$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer File: 68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.cer (raw, json) Hash identifier: w7iMyZzxbL0eCozPRkXn64YfZX04OubjNcdnzBV9WGc= Subject key identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 568B7EC33A0EB11A44EB5DBD83CD6BE1D0E7F712 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft caRepository: rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 18 Sep 2025 09:29:40 +0000 Certificate not after: Thu 17 Sep 2026 09:34:40 +0000 Subordinate resources: IP: 103.161.110.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8b:7e:c3:3a:0e:b1:1a:44:eb:5d:bd:83:cd:6b:e1:d0:e7:f7:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 18 09:29:40 2025 GMT Not After : Sep 17 09:34:40 2026 GMT Subject: CN=68D5782FBADB914CFD74AE28DA59784A5AAEAAF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:96:17:9e:c4:75:6e:fa:d6:d5:ae:07:ef:67: 88:dc:bb:5e:f3:37:e7:6c:c4:37:5a:41:66:a3:35: c2:b8:48:5d:39:3a:59:40:53:ea:7a:0a:3f:90:52: 0c:80:fc:8a:17:91:0c:cb:72:0d:a2:aa:2f:f9:19: cb:26:4d:a8:7d:bf:95:f5:80:d9:15:6e:09:9c:ab: 9d:07:f8:68:b5:b2:c2:47:31:45:e5:7b:b9:b0:69: 03:71:07:07:de:8d:1f:76:14:16:89:a9:f7:ae:54: 9d:fd:ce:e0:c8:ae:2d:ab:ef:84:89:2e:0b:f9:1a: 07:dd:0b:a1:21:f2:e0:38:b7:66:fe:da:d3:92:76: a6:23:10:90:e1:3a:ef:c6:f9:b5:06:4d:24:ad:69: 08:61:7b:d5:7f:b9:5a:07:db:2a:d6:ea:d7:09:0a: 9f:c2:2c:7f:c8:52:38:50:95:65:70:01:a0:e5:40: a2:df:37:07:93:3f:96:2a:49:bb:62:99:c0:6b:3f: 7d:bb:74:2a:a5:be:8f:ee:5a:2b:80:1f:92:36:fc: 88:cc:da:b7:ef:bb:d9:3e:2d:e5:d6:79:0d:a4:2e: 7e:4e:31:2e:24:f4:d7:cd:fe:1e:00:25:22:c0:82: f0:08:31:26:fe:90:df:05:97:9a:fb:b5:f9:72:22: d3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:D5:78:2F:BA:DB:91:4C:FD:74:AE:28:DA:59:78:4A:5A:AE:AA:F8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3f408e44-3e9c-45e5-bca4-5dfbd4b27130/0/68D5782FBADB914CFD74AE28DA59784A5AAEAAF8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.110.0/23 Signature Algorithm: sha256WithRSAEncryption 56:20:df:ad:c3:03:30:66:a5:29:e3:be:1b:4e:e6:41:8d:6a: b0:5c:b7:16:24:43:de:1f:dd:1e:f2:bc:7d:5a:e8:e3:7e:f5: cc:59:db:d6:5f:fa:06:73:9d:5f:fb:13:4a:ed:13:ce:90:d9: ed:fc:ed:98:fb:93:6c:2a:e9:cd:da:b0:68:db:46:8b:7d:00: 70:22:a8:48:ac:87:24:9b:56:28:e3:47:84:53:68:14:dc:9f: b2:aa:17:c4:8a:e2:21:fe:a0:4c:1f:8c:58:d7:ca:6d:30:3c: ae:21:0d:87:3e:de:7e:ef:de:7f:51:94:a6:f3:0f:b7:ac:8f: 08:ec:01:db:89:b1:75:bf:88:fa:19:52:be:49:08:cf:f2:17: e6:da:80:fc:b7:5a:4a:ba:31:22:ef:73:5b:df:e5:40:17:c2: 53:8d:38:9a:82:22:66:c0:56:58:a7:7d:c3:50:62:a1:44:f2: d5:d4:20:2f:61:e0:63:14:94:59:8c:09:53:c1:d3:90:67:29: 79:44:c9:12:e9:e0:e9:8c:c4:fc:f0:00:3e:3c:9b:cb:cc:5d: b8:60:34:ea:7c:e6:c4:21:01:6d:d6:32:8f:b4:ac:a5:94:05: 68:70:7c:0e:77:67:10:9b:35:dc:20:d9:c2:f1:c1:24:58:7e: 35:59:5d:43 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVot+wzoOsRpE6129g81r4dDn9xIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxODA5Mjk0MFoX DTI2MDkxNzA5MzQ0MFowMzExMC8GA1UEAxMoNjhENTc4MkZCQURCOTE0Q0ZENzRB RTI4REE1OTc4NEE1QUFFQUFGODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKKWF57EdW761tWuB+9niNy7XvM352zEN1pBZqM1wrhIXTk6WUBT6noKP5BS DID8iheRDMtyDaKqL/kZyyZNqH2/lfWA2RVuCZyrnQf4aLWywkcxReV7ubBpA3EH B96NH3YUFomp965Unf3O4MiuLavvhIkuC/kaB90LoSHy4Di3Zv7a05J2piMQkOE6 78b5tQZNJK1pCGF71X+5WgfbKtbq1wkKn8Isf8hSOFCVZXABoOVAot83B5M/lipJ u2KZwGs/fbt0KqW+j+5aK4Afkjb8iMzat++72T4t5dZ5DaQufk4xLiT0183+HgAl IsCC8AgxJv6Q3wWXmvu1+XIi03ECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGjVeC+625FM/XSuKNpZeEparqr4MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZjQwOGU0NC0zZTljLTQ1ZTUtYmNhNC01ZGZiZDRiMjcxMzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNmNDA4ZTQ0 LTNlOWMtNDVlNS1iY2E0LTVkZmJkNGIyNzEzMC8wLzY4RDU3ODJGQkFEQjkxNENG RDc0QUUyOERBNTk3ODRBNUFBRUFBRjgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnoW4wDQYJKoZIhvcNAQELBQADggEBAFYg363DAzBmpSnjvhtO5kGNarBctxYk Q94f3R7yvH1a6ON+9cxZ29Zf+gZznV/7E0rtE86Q2e387Zj7k2wq6c3asGjbRot9 AHAiqEishySbVijjR4RTaBTcn7KqF8SK4iH+oEwfjFjXym0wPK4hDYc+3n7v3n9R lKbzD7esjwjsAduJsXW/iPoZUr5JCM/yF+bagPy3Wkq6MSLvc1vf5UAXwlONOJqC ImbAVlinfcNQYqFE8tXUIC9h4GMUlFmMCVPB05BnKXlEyRLp4OmMxPzwAD48m8vM XbhgNOp85sQhAW3WMo+0rKWUBWhwfA53ZxCbNdwg2cLxwSRYfjVZXUM= -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:02 2025 by rpki-client