$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer File: 722D23AD0F959CE5CBFF927C152517F07060D195.cer (raw, json) Hash identifier: 6vHx5tY/veOe8Zg4zIABv2CoWxoKEaejJQIeu9RsnRE= Subject key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 34CA0FBBE5712EF200EA7928F001B20BC25C6BC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft caRepository: rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 17 Sep 2025 18:03:50 +0000 Certificate not after: Wed 16 Sep 2026 18:08:50 +0000 Subordinate resources: IP: 103.49.50.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ca:0f:bb:e5:71:2e:f2:00:ea:79:28:f0:01:b2:0b:c2:5c:6b:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 17 18:03:50 2025 GMT Not After : Sep 16 18:08:50 2026 GMT Subject: CN=722D23AD0F959CE5CBFF927C152517F07060D195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:d7:da:bf:04:17:4c:38:7f:ca:17:cb:9a: a1:4a:24:73:a5:3f:fb:bd:ca:c4:85:95:79:52:65: 02:d5:a1:85:6d:2a:fb:45:de:27:c6:42:dc:6f:00: e2:83:63:ce:8d:7c:25:a2:30:25:58:3c:10:9d:ab: 2c:21:92:33:4c:7a:92:13:7e:c7:bc:d5:88:e3:b6: 10:7e:32:14:07:e7:bf:85:2b:7a:0a:6a:52:0b:5e: bd:01:d9:4c:c6:3e:db:ad:0e:64:1f:b1:9b:7c:b6: 7b:55:3a:1a:7e:fb:79:4e:8a:33:b5:a8:94:0a:2b: f3:2d:cc:0e:4e:0c:5f:1e:59:8b:71:14:9c:77:f8: f9:87:1b:69:0d:48:92:de:96:b3:06:b2:1a:31:43: 24:30:d2:f9:71:0f:2e:70:70:54:ad:0a:5f:8f:6a: 62:0d:fe:0a:78:13:b8:6e:de:48:0c:fa:40:49:67: ec:41:99:79:81:2e:68:45:1a:70:e5:db:76:11:7a: 40:e6:3c:ed:45:19:b3:9a:86:c1:06:2b:6e:ee:2c: ad:54:5a:7a:95:ec:4f:0c:0c:87:27:ba:fd:f7:44: 0a:0d:44:71:7c:15:10:4f:42:45:ab:67:5b:63:4f: f5:29:2e:ee:f0:3b:e7:6e:9e:39:96:fa:e8:3e:41: f0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.49.50.0/23 Signature Algorithm: sha256WithRSAEncryption 5c:14:f6:0b:53:8c:d0:2f:d4:38:40:73:b1:d4:a2:9c:6a:d0: ca:c1:a7:7d:f1:fa:c5:b1:21:e4:c9:72:71:46:35:d5:37:13: 93:b9:eb:1a:a5:ba:37:4d:d3:44:42:d1:b6:be:ee:02:eb:d4: 50:cc:82:90:9e:a9:15:ce:40:96:f8:ae:a3:fe:fc:cd:bc:89: ec:b3:f4:95:d6:52:a2:bf:30:81:67:c7:6a:ca:e6:07:d0:fc: 19:1d:1d:ec:7d:20:3b:f9:8e:be:84:bd:62:aa:a8:b0:ea:0e: 53:9f:19:a2:47:35:88:e2:9f:a3:1b:dd:1f:25:f7:cc:5c:59: b7:15:9b:2a:1b:ba:9f:3a:31:5e:03:81:01:73:4c:b6:be:fe: 46:37:63:96:b9:d1:07:54:84:b6:f2:d7:07:78:65:46:18:8d: 9e:32:86:a3:d0:42:1d:2b:e9:ef:9b:f0:e8:d4:b5:f2:77:99: ca:c1:6c:65:08:f6:f1:d4:36:39:05:3e:bf:06:7c:06:6b:5b: 3c:24:28:fe:20:17:44:c4:e4:95:b4:35:47:30:2e:2e:45:fe: f6:95:5f:f2:64:4b:d2:35:10:4d:8d:cc:ee:5a:ff:64:c8:4f: 94:c7:0a:99:b0:5a:8b:fc:53:69:41:d7:96:7a:95:4d:54:db: 92:dd:3d:3f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNMoPu+VxLvIA6nko8AGyC8Jca8QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxNzE4MDM1MFoX DTI2MDkxNjE4MDg1MFowMzExMC8GA1UEAxMoNzIyRDIzQUQwRjk1OUNFNUNCRkY5 MjdDMTUyNTE3RjA3MDYwRDE5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM4819q/BBdMOH/KF8uaoUokc6U/+73KxIWVeVJlAtWhhW0q+0XeJ8ZC3G8A 4oNjzo18JaIwJVg8EJ2rLCGSM0x6khN+x7zViOO2EH4yFAfnv4UregpqUgtevQHZ TMY+260OZB+xm3y2e1U6Gn77eU6KM7WolAor8y3MDk4MXx5Zi3EUnHf4+YcbaQ1I kt6WswayGjFDJDDS+XEPLnBwVK0KX49qYg3+CngTuG7eSAz6QEln7EGZeYEuaEUa cOXbdhF6QOY87UUZs5qGwQYrbu4srVRaepXsTwwMhye6/fdECg1EcXwVEE9CRatn W2NP9Sku7vA7526eOZb66D5B8B0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHItI60PlZzly/+SfBUlF/BwYNGVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xY2U4ZGE5Yy1iZGJkLTQ5MDgtYmE5Mi1kOTBmZWE5YzhmMDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFjZThkYTlj LWJkYmQtNDkwOC1iYTkyLWQ5MGZlYTljOGYwNS8wLzcyMkQyM0FEMEY5NTlDRTVD QkZGOTI3QzE1MjUxN0YwNzA2MEQxOTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnMTIwDQYJKoZIhvcNAQELBQADggEBAFwU9gtTjNAv1DhAc7HUopxq0MrBp33x +sWxIeTJcnFGNdU3E5O56xqlujdN00RC0ba+7gLr1FDMgpCeqRXOQJb4rqP+/M28 ieyz9JXWUqK/MIFnx2rK5gfQ/BkdHex9IDv5jr6EvWKqqLDqDlOfGaJHNYjin6Mb 3R8l98xcWbcVmyobup86MV4DgQFzTLa+/kY3Y5a50QdUhLby1wd4ZUYYjZ4yhqPQ Qh0r6e+b8OjUtfJ3mcrBbGUI9vHUNjkFPr8GfAZrWzwkKP4gF0TE5JW0NUcwLi5F /vaVX/JkS9I1EE2NzO5a/2TIT5THCpmwWov8U2lB15Z6lU1U25LdPT8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:13:09 2025 by rpki-client