$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7B7F414EB90DB2AC9713729961F3D35102FEA537.cer File: 7B7F414EB90DB2AC9713729961F3D35102FEA537.cer (raw, json) Hash identifier: UvtYsSiA1wCWlaHuOp4/W/MD0jeQp3N5FtLph2uN+6c= Subject key identifier: 7B:7F:41:4E:B9:0D:B2:AC:97:13:72:99:61:F3:D3:51:02:FE:A5:37 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6D93BCAFC681C82113EB3089E52DC3173C7D1ED1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft caRepository: rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 16 Oct 2025 04:41:09 +0000 Certificate not after: Thu 15 Oct 2026 04:46:09 +0000 Subordinate resources: IP: 103.115.35.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:93:bc:af:c6:81:c8:21:13:eb:30:89:e5:2d:c3:17:3c:7d:1e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 16 04:41:09 2025 GMT Not After : Oct 15 04:46:09 2026 GMT Subject: CN=7B7F414EB90DB2AC9713729961F3D35102FEA537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5b:8a:b7:7d:4f:3b:48:7d:65:13:28:ac:4f: 02:36:32:be:66:f4:39:0c:4d:e2:a9:c9:e3:a4:02: 2d:2d:1d:76:28:84:06:7e:08:9c:1c:9f:bb:6a:37: 41:5e:16:6f:71:00:ab:55:7f:07:ef:10:78:04:60: dc:ec:84:ab:c9:79:d2:55:14:83:8e:0a:d5:89:b2: 4d:75:07:b7:4c:64:cd:2d:31:53:ce:ad:d4:37:12: bc:48:ef:6f:81:46:24:74:43:13:b9:e5:ca:32:fc: 5e:46:4f:b6:06:fe:55:1f:f3:d8:3b:87:71:09:d8: 5c:6f:ad:63:a1:2a:7a:f3:6c:38:7a:6f:b4:03:e8: c1:0a:7d:14:c5:65:fb:a5:ee:db:5e:08:40:1d:ce: 49:57:97:4f:b9:04:da:15:92:ac:33:72:fa:84:1f: be:14:af:fa:b3:9f:a0:64:fc:a2:fe:1c:e5:f7:f3: 7c:0a:3e:e8:7e:25:fd:f6:eb:57:83:03:21:e9:a9: c8:c3:50:de:cb:1e:49:74:f4:8a:e9:87:a8:6b:4c: 71:ae:d7:be:34:54:4d:08:77:23:10:5a:1b:5f:e4: 4a:c4:ab:f1:c6:34:79:a8:eb:54:0a:75:71:24:c1: 56:83:81:68:59:94:4d:16:da:71:51:b9:7b:2d:4b: fa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7B:7F:41:4E:B9:0D:B2:AC:97:13:72:99:61:F3:D3:51:02:FE:A5:37 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.115.35.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:f6:1f:2b:cb:15:15:ea:07:cb:b8:62:54:bd:12:4d:53:de: d2:4d:1a:aa:bf:cb:79:33:81:96:b9:c5:10:24:36:88:53:3d: f6:08:16:6d:08:f3:84:f3:90:7f:5f:00:a4:f7:ed:3b:98:95: 4e:99:17:dd:52:87:e9:65:bb:d4:7e:c5:ef:4d:06:dd:02:b0: 4e:36:0f:5f:16:cd:e4:79:5a:2c:38:f1:e2:a4:b6:6b:9b:d2: 71:f8:34:e7:00:a4:f8:bf:28:ce:f2:fb:b9:6c:74:44:9d:7c: 34:65:7c:d5:9c:99:bf:cf:9f:03:a8:e0:6e:3e:01:c5:da:48: f9:71:95:ac:da:e9:d0:cb:9b:5f:55:46:ff:98:3c:6b:a2:0b: f4:32:f5:05:e6:62:aa:80:2d:7c:a4:d9:6c:c5:81:e2:a6:0c: 86:9f:11:96:06:f1:b9:ac:48:9b:49:0c:0a:40:e1:63:8e:86: 40:0b:8b:4f:4c:f0:b7:b1:f7:2b:ed:d4:ac:c5:93:17:be:16: 2a:e3:dc:c6:46:5f:7e:ef:8e:05:c6:43:aa:48:f0:06:f8:0b: 28:51:74:bd:a6:ed:17:fa:56:fa:25:ee:77:58:c3:5a:b5:57: 9c:e5:52:06:41:f4:10:28:ef:b3:71:d2:17:ac:d8:c0:96:b3: ae:7e:49:4c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbZO8r8aByCET6zCJ5S3DFzx9HtEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAxNjA0NDEwOVoX DTI2MTAxNTA0NDYwOVowMzExMC8GA1UEAxMoN0I3RjQxNEVCOTBEQjJBQzk3MTM3 Mjk5NjFGM0QzNTEwMkZFQTUzNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKlbird9TztIfWUTKKxPAjYyvmb0OQxN4qnJ46QCLS0ddiiEBn4InByfu2o3 QV4Wb3EAq1V/B+8QeARg3OyEq8l50lUUg44K1YmyTXUHt0xkzS0xU86t1DcSvEjv b4FGJHRDE7nlyjL8XkZPtgb+VR/z2DuHcQnYXG+tY6EqevNsOHpvtAPowQp9FMVl +6Xu214IQB3OSVeXT7kE2hWSrDNy+oQfvhSv+rOfoGT8ov4c5ffzfAo+6H4l/fbr V4MDIempyMNQ3sseSXT0iumHqGtMca7XvjRUTQh3IxBaG1/kSsSr8cY0eajrVAp1 cSTBVoOBaFmUTRbacVG5ey1L+h0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHt/QU65DbKslxNymWHz01EC/qU3MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85OTg0MzJjZC1hMDQ3LTQ4NWItODE0My01OWEzNTMyYzA3YjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5ODQzMmNk LWEwNDctNDg1Yi04MTQzLTU5YTM1MzJjMDdiNy8wLzdCN0Y0MTRFQjkwREIyQUM5 NzEzNzI5OTYxRjNEMzUxMDJGRUE1MzcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABncyMwDQYJKoZIhvcNAQELBQADggEBAG32HyvLFRXqB8u4YlS9Ek1T3tJNGqq/ y3kzgZa5xRAkNohTPfYIFm0I84TzkH9fAKT37TuYlU6ZF91Sh+llu9R+xe9NBt0C sE42D18WzeR5Wiw48eKktmub0nH4NOcApPi/KM7y+7lsdESdfDRlfNWcmb/PnwOo 4G4+AcXaSPlxlaza6dDLm19VRv+YPGuiC/Qy9QXmYqqALXyk2WzFgeKmDIafEZYG 8bmsSJtJDApA4WOOhkALi09M8Lex9yvt1KzFkxe+Firj3MZGX37vjgXGQ6pI8Ab4 CyhRdL2m7Rf6Vvol7ndYw1q1V5zlUgZB9BAo77Nx0hes2MCWs65+SUw= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:40 2025 by rpki-client