$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5058CBC5AF21280546887DEF6CFA4341A8F99150.cer File: 5058CBC5AF21280546887DEF6CFA4341A8F99150.cer (raw, json) Hash identifier: 0B4g92pGHI9UyRoeVcmBr3THs6+ccAHQD0LzfNCLja4= Subject key identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3308984D8EDCFAD63678F384B2351A15B79BF6CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft caRepository: rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 19 Aug 2025 10:04:13 +0000 Certificate not after: Tue 18 Aug 2026 10:09:13 +0000 Subordinate resources: IP: 103.3.212.0/22 IP: 150.129.188.0/22 IP: 202.152.192.0/20 IP: 2407:f200::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:08:98:4d:8e:dc:fa:d6:36:78:f3:84:b2:35:1a:15:b7:9b:f6:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 19 10:04:13 2025 GMT Not After : Aug 18 10:09:13 2026 GMT Subject: CN=5058CBC5AF21280546887DEF6CFA4341A8F99150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:88:76:95:66:8a:df:94:60:b0:fb:fa:75: c9:50:a5:50:24:e6:47:e5:17:3a:36:a2:7c:05:84: 8b:36:a2:b5:c3:14:db:45:3d:d6:e4:69:7f:01:34: f5:7a:4c:d9:c1:d9:ea:94:34:12:36:c7:bc:78:45: 2e:88:27:5d:a2:ad:87:96:03:37:a3:27:e6:81:d2: 10:39:4c:ec:57:64:a5:e1:41:f9:0b:d7:02:7a:2e: 6b:bb:55:c1:28:c8:8e:2c:0f:c4:f1:ee:96:fb:e1: 4d:b2:79:46:b9:e0:a3:c2:a6:14:ea:9e:c4:fd:a2: 6e:16:20:ef:47:cb:6e:47:93:86:84:b6:c9:21:79: 6a:d9:79:3c:4f:65:d8:43:83:6b:52:0b:54:9b:f9: 47:6c:9e:ed:81:a0:67:fe:87:3f:af:08:8a:ec:2f: 64:d6:1e:4e:c8:34:70:72:cb:e3:09:30:28:ee:ee: af:01:cf:50:aa:6f:f0:de:72:ec:77:a2:ca:52:99: cc:9f:ae:55:9a:2c:18:9d:4b:1d:cc:70:36:b5:b8: c9:12:5e:3c:57:b5:c0:f7:5f:2b:cc:dc:59:36:b0: cf:cb:e1:a1:37:93:06:62:d2:79:99:0f:c0:b9:cd: 15:bf:d1:57:fa:4e:9b:d0:3e:cf:aa:87:fd:df:78: 95:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 50:58:CB:C5:AF:21:28:05:46:88:7D:EF:6C:FA:43:41:A8:F9:91:50 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d8e3b39c-da11-45ee-aab3-5cb14ec4470c/0/5058CBC5AF21280546887DEF6CFA4341A8F99150.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.3.212.0/22 150.129.188.0/22 202.152.192.0/20 IPv6: 2407:f200::/32 Signature Algorithm: sha256WithRSAEncryption 93:0f:e8:b6:d6:46:25:aa:7f:7e:26:2d:06:ec:5d:3b:da:17: 40:56:72:19:08:b7:af:15:cf:4e:2c:b4:c0:4c:01:96:fb:e8: 06:e5:86:02:f9:01:53:7d:07:38:f7:91:d0:5b:30:d9:39:61: da:05:cb:f0:be:62:25:e9:d9:b3:c4:75:9e:ed:20:4c:b6:eb: 65:03:23:91:1b:73:e0:c0:a1:8b:ad:33:20:60:75:e0:2d:19: 64:bb:66:e1:7b:ee:ba:bb:17:88:76:6f:fb:ac:63:77:4d:63: 62:6d:cd:9c:1d:33:a8:96:8d:3b:2a:8c:42:5d:12:cf:1e:ed: 3d:6f:ab:0f:66:e6:0c:be:35:b0:7b:0f:c1:ff:50:99:c1:c1: 15:02:5a:9e:52:0b:4d:df:17:67:5f:8e:f3:75:71:f7:a2:4e: f6:b1:c0:05:79:ae:a5:7a:cf:10:f5:17:e3:89:13:cd:bf:f3: d3:ca:b7:f0:c6:c9:80:1c:83:c2:fd:8f:76:b9:a4:d0:c8:31: 0b:04:7b:9a:86:dd:ca:01:5b:54:6a:a5:82:62:fb:d9:d6:a1: d6:44:3e:6c:1a:77:ad:7b:a6:e1:5c:8f:22:0b:c0:91:69:bb: 70:78:5b:7e:65:f0:48:58:fb:60:c7:13:17:d8:17:1c:b0:83: 5e:80:5c:e8 -----BEGIN CERTIFICATE----- MIIF4DCCBMigAwIBAgIUMwiYTY7c+tY2ePOEsjUaFbeb9sowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxOTEwMDQxM1oX DTI2MDgxODEwMDkxM1owMzExMC8GA1UEAxMoNTA1OENCQzVBRjIxMjgwNTQ2ODg3 REVGNkNGQTQzNDFBOEY5OTE1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMG9iHaVZorflGCw+/p1yVClUCTmR+UXOjaifAWEizaitcMU20U91uRpfwE0 9XpM2cHZ6pQ0EjbHvHhFLognXaKth5YDN6Mn5oHSEDlM7FdkpeFB+QvXAnoua7tV wSjIjiwPxPHulvvhTbJ5Rrngo8KmFOqexP2ibhYg70fLbkeThoS2ySF5atl5PE9l 2EODa1ILVJv5R2ye7YGgZ/6HP68IiuwvZNYeTsg0cHLL4wkwKO7urwHPUKpv8N5y 7HeiylKZzJ+uVZosGJ1LHcxwNrW4yRJePFe1wPdfK8zcWTawz8vhoTeTBmLSeZkP wLnNFb/RV/pOm9A+z6qH/d94lY0CAwEAAaOCAtMwggLPMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFBYy8WvISgFRoh972z6Q0Go+ZFQMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kOGUzYjM5Yy1kYTExLTQ1ZWUtYWFiMy01Y2IxNGVjNDQ3MGMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4ZTNiMzlj LWRhMTEtNDVlZS1hYWIzLTVjYjE0ZWM0NDcwYy8wLzUwNThDQkM1QUYyMTI4MDU0 Njg4N0RFRjZDRkE0MzQxQThGOTkxNTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBID BAJnA9QDBAKWgbwDBATKmMAwDQQCAAIwBwMFACQH8gAwDQYJKoZIhvcNAQELBQAD ggEBAJMP6LbWRiWqf34mLQbsXTvaF0BWchkIt68Vz04stMBMAZb76AblhgL5AVN9 Bzj3kdBbMNk5YdoFy/C+YiXp2bPEdZ7tIEy262UDI5Ebc+DAoYutMyBgdeAtGWS7 ZuF77rq7F4h2b/usY3dNY2JtzZwdM6iWjTsqjEJdEs8e7T1vqw9m5gy+NbB7D8H/ UJnBwRUCWp5SC03fF2dfjvN1cfeiTvaxwAV5rqV6zxD1F+OJE82/89PKt/DGyYAc g8L9j3a5pNDIMQsEe5qG3coBW1RqpYJi+9nWodZEPmwad617puFcjyILwJFpu3B4 W35l8EhY+2DHExfYFxywg16AXOg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:03:23 2025 by rpki-client