$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/50A2EED432F4BC38B22EB315635CF701DA108F7E.cer File: 50A2EED432F4BC38B22EB315635CF701DA108F7E.cer (raw, json) Hash identifier: frp1kMjKzoqfQjiZZslO1AH54EIVUi1c0ELH99Xs9g0= Subject key identifier: 50:A2:EE:D4:32:F4:BC:38:B2:2E:B3:15:63:5C:F7:01:DA:10:8F:7E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2F986FC457FB9A5C69D769511AA88D097CC86A39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.mft caRepository: rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 07 Aug 2025 20:31:39 +0000 Certificate not after: Thu 06 Aug 2026 20:36:39 +0000 Subordinate resources: IP: 2407:a140::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:98:6f:c4:57:fb:9a:5c:69:d7:69:51:1a:a8:8d:09:7c:c8:6a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 7 20:31:39 2025 GMT Not After : Aug 6 20:36:39 2026 GMT Subject: CN=50A2EED432F4BC38B22EB315635CF701DA108F7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3d:59:a9:a9:9f:ca:90:dd:31:e5:ca:94:4b: ad:67:c8:a2:37:24:92:2e:b5:21:68:81:f7:76:41: 8e:b0:81:cc:25:f4:84:e5:11:c4:31:9b:f2:74:5b: ba:7b:36:ac:de:8f:43:6b:ac:17:7f:46:a7:a6:52: fa:f6:b1:bb:98:ac:8d:e7:eb:2b:ee:7a:9e:22:4e: 71:7f:5d:70:88:1d:2c:8e:ee:10:83:cd:ff:e9:2b: d4:c3:00:35:b0:b0:cd:3b:9e:54:f5:52:3f:d7:83: e6:6e:2a:c4:5e:5b:d8:26:2e:87:34:93:c2:09:c1: aa:0f:4c:43:6e:76:a7:67:d7:33:4d:b2:69:26:a8: c8:0b:c6:32:59:e6:87:99:b6:56:ae:1f:f6:06:6d: 17:62:35:70:72:74:48:d8:1c:58:91:b5:2c:ce:a5: c4:39:26:8b:11:f5:a5:01:10:ee:b0:ae:4c:10:2b: 3f:e8:a1:e6:ca:ca:5d:44:a7:1a:1b:2a:a1:87:cc: a1:43:0c:2d:44:78:36:00:d7:1f:30:15:6b:2f:b7: f8:9f:b1:ad:43:a2:6c:b3:2d:03:99:3c:50:cb:40: 0d:96:81:9f:28:90:12:08:38:79:02:ed:fd:8d:f1: d6:ed:f5:1e:24:10:a8:95:81:53:e4:88:0d:f0:55: aa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 50:A2:EE:D4:32:F4:BC:38:B2:2E:B3:15:63:5C:F7:01:DA:10:8F:7E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/eeb78f68-c7cb-452f-96b5-c41d65372021/0/50A2EED432F4BC38B22EB315635CF701DA108F7E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:a140::/32 Signature Algorithm: sha256WithRSAEncryption 3a:69:7f:05:e1:6e:12:9a:18:f1:b9:ff:b7:6e:41:ae:61:dd: a0:31:51:97:0b:5c:02:4c:b6:21:a2:6f:5d:9c:15:32:64:d3: e9:e8:b3:57:fc:a2:97:c6:22:1c:67:22:df:12:71:c2:be:37: e2:b3:04:23:f5:37:6a:76:f0:eb:03:b3:61:e4:72:d7:cf:a2: db:ed:db:41:36:65:5e:ae:3b:37:56:84:46:db:9a:28:f7:c2: 6e:76:27:b1:38:e1:e0:a0:31:49:05:d0:ef:e7:8c:9d:5b:9f: e8:d2:96:67:83:02:97:d6:9e:17:2d:64:dd:31:0d:64:fb:c5: 2e:52:b5:5f:ff:eb:8e:6b:bc:c1:2a:3e:63:ae:60:75:59:ac: 5b:7c:d1:7e:cd:f9:66:6d:10:7d:0b:5d:3f:7f:46:43:2e:e4: 38:c8:57:bd:13:43:24:7e:c6:54:cc:94:33:94:99:53:93:dd: 03:1b:25:f4:e5:78:a4:a6:52:22:9a:7b:5e:7c:07:4c:d9:f5: 56:8b:dc:49:1d:42:c1:54:46:fc:bd:bf:d2:b3:d1:ea:92:15: 2e:dd:e3:dd:51:54:50:4d:33:39:ee:22:1a:d3:f0:63:ab:91: 21:2f:8d:a6:cd:f3:d1:24:1e:ce:b7:f6:d1:89:05:3e:53:32: 9a:e7:88:e0 -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIUL5hvxFf7mlxp12lRGqiNCXzIajkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgwNzIwMzEzOVoX DTI2MDgwNjIwMzYzOVowMzExMC8GA1UEAxMoNTBBMkVFRDQzMkY0QkMzOEIyMkVC MzE1NjM1Q0Y3MDFEQTEwOEY3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOw9Wampn8qQ3THlypRLrWfIojckki61IWiB93ZBjrCBzCX0hOURxDGb8nRb uns2rN6PQ2usF39Gp6ZS+vaxu5isjefrK+56niJOcX9dcIgdLI7uEIPN/+kr1MMA NbCwzTueVPVSP9eD5m4qxF5b2CYuhzSTwgnBqg9MQ252p2fXM02yaSaoyAvGMlnm h5m2Vq4f9gZtF2I1cHJ0SNgcWJG1LM6lxDkmixH1pQEQ7rCuTBArP+ih5srKXUSn GhsqoYfMoUMMLUR4NgDXHzAVay+3+J+xrUOibLMtA5k8UMtADZaBnyiQEgg4eQLt /Y3x1u31HiQQqJWBU+SIDfBVqi0CAwEAAaOCArkwggK1MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFCi7tQy9Lw4si6zFWNc9wHaEI9+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lZWI3OGY2OC1jN2NiLTQ1MmYtOTZiNS1jNDFkNjUzNzIwMjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYjc4ZjY4 LWM3Y2ItNDUyZi05NmI1LWM0MWQ2NTM3MjAyMS8wLzUwQTJFRUQ0MzJGNEJDMzhC MjJFQjMxNTYzNUNGNzAxREExMDhGN0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkB6FAMA0GCSqGSIb3DQEBCwUAA4IBAQA6aX8F4W4Smhjxuf+3bkGuYd2gMVGX C1wCTLYhom9dnBUyZNPp6LNX/KKXxiIcZyLfEnHCvjfiswQj9TdqdvDrA7Nh5HLX z6Lb7dtBNmVerjs3VoRG25oo98JudiexOOHgoDFJBdDv54ydW5/o0pZngwKX1p4X LWTdMQ1k+8UuUrVf/+uOa7zBKj5jrmB1WaxbfNF+zflmbRB9C10/f0ZDLuQ4yFe9 E0MkfsZUzJQzlJlTk90DGyX05XikplIimntefAdM2fVWi9xJHULBVEb8vb/Ss9Hq khUu3ePdUVRQTTM57iIa0/Bjq5EhL42mzfPRJB7Ot/bRiQU+UzKa54jg -----END CERTIFICATE-----Generated at Sat Aug 23 12:22:39 2025 by rpki-client