$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer File: 7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer (raw, json) Hash identifier: d8J3ORNEU7VCRApZB9c+bA8nvn08GMePCqB78H9ALXQ= Subject key identifier: 7A:82:C5:E5:CF:F6:8F:50:08:CC:06:8E:C7:CA:6D:A3:83:C3:3D:56 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 43CF5DED0B3B66F83038C92B13D6D6D3AC37EE6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft caRepository: rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 05 Oct 2025 04:08:19 +0000 Certificate not after: Sun 04 Oct 2026 04:13:19 +0000 Subordinate resources: IP: 210.79.190.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:cf:5d:ed:0b:3b:66:f8:30:38:c9:2b:13:d6:d6:d3:ac:37:ee:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 5 04:08:19 2025 GMT Not After : Oct 4 04:13:19 2026 GMT Subject: CN=7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:51:46:45:b2:5f:cb:c2:b0:cd:6d:1e:a0:c0: 92:54:5f:11:b6:32:f6:87:1c:51:fd:4a:0b:45:94: f3:e9:01:d4:fc:7f:71:2c:ec:01:2e:ba:71:a5:61: e7:62:f7:29:11:4f:3a:18:dd:98:2b:7e:96:96:c2: 7e:ce:43:50:6f:17:92:58:32:de:b6:81:2a:30:36: 4f:ac:3d:79:a4:3d:7f:c6:9d:18:b1:2f:6b:27:21: dc:94:31:19:1b:f8:56:d1:7e:5d:ab:3e:cb:b1:d3: db:fc:8a:3f:be:75:80:12:f8:0d:9b:e4:27:e8:67: eb:43:8d:18:fe:00:53:8b:71:b6:98:4e:77:12:4d: 4b:6c:e8:b9:7a:14:47:39:8f:b6:c9:d1:05:8a:b3: e0:f7:be:47:73:11:28:16:1f:e5:65:6e:36:0f:be: eb:be:92:d4:d3:6a:33:20:fc:0d:a6:13:f1:ba:5f: ad:29:1b:b5:c4:a9:f9:e2:c5:f2:de:97:e5:9a:22: 15:b6:7c:b0:e9:07:69:ba:a0:ad:25:95:8d:f1:79: a4:28:1b:29:36:f8:ed:d7:6e:0f:5e:bc:25:9e:3d: b5:4c:a7:c1:5d:d2:e8:61:6c:eb:41:e1:2f:0c:43: 4f:3d:eb:73:f8:ca:31:9b:6e:d2:4e:ca:d0:0d:91: 59:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7A:82:C5:E5:CF:F6:8F:50:08:CC:06:8E:C7:CA:6D:A3:83:C3:3D:56 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.79.190.0/23 Signature Algorithm: sha256WithRSAEncryption 37:4d:f0:c7:67:0d:dc:34:81:b7:f6:09:80:d0:ec:7e:c3:ef: 62:0a:73:0c:f4:99:32:93:34:bb:09:62:b7:aa:da:81:8d:15: a8:53:cf:e5:c0:e6:db:cd:83:79:96:27:df:26:f6:68:bc:dd: 31:f4:c6:ad:9d:0b:41:06:20:1f:36:1d:60:d4:8d:77:57:a1: 26:f4:d9:7b:51:17:ac:38:2d:f5:b3:66:0a:48:b9:2d:db:9c: 23:d5:a6:34:46:24:15:82:54:e8:93:12:e2:1e:ba:a6:53:a3: 6e:8f:82:e4:33:79:51:8e:c8:f8:7b:19:c6:51:d5:90:62:45: 34:8e:c0:20:9b:40:7e:b2:98:6a:2c:9e:e0:84:f9:f3:93:f7: ca:1d:9c:e1:0c:2c:b0:a2:50:80:89:a7:be:1c:f6:61:5c:8e: 84:ac:16:f3:73:33:66:4f:ab:1c:b8:7b:9f:d4:6a:8e:29:25: ba:7f:10:85:29:6a:8c:0a:c2:b4:40:ab:4c:42:77:76:f0:a3: b8:37:7e:0a:fc:08:7c:1b:0d:d0:e4:c2:72:3a:76:29:4d:6c: 9e:4d:ca:9a:9c:32:8d:9b:16:7f:2e:b9:04:77:cb:a2:c7:33: a7:54:ec:53:3c:8e:12:48:2b:2c:02:d2:b2:c3:fd:ce:3a:4a: b9:66:c2:07 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQ89d7Qs7ZvgwOMkrE9bW06w37m0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAwNTA0MDgxOVoX DTI2MTAwNDA0MTMxOVowMzExMC8GA1UEAxMoN0E4MkM1RTVDRkY2OEY1MDA4Q0Mw NjhFQzdDQTZEQTM4M0MzM0Q1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxRRkWyX8vCsM1tHqDAklRfEbYy9occUf1KC0WU8+kB1Px/cSzsAS66caVh 52L3KRFPOhjdmCt+lpbCfs5DUG8Xklgy3raBKjA2T6w9eaQ9f8adGLEvaych3JQx GRv4VtF+Xas+y7HT2/yKP751gBL4DZvkJ+hn60ONGP4AU4txtphOdxJNS2zouXoU RzmPtsnRBYqz4Pe+R3MRKBYf5WVuNg++676S1NNqMyD8DaYT8bpfrSkbtcSp+eLF 8t6X5ZoiFbZ8sOkHabqgrSWVjfF5pCgbKTb47dduD168JZ49tUynwV3S6GFs60Hh LwxDTz3rc/jKMZtu0k7K0A2RWTsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHqCxeXP9o9QCMwGjsfKbaODwz1WMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMjYwZjAzYy04OTY4LTQ3MGYtYjYxOC1kM2ViMmM5MjhhNGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyNjBmMDNj LTg5NjgtNDcwZi1iNjE4LWQzZWIyYzkyOGE0ZC8wLzdBODJDNUU1Q0ZGNjhGNTAw OENDMDY4RUM3Q0E2REEzODNDMzNENTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHST74wDQYJKoZIhvcNAQELBQADggEBADdN8MdnDdw0gbf2CYDQ7H7D72IKcwz0 mTKTNLsJYreq2oGNFahTz+XA5tvNg3mWJ98m9mi83TH0xq2dC0EGIB82HWDUjXdX oSb02XtRF6w4LfWzZgpIuS3bnCPVpjRGJBWCVOiTEuIeuqZTo26PguQzeVGOyPh7 GcZR1ZBiRTSOwCCbQH6ymGosnuCE+fOT98odnOEMLLCiUICJp74c9mFcjoSsFvNz M2ZPqxy4e5/Uao4pJbp/EIUpaowKwrRAq0xCd3bwo7g3fgr8CHwbDdDkwnI6dilN bJ5NypqcMo2bFn8uuQR3y6LHM6dU7FM8jhJIKywC0rLD/c46Srlmwgc= -----END CERTIFICATE-----Generated at Mon Oct 20 03:04:09 2025 by rpki-client