$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer File: 94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.cer (raw, json) Hash identifier: SisMV7ABoyOvcl8ehL5JKoNvPylRya2mWQ5kCqTuKuw= Subject key identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2A27A614289670BF7E5C1AD762BBA59D33A9D94D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft caRepository: rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 11 Sep 2025 08:04:37 +0000 Certificate not after: Thu 10 Sep 2026 08:09:37 +0000 Subordinate resources: IP: 103.154.230.0/23 IP: 2406:5dc0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:27:a6:14:28:96:70:bf:7e:5c:1a:d7:62:bb:a5:9d:33:a9:d9:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 11 08:04:37 2025 GMT Not After : Sep 10 08:09:37 2026 GMT Subject: CN=94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4a:51:99:54:ab:c0:a3:6b:1f:ee:0a:62:bc: 32:c4:3a:e6:fc:3c:00:b7:13:33:0e:6b:77:7e:71: 32:36:dc:b4:17:95:08:d9:9c:66:ad:a9:c7:6f:f0: a1:cd:42:00:15:a2:67:f3:73:b3:6a:c3:a5:e4:ab: 1e:c1:22:ab:5e:d3:f6:4d:4b:67:fc:70:18:a9:b9: 2b:25:92:ed:d6:ff:b0:01:79:3c:24:3a:bd:ab:4d: 12:a4:58:91:82:a6:92:12:60:9e:8d:1d:bc:df:3b: 95:21:9e:89:37:f1:51:79:f5:37:6e:15:db:60:cb: c1:51:66:af:8c:45:d6:2b:14:05:26:fb:30:2f:ca: a7:1a:2c:3d:27:06:63:f9:55:f3:4d:6b:d3:94:f9: ad:6c:e2:97:47:2d:a5:e4:06:7e:28:14:a6:de:9b: 12:8a:76:ba:07:8f:d0:7a:25:57:97:11:ba:c4:8e: 78:7b:e6:e3:fd:02:6b:c8:78:27:23:9e:c3:3c:ff: 59:34:1f:0b:b9:cb:48:fd:bd:4e:3b:53:79:b0:6c: 93:56:0b:5d:f3:03:53:4c:9e:9f:31:09:17:2e:21: 4e:c6:a1:82:62:33:2a:91:f0:21:ba:62:f0:68:42: db:e9:6e:de:d1:32:ed:43:f1:2c:05:17:6a:01:5c: 6c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:F7:5B:04:CE:BE:0D:F1:D0:B9:24:EC:F1:AD:9C:9C:13:99:23:83 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/52127feb-9615-4c58-a3bb-eef7b7a6547e/0/94F75B04CEBE0DF1D0B924ECF1AD9C9C13992383.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.230.0/23 IPv6: 2406:5dc0::/32 Signature Algorithm: sha256WithRSAEncryption 83:9a:f0:07:f4:39:15:ef:de:97:60:d8:20:79:a4:99:e4:69: 4a:4f:b2:c7:5d:1b:7c:3a:e1:6d:41:e4:cd:5f:e3:f2:53:1d: 91:37:ff:64:1e:9a:a1:d3:ca:bb:89:41:8e:59:92:da:8c:aa: a8:3f:87:89:08:17:6f:47:65:40:97:9a:bf:d6:e4:bd:f6:ea: 87:22:fb:51:48:f5:24:87:55:75:09:b1:4c:af:ab:61:d1:05: 87:dc:1e:71:d9:fa:45:24:55:95:88:ba:ab:a8:39:ad:a2:8d: da:73:47:37:2e:bd:e1:92:c4:d1:c0:06:71:39:46:0b:2a:2f: 7b:5a:7a:74:b5:8d:25:ac:77:55:97:81:12:9d:b5:f4:24:b1: 3e:55:a2:85:be:f3:28:20:e1:ca:66:25:12:b5:a1:30:dd:8c: 4c:69:ae:40:79:63:81:d5:6a:17:94:be:d8:14:a4:ce:a6:a2: 57:d6:4c:de:60:23:41:e2:6b:98:ee:b0:57:47:38:ea:43:95: ba:8b:32:1f:1b:24:4b:5e:aa:a2:74:6f:02:d1:68:c1:1d:ff: 19:3d:7d:46:95:94:4e:4d:84:66:d6:42:35:e8:db:2f:e7:b4: a7:c9:3b:b7:d8:6e:d2:fc:4f:5c:23:2c:17:9d:07:50:79:29: dd:17:cb:ba -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUKiemFCiWcL9+XBrXYrulnTOp2U0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxMTA4MDQzN1oX DTI2MDkxMDA4MDkzN1owMzExMC8GA1UEAxMoOTRGNzVCMDRDRUJFMERGMUQwQjky NEVDRjFBRDlDOUMxMzk5MjM4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMdKUZlUq8Cjax/uCmK8MsQ65vw8ALcTMw5rd35xMjbctBeVCNmcZq2px2/w oc1CABWiZ/Nzs2rDpeSrHsEiq17T9k1LZ/xwGKm5KyWS7db/sAF5PCQ6vatNEqRY kYKmkhJgno0dvN87lSGeiTfxUXn1N24V22DLwVFmr4xF1isUBSb7MC/KpxosPScG Y/lV801r05T5rWzil0ctpeQGfigUpt6bEop2ugeP0HolV5cRusSOeHvm4/0Ca8h4 JyOewzz/WTQfC7nLSP29TjtTebBsk1YLXfMDU0yenzEJFy4hTsahgmIzKpHwIbpi 8GhC2+lu3tEy7UPxLAUXagFcbDMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJT3WwTOvg3x0Lkk7PGtnJwTmSODMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MjEyN2ZlYi05NjE1LTRjNTgtYTNiYi1lZWY3YjdhNjU0N2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyMTI3ZmVi LTk2MTUtNGM1OC1hM2JiLWVlZjdiN2E2NTQ3ZS8wLzk0Rjc1QjA0Q0VCRTBERjFE MEI5MjRFQ0YxQUQ5QzlDMTM5OTIzODMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnmuYwDQQCAAIwBwMFACQGXcAwDQYJKoZIhvcNAQELBQADggEBAIOa8Af0ORXv 3pdg2CB5pJnkaUpPssddG3w64W1B5M1f4/JTHZE3/2QemqHTyruJQY5ZktqMqqg/ h4kIF29HZUCXmr/W5L326oci+1FI9SSHVXUJsUyvq2HRBYfcHnHZ+kUkVZWIuquo Oa2ijdpzRzcuveGSxNHABnE5RgsqL3taenS1jSWsd1WXgRKdtfQksT5VooW+8ygg 4cpmJRK1oTDdjExprkB5Y4HVaheUvtgUpM6molfWTN5gI0Hia5jusFdHOOpDlbqL Mh8bJEteqqJ0bwLRaMEd/xk9fUaVlE5NhGbWQjXo2y/ntKfJO7fYbtL8T1wjLBed B1B5Kd0Xy7o= -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:49 2025 by rpki-client