$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer File: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer (raw, json) Hash identifier: zvizMuOv+zx0gnQoCBuBqYRni9uS29E42NbO0nTiNvI= Subject key identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5176A5022F2E143308FCAAA71AEAFFE5C6BCB7CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft caRepository: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 23 Aug 2025 05:20:59 +0000 Certificate not after: Sat 22 Aug 2026 05:25:59 +0000 Subordinate resources: IP: 103.27.192.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 17:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:76:a5:02:2f:2e:14:33:08:fc:aa:a7:1a:ea:ff:e5:c6:bc:b7:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 23 05:20:59 2025 GMT Not After : Aug 22 05:25:59 2026 GMT Subject: CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0e:81:5e:a5:0a:a0:da:50:5d:3e:49:a5:d4: e3:4a:ac:d6:b7:c0:26:0d:5a:e3:c5:38:a4:20:c8: 09:04:b1:56:b4:8b:d7:b3:f2:be:41:2b:62:ad:60: 0c:f0:8e:21:a6:2f:84:e6:4c:5c:66:4d:a4:d7:7d: 1c:7b:7d:a2:5a:f0:29:ed:7e:c7:65:38:38:c3:45: 4e:49:27:f3:07:74:5f:b8:bb:56:bb:94:e5:55:1d: fa:8b:73:af:4e:fc:1a:5c:97:82:7f:75:23:89:da: 24:33:af:8a:45:12:27:7c:21:f2:ae:de:60:50:2f: 22:87:5f:52:d4:19:fe:35:d2:cb:f1:58:05:f4:ca: 98:77:06:74:f7:1e:a3:ac:45:d6:64:22:f5:36:f3: fa:a7:d2:3b:df:88:53:3e:fc:b0:30:a0:bd:7c:bd: 0a:6e:77:9c:48:28:19:79:6d:ae:59:c9:98:1f:ff: fd:d7:c4:1f:f6:48:af:cd:02:1f:87:45:b9:eb:82: ab:d0:ea:90:3f:f7:22:92:1a:e1:53:24:6a:3e:fc: 65:c1:5e:19:96:cd:09:bd:f7:36:fb:80:c5:83:72: 46:bc:50:ba:2c:47:46:3c:fa:89:56:18:bb:94:92: b2:5b:72:81:09:09:64:73:d0:d8:db:29:56:48:28: 6f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.27.192.0/23 Signature Algorithm: sha256WithRSAEncryption 87:8a:df:c6:15:2c:cb:74:8c:2c:28:0f:08:7c:95:fe:1d:7b: d3:2f:2d:be:96:ed:78:48:09:ba:b9:51:55:4f:89:1b:32:4b: df:4e:5b:a1:d5:0a:da:f3:e5:84:a5:2e:a4:7d:85:68:1a:8a: 36:e3:63:35:80:32:7e:bd:c4:8d:14:23:cf:24:69:14:01:d2: e4:47:68:05:f5:fd:f4:b9:95:67:6c:cb:c5:99:57:e1:81:e0: 13:a2:3f:f1:08:84:05:88:9a:0f:18:ea:0e:09:c7:b2:cd:c9: fa:dc:d1:a7:7d:62:e5:d8:fc:71:e7:d5:a3:f1:ca:14:12:4d: 5a:f1:c6:ab:1e:05:f0:d4:17:d8:35:f8:b8:6c:d0:0d:16:e1: bd:c2:eb:fc:5d:9d:f2:42:a4:03:c9:1e:f7:08:38:e1:2f:77: 3d:68:e8:7d:44:de:37:13:af:4a:13:78:e9:f4:c7:9d:d5:6e: ba:72:a5:93:3d:60:5d:6f:f9:0c:5a:ec:6b:9c:d3:b7:b3:79: b2:3f:3f:e3:fa:a8:f2:bc:9d:65:ac:c5:2b:86:4b:0e:77:47: 3a:e9:be:bd:ab:56:86:c7:01:49:e3:4d:72:c0:4f:7f:ea:d0: 3a:98:c7:3e:bd:bc:fa:5e:07:21:49:0f:17:dc:17:2e:04:a7: b2:43:d8:5e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUXalAi8uFDMI/KqnGur/5ca8t8owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyMzA1MjA1OVoX DTI2MDgyMjA1MjU1OVowMzExMC8GA1UEAxMoN0RBNUY3QjQyOTMxRUUzQTQxNEI5 QTVCNzk5NjcwM0RGNzBCRDg5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMsOgV6lCqDaUF0+SaXU40qs1rfAJg1a48U4pCDICQSxVrSL17PyvkErYq1g DPCOIaYvhOZMXGZNpNd9HHt9olrwKe1+x2U4OMNFTkkn8wd0X7i7VruU5VUd+otz r078GlyXgn91I4naJDOvikUSJ3wh8q7eYFAvIodfUtQZ/jXSy/FYBfTKmHcGdPce o6xF1mQi9Tbz+qfSO9+IUz78sDCgvXy9Cm53nEgoGXltrlnJmB///dfEH/ZIr80C H4dFueuCq9DqkD/3IpIa4VMkaj78ZcFeGZbNCb33NvuAxYNyRrxQuixHRjz6iVYY u5SSsltygQkJZHPQ2NspVkgob+MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH2l97QpMe46QUuaW3mWcD33C9iXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80MjI3YjE3Ni00YzE3LTQyNDQtYmFkZi1mNDk2YmNiMTVlMjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQyMjdiMTc2 LTRjMTctNDI0NC1iYWRmLWY0OTZiY2IxNWUyMC8wLzdEQTVGN0I0MjkzMUVFM0E0 MTRCOUE1Qjc5OTY3MDNERjcwQkQ4OTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnG8AwDQYJKoZIhvcNAQELBQADggEBAIeK38YVLMt0jCwoDwh8lf4de9MvLb6W 7XhICbq5UVVPiRsyS99OW6HVCtrz5YSlLqR9hWgaijbjYzWAMn69xI0UI88kaRQB 0uRHaAX1/fS5lWdsy8WZV+GB4BOiP/EIhAWImg8Y6g4Jx7LNyfrc0ad9YuXY/HHn 1aPxyhQSTVrxxqseBfDUF9g1+Lhs0A0W4b3C6/xdnfJCpAPJHvcIOOEvdz1o6H1E 3jcTr0oTeOn0x53VbrpypZM9YF1v+Qxa7Guc07ezebI/P+P6qPK8nWWsxSuGSw53 Rzrpvr2rVobHAUnjTXLAT3/q0DqYxz69vPpeByFJDxfcFy4Ep7JD2F4= -----END CERTIFICATE-----Generated at Sat Aug 23 09:19:09 2025 by rpki-client