$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer File: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer (raw, json) Hash identifier: yVysl1JhyppQomgcHu3kFIdWS5oxa7F9jmVCKS2Mu2E= Subject key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 38E74EB717B456495A183FE3E9342FD0F14FD016 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft caRepository: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 13 Oct 2025 18:39:28 +0000 Certificate not after: Mon 12 Oct 2026 18:44:28 +0000 Subordinate resources: IP: 202.47.188.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e7:4e:b7:17:b4:56:49:5a:18:3f:e3:e9:34:2f:d0:f1:4f:d0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 13 18:39:28 2025 GMT Not After : Oct 12 18:44:28 2026 GMT Subject: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:61:36:52:79:98:3b:79:56:37:9d:ce:38:fa: 6d:36:28:a6:f1:36:12:99:07:d1:40:42:13:65:95: a2:10:ac:6e:3d:fc:7f:2b:ef:16:2d:da:d9:cb:bb: 9c:bf:7b:da:f1:f6:dd:40:ec:4b:ed:8a:27:5c:e3: c4:32:1f:db:f1:09:d9:d2:88:66:1d:b7:a4:fe:56: ed:65:03:9d:e1:89:14:64:a9:e7:2c:af:d6:3e:04: cc:45:ca:7b:7a:00:58:5e:e4:61:21:d7:5a:f0:3a: f4:e6:77:86:a3:e9:bf:91:16:66:48:0f:fe:60:d2: ba:79:78:f9:c8:f0:d8:3e:00:f4:80:cc:5b:34:91: 02:85:aa:9c:c8:77:e4:c6:bd:34:5a:38:f9:f0:76: 61:13:76:6f:48:cc:7a:ad:ef:dd:4d:f5:13:1e:5a: 7d:58:a3:7c:1d:af:5d:3a:8c:cd:ae:46:52:dc:8b: b6:c7:9d:69:09:d6:f6:d0:87:bb:43:cc:85:df:9f: b2:cb:88:c1:d5:7a:37:50:96:14:74:28:c9:11:67: 02:0a:1d:2c:f1:33:4d:86:5e:f8:5c:8c:dd:9d:2e: 29:4e:52:12:09:25:42:b1:08:53:b0:7f:ef:c3:db: f6:02:71:33:46:a9:e3:f1:d8:79:fe:ab:0f:31:88: e7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.188.0/23 Signature Algorithm: sha256WithRSAEncryption 86:ad:fc:94:43:bb:bb:5f:17:c1:89:45:0a:9e:a5:67:33:9e: f1:68:69:0a:58:dd:a2:54:21:7c:7a:bd:bc:35:1f:40:35:25: 13:04:be:08:d1:3f:59:72:62:20:23:1e:a5:41:d1:a2:39:d7: ed:f8:b4:df:8d:62:57:f1:ea:94:b4:26:40:e8:ae:4d:a0:02: 4f:b7:78:d4:8d:54:55:d3:34:3b:2c:66:60:b9:9c:e6:52:b5: e2:3a:b9:df:e9:5f:a1:d3:7d:9c:47:32:be:06:64:d9:3e:eb: ee:2a:9e:71:36:dc:e8:04:5d:c9:b2:86:87:d8:b1:08:db:10: a7:f1:fd:55:95:3f:27:d6:78:92:0b:75:3a:03:d3:96:27:64: 2c:d3:93:c7:99:9e:c3:fa:25:09:73:e1:6b:7c:c1:aa:45:97: e1:08:7c:26:28:8d:ae:37:16:0f:4f:42:58:e7:9d:67:18:f5: 53:36:e9:df:f9:4a:5a:e3:a7:3b:d8:9d:4a:a4:50:0f:e5:4c: 1f:c7:c0:2a:ea:11:16:f4:d0:48:00:90:f1:09:b3:b4:8d:32: bc:47:54:0e:9a:aa:45:9d:95:5e:99:2c:46:ba:73:c4:ea:3d: 11:74:ca:c5:4f:7e:d4:af:38:6b:cd:a4:c5:aa:81:2a:12:d1: 04:2a:8c:58 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOOdOtxe0VklaGD/j6TQv0PFP0BYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAxMzE4MzkyOFoX DTI2MTAxMjE4NDQyOFowMzExMC8GA1UEAxMoNzlCRDA3NUQxQkM0QkQ4QUUwQzI2 RUZEMkQzNzIyQ0NGNkVGRjY1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9hNlJ5mDt5Vjedzjj6bTYopvE2EpkH0UBCE2WVohCsbj38fyvvFi3a2cu7 nL972vH23UDsS+2KJ1zjxDIf2/EJ2dKIZh23pP5W7WUDneGJFGSp5yyv1j4EzEXK e3oAWF7kYSHXWvA69OZ3hqPpv5EWZkgP/mDSunl4+cjw2D4A9IDMWzSRAoWqnMh3 5Ma9NFo4+fB2YRN2b0jMeq3v3U31Ex5afVijfB2vXTqMza5GUtyLtsedaQnW9tCH u0PMhd+fssuIwdV6N1CWFHQoyRFnAgodLPEzTYZe+FyM3Z0uKU5SEgklQrEIU7B/ 78Pb9gJxM0ap4/HYef6rDzGI50cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHm9B10bxL2K4MJu/S03Isz27/ZeMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZWU5NDAxNC04N2ZhLTRiYzItYjFjNi03ZmQyYTg5NDc2ZjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlZTk0MDE0 LTg3ZmEtNGJjMi1iMWM2LTdmZDJhODk0NzZmMy8wLzc5QkQwNzVEMUJDNEJEOEFF MEMyNkVGRDJEMzcyMkNDRjZFRkY2NUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHKL7wwDQYJKoZIhvcNAQELBQADggEBAIat/JRDu7tfF8GJRQqepWcznvFoaQpY 3aJUIXx6vbw1H0A1JRMEvgjRP1lyYiAjHqVB0aI51+34tN+NYlfx6pS0JkDork2g Ak+3eNSNVFXTNDssZmC5nOZSteI6ud/pX6HTfZxHMr4GZNk+6+4qnnE23OgEXcmy hofYsQjbEKfx/VWVPyfWeJILdToD05YnZCzTk8eZnsP6JQlz4Wt8wapFl+EIfCYo ja43Fg9PQljnnWcY9VM26d/5SlrjpzvYnUqkUA/lTB/HwCrqERb00EgAkPEJs7SN MrxHVA6aqkWdlV6ZLEa6c8TqPRF0ysVPftSvOGvNpMWqgSoS0QQqjFg= -----END CERTIFICATE-----Generated at Mon Oct 20 03:19:50 2025 by rpki-client