$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer File: 98F4C6575CF8F756A44BFFD461A09A3F38D00F04.cer (raw, json) Hash identifier: LCq15GqkWFT752rtzwH1FGH4UZ7BkdwZNMiAIyS2yxU= Subject key identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5A7B5D29379C7D680E7828F4995C2EB346AD6F56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft caRepository: rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 11 Aug 2025 16:44:12 +0000 Certificate not after: Mon 10 Aug 2026 16:49:12 +0000 Subordinate resources: IP: 103.142.33.0/24 IP: 103.143.218.0/24 IP: 203.142.26.0/24 IP: 2001:df1:2e80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:7b:5d:29:37:9c:7d:68:0e:78:28:f4:99:5c:2e:b3:46:ad:6f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 11 16:44:12 2025 GMT Not After : Aug 10 16:49:12 2026 GMT Subject: CN=98F4C6575CF8F756A44BFFD461A09A3F38D00F04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:03:24:7b:59:5f:88:77:1e:4a:04:49:50:67: 5b:a5:86:b6:92:9b:ff:e9:45:6e:e2:3e:93:da:98: 7e:93:00:e6:48:b3:0b:8a:8f:cf:d7:d0:cd:2d:ed: 33:84:41:c8:35:4c:25:a8:08:23:fc:5e:ad:8f:43: f0:db:cd:47:8d:24:bd:14:30:cd:0e:b1:b5:57:34: 8e:b7:e9:80:fa:b5:99:25:54:d7:ce:18:2b:4d:09: 0f:63:91:54:91:cd:20:e3:89:84:b8:1c:55:02:42: e6:8a:70:78:29:7c:63:0d:7c:c8:b5:d2:4f:98:4e: 34:11:bb:42:58:a2:71:99:bd:c4:59:ce:f0:d3:7d: 80:04:e0:7c:37:65:90:47:cc:18:51:b7:80:4e:74: c1:1f:ee:ea:3f:6d:cf:bd:52:99:e1:e7:0c:71:74: 36:bc:77:3e:48:45:89:57:81:a8:61:0a:54:94:2a: 92:3a:b8:01:1c:07:61:ea:bb:01:21:f6:48:e9:ea: 71:e1:58:da:5a:b1:35:79:ad:fd:99:fc:ba:5c:ba: c0:cd:2e:7c:5b:22:b7:d5:02:15:cd:5b:8a:96:36: e5:8a:8e:6b:60:3e:d3:dc:3e:65:fc:2d:8d:67:3c: f2:cc:53:bd:29:1b:ef:b5:18:45:48:18:38:5f:ce: 73:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:F4:C6:57:5C:F8:F7:56:A4:4B:FF:D4:61:A0:9A:3F:38:D0:0F:04 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d7db6c4f-9fdf-47f6-b24c-033fe3a44d50/0/98F4C6575CF8F756A44BFFD461A09A3F38D00F04.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.142.33.0/24 103.143.218.0/24 203.142.26.0/24 IPv6: 2001:df1:2e80::/48 Signature Algorithm: sha256WithRSAEncryption 46:70:c7:9b:27:26:ee:d4:7a:e1:ca:67:05:51:6a:59:bc:8e: 70:72:27:bb:2c:55:bd:49:d0:2b:8b:9f:61:81:9c:e0:0a:57: bd:28:ee:6f:c9:2e:a9:8d:ef:47:3f:e2:86:eb:ab:10:b9:22: a7:f7:cc:4c:18:67:39:1e:54:52:89:a3:d2:8f:76:1e:84:4b: b4:04:d8:79:5a:04:43:68:e9:fc:48:ac:19:55:63:61:0f:be: 0f:97:26:7d:8c:da:7c:3a:c9:6d:1e:84:54:7c:e0:65:1b:34: b0:6f:72:ae:ce:0d:0b:45:26:79:77:87:61:0e:14:1c:89:fc: aa:a6:26:e7:d0:27:90:25:f0:6e:2c:df:5b:60:ba:38:22:5a: 59:db:d4:95:0a:0d:46:dc:12:fb:73:24:47:cd:9d:c1:f9:98: 9e:c4:05:b6:9e:31:ad:b8:d9:27:e5:3f:21:dc:70:d4:45:4b: 3d:b4:06:7d:94:23:a6:f9:04:2f:cd:37:ab:0f:49:59:37:fe: cc:81:ea:52:63:07:dc:13:8f:3f:78:06:5c:20:f6:1c:1d:dc: ed:5c:b1:44:9b:1d:2f:df:d6:91:cd:78:c6:bc:34:aa:af:ab: 86:ba:7b:21:70:e0:9a:97:03:61:87:0e:33:63:86:6d:36:db: 4e:93:cd:6d -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUWntdKTecfWgOeCj0mVwus0atb1YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxMTE2NDQxMloX DTI2MDgxMDE2NDkxMlowMzExMC8GA1UEAxMoOThGNEM2NTc1Q0Y4Rjc1NkE0NEJG RkQ0NjFBMDlBM0YzOEQwMEYwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM8DJHtZX4h3HkoESVBnW6WGtpKb/+lFbuI+k9qYfpMA5kizC4qPz9fQzS3t M4RByDVMJagII/xerY9D8NvNR40kvRQwzQ6xtVc0jrfpgPq1mSVU184YK00JD2OR VJHNIOOJhLgcVQJC5opweCl8Yw18yLXST5hONBG7QliicZm9xFnO8NN9gATgfDdl kEfMGFG3gE50wR/u6j9tz71SmeHnDHF0Nrx3PkhFiVeBqGEKVJQqkjq4ARwHYeq7 ASH2SOnqceFY2lqxNXmt/Zn8uly6wM0ufFsit9UCFc1bipY25YqOa2A+09w+Zfwt jWc88sxTvSkb77UYRUgYOF/Oc4MCAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJj0xldc+PdWpEv/1GGgmj840A8EMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kN2RiNmM0Zi05ZmRmLTQ3ZjYtYjI0Yy0wMzNmZTNhNDRkNTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3ZGI2YzRm LTlmZGYtNDdmNi1iMjRjLTAzM2ZlM2E0NGQ1MC8wLzk4RjRDNjU3NUNGOEY3NTZB NDRCRkZENDYxQTA5QTNGMzhEMDBGMDQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID BABnjiEDBABnj9oDBADLjhowDwQCAAIwCQMHACABDfEugDANBgkqhkiG9w0BAQsF AAOCAQEARnDHmycm7tR64cpnBVFqWbyOcHInuyxVvUnQK4ufYYGc4ApXvSjub8ku qY3vRz/ihuurELkip/fMTBhnOR5UUomj0o92HoRLtATYeVoEQ2jp/EisGVVjYQ++ D5cmfYzafDrJbR6EVHzgZRs0sG9yrs4NC0UmeXeHYQ4UHIn8qqYm59AnkCXwbizf W2C6OCJaWdvUlQoNRtwS+3MkR82dwfmYnsQFtp4xrbjZJ+U/Idxw1EVLPbQGfZQj pvkEL803qw9JWTf+zIHqUmMH3BOPP3gGXCD2HB3c7VyxRJsdL9/Wkc14xrw0qq+r hrp7IXDgmpcDYYcOM2OGbTbbTpPNbQ== -----END CERTIFICATE-----Generated at Sat Aug 23 07:15:10 2025 by rpki-client