$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer File: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer (raw, json) Hash identifier: PcgobSgjwyAuJJsRIOZbxOGVsTOmnd3hnjlbDSe13LA= Subject key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 783144BD448BB25B8063DA646B52FEEC6C9ECD37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft caRepository: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 12 Oct 2025 10:27:38 +0000 Certificate not after: Sun 11 Oct 2026 10:32:38 +0000 Subordinate resources: IP: 103.161.190.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:31:44:bd:44:8b:b2:5b:80:63:da:64:6b:52:fe:ec:6c:9e:cd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 12 10:27:38 2025 GMT Not After : Oct 11 10:32:38 2026 GMT Subject: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9e:ee:5b:19:00:cb:c5:19:55:03:58:98:d1: e4:f0:6a:e4:f1:59:f0:c1:1e:dc:6e:46:e3:1f:a1: d2:1e:0d:86:1e:ae:7c:a3:d8:4a:bf:b1:54:fa:10: 80:d2:22:f8:78:a6:80:05:7d:ec:ad:c7:7b:8e:0a: c4:5b:07:36:b5:be:11:a0:cf:2b:3e:e1:81:7d:56: 26:84:8e:3d:7c:dc:96:06:20:ef:09:b8:46:a5:c9: d8:e6:0c:62:16:a6:68:df:41:28:19:ec:46:db:dd: 18:91:d0:56:68:f9:dd:51:88:23:c5:98:29:d2:2c: f6:0f:32:52:73:86:6c:4b:b3:fe:60:50:15:e3:7a: b2:d1:be:3f:97:2e:86:f9:e9:36:1f:6b:29:7f:88: de:94:2c:8a:21:5e:29:bd:8f:91:c8:ff:07:7b:05: bf:d8:c5:3d:c6:90:d0:e2:a5:66:bd:0d:ec:66:31: 3a:fa:01:4a:35:e4:bb:aa:58:fe:2c:d5:34:aa:cc: 2b:c1:f0:16:04:41:5f:ce:a4:d4:61:97:ed:5f:5f: 26:06:6b:bb:6a:d9:82:6f:23:25:a3:45:08:68:24: 31:0b:11:54:5a:f1:01:93:6a:80:42:c1:ab:89:37: 4a:8a:a4:75:3f:34:f1:bc:23:d6:62:ed:a1:6e:88: f5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.190.0/23 Signature Algorithm: sha256WithRSAEncryption 98:67:29:1f:7b:9c:39:b7:77:ee:9c:97:2a:39:b9:9f:28:3d: f2:5a:92:4c:98:a0:99:bb:4c:6e:1f:50:18:7c:01:ae:b1:ce: d3:7c:49:64:36:35:0c:54:7c:cd:15:83:49:8e:62:a7:55:61: 95:f5:c1:d5:45:d6:f9:9d:fb:8f:59:fe:6f:0b:33:0d:19:be: b2:54:5f:4c:49:07:67:94:76:0b:26:15:17:39:ea:06:72:f8: 24:b0:9d:33:5f:ed:47:2a:c1:07:ce:75:d2:a7:71:eb:27:94: de:2b:eb:5f:0b:f7:2d:67:c9:67:4f:02:3c:4e:04:41:71:12: 3d:e9:ae:f6:89:96:4f:a1:ec:29:9a:4b:31:82:a9:6f:30:a0: 02:f0:0d:da:0f:78:5b:1c:86:e2:d1:29:9c:70:03:7c:36:11: af:b2:1f:e1:74:c7:78:78:ba:9d:49:07:a0:24:02:32:71:e4: 8d:4e:35:f7:a4:58:1e:df:2e:b1:32:70:da:64:90:5b:2b:f6: 0a:80:17:71:46:c6:7a:3e:a4:2c:f2:a2:c4:dd:e2:60:72:91: 87:b5:f7:28:36:e5:38:7a:38:39:90:9c:38:31:32:ea:d6:bb: e4:43:a1:15:af:a7:d4:d1:37:ed:de:8c:88:ae:6c:e4:c2:33: 74:a8:d7:45 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUeDFEvUSLsluAY9pka1L+7GyezTcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAxMjEwMjczOFoX DTI2MTAxMTEwMzIzOFowMzExMC8GA1UEAxMoNzE1REM2REVBODBGRTVEODlGREM2 ODJDMTlDN0IzMEY1Qzc3RTJDMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANue7lsZAMvFGVUDWJjR5PBq5PFZ8MEe3G5G4x+h0h4Nhh6ufKPYSr+xVPoQ gNIi+HimgAV97K3He44KxFsHNrW+EaDPKz7hgX1WJoSOPXzclgYg7wm4RqXJ2OYM YhamaN9BKBnsRtvdGJHQVmj53VGII8WYKdIs9g8yUnOGbEuz/mBQFeN6stG+P5cu hvnpNh9rKX+I3pQsiiFeKb2Pkcj/B3sFv9jFPcaQ0OKlZr0N7GYxOvoBSjXku6pY /izVNKrMK8HwFgRBX86k1GGX7V9fJgZru2rZgm8jJaNFCGgkMQsRVFrxAZNqgELB q4k3SoqkdT808bwj1mLtoW6I9aMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHFdxt6oD+XYn9xoLBnHsw9cd+LBMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81NTkxYjU5Yi0xY2E1LTQ0NjQtOTk4Mi1iZjZmNmQ4YTFjOTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1OTFiNTli LTFjYTUtNDQ2NC05OTgyLWJmNmY2ZDhhMWM5NC8wLzcxNURDNkRFQTgwRkU1RDg5 RkRDNjgyQzE5QzdCMzBGNUM3N0UyQzEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnob4wDQYJKoZIhvcNAQELBQADggEBAJhnKR97nDm3d+6clyo5uZ8oPfJakkyY oJm7TG4fUBh8Aa6xztN8SWQ2NQxUfM0Vg0mOYqdVYZX1wdVF1vmd+49Z/m8LMw0Z vrJUX0xJB2eUdgsmFRc56gZy+CSwnTNf7UcqwQfOddKncesnlN4r618L9y1nyWdP AjxOBEFxEj3prvaJlk+h7CmaSzGCqW8woALwDdoPeFschuLRKZxwA3w2Ea+yH+F0 x3h4up1JB6AkAjJx5I1ONfekWB7fLrEycNpkkFsr9gqAF3FGxno+pCzyosTd4mBy kYe19yg25Th6ODmQnDgxMurWu+RDoRWvp9TRN+3ejIiubOTCM3So10U= -----END CERTIFICATE-----Generated at Mon Oct 20 08:36:56 2025 by rpki-client