$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer File: 889933E416F356762F7F72858168C9C8A2E241C7.cer (raw, json) Hash identifier: q3EEi/v9dGXLMQrYTfCoewilgejYidT4OgrjpHdx/pM= Subject key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4A84D1BC9EBAFFA8328E643476F3C269A07A9A6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft caRepository: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 30 Jun 2025 21:28:33 +0000 Certificate not after: Mon 29 Jun 2026 21:33:33 +0000 Subordinate resources: IP: 103.167.236.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 05:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:84:d1:bc:9e:ba:ff:a8:32:8e:64:34:76:f3:c2:69:a0:7a:9a:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 30 21:28:33 2025 GMT Not After : Jun 29 21:33:33 2026 GMT Subject: CN=889933E416F356762F7F72858168C9C8A2E241C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:06:fe:1a:0c:5f:ac:f1:5c:47:35:e6:29:ef: 44:44:94:55:cb:d0:40:ad:33:07:de:9a:c0:dd:73: 81:91:ea:1d:6e:37:bd:ca:1c:4a:30:13:36:ce:63: 51:42:74:36:be:92:04:b0:a6:6d:2b:ea:20:a9:0d: c5:f3:7d:65:cb:e2:85:90:85:34:6d:cb:f0:a4:d2: 0e:13:ba:7e:eb:0b:36:41:22:79:68:12:92:86:5e: 48:4f:9d:4b:95:67:ae:7c:c4:db:91:37:e4:c7:47: cb:9c:84:73:15:2f:6c:d4:45:39:f1:85:83:47:8e: e4:62:ee:b2:98:67:4b:c8:b2:ba:3d:de:a7:92:9d: e2:7a:a1:0a:64:80:a9:9b:38:91:be:c8:4e:af:28: 1f:13:5f:6b:ff:ad:fe:cc:12:b2:0b:27:37:be:86: 46:5f:73:26:cd:20:0b:05:ca:dc:99:47:ac:8a:74: 09:68:1f:e4:f4:6d:67:72:98:c0:90:ff:96:df:ce: 8a:a0:26:5d:bc:96:57:59:f8:28:d9:94:86:d0:23: 3f:99:a5:86:30:78:89:82:b1:a2:9e:be:fc:a1:1a: d9:8f:84:53:ea:f7:0d:7b:60:84:1a:ad:6f:5b:39: ae:a9:21:ab:49:16:04:f8:e8:00:9d:83:a9:67:28: cf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.236.0/23 Signature Algorithm: sha256WithRSAEncryption 58:22:a7:d6:f6:eb:15:34:d2:0d:bc:ab:29:81:24:12:5a:01: 01:43:9f:ee:e0:c5:81:f0:d5:7d:fd:e8:c4:81:92:7d:08:17: 04:c1:bf:12:bc:21:97:f3:a3:94:45:9d:1e:60:34:c4:bf:c1: 11:73:80:92:0a:4b:c0:f4:a5:c9:c9:13:fe:f7:79:70:02:a0: 26:c0:48:a8:fd:22:f2:0d:45:36:7a:75:ec:a3:8d:24:f0:b1: d9:6f:d6:ab:72:d8:45:75:8a:bc:1b:1e:2a:1f:8a:e0:b2:7b: d0:c3:06:b2:6a:20:ee:fa:dd:63:75:7a:59:6b:1d:9b:d3:0e: c9:0c:a9:35:34:c5:28:d3:89:41:1f:7e:96:f2:d6:ae:e6:ac: c2:07:da:6b:db:01:2a:40:89:3a:4f:9b:38:e8:5a:59:ec:87: fe:fb:7b:70:eb:ea:bc:41:8b:a7:11:d5:2c:2e:e7:2d:0b:b4: f6:a8:7c:d5:09:1b:5b:5d:9d:82:ed:94:8e:ad:49:a6:62:9a: 18:76:5c:49:eb:c0:76:14:4e:af:92:8e:0e:8a:db:e6:f6:2c: 92:d6:35:96:9f:f8:c0:ce:b9:56:b4:5e:87:90:df:22:dc:46: ba:5c:21:b9:0c:a1:8a:7c:24:9d:d6:7a:41:f8:a6:70:85:a6: c0:95:43:ab -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSoTRvJ66/6gyjmQ0dvPCaaB6mm4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYzMDIxMjgzM1oX DTI2MDYyOTIxMzMzM1owMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3 Mjg1ODE2OEM5QzhBMkUyNDFDNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOEG/hoMX6zxXEc15invRESUVcvQQK0zB96awN1zgZHqHW43vcocSjATNs5j UUJ0Nr6SBLCmbSvqIKkNxfN9ZcvihZCFNG3L8KTSDhO6fusLNkEieWgSkoZeSE+d S5VnrnzE25E35MdHy5yEcxUvbNRFOfGFg0eO5GLusphnS8iyuj3ep5Kd4nqhCmSA qZs4kb7ITq8oHxNfa/+t/swSsgsnN76GRl9zJs0gCwXK3JlHrIp0CWgf5PRtZ3KY wJD/lt/OiqAmXbyWV1n4KNmUhtAjP5mlhjB4iYKxop6+/KEa2Y+EU+r3DXtghBqt b1s5rqkhq0kWBPjoAJ2DqWcoz6ECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIiZM+QW81Z2L39yhYFoycii4kHHMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlY2ZkM2Y1 LTg1ZGEtNDhhNy1iNTAyLWY2MWE1OTc5NmMzMy8wLzg4OTkzM0U0MTZGMzU2NzYy RjdGNzI4NTgxNjhDOUM4QTJFMjQxQzcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnp+wwDQYJKoZIhvcNAQELBQADggEBAFgip9b26xU00g28qymBJBJaAQFDn+7g xYHw1X396MSBkn0IFwTBvxK8IZfzo5RFnR5gNMS/wRFzgJIKS8D0pcnJE/73eXAC oCbASKj9IvINRTZ6deyjjSTwsdlv1qty2EV1irwbHiofiuCye9DDBrJqIO763WN1 ellrHZvTDskMqTU0xSjTiUEffpby1q7mrMIH2mvbASpAiTpPmzjoWlnsh/77e3Dr 6rxBi6cR1Swu5y0LtPaofNUJG1tdnYLtlI6tSaZimhh2XEnrwHYUTq+Sjg6K2+b2 LJLWNZaf+MDOuVa0XoeQ3yLcRrpcIbkMoYp8JJ3WekH4pnCFpsCVQ6s= -----END CERTIFICATE-----Generated at Tue Jul 1 03:54:08 2025 by rpki-client