$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CEEE0277998C75D36A98EC102AD67573C8C514E9.cer File: CEEE0277998C75D36A98EC102AD67573C8C514E9.cer (raw, json) Hash identifier: /jiRwVoI07j1nnce5CbwsBSefv8qsrOWkMEB9HgSXsA= Subject key identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7B26FD9D9C5D84DE82C6749C5F767C452FEECA14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft caRepository: rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 20 Sep 2025 06:20:51 +0000 Certificate not after: Sat 19 Sep 2026 06:25:51 +0000 Subordinate resources: IP: 202.122.8.0/21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:26:fd:9d:9c:5d:84:de:82:c6:74:9c:5f:76:7c:45:2f:ee:ca:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 20 06:20:51 2025 GMT Not After : Sep 19 06:25:51 2026 GMT Subject: CN=CEEE0277998C75D36A98EC102AD67573C8C514E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:4a:e3:00:5d:bd:d2:84:87:49:7c:f6:70: 58:ec:e8:15:b1:fe:c3:c9:64:a7:d4:16:bb:fb:45: e3:bb:db:0c:dc:73:e1:63:0b:59:be:0e:48:16:59: ad:29:d2:cc:77:77:83:b3:8f:e4:6e:19:6c:bc:17: aa:ae:5d:b7:0a:5d:f7:43:3a:21:ca:e6:aa:47:72: c0:74:9a:b7:11:c9:96:0b:cd:92:da:e1:a2:c0:84: 01:be:7c:c9:c9:18:e2:f7:e9:7a:09:0c:2a:0b:63: b0:83:b1:66:66:af:eb:1b:d7:bf:ec:13:66:b8:76: d7:1b:1e:d7:54:40:61:f5:93:03:be:60:9a:2a:d5: 1f:79:c0:85:6b:3f:66:2b:09:c0:1f:ad:4a:73:ca: ef:28:c8:62:f9:43:a7:3c:9e:92:e0:50:69:af:92: bd:f5:45:44:73:cb:b0:ce:5f:fb:77:3b:88:6c:5b: 17:2c:2c:16:b4:5a:f7:50:97:72:af:99:e0:b3:fe: bd:2c:77:c7:66:12:92:f2:91:51:de:00:b3:34:9e: 48:4e:83:5d:38:e9:31:e4:76:a8:a3:6d:83:a3:d9: fd:dc:cc:4a:39:41:d5:59:0d:ac:8a:f7:c8:7d:d6: eb:be:4e:6a:b5:6e:b4:70:7d:20:e0:06:e3:7b:0b: e9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:EE:02:77:99:8C:75:D3:6A:98:EC:10:2A:D6:75:73:C8:C5:14:E9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/95a3b106-8ef0-45bf-b277-a27947e4591b/0/CEEE0277998C75D36A98EC102AD67573C8C514E9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.122.8.0/21 Signature Algorithm: sha256WithRSAEncryption 0c:83:1a:13:fc:db:77:6b:e9:92:63:71:8c:c4:4d:be:c6:62: 3d:a8:f0:7f:6d:9b:77:af:6f:3d:69:38:21:fa:a7:36:01:60: de:4b:ea:78:92:be:33:2a:b6:87:31:bf:be:70:ed:71:6a:d1: e0:54:d6:a4:e6:41:a3:3e:cf:c0:8c:52:96:22:9b:96:a3:47: 46:30:1e:e3:87:1e:65:a0:f1:e0:e6:d0:d1:da:c0:98:11:ee: a5:cf:f1:a9:d8:d7:71:84:6b:3b:1d:c1:a4:68:a9:08:d2:a5: 02:9d:d3:e1:3b:fa:c6:f8:42:f7:61:72:b1:01:38:ef:ce:c3: 15:05:db:06:db:7a:96:57:f1:6d:4f:d3:11:4e:19:83:1b:63: a0:9b:8b:92:00:f2:9e:eb:ad:07:0d:a0:1d:b0:f5:bd:ff:e6: 8c:f0:03:6e:97:a9:e4:88:3b:ed:00:86:08:78:34:d1:2f:aa: ad:f1:5c:ad:5f:e2:c3:1f:1d:85:05:26:de:12:25:83:b8:2f: b7:c8:24:06:40:f2:b5:90:e9:85:19:69:6b:db:be:01:0d:05: 55:a5:87:28:9c:e3:1a:17:bf:2a:e4:6d:ea:20:53:04:4f:0b: 46:ac:23:51:21:24:e9:d5:5b:81:ed:79:c6:e7:ab:f7:27:5c: 98:ef:89:d9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUeyb9nZxdhN6CxnScX3Z8RS/uyhQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyMDA2MjA1MVoX DTI2MDkxOTA2MjU1MVowMzExMC8GA1UEAxMoQ0VFRTAyNzc5OThDNzVEMzZBOThF QzEwMkFENjc1NzNDOEM1MTRFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALgCSuMAXb3ShIdJfPZwWOzoFbH+w8lkp9QWu/tF47vbDNxz4WMLWb4OSBZZ rSnSzHd3g7OP5G4ZbLwXqq5dtwpd90M6IcrmqkdywHSatxHJlgvNktrhosCEAb58 yckY4vfpegkMKgtjsIOxZmav6xvXv+wTZrh21xse11RAYfWTA75gmirVH3nAhWs/ ZisJwB+tSnPK7yjIYvlDpzyekuBQaa+SvfVFRHPLsM5f+3c7iGxbFywsFrRa91CX cq+Z4LP+vSx3x2YSkvKRUd4AszSeSE6DXTjpMeR2qKNtg6PZ/dzMSjlB1VkNrIr3 yH3W675OarVutHB9IOAG43sL6ckCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM7uAneZjHXTapjsECrWdXPIxRTpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NWEzYjEwNi04ZWYwLTQ1YmYtYjI3Ny1hMjc5NDdlNDU5MWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1YTNiMTA2 LThlZjAtNDViZi1iMjc3LWEyNzk0N2U0NTkxYi8wL0NFRUUwMjc3OTk4Qzc1RDM2 QTk4RUMxMDJBRDY3NTczQzhDNTE0RTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPKeggwDQYJKoZIhvcNAQELBQADggEBAAyDGhP823dr6ZJjcYzETb7GYj2o8H9t m3evbz1pOCH6pzYBYN5L6niSvjMqtocxv75w7XFq0eBU1qTmQaM+z8CMUpYim5aj R0YwHuOHHmWg8eDm0NHawJgR7qXP8anY13GEazsdwaRoqQjSpQKd0+E7+sb4Qvdh crEBOO/OwxUF2wbbepZX8W1P0xFOGYMbY6Cbi5IA8p7rrQcNoB2w9b3/5ozwA26X qeSIO+0Ahgh4NNEvqq3xXK1f4sMfHYUFJt4SJYO4L7fIJAZA8rWQ6YUZaWvbvgEN BVWlhyic4xoXvyrkbeogUwRPC0asI1EhJOnVW4Htecbnq/cnXJjvidk= -----END CERTIFICATE-----Generated at Mon Oct 20 06:28:58 2025 by rpki-client