$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer File: AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.cer (raw, json) Hash identifier: PXM5W9/W9lbUx65SGXOT/fYY8hX2jUNMZ6S5V+ECqso= Subject key identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3B58CD71237FE84B145973610B9A17F6F5B8F145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft caRepository: rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 16 Sep 2025 20:18:48 +0000 Certificate not after: Tue 15 Sep 2026 20:23:48 +0000 Subordinate resources: IP: 103.172.23.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:58:cd:71:23:7f:e8:4b:14:59:73:61:0b:9a:17:f6:f5:b8:f1:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 16 20:18:48 2025 GMT Not After : Sep 15 20:23:48 2026 GMT Subject: CN=AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d9:06:15:d8:e7:0c:33:22:06:e3:1b:ba:19: 23:f9:44:6c:bf:36:a4:ac:5a:f3:f4:8b:21:4c:87: 82:71:1b:fe:69:12:18:25:81:30:37:c7:19:fa:c2: ff:7a:34:55:fa:98:c6:f8:ab:e0:50:33:63:44:11: d7:7a:79:f7:3f:76:75:b3:cb:ba:cd:c2:a6:e2:3b: 1c:98:90:7a:56:68:f4:37:4a:49:94:61:79:a5:ba: a8:c5:9b:43:b2:31:e7:60:8d:6c:b2:39:63:23:89: f6:f0:69:66:2a:82:90:89:d1:ae:ef:b4:33:28:79: 7a:5c:96:4d:bf:1d:c6:1f:60:cc:b5:91:67:50:23: e6:53:6d:9f:b3:51:b3:43:45:e7:76:d5:2c:a4:35: a8:1f:fd:16:f6:2e:1a:89:ed:6c:93:3e:0c:48:20: d5:7f:c1:24:ba:c6:75:65:db:b8:87:19:e0:7c:5b: 21:b7:41:bd:8a:fb:86:ad:bd:99:56:e7:e7:94:6e: 1e:9e:a9:4f:3f:a3:f7:eb:bb:e1:cd:45:67:6f:cc: bf:84:a1:98:9c:e9:15:89:be:ad:be:e0:68:5c:96: db:bc:ed:59:c8:5f:62:19:ad:65:17:58:90:3f:d6: 12:05:75:a8:bd:41:f3:2f:05:43:cd:55:80:c4:28: 0f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AF:95:8D:E0:EC:E8:30:B2:C0:7C:1A:58:CE:91:5F:DB:82:C3:C2:F6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c9de0c39-84d5-4405-954d-4d3d712693ce/0/AF958DE0ECE830B2C07C1A58CE915FDB82C3C2F6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.23.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:94:e5:2b:62:49:ac:7f:f0:ea:3f:07:48:0c:48:78:0b:d6: 61:ac:0e:22:6d:b3:a2:06:87:89:b0:5f:fa:aa:15:0e:b9:c2: d6:44:b4:e8:8a:5c:67:bd:41:ae:77:40:5c:b7:8e:7a:49:bd: 7c:2a:05:76:fb:9a:4d:3e:1f:5f:05:11:93:6e:0e:09:fb:ee: 24:6c:20:cc:dd:43:5a:e2:db:4a:c2:80:a9:e0:19:ea:1c:ad: 3f:82:97:50:84:8e:34:82:23:6f:13:74:01:36:b2:85:9a:bb: 59:58:7f:70:3d:23:f5:a8:56:b7:f2:17:28:ac:b9:26:28:86: 50:fa:a2:9e:6b:d0:06:8d:8f:91:cf:42:e4:0a:b8:95:44:eb: 8d:2e:ee:9d:14:a3:94:e6:8c:a4:49:e4:7b:24:24:6d:5b:cc: 94:ac:cc:35:0b:cb:d7:ec:93:d2:89:65:5b:a6:cf:1f:e1:f7: 19:15:23:f0:ac:9d:90:1b:32:2a:b0:2b:c9:4b:34:49:72:11: bc:26:cc:b3:b8:56:b8:2d:d8:96:51:b8:1d:e4:22:00:5a:64: 9a:4d:55:34:76:02:94:21:3b:75:c2:bd:a0:6c:0f:bc:de:9f: 64:fb:91:a9:d0:6a:57:dc:46:b3:28:45:4f:df:72:dd:9d:d1: b0:fd:3d:bd -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUO1jNcSN/6EsUWXNhC5oX9vW48UUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxNjIwMTg0OFoX DTI2MDkxNTIwMjM0OFowMzExMC8GA1UEAxMoQUY5NThERTBFQ0U4MzBCMkMwN0Mx QTU4Q0U5MTVGREI4MkMzQzJGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMrZBhXY5wwzIgbjG7oZI/lEbL82pKxa8/SLIUyHgnEb/mkSGCWBMDfHGfrC /3o0VfqYxvir4FAzY0QR13p59z92dbPLus3CpuI7HJiQelZo9DdKSZRheaW6qMWb Q7Ix52CNbLI5YyOJ9vBpZiqCkInRru+0Myh5elyWTb8dxh9gzLWRZ1Aj5lNtn7NR s0NF53bVLKQ1qB/9FvYuGontbJM+DEgg1X/BJLrGdWXbuIcZ4HxbIbdBvYr7hq29 mVbn55RuHp6pTz+j9+u74c1FZ2/Mv4ShmJzpFYm+rb7gaFyW27ztWchfYhmtZRdY kD/WEgV1qL1B8y8FQ81VgMQoD5cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK+VjeDs6DCywHwaWM6RX9uCw8L2MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jOWRlMGMzOS04NGQ1LTQ0MDUtOTU0ZC00ZDNkNzEyNjkzY2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5ZGUwYzM5 LTg0ZDUtNDQwNS05NTRkLTRkM2Q3MTI2OTNjZS8wL0FGOTU4REUwRUNFODMwQjJD MDdDMUE1OENFOTE1RkRCODJDM0MyRjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnrBcwDQYJKoZIhvcNAQELBQADggEBAG2U5StiSax/8Oo/B0gMSHgL1mGsDiJt s6IGh4mwX/qqFQ65wtZEtOiKXGe9Qa53QFy3jnpJvXwqBXb7mk0+H18FEZNuDgn7 7iRsIMzdQ1ri20rCgKngGeocrT+Cl1CEjjSCI28TdAE2soWau1lYf3A9I/WoVrfy FyisuSYohlD6op5r0AaNj5HPQuQKuJVE640u7p0Uo5TmjKRJ5HskJG1bzJSszDUL y9fsk9KJZVumzx/h9xkVI/CsnZAbMiqwK8lLNElyEbwmzLO4Vrgt2JZRuB3kIgBa ZJpNVTR2ApQhO3XCvaBsD7zen2T7kanQalfcRrMoRU/fct2d0bD9Pb0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:28:03 2025 by rpki-client