$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer File: 5F1EC0378C7B3A8912CA32E382D2C083E173E71C.cer (raw, json) Hash identifier: boNcU3ny60KuVk7v9tlXUhRjOuYzKXzflVmQL840OM0= Subject key identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 390459A72A2B04F4022020E752B94FA0AF94A21B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft caRepository: rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 20 Aug 2025 04:31:17 +0000 Certificate not after: Wed 19 Aug 2026 04:36:17 +0000 Subordinate resources: AS: 136102 AS: 137286 IP: 49.128.188.0/22 IP: 103.10.148.0/22 IP: 103.90.248.0/22 IP: 2001:df0:e900::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 11:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:04:59:a7:2a:2b:04:f4:02:20:20:e7:52:b9:4f:a0:af:94:a2:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 20 04:31:17 2025 GMT Not After : Aug 19 04:36:17 2026 GMT Subject: CN=5F1EC0378C7B3A8912CA32E382D2C083E173E71C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3a:64:1b:e7:a0:2b:03:3a:74:39:f1:86:3c: b9:c8:73:fa:4b:3d:8e:e2:d7:03:1c:eb:d3:60:36: 4c:fb:c9:3c:40:80:54:7b:01:08:28:77:9b:86:e2: 53:67:12:7d:1f:23:3a:f1:46:74:bd:75:69:8e:1d: 7d:e4:06:c5:17:82:89:b4:ba:c5:79:48:9b:79:b4: 4f:c0:27:cb:de:a6:e6:f1:4d:0d:20:c1:19:3b:ed: 94:c4:f3:2b:a8:e6:48:1a:ae:3a:57:36:a8:3b:7b: 52:28:ed:72:aa:8e:97:5d:ac:9b:af:29:ed:bd:8d: 60:a5:07:25:bd:9b:2e:af:01:3e:73:91:b7:e8:d6: 06:e9:b0:53:9e:de:9b:2a:30:fd:3b:a5:cd:60:fb: b7:c4:88:5c:31:e9:7c:e6:1c:63:36:9e:13:06:e9: 8b:8b:5b:fd:fd:75:fa:dc:77:25:19:3f:23:65:b1: 2c:1f:ab:75:97:f7:50:b1:9f:9f:b4:e9:16:8e:52: 5a:24:f2:94:7c:a6:2d:08:4e:b9:ec:cc:af:ee:4b: 03:25:e9:2e:10:a2:db:48:36:89:1f:d9:b7:ad:bd: 0f:6c:0e:9e:ec:cd:b5:d5:cd:c8:e0:df:ad:8d:6c: bd:34:be:73:ca:e3:42:6f:b4:5c:8c:91:b9:4b:00: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5F:1E:C0:37:8C:7B:3A:89:12:CA:32:E3:82:D2:C0:83:E1:73:E7:1C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4402daa5-fb0c-4a24-9889-33bd50db4fe0/0/5F1EC0378C7B3A8912CA32E382D2C083E173E71C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.128.188.0/22 103.10.148.0/22 103.90.248.0/22 IPv6: 2001:df0:e900::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 136102 137286 Signature Algorithm: sha256WithRSAEncryption 47:49:6d:04:3d:d1:42:a3:68:e8:2e:be:cb:f8:76:04:3b:01: 44:1b:07:47:4d:98:09:6d:a9:6c:de:2e:17:2a:74:52:3b:6f: da:80:64:ef:53:dc:72:3c:9f:7a:c2:bd:31:bb:7b:ff:33:2f: fd:ab:70:42:6c:cc:d0:6b:54:46:a7:37:e0:15:3e:e6:61:be: 1b:4c:c3:2e:2b:71:28:2c:3c:14:68:a0:b4:c1:4e:f0:cb:b2: b2:f2:64:d2:72:c0:e9:1b:80:c4:5d:a4:e0:f9:58:cc:fa:9f: 73:ee:90:4e:0c:19:6a:d8:bf:36:e6:87:25:43:4f:5f:bc:5c: 84:39:55:fb:87:ae:83:e5:12:a9:b1:21:72:88:bf:da:76:e1: d4:b9:0b:97:19:5c:1f:93:fb:10:42:79:dc:93:66:4c:f9:92: 1f:a1:c5:01:17:91:f4:fe:0e:d7:30:bd:17:34:60:50:b5:be: 09:aa:36:cb:3a:1b:71:f4:3e:36:5a:67:d5:58:31:63:a6:cb: de:aa:7d:a6:2e:35:49:2b:7f:2f:71:6c:62:cc:38:c5:bd:ef: 6f:0a:43:69:76:cf:a3:c8:5b:18:26:e0:11:da:68:ff:d9:d3: a6:50:d3:1d:14:f3:37:96:56:57:22:1e:de:73:40:4d:91:f9: 8b:a2:83:ab -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgIUOQRZpyorBPQCICDnUrlPoK+UohswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyMDA0MzExN1oX DTI2MDgxOTA0MzYxN1owMzExMC8GA1UEAxMoNUYxRUMwMzc4QzdCM0E4OTEyQ0Ez MkUzODJEMkMwODNFMTczRTcxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOQ6ZBvnoCsDOnQ58YY8uchz+ks9juLXAxzr02A2TPvJPECAVHsBCCh3m4bi U2cSfR8jOvFGdL11aY4dfeQGxReCibS6xXlIm3m0T8Any96m5vFNDSDBGTvtlMTz K6jmSBquOlc2qDt7UijtcqqOl12sm68p7b2NYKUHJb2bLq8BPnORt+jWBumwU57e myow/TulzWD7t8SIXDHpfOYcYzaeEwbpi4tb/f11+tx3JRk/I2WxLB+rdZf3ULGf n7TpFo5SWiTylHymLQhOuezMr+5LAyXpLhCi20g2iR/Zt629D2wOnuzNtdXNyODf rY1svTS+c8rjQm+0XIyRuUsAmQkCAwEAAaOCAvYwggLyMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF8ewDeMezqJEsoy44LSwIPhc+ccMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NDAyZGFhNS1mYjBjLTRhMjQtOTg4OS0zM2JkNTBkYjRmZTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0MDJkYWE1 LWZiMGMtNGEyNC05ODg5LTMzYmQ1MGRiNGZlMC8wLzVGMUVDMDM3OEM3QjNBODkx MkNBMzJFMzgyRDJDMDgzRTE3M0U3MUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID BAIxgLwDBAJnCpQDBAJnWvgwDwQCAAIwCQMHACABDfDpADAfBggrBgEFBQcBCAEB /wQQMA6gDDAKAgMCE6YCAwIYRjANBgkqhkiG9w0BAQsFAAOCAQEAR0ltBD3RQqNo 6C6+y/h2BDsBRBsHR02YCW2pbN4uFyp0Ujtv2oBk71PccjyfesK9Mbt7/zMv/atw QmzM0GtURqc34BU+5mG+G0zDLitxKCw8FGigtMFO8MuysvJk0nLA6RuAxF2k4PlY zPqfc+6QTgwZati/NuaHJUNPX7xchDlV+4eug+USqbEhcoi/2nbh1LkLlxlcH5P7 EEJ53JNmTPmSH6HFAReR9P4O1zC9FzRgULW+Cao2yzobcfQ+Nlpn1VgxY6bL3qp9 pi41SSt/L3FsYsw4xb3vbwpDaXbPo8hbGCbgEdpo/9nTplDTHRTzN5ZWVyIe3nNA TZH5i6KDqw== -----END CERTIFICATE-----Generated at Sun Aug 24 03:09:42 2025 by rpki-client