$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer File: 53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.cer (raw, json) Hash identifier: U7+tEgurE9SWNPbJSZ9Tj94S+bOmljVOjZq5/N5rfBs= Subject key identifier: 53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 44783E55609C02F94C3C5DCF110F772338CCEFF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft caRepository: rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 23 Aug 2025 02:41:01 +0000 Certificate not after: Sat 22 Aug 2026 02:46:01 +0000 Subordinate resources: IP: 103.177.6.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:78:3e:55:60:9c:02:f9:4c:3c:5d:cf:11:0f:77:23:38:cc:ef:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 23 02:41:01 2025 GMT Not After : Aug 22 02:46:01 2026 GMT Subject: CN=53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a2:25:12:51:cf:72:57:3e:38:e7:01:7e:86: 6d:66:34:af:05:c7:17:cb:3c:a4:d6:87:0d:e4:95: 4f:37:3f:40:12:c7:5b:4b:fa:01:9d:33:6a:71:3c: 14:7e:50:4c:1b:94:7e:fb:a8:44:64:4b:1a:62:5f: 23:04:3e:46:de:98:bf:6e:a4:fb:72:bd:ce:52:27: b6:ae:6f:07:34:82:55:e2:ea:d1:ad:74:13:a0:95: e7:e8:62:24:d1:b6:89:51:f2:e4:00:86:b7:a1:e5: ca:e8:36:2b:a2:ee:88:32:55:cb:49:df:f7:f3:b5: 04:ee:5b:72:be:a1:c5:1f:7f:de:1b:cb:71:43:6a: e7:b3:bc:3a:1e:a7:de:dd:d8:c7:68:40:fb:c7:64: b4:5c:93:6a:82:61:c5:26:06:c6:f1:f4:a5:4d:45: 9c:07:94:07:75:42:09:06:4e:fd:5d:91:da:14:86: c4:fb:68:89:e0:12:f3:7e:2a:c8:41:21:9d:af:a1: a5:45:f9:a9:13:b1:e8:d4:06:0c:a3:41:e8:ea:7a: 17:29:8a:2d:5d:5b:00:42:a0:61:a3:15:af:e6:21: e4:8b:b6:4a:89:36:bd:cc:89:78:93:a1:02:6f:bb: dd:b8:4a:78:0f:09:06:fd:7a:95:53:16:df:e2:25: 16:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:B2:CA:30:02:DB:8D:FC:F5:48:2F:8E:09:A9:86:D2:9E:BF:B6:4E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7b71fc6d-aa3b-4ed7-8fec-7427aa061f8e/0/53B2CA3002DB8DFCF5482F8E09A986D29EBFB64E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.6.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:49:e6:83:73:f1:de:1b:e3:d5:50:a2:ba:b0:c4:0e:95:d5: a8:b7:51:fa:1f:75:0b:e7:ff:f6:67:fd:34:bd:12:ec:c1:38: 0b:1c:0b:99:d8:d7:58:af:93:ce:03:72:60:e1:58:56:26:3c: b6:cb:a2:fb:88:45:de:6f:fe:5f:0c:fa:84:37:95:80:a6:0a: 38:af:23:a3:bf:97:91:ef:e2:65:b7:08:09:9c:83:b7:78:a0: b0:dd:41:bf:a4:9d:5b:73:cd:a5:5d:14:d8:0f:01:0c:43:8a: 84:95:93:e1:74:c8:27:cc:10:0d:76:a7:c0:46:ea:85:99:52: 98:e8:56:74:55:d0:d9:3c:2e:0b:93:93:63:9c:b2:09:17:fd: 12:c3:86:26:82:61:90:c4:7c:92:9c:bd:39:00:98:da:6c:9a: d0:3a:4d:92:07:6b:e9:aa:b3:31:a4:ee:24:28:e8:1b:80:c1: cf:95:e5:5c:a9:65:c7:3f:d9:b8:df:49:8d:43:6c:99:d6:5e: 15:d9:de:e3:b3:fe:67:fe:6a:bc:33:8c:c7:1a:a2:88:bb:c8: e7:de:bd:66:8c:14:6c:66:1f:5f:1a:fb:40:ac:88:3e:86:36: 3d:72:79:47:af:73:9d:c1:b9:73:65:f8:59:af:39:9c:36:d7: f1:c4:e7:2e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURHg+VWCcAvlMPF3PEQ93IzjM7/AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyMzAyNDEwMVoX DTI2MDgyMjAyNDYwMVowMzExMC8GA1UEAxMoNTNCMkNBMzAwMkRCOERGQ0Y1NDgy RjhFMDlBOTg2RDI5RUJGQjY0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+iJRJRz3JXPjjnAX6GbWY0rwXHF8s8pNaHDeSVTzc/QBLHW0v6AZ0zanE8 FH5QTBuUfvuoRGRLGmJfIwQ+Rt6Yv26k+3K9zlIntq5vBzSCVeLq0a10E6CV5+hi JNG2iVHy5ACGt6Hlyug2K6LuiDJVy0nf9/O1BO5bcr6hxR9/3hvLcUNq57O8Oh6n 3t3Yx2hA+8dktFyTaoJhxSYGxvH0pU1FnAeUB3VCCQZO/V2R2hSGxPtoieAS834q yEEhna+hpUX5qROx6NQGDKNB6Op6FymKLV1bAEKgYaMVr+Yh5Iu2Sok2vcyJeJOh Am+73bhKeA8JBv16lVMW3+IlFg8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFOyyjAC24389UgvjgmphtKev7ZOMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YjcxZmM2ZC1hYTNiLTRlZDctOGZlYy03NDI3YWEwNjFmOGUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiNzFmYzZk LWFhM2ItNGVkNy04ZmVjLTc0MjdhYTA2MWY4ZS8wLzUzQjJDQTMwMDJEQjhERkNG NTQ4MkY4RTA5QTk4NkQyOUVCRkI2NEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsQYwDQYJKoZIhvcNAQELBQADggEBAJpJ5oNz8d4b49VQorqwxA6V1ai3Ufof dQvn//Zn/TS9EuzBOAscC5nY11ivk84DcmDhWFYmPLbLovuIRd5v/l8M+oQ3lYCm CjivI6O/l5Hv4mW3CAmcg7d4oLDdQb+knVtzzaVdFNgPAQxDioSVk+F0yCfMEA12 p8BG6oWZUpjoVnRV0Nk8LguTk2OcsgkX/RLDhiaCYZDEfJKcvTkAmNpsmtA6TZIH a+mqszGk7iQo6BuAwc+V5VypZcc/2bjfSY1DbJnWXhXZ3uOz/mf+arwzjMcaooi7 yOfevWaMFGxmH18a+0CsiD6GNj1yeUevc53BuXNl+FmvOZw21/HE5y4= -----END CERTIFICATE-----Generated at Sat Aug 23 07:17:16 2025 by rpki-client