$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer File: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer (raw, json) Hash identifier: qMzGe9miLT7X7bVDSZIRo3ddEFxmzhqva6uINv+z3s0= Subject key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7AE8855AB28963E2CA2E4FA3C88F24F2D2EE762E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft caRepository: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 13:41:33 +0000 Certificate not after: Tue 02 Jun 2026 13:46:33 +0000 Subordinate resources: IP: 103.155.166.0/23 IP: 2406:7240::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e8:85:5a:b2:89:63:e2:ca:2e:4f:a3:c8:8f:24:f2:d2:ee:76:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 13:41:33 2025 GMT Not After : Jun 2 13:46:33 2026 GMT Subject: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2f:1c:11:24:ff:8b:2b:32:70:b5:ce:27:5b: 59:c5:8f:a3:ee:e5:29:83:18:ee:38:72:2a:6e:c3: 5c:e5:66:6b:f4:27:ee:97:f2:db:39:53:21:14:e9: dc:57:d0:0c:73:09:70:c8:f8:3a:91:a3:81:53:75: 32:db:3c:4e:18:8b:aa:4a:d0:d9:cc:ea:73:6e:f7: 09:18:68:8a:cd:be:4b:87:0a:84:33:a8:f6:46:fb: 75:5b:41:81:b3:7f:6a:79:83:b4:cb:14:17:d1:02: 94:1d:b9:f5:0c:b8:59:b0:35:86:09:2a:7c:86:d7: 5c:2d:bc:64:38:c9:4a:fc:c1:76:ea:06:28:16:9c: 7e:c6:89:60:c0:16:61:b6:2c:f5:f8:96:af:a5:96: 0c:dd:37:e4:6b:92:9b:ac:6b:1c:32:1b:b0:c9:12: c2:d1:f2:72:99:1b:21:9e:dc:d9:27:06:29:2a:7c: b8:2a:24:d6:0f:08:8b:5e:11:d3:33:e1:1c:4d:2d: f6:45:be:e3:4a:51:06:0c:e7:02:3c:ec:25:47:7f: db:f7:0c:00:fc:cf:93:87:36:ef:a6:24:5e:a5:cb: 6c:26:f9:b1:6c:74:16:d8:59:a7:7d:3f:6b:2f:00: 56:d1:00:4f:79:30:f7:39:40:4a:5d:94:63:39:e9: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.166.0/23 IPv6: 2406:7240::/32 Signature Algorithm: sha256WithRSAEncryption 84:41:16:a2:52:c4:26:9e:2f:d9:91:ab:e1:04:81:d2:10:15: f1:e1:8d:80:90:05:33:47:60:91:70:e3:3e:41:dc:58:ab:22: fd:ad:42:45:2c:4b:10:c4:21:71:86:72:76:5a:b5:eb:53:de: d0:6f:99:45:02:c2:75:dc:08:f2:fc:d7:ef:05:f6:2e:23:69: a7:ad:c5:8d:0f:0e:48:81:6b:31:d5:a1:e5:02:ab:f7:3a:25: a6:83:71:38:05:a0:1f:31:18:c5:b3:5a:b7:4a:c7:2c:c6:dc: e3:f4:9d:47:1c:f5:81:1c:5a:eb:bd:ce:b3:79:88:86:c2:6e: 86:7d:6b:dc:6f:c3:63:9b:3a:e9:ae:dc:ac:a6:5a:e3:99:2b: 6f:b9:47:d4:07:fe:59:fe:3c:41:0e:2c:36:d4:b8:6c:d4:7f: e5:4c:9f:26:94:8f:42:9e:b6:6c:28:7a:03:d5:fe:37:fe:ce: 9e:d3:9d:07:ca:29:c2:82:0f:db:c3:54:c9:a1:fe:0e:e6:b2: 8a:bf:e1:c4:40:09:76:34:18:5d:a9:a3:3c:99:e6:a4:4e:97: d1:5f:5a:be:fc:bd:90:3f:da:b3:6b:ae:21:75:ef:e2:ca:db: c0:1d:4c:3c:a3:e9:97:5e:3c:f3:d7:ea:55:e3:ff:ef:d1:5d: 5d:95:cd:ba -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUeuiFWrKJY+LKLk+jyI8k8tLudi4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzEzNDEzM1oX DTI2MDYwMjEzNDYzM1owMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1 QTY1RTJGQjMxQTZCQTI2MTg5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIvHBEk/4srMnC1zidbWcWPo+7lKYMY7jhyKm7DXOVma/Qn7pfy2zlTIRTp 3FfQDHMJcMj4OpGjgVN1Mts8ThiLqkrQ2czqc273CRhois2+S4cKhDOo9kb7dVtB gbN/anmDtMsUF9EClB259Qy4WbA1hgkqfIbXXC28ZDjJSvzBduoGKBacfsaJYMAW YbYs9fiWr6WWDN035GuSm6xrHDIbsMkSwtHycpkbIZ7c2ScGKSp8uCok1g8Ii14R 0zPhHE0t9kW+40pRBgznAjzsJUd/2/cMAPzPk4c276YkXqXLbCb5sWx0FthZp30/ ay8AVtEAT3kw9zlASl2UYznpjtsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMTOG9PL+wFeYJZaZeL7Maa6JhibMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRjNmIyYmQ3 LWQ3ZjEtNDgxNS1hNjBhLWNhZDU0MDI5Y2U4OC8wL0M0Q0UxQkQzQ0JGQjAxNUU2 MDk2NUE2NUUyRkIzMUE2QkEyNjE4OUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnm6YwDQQCAAIwBwMFACQGckAwDQYJKoZIhvcNAQELBQADggEBAIRBFqJSxCae L9mRq+EEgdIQFfHhjYCQBTNHYJFw4z5B3FirIv2tQkUsSxDEIXGGcnZatetT3tBv mUUCwnXcCPL81+8F9i4jaaetxY0PDkiBazHVoeUCq/c6JaaDcTgFoB8xGMWzWrdK xyzG3OP0nUcc9YEcWuu9zrN5iIbCboZ9a9xvw2ObOumu3KymWuOZK2+5R9QH/ln+ PEEOLDbUuGzUf+VMnyaUj0KetmwoegPV/jf+zp7TnQfKKcKCD9vDVMmh/g7msoq/ 4cRACXY0GF2pozyZ5qROl9FfWr78vZA/2rNrriF17+LK28AdTDyj6ZdePPPX6lXj /+/RXV2Vzbo= -----END CERTIFICATE-----Generated at Tue Jul 1 17:18:59 2025 by rpki-client