$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer (raw, json) Hash identifier: 5YNw+gitBVgEx0R3RF0UgbEyPN/JMiaIIGqHi0vIs4c= Subject key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 02442C64D550D8D51BBF1B770CED9A7BDF544B7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft caRepository: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 22 Aug 2025 03:34:34 +0000 Certificate not after: Fri 21 Aug 2026 03:39:34 +0000 Subordinate resources: IP: 103.97.76.0/22 IP: 2401:8440::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:44:2c:64:d5:50:d8:d5:1b:bf:1b:77:0c:ed:9a:7b:df:54:4b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 22 03:34:34 2025 GMT Not After : Aug 21 03:39:34 2026 GMT Subject: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b8:0d:f2:07:2f:87:a4:f7:4e:e1:65:b0:37: 44:99:60:2f:68:ef:ec:53:06:e6:46:80:68:34:6c: 06:28:fb:d3:05:72:1d:44:ca:bc:51:5d:cd:16:f0: b7:e7:cf:c7:2e:e3:30:54:c9:f3:88:2f:23:ab:07: 59:70:fe:d3:9e:b0:53:33:ac:2f:c4:04:3b:f3:54: d7:98:e9:60:8c:56:f0:b2:ac:eb:e4:42:29:05:76: 32:10:7f:52:a2:4a:e8:d3:8d:e5:0b:ad:cd:56:f0: 1d:08:97:8f:c2:17:df:67:fd:30:3f:b6:b3:78:70: 64:d2:66:2f:34:fa:97:4f:36:77:4e:13:48:22:88: ed:c2:76:0b:33:e2:68:ba:00:79:e7:c5:0b:08:84: da:a6:0d:6f:af:fd:32:1f:63:5b:bd:44:06:3e:77: b7:de:f6:b7:aa:94:cd:be:47:f6:63:31:7b:a5:aa: 3b:78:ce:01:04:71:50:8c:1a:45:55:b2:1b:8d:1c: 5b:59:63:4c:72:08:da:b9:fb:c0:84:d1:39:2a:89: d8:a7:54:4f:e2:0c:f2:fc:2a:c6:56:fc:4a:0f:a5: fc:70:47:9d:08:1b:da:f1:d5:62:28:d1:ea:e6:93: 74:e4:77:48:fa:61:3b:fc:dc:8a:e6:34:d9:97:30: ff:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.97.76.0/22 IPv6: 2401:8440::/32 Signature Algorithm: sha256WithRSAEncryption 02:fc:ce:ce:3a:99:b0:ed:74:13:72:1d:64:e6:4c:10:28:c1: 72:ba:47:ad:b5:9a:c3:6b:fe:34:63:80:01:4e:b1:d3:aa:1b: 98:38:1c:c4:ff:94:13:dd:0f:0e:d1:d1:f9:61:32:05:27:eb: 27:c0:f1:f8:0d:09:83:fc:21:48:b5:4b:14:b0:29:9e:68:89: 82:18:01:19:85:c6:1c:25:c0:6d:c0:94:7c:31:dc:9f:93:48: c1:d7:9a:42:fc:17:fc:ae:4d:3e:36:b7:31:c8:f2:0e:34:d1: 73:90:bf:25:71:bf:70:92:65:db:31:24:8c:3d:57:e5:c0:41: d2:f5:f2:ff:97:43:6c:af:e6:fd:73:93:c5:ca:17:fd:5c:ea: 10:ab:6e:63:4e:b8:6d:e0:3b:26:a0:77:38:86:d6:fa:86:bf: 8b:0c:b0:38:5c:1f:d6:d6:5c:8d:dd:43:13:7c:5b:27:0b:42: 02:44:e0:8a:25:87:70:9c:42:0c:87:7c:ce:6c:b2:8a:62:85: 23:a8:7a:7d:63:31:dd:4c:9c:ae:fa:73:6c:58:44:b2:cf:00: 17:9d:e7:90:46:9b:3c:98:64:ae:0c:48:3e:e8:42:b5:bd:a3: 7f:bd:51:a3:d4:f5:5d:38:d5:4c:8f:d7:c4:ed:38:77:11:43: 5a:b7:a7:1f -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUAkQsZNVQ2NUbvxt3DO2ae99US3owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyMjAzMzQzNFoX DTI2MDgyMTAzMzkzNFowMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdE MTBGOUU3M0ZGRDBCQUI5M0Y2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM+4DfIHL4ek907hZbA3RJlgL2jv7FMG5kaAaDRsBij70wVyHUTKvFFdzRbw t+fPxy7jMFTJ84gvI6sHWXD+056wUzOsL8QEO/NU15jpYIxW8LKs6+RCKQV2MhB/ UqJK6NON5QutzVbwHQiXj8IX32f9MD+2s3hwZNJmLzT6l082d04TSCKI7cJ2CzPi aLoAeefFCwiE2qYNb6/9Mh9jW71EBj53t972t6qUzb5H9mMxe6WqO3jOAQRxUIwa RVWyG40cW1ljTHII2rn7wITROSqJ2KdUT+IM8vwqxlb8Sg+l/HBHnQgb2vHVYijR 6uaTdOR3SPphO/zciuY02Zcw/70CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH1kuPTPtocUETfRD55z/9C6uT9nMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1N2IwZDdl LWVhZGUtNDMxOC1hYjIwLThjN2YyZDViZTY5Zi8wLzdENjRCOEY0Q0ZCNjg3MTQx MTM3RDEwRjlFNzNGRkQwQkFCOTNGNjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnYUwwDQQCAAIwBwMFACQBhEAwDQYJKoZIhvcNAQELBQADggEBAAL8zs46mbDt dBNyHWTmTBAowXK6R621msNr/jRjgAFOsdOqG5g4HMT/lBPdDw7R0flhMgUn6yfA 8fgNCYP8IUi1SxSwKZ5oiYIYARmFxhwlwG3AlHwx3J+TSMHXmkL8F/yuTT42tzHI 8g400XOQvyVxv3CSZdsxJIw9V+XAQdL18v+XQ2yv5v1zk8XKF/1c6hCrbmNOuG3g OyagdziG1vqGv4sMsDhcH9bWXI3dQxN8WycLQgJE4Iolh3CcQgyHfM5ssopihSOo en1jMd1MnK76c2xYRLLPABed55BGmzyYZK4MSD7oQrW9o3+9UaPU9V041UyP18Tt OHcRQ1q3px8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:56:17 2025 by rpki-client