$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer File: 73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.cer (raw, json) Hash identifier: ggkj+3bha6vCpoxtMHj0YGRJLHpGOri0iTUgiqZs9y4= Subject key identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 43F3D3B7DCFAC77DFA2FD8B1736141C23CE4DC5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft caRepository: rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 27 Sep 2025 21:11:23 +0000 Certificate not after: Sat 26 Sep 2026 21:16:23 +0000 Subordinate resources: IP: 103.179.89.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f3:d3:b7:dc:fa:c7:7d:fa:2f:d8:b1:73:61:41:c2:3c:e4:dc:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 27 21:11:23 2025 GMT Not After : Sep 26 21:16:23 2026 GMT Subject: CN=73A2C069A3B2EBAC75ECB373F398B5602B55A6FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f4:e7:f4:f5:b1:c0:b2:46:54:3c:ac:42:a0: 81:08:ea:7f:88:84:a4:f6:a9:37:dc:37:bf:0b:b9: 6d:2c:35:af:84:fb:d8:d1:20:80:98:24:90:bd:d9: d8:f6:36:e0:c2:48:a1:6e:c5:97:8e:1f:ef:ec:d5: 06:5d:a5:fb:1c:15:c0:2d:62:21:ce:a4:fc:2f:1d: cc:2b:08:52:d5:4f:49:6d:57:7e:46:c5:1c:c6:cb: 63:3e:20:fe:0e:89:ac:c1:1d:5b:18:1d:6d:47:ac: 55:85:6c:a7:89:83:ca:c1:1b:ba:ff:89:68:46:3d: e4:da:e6:29:dc:3e:6a:b9:49:2a:f3:4c:1e:78:ce: 04:a0:9e:d1:89:db:9c:8d:71:a6:7a:67:b2:4e:70: db:de:d8:6a:db:36:a7:c7:33:ea:5d:bc:db:c2:93: 55:74:f5:cf:0c:8b:cd:b8:0e:b2:ca:80:95:a7:23: 9e:fd:8c:98:01:e7:24:7f:dc:19:7e:35:ee:1b:97: 91:95:fb:6a:a3:5c:d9:ac:cd:95:ef:1d:61:00:82: 9b:a7:48:a4:6a:b6:72:41:ff:68:91:03:96:d1:9b: be:13:4a:b3:0a:4c:2f:58:17:bf:9e:fa:b2:7e:a3: 97:fc:ff:19:0d:80:6a:05:c2:11:10:e4:d5:1c:82: dd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:A2:C0:69:A3:B2:EB:AC:75:EC:B3:73:F3:98:B5:60:2B:55:A6:FD X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/19c27621-e297-4100-971a-1c6967c52b1b/0/73A2C069A3B2EBAC75ECB373F398B5602B55A6FD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.179.89.0/24 Signature Algorithm: sha256WithRSAEncryption 17:c6:ff:9c:70:03:64:e4:37:04:16:c1:53:ce:59:f6:81:3f: 55:97:e7:93:a7:3e:21:16:ac:83:71:ec:bf:f7:24:47:91:2b: 3b:eb:0a:94:ec:6e:bc:e3:77:2c:cc:00:d9:a8:7e:89:cb:87: bb:83:9b:1d:5d:7a:8b:98:95:80:e5:e8:9f:ae:14:a6:cf:95: 8d:27:76:b1:c1:41:59:ce:4b:04:10:31:78:c8:ff:cc:18:72: 42:44:11:80:cc:fd:09:0a:bd:93:7d:44:48:4d:90:8d:da:de: 49:f3:96:88:53:a2:bd:0c:05:de:03:6c:5d:e9:58:43:ca:dd: bf:29:fd:e4:be:22:38:45:53:ac:ec:3e:a9:c0:dc:18:17:d6: 29:6a:7c:82:66:14:74:ef:b5:e1:b7:55:4c:ae:1a:8b:92:ea: f1:07:07:df:65:ff:a6:fd:1f:32:11:5b:12:01:ae:52:7f:11: 52:1b:ce:41:8d:a0:84:38:54:32:93:7f:71:9b:b0:ac:ec:09: e5:e6:7e:ee:d4:e2:28:5e:f2:63:ed:ab:13:44:67:83:c2:eb: ef:91:4f:04:ca:94:8f:8a:b9:78:26:c3:6c:27:3e:d7:0c:4e: cd:68:4e:03:42:7c:ed:9b:07:df:c9:83:a1:46:6e:6b:4b:3d: 15:0b:f4:41 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQ/PTt9z6x336L9ixc2FBwjzk3F0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyNzIxMTEyM1oX DTI2MDkyNjIxMTYyM1owMzExMC8GA1UEAxMoNzNBMkMwNjlBM0IyRUJBQzc1RUNC MzczRjM5OEI1NjAyQjU1QTZGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMf05/T1scCyRlQ8rEKggQjqf4iEpPapN9w3vwu5bSw1r4T72NEggJgkkL3Z 2PY24MJIoW7Fl44f7+zVBl2l+xwVwC1iIc6k/C8dzCsIUtVPSW1XfkbFHMbLYz4g /g6JrMEdWxgdbUesVYVsp4mDysEbuv+JaEY95NrmKdw+arlJKvNMHnjOBKCe0Ynb nI1xpnpnsk5w297Yats2p8cz6l2828KTVXT1zwyLzbgOssqAlacjnv2MmAHnJH/c GX417huXkZX7aqNc2azNle8dYQCCm6dIpGq2ckH/aJEDltGbvhNKswpML1gXv576 sn6jl/z/GQ2AagXCERDk1RyC3dcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHOiwGmjsuusdeyzc/OYtWArVab9MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xOWMyNzYyMS1lMjk3LTQxMDAtOTcxYS0xYzY5NjdjNTJiMWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YzI3NjIx LWUyOTctNDEwMC05NzFhLTFjNjk2N2M1MmIxYi8wLzczQTJDMDY5QTNCMkVCQUM3 NUVDQjM3M0YzOThCNTYwMkI1NUE2RkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABns1kwDQYJKoZIhvcNAQELBQADggEBABfG/5xwA2TkNwQWwVPOWfaBP1WX55On PiEWrINx7L/3JEeRKzvrCpTsbrzjdyzMANmofonLh7uDmx1deouYlYDl6J+uFKbP lY0ndrHBQVnOSwQQMXjI/8wYckJEEYDM/QkKvZN9REhNkI3a3knzlohTor0MBd4D bF3pWEPK3b8p/eS+IjhFU6zsPqnA3BgX1ilqfIJmFHTvteG3VUyuGouS6vEHB99l /6b9HzIRWxIBrlJ/EVIbzkGNoIQ4VDKTf3GbsKzsCeXmfu7U4ihe8mPtqxNEZ4PC 6++RTwTKlI+KuXgmw2wnPtcMTs1oTgNCfO2bB9/Jg6FGbmtLPRUL9EE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:20:23 2025 by rpki-client