$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer File: 4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer (raw, json) Hash identifier: SS0697vjnYL2TLFcQ+M/LmtobVLTvNitTg0EM/aDfuE= Subject key identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5179E7E69E56CF5BFF98E61598F4D33F2B135584 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft caRepository: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 07 Sep 2025 00:03:42 +0000 Certificate not after: Sun 06 Sep 2026 00:08:42 +0000 Subordinate resources: IP: 103.239.22.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:79:e7:e6:9e:56:cf:5b:ff:98:e6:15:98:f4:d3:3f:2b:13:55:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 7 00:03:42 2025 GMT Not After : Sep 6 00:08:42 2026 GMT Subject: CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:a4:d0:2c:b3:c1:a1:18:2d:27:db:92:87: d7:2c:df:7b:a8:ed:49:91:6f:e1:f0:9e:f5:71:bf: 0e:14:96:bf:4b:68:e5:23:cb:91:f5:4e:6d:cf:49: db:73:92:68:34:aa:e1:33:63:a0:a7:41:a9:a0:df: c1:f5:a4:24:2f:90:5d:a2:77:9e:1e:3d:f3:34:66: 9a:70:b0:91:be:f5:48:5e:80:c6:6c:aa:a4:e5:07: fe:9c:50:82:f9:2c:80:55:39:25:80:20:d9:aa:fa: be:48:49:77:8f:fa:c0:96:85:b1:03:0f:ca:0e:6e: 8b:fc:df:57:00:7e:1c:79:09:48:21:72:87:7d:76: 97:95:98:ab:53:b5:2b:47:c2:4f:1d:d4:ac:01:00: e9:51:2e:30:04:c6:73:1d:50:3e:8c:bd:b0:3e:cb: c1:a9:a1:cc:cb:00:e9:aa:7e:40:c7:78:1b:7e:55: 3c:23:5e:c5:14:f3:6d:0f:15:82:60:fb:1b:3f:b8: 08:e1:b5:fd:28:e2:34:ad:bd:29:28:c9:4e:1a:3b: af:5f:38:e2:50:b8:b2:ac:29:73:b0:6b:94:7c:68: cc:d1:9b:e7:2a:a1:c5:4a:e4:54:3f:af:ce:1f:54: 45:b1:46:22:f0:c4:e6:00:4a:0b:aa:1a:62:33:45: 5f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.22.0/23 Signature Algorithm: sha256WithRSAEncryption 19:d0:de:8a:bf:04:ab:ca:87:ed:41:5b:91:5b:1c:49:92:ba: c4:c9:ba:bf:b3:0e:98:7c:16:04:0b:dd:77:a2:77:93:5c:10: ee:52:55:42:63:2e:fa:84:e8:82:75:b8:5a:fe:6a:fe:38:c1: a6:ef:f2:e0:57:33:8a:b0:23:4e:10:54:68:80:f0:0a:0a:16: 3a:aa:d3:f1:92:3e:84:07:ba:33:f1:8d:0e:37:63:56:67:eb: 32:44:5d:e3:fb:d3:7a:1a:14:89:c1:40:38:7c:ce:d7:14:a5: 57:3e:e3:47:10:53:cd:6c:00:d5:1b:66:b8:c1:72:e5:6a:9c: 23:f4:9b:f6:07:7f:5e:09:ad:7d:ce:27:fe:da:80:d4:ed:7a: 3e:da:b2:ad:2a:38:d3:d0:d5:fb:97:6d:5a:1b:0c:dd:88:a3: 07:05:8b:bb:1a:0e:64:60:d5:2f:6d:4b:70:03:b8:2f:2c:8b: f3:5c:ac:09:8a:05:d8:27:15:70:bc:89:c5:38:e2:78:be:df: ec:0e:f7:06:f6:ce:51:de:21:72:7b:ba:12:c7:a1:e4:65:9a: 01:98:c9:38:0c:45:1c:1e:2c:b1:21:bc:b9:b9:9e:a8:49:61: 2b:35:6a:dd:f5:4d:43:04:c6:04:72:ef:34:40:be:19:3d:07: c3:9b:53:0b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUXnn5p5Wz1v/mOYVmPTTPysTVYQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkwNzAwMDM0MloX DTI2MDkwNjAwMDg0MlowMzExMC8GA1UEAxMoNEUwNTRFMDY0RENERjJFNDlGNzI4 MkQ3MzcwQjlFQUZGNDJBOTQ0QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANWtpNAss8GhGC0n25KH1yzfe6jtSZFv4fCe9XG/DhSWv0to5SPLkfVObc9J 23OSaDSq4TNjoKdBqaDfwfWkJC+QXaJ3nh498zRmmnCwkb71SF6AxmyqpOUH/pxQ gvksgFU5JYAg2ar6vkhJd4/6wJaFsQMPyg5ui/zfVwB+HHkJSCFyh312l5WYq1O1 K0fCTx3UrAEA6VEuMATGcx1QPoy9sD7LwamhzMsA6ap+QMd4G35VPCNexRTzbQ8V gmD7Gz+4COG1/SjiNK29KSjJTho7r1844lC4sqwpc7BrlHxozNGb5yqhxUrkVD+v zh9URbFGIvDE5gBKC6oaYjNFX4cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE4FTgZNzfLkn3KC1zcLnq/0KpRLMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMzk4MDYzZS01N2ExLTQwZjItODUyNy00ZDBhNjljNWQ2NDcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzOTgwNjNl LTU3YTEtNDBmMi04NTI3LTRkMGE2OWM1ZDY0Ny8wLzRFMDU0RTA2NERDREYyRTQ5 RjcyODJENzM3MEI5RUFGRjQyQTk0NEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn7xYwDQYJKoZIhvcNAQELBQADggEBABnQ3oq/BKvKh+1BW5FbHEmSusTJur+z Dph8FgQL3Xeid5NcEO5SVUJjLvqE6IJ1uFr+av44wabv8uBXM4qwI04QVGiA8AoK Fjqq0/GSPoQHujPxjQ43Y1Zn6zJEXeP703oaFInBQDh8ztcUpVc+40cQU81sANUb ZrjBcuVqnCP0m/YHf14JrX3OJ/7agNTtej7asq0qONPQ1fuXbVobDN2IowcFi7sa DmRg1S9tS3ADuC8si/NcrAmKBdgnFXC8icU44ni+3+wO9wb2zlHeIXJ7uhLHoeRl mgGYyTgMRRweLLEhvLm5nqhJYSs1at31TUMExgRy7zRAvhk9B8ObUws= -----END CERTIFICATE-----Generated at Mon Oct 20 04:45:19 2025 by rpki-client