$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer File: A17DC55845B70106CEB3A498496454BE640F44AB.cer (raw, json) Hash identifier: PlZavZW6I2rwrwIPAY3rrX50p4LxSyBdSH20Gs40Xh8= Subject key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5053A8CBFA3849B588139052C14B735C694C0816 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft caRepository: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 07 Jun 2025 15:24:33 +0000 Certificate not after: Sat 06 Jun 2026 15:29:33 +0000 Subordinate resources: IP: 103.31.248.0/23 IP: 103.52.60.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 21:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:53:a8:cb:fa:38:49:b5:88:13:90:52:c1:4b:73:5c:69:4c:08:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 7 15:24:33 2025 GMT Not After : Jun 6 15:29:33 2026 GMT Subject: CN=A17DC55845B70106CEB3A498496454BE640F44AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:05:e6:d5:a2:71:e6:1a:13:85:a7:c4:7d: 53:6f:eb:15:4c:30:ba:19:96:1b:0d:2c:fd:f1:01: f0:9b:99:25:0e:97:b5:37:94:37:49:52:36:48:a0: 52:3b:be:ca:56:04:db:21:de:39:de:0f:ea:53:f0: f2:17:cc:2b:74:ab:ce:f6:9a:c1:20:13:20:4c:e4: 79:a7:e4:63:af:66:77:41:5f:72:3e:73:02:8a:e6: c4:a5:43:78:b1:bf:c9:08:84:51:b0:3d:42:21:dd: 9a:9d:77:13:82:e2:2c:2f:8c:bf:32:46:df:9a:04: 51:14:d5:2d:1a:b2:39:ba:15:10:81:90:32:9f:60: ba:39:46:91:88:51:cf:2c:d3:3a:be:cf:a7:df:90: 6f:3e:f5:1c:80:f5:66:44:ed:5d:33:61:59:19:d0: e4:57:3a:cd:e1:bc:1d:b5:72:4a:c4:e0:0d:68:2a: 98:3a:ad:66:fe:2e:ff:d7:e6:72:e5:94:4d:3c:d0: cf:99:f3:e7:1d:8e:1d:53:23:5f:82:cb:fb:9c:1d: 9f:29:d4:ce:a9:bf:2a:47:87:6f:3d:da:44:6d:94: 0c:f3:a0:61:6d:35:ef:a1:77:14:01:ef:92:af:1d: 51:ef:d4:28:82:3f:dc:2b:e9:ae:a9:a3:c9:e1:86: f6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.248.0/23 103.52.60.0/23 Signature Algorithm: sha256WithRSAEncryption 06:0f:ac:ad:94:af:5b:67:4d:f0:95:d3:52:04:3a:e1:1c:11: 4c:a6:ba:71:c0:86:52:a6:25:e7:e0:4e:76:da:4e:59:3a:ac: 21:ce:48:62:36:85:bc:5f:98:14:1c:71:92:95:e7:bf:07:28: 09:f0:f3:5b:c7:b4:e9:fc:c3:17:a6:dc:82:17:7b:71:4c:3c: 50:7b:e4:b5:16:a5:9c:d8:a1:27:06:64:71:37:c8:0b:86:5f: bd:31:e5:0c:bc:58:c8:39:87:d7:e5:9f:80:99:2c:fa:18:4e: 25:dd:e2:e8:ab:fc:77:78:2b:f2:38:5d:29:56:58:45:5d:07: 80:1a:a0:08:aa:db:9d:ba:6b:65:de:76:05:71:c9:09:56:35: 85:55:db:90:c8:66:97:51:38:35:ae:15:c5:99:7b:e0:db:9b: 1d:b1:ee:25:7a:34:5b:7d:4f:78:e9:ee:6b:08:10:a8:54:0f: be:1d:b5:37:3c:46:00:f7:40:7d:32:34:a5:0a:97:6d:f9:e5: 7d:1e:24:5c:50:50:d1:b7:6f:cc:37:ad:92:19:69:74:e6:6d: 84:c0:26:c3:17:ae:e9:cc:47:b6:24:18:e4:9c:0b:b6:bb:3b: e4:59:c3:bc:4b:eb:31:62:d7:1b:71:2c:b9:5d:69:eb:4e:de: 17:22:a6:26 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUUFOoy/o4SbWIE5BSwUtzXGlMCBYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwNzE1MjQzM1oX DTI2MDYwNjE1MjkzM1owMzExMC8GA1UEAxMoQTE3REM1NTg0NUI3MDEwNkNFQjNB NDk4NDk2NDU0QkU2NDBGNDRBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL10BebVonHmGhOFp8R9U2/rFUwwuhmWGw0s/fEB8JuZJQ6XtTeUN0lSNkig Uju+ylYE2yHeOd4P6lPw8hfMK3SrzvaawSATIEzkeafkY69md0Ffcj5zAormxKVD eLG/yQiEUbA9QiHdmp13E4LiLC+MvzJG35oEURTVLRqyOboVEIGQMp9gujlGkYhR zyzTOr7Pp9+Qbz71HID1ZkTtXTNhWRnQ5Fc6zeG8HbVySsTgDWgqmDqtZv4u/9fm cuWUTTzQz5nz5x2OHVMjX4LL+5wdnynUzqm/KkeHbz3aRG2UDPOgYW0176F3FAHv kq8dUe/UKII/3CvprqmjyeGG9ukCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKF9xVhFtwEGzrOkmElkVL5kD0SrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kNjFiOGNjYy02YzIyLTQyNGUtOTYxNC04YWI4YWQyODg0OWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q2MWI4Y2Nj LTZjMjItNDI0ZS05NjE0LThhYjhhZDI4ODQ5Yy8wL0ExN0RDNTU4NDVCNzAxMDZD RUIzQTQ5ODQ5NjQ1NEJFNjQwRjQ0QUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAFnH/gDBAFnNDwwDQYJKoZIhvcNAQELBQADggEBAAYPrK2Ur1tnTfCV01IEOuEc EUymunHAhlKmJefgTnbaTlk6rCHOSGI2hbxfmBQccZKV578HKAnw81vHtOn8wxem 3IIXe3FMPFB75LUWpZzYoScGZHE3yAuGX70x5Qy8WMg5h9fln4CZLPoYTiXd4uir /Hd4K/I4XSlWWEVdB4AaoAiq2526a2XedgVxyQlWNYVV25DIZpdRODWuFcWZe+Db mx2x7iV6NFt9T3jp7msIEKhUD74dtTc8RgD3QH0yNKUKl2355X0eJFxQUNG3b8w3 rZIZaXTmbYTAJsMXrunMR7YkGOScC7a7O+RZw7xL6zFi1xtxLLldaetO3hcipiY= -----END CERTIFICATE-----Generated at Mon Jun 30 19:30:32 2025 by rpki-client