$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer File: 84DE1C79BB946275D6796DBDBC79083CB24881A6.cer (raw, json) Hash identifier: 2af8DbuXV0k4enRlsd2y5Qc64naCpjcA80fgoN266vY= Subject key identifier: 84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 29841B5C9F765C3B6D64E3FBD1150BF9CFC399FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft caRepository: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 23 Jun 2025 04:44:52 +0000 Certificate not after: Mon 22 Jun 2026 04:49:52 +0000 Subordinate resources: IP: 43.241.246.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:84:1b:5c:9f:76:5c:3b:6d:64:e3:fb:d1:15:0b:f9:cf:c3:99:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 23 04:44:52 2025 GMT Not After : Jun 22 04:49:52 2026 GMT Subject: CN=84DE1C79BB946275D6796DBDBC79083CB24881A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:aa:11:79:6f:65:a6:b0:bf:42:57:fc:ee: de:f3:85:5c:bb:26:ec:97:45:5c:02:f3:7d:52:2b: fb:e0:aa:44:91:d6:8f:29:60:92:6c:e4:f3:a1:e7: af:90:56:7d:f8:36:63:3f:0f:d5:de:14:2f:e5:61: 87:16:58:7c:9a:dd:22:04:fc:b9:d5:41:ea:b2:df: 64:a0:61:f4:6c:6e:83:ca:d0:9e:07:c1:32:9a:8f: b3:1c:66:55:32:44:38:dd:b9:ca:80:dd:5b:8c:69: 25:9f:16:8f:6d:c7:ea:f7:4f:d4:85:87:b5:ff:3b: 07:97:f7:e4:ff:0d:cf:d7:10:c4:18:b7:8a:18:bd: e3:29:c8:7f:9b:44:85:0b:68:4b:4d:9a:aa:28:dc: 21:8d:81:e9:3b:09:88:6b:b7:25:a7:04:36:de:45: c2:4c:d4:f5:f1:a4:97:0e:7c:e0:81:2a:99:1b:99: 90:31:00:db:5b:86:d5:91:7d:4c:47:16:c3:0a:f6: f6:fc:40:aa:1a:a5:6b:e5:1d:fe:70:14:3f:bb:7e: 1f:5c:a7:82:e4:18:49:a0:4a:cc:8c:c1:f3:00:4c: 7d:76:5c:74:48:2d:c5:35:35:bb:6b:18:6a:cf:47: 1a:19:3f:f2:87:07:d1:f9:45:e1:f4:61:a1:3c:72: ca:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.246.0/23 Signature Algorithm: sha256WithRSAEncryption 61:22:8e:53:a7:5f:ea:3e:f3:e9:c2:ac:25:b4:5c:ef:3e:fd: e7:b9:e3:77:11:8a:6e:2c:76:99:cc:a6:25:5d:3f:d4:f0:bc: 54:b4:fd:46:b3:df:7b:69:5a:b9:e7:56:fc:79:07:6e:5c:6a: 69:dd:81:fa:80:73:b9:32:20:0b:d3:5e:cf:2a:c9:81:0b:cc: e2:76:42:b3:88:14:76:d1:16:13:69:df:ed:44:5c:d0:50:94: 86:c5:31:8f:1d:da:af:fd:c3:80:04:7e:b9:dd:71:da:6a:ea: be:9e:13:43:6e:35:d6:38:a2:8f:cf:ca:10:0e:fa:14:6d:fb: 9b:0f:d5:86:8d:16:96:64:04:18:ba:4a:64:4a:e3:84:f0:99: 39:6c:3c:53:c1:d5:84:db:35:58:16:0d:d0:d7:8f:87:98:d9: db:75:11:88:fe:11:cd:2f:4c:aa:e2:33:ea:cd:b8:44:e5:0e: 2b:c4:e4:19:73:a7:57:56:27:b4:76:23:c9:33:f1:99:13:93: 5b:20:cc:eb:6c:97:94:37:f8:26:ea:b2:0c:d8:cb:eb:ec:05: c8:3d:7c:b1:9e:83:1b:14:33:11:7c:b5:cd:09:60:23:76:21: 24:ce:91:7c:26:9a:cb:ba:c9:ba:fc:d7:72:62:a9:78:9f:66: 6e:29:ef:db -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKYQbXJ92XDttZOP70RUL+c/Dmf4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYyMzA0NDQ1MloX DTI2MDYyMjA0NDk1MlowMzExMC8GA1UEAxMoODRERTFDNzlCQjk0NjI3NUQ2Nzk2 REJEQkM3OTA4M0NCMjQ4ODFBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2oqhF5b2WmsL9CV/zu3vOFXLsm7JdFXALzfVIr++CqRJHWjylgkmzk86Hn r5BWffg2Yz8P1d4UL+VhhxZYfJrdIgT8udVB6rLfZKBh9Gxug8rQngfBMpqPsxxm VTJEON25yoDdW4xpJZ8Wj23H6vdP1IWHtf87B5f35P8Nz9cQxBi3ihi94ynIf5tE hQtoS02aqijcIY2B6TsJiGu3JacENt5FwkzU9fGklw584IEqmRuZkDEA21uG1ZF9 TEcWwwr29vxAqhqla+Ud/nAUP7t+H1ynguQYSaBKzIzB8wBMfXZcdEgtxTU1u2sY as9HGhk/8ocH0flF4fRhoTxyyskCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFITeHHm7lGJ11nltvbx5CDyySIGmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMTA4NzE1OS0zMGRkLTQxYmEtOTk3OS0wMzU4ODExMmE3ODAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YxMDg3MTU5 LTMwZGQtNDFiYS05OTc5LTAzNTg4MTEyYTc4MC8wLzg0REUxQzc5QkI5NDYyNzVE Njc5NkRCREJDNzkwODNDQjI0ODgxQTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAEr8fYwDQYJKoZIhvcNAQELBQADggEBAGEijlOnX+o+8+nCrCW0XO8+/ee543cR im4sdpnMpiVdP9TwvFS0/Uaz33tpWrnnVvx5B25camndgfqAc7kyIAvTXs8qyYEL zOJ2QrOIFHbRFhNp3+1EXNBQlIbFMY8d2q/9w4AEfrndcdpq6r6eE0NuNdY4oo/P yhAO+hRt+5sP1YaNFpZkBBi6SmRK44TwmTlsPFPB1YTbNVgWDdDXj4eY2dt1EYj+ Ec0vTKriM+rNuETlDivE5Blzp1dWJ7R2I8kz8ZkTk1sgzOtsl5Q3+CbqsgzYy+vs Bcg9fLGegxsUMxF8tc0JYCN2ISTOkXwmmsu6ybr813JiqXifZm4p79s= -----END CERTIFICATE-----Generated at Tue Jul 1 10:28:07 2025 by rpki-client