$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer File: A142E54B1173D871802220D7946F31C1C8F55F58.cer (raw, json) Hash identifier: zx/oO2HgzgKuGm3A/ZxBFN7V2UYpd/+/R9FLecIunHg= Subject key identifier: A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 682A2C1866E53021C62A487425652A2A65D5D955 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft caRepository: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 30 Jul 2025 04:03:25 +0000 Certificate not after: Wed 29 Jul 2026 04:08:25 +0000 Subordinate resources: IP: 103.49.228.0/22 IP: 2402:580::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:2a:2c:18:66:e5:30:21:c6:2a:48:74:25:65:2a:2a:65:d5:d9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 30 04:03:25 2025 GMT Not After : Jul 29 04:08:25 2026 GMT Subject: CN=A142E54B1173D871802220D7946F31C1C8F55F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:90:85:43:19:d5:e7:cd:7c:a0:f2:06:5b:92: 5e:0d:d0:d8:95:9a:62:9c:87:07:7a:2f:d6:6d:ec: db:13:ce:ba:f8:e8:aa:61:b6:7c:d1:f7:95:d7:9a: 92:da:1e:94:b8:84:c4:7d:09:78:9a:e7:34:39:6f: 68:77:33:79:e4:02:46:72:c3:57:bf:60:21:d8:bc: c6:fd:69:9b:2e:83:72:1a:1f:ae:57:7d:25:16:46: 20:82:bf:8c:7c:ff:0f:73:f6:91:4d:9a:e6:5b:b0: 7a:cb:5a:f7:91:c0:64:7b:00:d9:92:30:f2:8e:19: 2a:47:a7:88:76:ec:ce:85:f2:79:a4:82:98:d4:ba: 76:00:d9:b2:f7:af:2e:c6:bb:6d:bf:bd:76:48:f1: ae:bd:71:0f:ed:5f:9b:c1:6f:bc:1f:49:44:f1:96: 2e:6c:04:8e:8a:2e:5d:fe:ac:a8:f7:4a:83:a9:80: c7:83:d7:75:0b:cd:49:22:d9:44:d7:5b:cd:b9:95: 14:af:fd:76:6b:92:6f:6e:18:a2:18:f0:96:b1:6a: ef:c8:86:ab:aa:e3:43:81:31:40:cf:bc:fa:be:a1: 04:a0:58:5d:8b:29:dc:ba:fa:de:cd:59:0b:d9:6f: dd:75:e6:4c:c8:ef:ed:43:70:5d:cf:04:6f:d8:44: a1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.49.228.0/22 IPv6: 2402:580::/32 Signature Algorithm: sha256WithRSAEncryption 54:b4:4f:18:37:fd:70:40:49:28:23:1e:58:6b:70:03:18:06: a2:e6:dd:42:bc:ab:17:77:0f:1b:39:79:99:af:d7:e6:d8:9f: 9f:92:9c:93:7f:d4:00:8f:81:56:6e:ae:45:7f:24:54:60:bf: 4f:c2:6c:20:01:30:83:0f:ef:4d:82:d4:f6:6d:14:5c:30:e5: 3d:b8:38:48:73:d1:df:63:70:00:d2:f2:91:2a:b8:d9:75:1a: e0:9b:c1:bf:4b:10:71:53:65:36:56:3c:73:c5:3e:9e:10:5d: f0:f8:0f:86:84:2b:90:65:51:6b:9a:bf:23:85:70:ad:8d:63: 88:d6:cf:42:4c:4d:57:61:cf:09:d2:f2:01:c0:de:bf:0e:ae: 97:b4:cd:9e:b3:91:b2:6a:46:1b:05:8b:9d:a9:da:0f:06:10: 4d:93:ad:de:57:ae:74:c2:66:89:7e:ec:ca:d8:56:3c:68:50: bc:cc:65:e0:67:c5:a2:6c:84:04:dd:c3:b0:b6:8d:a0:4b:41: c9:49:87:5b:53:ff:ea:cd:2f:ce:d9:a5:bb:20:35:f2:c2:5c: 49:f2:94:1a:a5:49:fe:a1:53:61:ff:b4:20:9e:e4:7c:71:34: 42:18:2e:56:9a:5b:53:3a:13:55:06:72:b8:07:3d:46:dd:f4: 58:02:d6:a6 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUaCosGGblMCHGKkh0JWUqKmXV2VUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDczMDA0MDMyNVoX DTI2MDcyOTA0MDgyNVowMzExMC8GA1UEAxMoQTE0MkU1NEIxMTczRDg3MTgwMjIy MEQ3OTQ2RjMxQzFDOEY1NUY1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOyQhUMZ1efNfKDyBluSXg3Q2JWaYpyHB3ov1m3s2xPOuvjoqmG2fNH3ldea ktoelLiExH0JeJrnNDlvaHczeeQCRnLDV79gIdi8xv1pmy6Dchofrld9JRZGIIK/ jHz/D3P2kU2a5luwesta95HAZHsA2ZIw8o4ZKkeniHbszoXyeaSCmNS6dgDZsvev Lsa7bb+9dkjxrr1xD+1fm8FvvB9JRPGWLmwEjoouXf6sqPdKg6mAx4PXdQvNSSLZ RNdbzbmVFK/9dmuSb24YohjwlrFq78iGq6rjQ4ExQM+8+r6hBKBYXYsp3Lr63s1Z C9lv3XXmTMjv7UNwXc8Eb9hEobMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKFC5UsRc9hxgCIg15RvMcHI9V9YMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMzcxOTI5ZC1jM2QwLTRkYWEtYjVmZC1hMjQ5NTYwZDVkMDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzNzE5Mjlk LWMzZDAtNGRhYS1iNWZkLWEyNDk1NjBkNWQwNC8wL0ExNDJFNTRCMTE3M0Q4NzE4 MDIyMjBENzk0NkYzMUMxQzhGNTVGNTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnMeQwDQQCAAIwBwMFACQCBYAwDQYJKoZIhvcNAQELBQADggEBAFS0Txg3/XBA SSgjHlhrcAMYBqLm3UK8qxd3Dxs5eZmv1+bYn5+SnJN/1ACPgVZurkV/JFRgv0/C bCABMIMP702C1PZtFFww5T24OEhz0d9jcADS8pEquNl1GuCbwb9LEHFTZTZWPHPF Pp4QXfD4D4aEK5BlUWuavyOFcK2NY4jWz0JMTVdhzwnS8gHA3r8Orpe0zZ6zkbJq RhsFi52p2g8GEE2Trd5XrnTCZol+7MrYVjxoULzMZeBnxaJshATdw7C2jaBLQclJ h1tT/+rNL87ZpbsgNfLCXEnylBqlSf6hU2H/tCCe5HxxNEIYLlaaW1M6E1UGcrgH PUbd9FgC1qY= -----END CERTIFICATE-----Generated at Sat Aug 23 07:17:07 2025 by rpki-client