$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer (raw, json) Hash identifier: Sqx/4lNPWblfmxw1Goq6BiJfcZZtSiWSfsRrKce0BGQ= Subject key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 14B980F3083852CBD905CF6C0D7D4A24444CE25C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft caRepository: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Jun 2025 21:58:26 +0000 Certificate not after: Tue 16 Jun 2026 22:03:26 +0000 Subordinate resources: IP: 202.47.170.0/23 IP: 2401:a320::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b9:80:f3:08:38:52:cb:d9:05:cf:6c:0d:7d:4a:24:44:4c:e2:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 17 21:58:26 2025 GMT Not After : Jun 16 22:03:26 2026 GMT Subject: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:28:cd:bf:1e:da:05:4b:ce:cd:b8:48:3e:87: a3:b2:57:be:e0:e4:f0:52:98:93:b1:64:9b:54:54: 0c:c0:5b:71:96:fb:d4:e3:e7:96:52:e7:4a:2b:1e: b5:15:f1:c7:1b:07:51:74:bf:2f:53:98:be:fe:4b: a7:79:af:ce:ea:7b:c2:d3:46:30:4f:10:a1:fd:2a: a4:16:1a:2f:07:40:f1:02:60:fc:8b:63:30:45:b4: 25:0f:b8:48:e8:04:93:85:2c:db:29:67:e6:f7:2a: f6:b9:66:79:35:b9:2a:58:c0:55:f0:3b:34:5c:bf: 0f:03:d4:7d:d2:ba:05:b6:43:70:fc:64:77:ba:ca: 90:a4:c8:2d:38:b0:8e:55:fd:23:ff:df:0b:ee:72: 97:3a:87:6f:58:e2:a5:39:9a:01:f7:68:2a:37:96: 7d:f3:b3:8e:47:b3:0f:22:4e:55:c5:d9:d0:9f:7b: 17:6a:2c:1a:a8:3e:6b:fe:08:d7:95:84:50:34:3e: de:82:ee:d8:3f:fb:93:f5:34:17:3c:66:0c:f8:aa: 38:f4:14:e6:6b:8b:e2:cd:b6:18:70:99:df:b9:1a: 9a:1a:60:d5:36:a0:c3:bf:03:5d:94:78:be:ba:fb: ab:b0:c9:4c:23:18:c3:24:87:53:62:82:a3:f6:20: 3d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.170.0/23 IPv6: 2401:a320::/32 Signature Algorithm: sha256WithRSAEncryption 05:24:93:c4:9b:c5:a7:35:81:d0:70:63:8b:bc:38:92:b0:ef: 99:1a:d5:c9:e7:a7:1f:f8:d1:38:96:f6:42:bf:9d:11:e9:2d: f3:a4:21:5c:2b:ab:42:b4:61:db:88:1a:fd:bf:d2:c0:93:9b: 67:e8:14:8e:40:3f:50:04:fc:f5:59:78:45:31:31:91:ff:ca: 97:fb:c0:de:04:78:5a:7f:51:65:b9:4d:4c:a5:71:aa:03:f6: 5e:5c:45:2c:c1:25:0f:f1:ec:d5:15:94:3c:f8:c2:9a:cc:80: bc:1c:58:da:75:38:f9:57:87:28:20:7a:ba:21:21:1b:d8:0f: 45:9b:30:d2:43:d8:6a:d0:d2:20:3a:53:74:ac:60:14:e4:38: 4e:91:94:b5:c8:54:0e:f8:e8:7b:a1:1b:f8:01:81:e1:64:f1: ce:7d:80:38:1f:7f:46:69:1d:f7:3a:1e:c0:15:59:ca:e1:3e: 63:af:f9:b1:7b:be:f7:e3:58:4f:27:4c:77:89:17:1f:7b:33: b3:ea:8d:d7:33:f8:30:b0:f4:30:c6:95:58:fa:29:72:a8:12: 60:8f:b0:0b:c0:a4:ea:3f:53:aa:2b:b4:81:9b:cb:9a:aa:3c: 7b:5f:cb:0a:1e:32:8f:fa:d8:ed:a1:f7:7b:3e:fe:ce:15:68: 94:73:0b:db -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUFLmA8wg4UsvZBc9sDX1KJERM4lwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxNzIxNTgyNloX DTI2MDYxNjIyMDMyNlowMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVF QTY2NjZGNTkzQTgyNzlCM0NEOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4ozb8e2gVLzs24SD6Ho7JXvuDk8FKYk7Fkm1RUDMBbcZb71OPnllLnSise tRXxxxsHUXS/L1OYvv5Lp3mvzup7wtNGME8Qof0qpBYaLwdA8QJg/ItjMEW0JQ+4 SOgEk4Us2yln5vcq9rlmeTW5KljAVfA7NFy/DwPUfdK6BbZDcPxkd7rKkKTILTiw jlX9I//fC+5ylzqHb1jipTmaAfdoKjeWffOzjkezDyJOVcXZ0J97F2osGqg+a/4I 15WEUDQ+3oLu2D/7k/U0FzxmDPiqOPQU5muL4s22GHCZ37kamhpg1Tagw78DXZR4 vrr7q7DJTCMYwySHU2KCo/YgPUsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN5fj4nqKFdxkSXqZmb1k6gnmzzZMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhmZDZlYWNh LWY1ZmQtNGFjYi04NWE1LWViOGQzNzA4MjNhZi8wL0RFNUY4Rjg5RUEyODU3NzE5 MTI1RUE2NjY2RjU5M0E4Mjc5QjNDRDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAHKL6owDQQCAAIwBwMFACQBoyAwDQYJKoZIhvcNAQELBQADggEBAAUkk8Sbxac1 gdBwY4u8OJKw75ka1cnnpx/40TiW9kK/nRHpLfOkIVwrq0K0YduIGv2/0sCTm2fo FI5AP1AE/PVZeEUxMZH/ypf7wN4EeFp/UWW5TUylcaoD9l5cRSzBJQ/x7NUVlDz4 wprMgLwcWNp1OPlXhyggerohIRvYD0WbMNJD2GrQ0iA6U3SsYBTkOE6RlLXIVA74 6HuhG/gBgeFk8c59gDgff0ZpHfc6HsAVWcrhPmOv+bF7vvfjWE8nTHeJFx97M7Pq jdcz+DCw9DDGlVj6KXKoEmCPsAvApOo/U6ortIGby5qqPHtfywoeMo/62O2h93s+ /s4VaJRzC9s= -----END CERTIFICATE-----Generated at Thu Jul 3 04:28:24 2025 by rpki-client