5f:94:cc:da:42:49:82:91:00: e6:8c:95:1e:f5:f9:01:47:a0:6d:4b:73:1b:69:00: ab:73:e1:49:88:fb:aa:15:da:b5:23:b9:b5:2d:e8: f1:31:50:99:e1:ac:d9:9d:d8:55:e0:37:b7:e3:86: e6:68:00:b2:7c:ae:31:15:92:50:39:cf:7f:8d:2c: dc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.230.188.0/22 Signature Algorithm: sha256WithRSAEncryption 37:0f:ca:b1:90:9a:90:25:86:f3:a4:f3:6c:73:bd:4b:93:3a: 36:68:41:d2:26:51:0d:cd:6a:25:2c:e6:0e:38:bb:c0:34:54: de:65:66:0d:5a:9c:59:08:b8:be:27:86:12:cb:40:05:2b:c2: 35:ab:81:67:bd:a3:ed:cd:d5:7a:13:2f:1c:65:60:e9:8d:48: 1e:ae:73:50:c1:7c:e8:67:34:e1:72:b4:45:d9:24:eb:a0:e0: 4c:32:4a:78:a3:aa:3c:53:36:9f:84:d7:11:f5:f3:8f:97:0d: a5:67:d8:5c:2d:25:0f:f0:06:bb:eb:78:4c:ff:c2:62:75:d2: a8:9c:e6:08:42:95:80:cf:ae:76:68:7b:67:90:d3:da:84:d7: 7c:75:21:af:66:5a:d7:b4:34:92:77:c0:16:a1:b8:ca:23:e1: 79:4c:09:7d:ce:9c:f5:f5:b9:b5:74:44:f8:01:82:05:3c:b9: d4:d0:77:29:07:e2:06:bd:4a:b2:70:ec:d9:a4:dc:09:a7:bf: 9a:5d:e9:1c:d4:73:47:84:e7:40:e3:e3:3d:c0:f5:be:6d:5b: b9:5e:75:bd:16:82:6e:d1:0f:94:55:fe:2e:b6:09:1e:f2:7c: bf:b2:85:f9:b6:8e:bb:cc:0d:ed:83:82:f4:b4:04:31:22:cd: e7:c6:d5:60 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbvd0OWEcjDskKh9c6pLI2OBIN2MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxNDE0Mzc1MloX DTI2MDgxMzE0NDI1MlowMzExMC8GA1UEAxMoNDk2MEE4NDI3RkVBNTgxNEVGOUU4 MEVGMzc4NkUwQ0FBRTA2Mzc0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBpKTVbujrfEa8Xqf3FrKtgHauwOFqcaRKwPN6zifAm6Kznj87WyJCwMyGc zB+VcAHoxDRBo1gIeLSU7wPQzQBub11VpM7g86TRUmZOfPrBSgDqSZubzzhPhqNb porLJVH7ldbOoQaBEpEJt+/amyXxPWOjF1g5WNBefuzxF1DTMrdIjpsIGxKvhCKL oNJCyWS5FBB1RR2cClcOwo65LtcMV9hyl7ZyYZDYZgvD1ndcOuX0NtAssfCIX5TM 2kJJgpEA5oyVHvX5AUegbUtzG2kAq3PhSYj7qhXatSO5tS3o8TFQmeGs2Z3YVeA3 t+OG5mgAsnyuMRWSUDnPf40s3EMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFElgqEJ/6lgU756A7zeG4MquBjdFMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80MDQ1N2QyMC0wMjNhLTQ1MDktYmI0YS02MmM4NjkyOWRkOTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQwNDU3ZDIw LTAyM2EtNDUwOS1iYjRhLTYyYzg2OTI5ZGQ5Ny8wLzQ5NjBBODQyN0ZFQTU4MTRF RjlFODBFRjM3ODZFMENBQUUwNjM3NDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn5rwwDQYJKoZIhvcNAQELBQADggEBADcPyrGQmpAlhvOk82xzvUuTOjZoQdIm UQ3NaiUs5g44u8A0VN5lZg1anFkIuL4nhhLLQAUrwjWrgWe9o+3N1XoTLxxlYOmN SB6uc1DBfOhnNOFytEXZJOug4EwySnijqjxTNp+E1xH184+XDaVn2FwtJQ/wBrvr eEz/wmJ10qic5ghClYDPrnZoe2eQ09qE13x1Ia9mWte0NJJ3wBahuMoj4XlMCX3O nPX1ubV0RPgBggU8udTQdykH4ga9SrJw7Nmk3Amnv5pd6RzUc0eE50Dj4z3A9b5t W7ledb0Wgm7RD5RV/i62CR7yfL+yhfm2jrvMDe2DgvS0BDEizefG1WA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:53:18 2025 by rpki-client