$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer File: A61585874729C58BB62740692BA8FA6ED286FDC9.cer (raw, json) Hash identifier: 2tgo2zbYfudeJNmQ5I8pM/cNY64XhOtqeQ5CmEzLpI0= Subject key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 26EC6F67AF8FC0BC6D5BAB2A447E1630AC729D32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft caRepository: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Jun 2025 19:29:43 +0000 Certificate not after: Tue 16 Jun 2026 19:34:43 +0000 Subordinate resources: IP: 103.245.178.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ec:6f:67:af:8f:c0:bc:6d:5b:ab:2a:44:7e:16:30:ac:72:9d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 17 19:29:43 2025 GMT Not After : Jun 16 19:34:43 2026 GMT Subject: CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:47:72:ea:45:ac:84:a5:c6:c9:76:b3:08: 3c:4d:34:ed:f3:48:5e:ba:5f:0a:3d:28:59:02:6d: 63:c0:83:f1:e3:c2:fd:df:1e:53:2a:45:ad:ec:c1: a0:80:01:85:56:4f:28:0b:29:31:c7:80:73:22:c9: 4f:38:f3:63:0f:b7:62:43:2b:fb:37:f3:da:cf:71: 65:b8:b4:48:21:9b:a8:6a:b2:d8:d9:05:4e:92:03: 40:f2:59:d9:22:98:b9:aa:4b:be:50:10:e7:7e:c9: 6e:10:08:28:de:f0:c0:3f:96:4e:cb:3f:ef:4d:f6: 82:ee:61:10:69:2c:0a:cc:48:d9:c9:c6:be:8d:5d: 22:5d:ac:15:27:9c:b2:e8:7e:07:fd:bb:dd:40:7d: dc:56:7a:a9:3d:ea:8c:a9:1b:a1:f1:2d:8b:86:f8: 3a:6b:73:5f:3b:c3:0e:08:7a:dc:65:ad:e9:b4:b8: 95:22:40:ca:2c:ef:bf:19:e6:3d:8a:7a:62:1e:19: 1e:51:4f:51:c4:77:57:01:ee:b7:b4:19:ed:97:97: 06:29:21:62:ff:ea:d6:3c:13:c9:a5:38:b0:ea:ae: 7d:1c:7b:a6:87:03:65:3c:79:1b:83:17:31:b2:fb: 71:07:dd:9e:2b:6f:27:c5:58:ab:1d:59:06:68:bb: 3a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.245.178.0/23 Signature Algorithm: sha256WithRSAEncryption 87:22:d6:35:12:b1:b0:3a:b9:ad:7d:59:c2:31:38:51:76:c1: 9a:05:59:a0:a5:ad:ad:dc:c4:fc:b5:0c:85:86:b8:6e:54:ea: 6c:18:66:c5:d4:23:45:66:7a:a0:49:dd:ed:7d:bd:96:13:6f: e1:93:40:7b:2d:4f:ee:89:43:3f:91:d9:f3:af:eb:fc:dd:d1: b7:72:04:fd:45:81:83:b0:7e:74:0f:a9:2c:36:b2:f8:6d:40: 07:ba:25:7f:27:53:fc:32:b0:c8:54:4c:50:dc:f6:73:02:c9: 21:48:d5:44:29:08:05:f6:aa:63:16:c7:70:d5:53:f2:1f:74: 80:2b:38:de:9d:15:08:f3:6b:88:6f:33:5d:4c:96:cd:22:c1: 09:3c:13:fe:1a:07:c4:f4:95:83:b1:0e:cb:51:57:06:25:34: 3b:ba:68:af:b1:c1:6e:21:ba:30:7d:dd:41:60:e0:f4:9e:2e: 43:ac:1f:bc:c8:0f:95:36:e8:9a:ef:5b:05:f2:54:65:99:e6: 73:c2:bf:be:8b:ac:1f:f5:19:56:d2:37:5c:66:5f:9c:eb:a7: 0c:f5:cf:08:0c:78:21:b6:91:1e:9e:82:6f:3d:81:77:6f:ab: 7f:ac:be:eb:25:3c:73:63:f0:c1:a1:94:0f:95:5e:6f:02:61: 3f:bb:04:78 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJuxvZ6+PwLxtW6sqRH4WMKxynTIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxNzE5Mjk0M1oX DTI2MDYxNjE5MzQ0M1owMzExMC8GA1UEAxMoQTYxNTg1ODc0NzI5QzU4QkI2Mjc0 MDY5MkJBOEZBNkVEMjg2RkRDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZdR3LqRayEpcbJdrMIPE007fNIXrpfCj0oWQJtY8CD8ePC/d8eUypFrezB oIABhVZPKAspMceAcyLJTzjzYw+3YkMr+zfz2s9xZbi0SCGbqGqy2NkFTpIDQPJZ 2SKYuapLvlAQ537JbhAIKN7wwD+WTss/7032gu5hEGksCsxI2cnGvo1dIl2sFSec suh+B/273UB93FZ6qT3qjKkbofEti4b4OmtzXzvDDgh63GWt6bS4lSJAyizvvxnm PYp6Yh4ZHlFPUcR3VwHut7QZ7ZeXBikhYv/q1jwTyaU4sOqufRx7pocDZTx5G4MX MbL7cQfdnitvJ8VYqx1ZBmi7OncCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKYVhYdHKcWLtidAaSuo+m7Shv3JMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zNzBjNDc1OS00M2I4LTRlODAtYmU4Yy04M2NiZTlmODIzMWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM3MGM0NzU5 LTQzYjgtNGU4MC1iZThjLTgzY2JlOWY4MjMxYi8wL0E2MTU4NTg3NDcyOUM1OEJC NjI3NDA2OTJCQThGQTZFRDI4NkZEQzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn9bIwDQYJKoZIhvcNAQELBQADggEBAIci1jUSsbA6ua19WcIxOFF2wZoFWaCl ra3cxPy1DIWGuG5U6mwYZsXUI0VmeqBJ3e19vZYTb+GTQHstT+6JQz+R2fOv6/zd 0bdyBP1FgYOwfnQPqSw2svhtQAe6JX8nU/wysMhUTFDc9nMCySFI1UQpCAX2qmMW x3DVU/IfdIArON6dFQjza4hvM11Mls0iwQk8E/4aB8T0lYOxDstRVwYlNDu6aK+x wW4hujB93UFg4PSeLkOsH7zID5U26JrvWwXyVGWZ5nPCv76LrB/1GVbSN1xmX5zr pwz1zwgMeCG2kR6egm89gXdvq3+svuslPHNj8MGhlA+VXm8CYT+7BHg= -----END CERTIFICATE-----Generated at Mon Jun 30 09:49:04 2025 by rpki-client