$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/99F644C407D1C8C133A923CC84619FC228E767AC.cer File: 99F644C407D1C8C133A923CC84619FC228E767AC.cer (raw, json) Hash identifier: csgeVByA9M57Rs6Qu8QM/bEOETCaBvcaocmdN/XQpYA= Subject key identifier: 99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2EEEB946BF203531B4642A3BE9E44B6AE8DA6FF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft caRepository: rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 24 Sep 2025 06:57:56 +0000 Certificate not after: Wed 23 Sep 2026 07:02:56 +0000 Subordinate resources: IP: 103.169.44.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ee:b9:46:bf:20:35:31:b4:64:2a:3b:e9:e4:4b:6a:e8:da:6f:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 24 06:57:56 2025 GMT Not After : Sep 23 07:02:56 2026 GMT Subject: CN=99F644C407D1C8C133A923CC84619FC228E767AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:55:f3:7f:66:4c:07:29:43:ee:08:46:f5:7d: ec:b5:51:df:18:15:08:ac:03:de:69:92:3c:9f:20: e8:90:15:3d:91:b4:4e:b4:83:37:fa:80:84:69:ed: ba:3f:ef:44:ac:1a:0d:25:e8:4f:b9:ba:d2:1b:a7: 26:86:f2:cb:b1:97:d8:07:e6:35:cb:51:e6:77:67: 41:c5:6b:e4:aa:3d:af:85:71:5e:bf:8f:bd:69:25: a3:11:22:d9:16:a0:94:b0:51:d1:aa:9b:0b:8c:62: 3e:51:5e:25:9f:da:70:95:05:5b:80:db:63:25:a6: 38:75:60:de:8d:e0:48:07:9c:75:b7:44:2d:7e:3b: 1d:1a:6c:cb:55:eb:d5:a2:dd:e4:12:29:61:61:59: e4:0d:dd:7a:6e:af:cd:62:1d:7c:23:80:4a:b5:3a: 3e:d1:f6:9e:c4:30:dd:ed:dc:3d:a2:c8:69:9d:37: 9c:ac:0a:d2:91:98:79:0a:f6:0c:9a:11:6c:d3:5b: d6:c3:f9:7d:0f:c3:21:48:3f:9b:91:51:21:10:c5: db:2a:4e:61:61:43:4f:48:c4:0d:f9:d8:a0:ef:08: d7:c5:b1:b1:bf:bc:18:da:3e:9a:4e:21:e6:f8:a6: 06:f0:5f:2c:bd:c8:4e:3c:21:2b:99:79:af:59:96: 6b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:F6:44:C4:07:D1:C8:C1:33:A9:23:CC:84:61:9F:C2:28:E7:67:AC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/946b5248-ce33-4e97-882f-f6145f319026/0/99F644C407D1C8C133A923CC84619FC228E767AC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.44.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:18:1c:f6:7d:b9:24:1d:8b:82:43:eb:c9:75:82:25:66:22: b6:e5:a0:c0:94:68:d0:a7:0d:ee:08:20:89:84:30:fc:5d:f1: c4:2b:07:97:cc:7d:cd:7c:5a:38:44:a3:5e:d4:aa:27:4c:2a: 6c:aa:0a:8a:d4:07:fe:af:ae:4c:74:09:1c:19:ce:06:ac:0b: 29:c4:56:71:42:b3:24:3a:01:ef:2b:60:d1:a7:dc:0c:2a:b3: af:c1:1f:aa:20:80:13:8b:65:59:25:a8:ce:29:f0:c0:73:ac: 2e:8c:9a:27:42:c9:20:b6:48:46:4b:f6:87:b1:89:75:1a:45: f9:6d:02:34:c1:1e:d6:91:a3:dd:b2:70:89:74:a8:8e:62:00: 07:ba:43:2a:c2:c3:4e:ee:83:e1:09:fe:3c:7c:b7:8e:08:85: 73:b5:77:8c:a2:9c:df:ef:a1:4f:f9:6c:39:d9:35:6d:70:90: 05:e0:c1:e4:b6:72:fc:2e:f1:63:f1:ea:2d:56:3f:b4:a4:9d: 07:a6:7b:2c:ad:39:2d:13:75:4e:5b:a8:52:f7:29:48:66:e8: 04:8c:91:fc:57:96:a6:e5:5c:ec:50:fe:a5:18:c1:b7:d6:b9: 28:db:54:35:d6:d2:cd:1b:19:0d:c0:68:f1:ee:c1:81:ae:61: 7b:f6:31:29 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULu65Rr8gNTG0ZCo76eRLaujab/AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyNDA2NTc1NloX DTI2MDkyMzA3MDI1NlowMzExMC8GA1UEAxMoOTlGNjQ0QzQwN0QxQzhDMTMzQTky M0NDODQ2MTlGQzIyOEU3NjdBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPxV839mTAcpQ+4IRvV97LVR3xgVCKwD3mmSPJ8g6JAVPZG0TrSDN/qAhGnt uj/vRKwaDSXoT7m60hunJobyy7GX2AfmNctR5ndnQcVr5Ko9r4VxXr+PvWkloxEi 2RaglLBR0aqbC4xiPlFeJZ/acJUFW4DbYyWmOHVg3o3gSAecdbdELX47HRpsy1Xr 1aLd5BIpYWFZ5A3dem6vzWIdfCOASrU6PtH2nsQw3e3cPaLIaZ03nKwK0pGYeQr2 DJoRbNNb1sP5fQ/DIUg/m5FRIRDF2ypOYWFDT0jEDfnYoO8I18Wxsb+8GNo+mk4h 5vimBvBfLL3ITjwhK5l5r1mWa1cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJn2RMQH0cjBM6kjzIRhn8Io52esMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NDZiNTI0OC1jZTMzLTRlOTctODgyZi1mNjE0NWYzMTkwMjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0NmI1MjQ4 LWNlMzMtNGU5Ny04ODJmLWY2MTQ1ZjMxOTAyNi8wLzk5RjY0NEM0MDdEMUM4QzEz M0E5MjNDQzg0NjE5RkMyMjhFNzY3QUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqSwwDQYJKoZIhvcNAQELBQADggEBAG0YHPZ9uSQdi4JD68l1giVmIrbloMCU aNCnDe4IIImEMPxd8cQrB5fMfc18WjhEo17UqidMKmyqCorUB/6vrkx0CRwZzgas CynEVnFCsyQ6Ae8rYNGn3Awqs6/BH6oggBOLZVklqM4p8MBzrC6MmidCySC2SEZL 9oexiXUaRfltAjTBHtaRo92ycIl0qI5iAAe6QyrCw07ug+EJ/jx8t44IhXO1d4yi nN/voU/5bDnZNW1wkAXgweS2cvwu8WPx6i1WP7SknQemeyytOS0TdU5bqFL3KUhm 6ASMkfxXlqblXOxQ/qUYwbfWuSjbVDXW0s0bGQ3AaPHuwYGuYXv2MSk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:56:25 2025 by rpki-client