$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer File: 8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.cer (raw, json) Hash identifier: ZOXXxp3cNomwHKN0fk/5yF5/D4FwBP552VUcrkDXsu4= Subject key identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 404577C87D1ECF8C367E822096110F775956DD00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft caRepository: rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 17 Aug 2025 02:17:43 +0000 Certificate not after: Sun 16 Aug 2026 02:22:43 +0000 Subordinate resources: IP: 103.118.124.0/22 IP: 2403:31c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:45:77:c8:7d:1e:cf:8c:36:7e:82:20:96:11:0f:77:59:56:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 17 02:17:43 2025 GMT Not After : Aug 16 02:22:43 2026 GMT Subject: CN=8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ba:32:90:30:a7:cf:6a:0b:2d:52:a2:27:56: 82:43:01:e8:7e:14:06:44:d9:7f:df:37:f2:16:b3: 70:ab:8d:4c:55:64:af:c2:ff:90:da:5b:f9:41:c5: ab:8f:aa:f2:e7:6d:3a:7c:42:c6:1c:cb:51:54:f2: 2f:2d:4d:52:06:28:71:ff:55:55:0d:02:e0:0a:b0: a9:a0:f4:9d:32:4b:a2:28:3d:ec:9d:b6:5e:40:60: 76:68:09:1b:7e:6f:cf:94:09:02:bc:65:f2:12:4f: 1e:61:33:dd:c8:0a:e7:0e:14:c2:03:1e:c8:af:28: e4:18:59:60:fd:0c:bc:f5:75:fa:e0:e0:5e:f9:39: 46:fd:65:e6:f2:b8:65:be:50:e3:58:c5:22:bc:0d: f5:64:69:16:58:e9:b3:9b:00:1e:79:58:5b:fd:6b: c4:e3:0f:29:89:1b:b9:a7:41:ec:ea:79:ee:ed:1d: 75:d4:1e:b1:50:56:92:b9:f8:75:b5:3a:6d:7d:e3: 8e:b4:38:ab:39:d6:50:76:92:b7:9a:56:d0:48:d4: a9:b9:1f:24:ec:5c:cd:87:89:33:8e:76:b0:14:0a: 1d:80:00:81:2e:34:f0:51:9c:0d:95:87:13:05:44: d5:bb:a5:3f:8c:f5:67:15:fc:e3:1b:24:55:d5:e0: df:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:5F:A2:EB:D7:AF:40:39:38:83:FB:08:E7:1B:DF:41:AA:E2:0F:57 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2d2a5b51-bc00-4d6b-8761-c7d0d3f6de12/0/8C5FA2EBD7AF40393883FB08E71BDF41AAE20F57.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.118.124.0/22 IPv6: 2403:31c0::/32 Signature Algorithm: sha256WithRSAEncryption 1a:13:b8:5a:4b:c6:22:fb:ce:ff:62:07:3d:f6:ca:05:1e:1f: d7:5a:2f:04:45:80:af:b6:ae:7f:03:0d:66:0e:48:76:0e:e3: 2c:56:d7:22:93:94:97:1d:e3:f4:c4:40:b0:3c:41:48:3c:9e: 5c:5e:85:ab:5d:89:e9:ba:3c:1e:bb:9e:ff:19:40:d6:de:a6: ac:1d:78:7c:72:b1:6b:86:46:78:74:f7:c4:c3:90:b1:3b:87: 06:b1:70:74:fd:8a:0c:b0:d7:55:a0:26:58:c9:f5:8c:fd:58: 39:63:b8:27:60:d8:82:bc:7f:2e:cb:46:54:17:05:f5:7e:12: 1f:6d:06:83:51:1f:68:15:8b:fe:7a:4f:de:dd:3d:b4:8f:cb: 87:9e:f6:81:cc:00:13:00:c8:2f:59:34:f2:f9:09:68:15:f4: 74:91:91:91:fc:a5:94:6d:36:e4:1f:8c:22:68:ee:d7:95:92: 12:13:1b:0d:da:13:9e:8d:7b:6a:fd:39:a3:6e:cf:c1:61:85: 10:4e:31:f6:b9:22:51:23:8d:cb:aa:4b:d0:ed:cd:4c:55:39: 86:f1:83:e6:49:20:62:25:18:b6:68:18:58:ce:a2:92:02:73: d9:7b:bd:89:5c:9a:ac:48:79:0a:02:09:30:78:6f:4f:3e:91: 7d:fb:79:21 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUQEV3yH0ez4w2foIglhEPd1lW3QAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxNzAyMTc0M1oX DTI2MDgxNjAyMjI0M1owMzExMC8GA1UEAxMoOEM1RkEyRUJEN0FGNDAzOTM4ODNG QjA4RTcxQkRGNDFBQUUyMEY1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANS6MpAwp89qCy1SoidWgkMB6H4UBkTZf9838hazcKuNTFVkr8L/kNpb+UHF q4+q8udtOnxCxhzLUVTyLy1NUgYocf9VVQ0C4AqwqaD0nTJLoig97J22XkBgdmgJ G35vz5QJArxl8hJPHmEz3cgK5w4UwgMeyK8o5BhZYP0MvPV1+uDgXvk5Rv1l5vK4 Zb5Q41jFIrwN9WRpFljps5sAHnlYW/1rxOMPKYkbuadB7Op57u0dddQesVBWkrn4 dbU6bX3jjrQ4qznWUHaSt5pW0EjUqbkfJOxczYeJM452sBQKHYAAgS408FGcDZWH EwVE1bulP4z1ZxX84xskVdXg39ECAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIxfouvXr0A5OIP7COcb30Gq4g9XMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZDJhNWI1MS1iYzAwLTRkNmItODc2MS1jN2QwZDNmNmRlMTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkMmE1YjUx LWJjMDAtNGQ2Yi04NzYxLWM3ZDBkM2Y2ZGUxMi8wLzhDNUZBMkVCRDdBRjQwMzkz ODgzRkIwOEU3MUJERjQxQUFFMjBGNTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJndnwwDQQCAAIwBwMFACQDMcAwDQYJKoZIhvcNAQELBQADggEBABoTuFpLxiL7 zv9iBz32ygUeH9daLwRFgK+2rn8DDWYOSHYO4yxW1yKTlJcd4/TEQLA8QUg8nlxe hatdiem6PB67nv8ZQNbepqwdeHxysWuGRnh098TDkLE7hwaxcHT9igyw11WgJljJ 9Yz9WDljuCdg2IK8fy7LRlQXBfV+Eh9tBoNRH2gVi/56T97dPbSPy4ee9oHMABMA yC9ZNPL5CWgV9HSRkZH8pZRtNuQfjCJo7teVkhITGw3aE56Ne2r9OaNuz8FhhRBO Mfa5IlEjjcuqS9DtzUxVOYbxg+ZJIGIlGLZoGFjOopICc9l7vYlcmqxIeQoCCTB4 b08+kX37eSE= -----END CERTIFICATE-----Generated at Sat Aug 23 08:59:00 2025 by rpki-client