$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer File: E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.cer (raw, json) Hash identifier: 0NHLMOtvzsJ6Qqny+lYBUk8GluidxDvF0evEdKoLBHA= Subject key identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0F974A45AD77097A8E2A29A7DB63C6EBFF642BB0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft caRepository: rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 24 Sep 2025 12:32:45 +0000 Certificate not after: Wed 23 Sep 2026 12:37:45 +0000 Subordinate resources: IP: 103.178.170.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:97:4a:45:ad:77:09:7a:8e:2a:29:a7:db:63:c6:eb:ff:64:2b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 24 12:32:45 2025 GMT Not After : Sep 23 12:37:45 2026 GMT Subject: CN=E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:c8:8f:09:30:3a:17:3c:8f:06:db:73:23: 3d:9c:14:f0:54:5e:8e:6b:2c:2a:88:90:d4:aa:78: d5:5b:c9:6e:6e:8e:41:6b:2a:b6:d2:87:a7:0a:cd: d6:11:c1:ae:01:c7:c9:7e:a6:74:cd:c7:df:c1:6e: 2b:29:ba:fa:69:ee:fe:7c:e2:62:4b:e8:8a:dc:32: 9f:7b:aa:96:13:fe:13:80:ce:7d:35:02:74:e7:7b: e8:33:95:10:28:30:ba:48:3d:53:7d:ab:24:c8:e7: aa:a5:f3:f6:31:07:aa:1a:1a:99:0e:3a:3c:b7:f6: fe:39:45:fe:06:68:e1:82:80:1e:bf:85:8d:07:06: 0f:55:37:3d:8f:34:03:ff:83:3b:8c:62:43:bf:fd: a0:3c:71:b4:fe:0b:6b:8d:80:d1:e6:50:99:9b:99: 5e:c3:84:0f:f8:02:7f:a7:a9:3b:9f:2c:5b:95:8c: 09:3f:8c:c8:99:75:23:6d:21:87:52:1e:ef:9f:19: 42:fc:38:1a:99:74:75:25:b6:9c:b3:96:c1:ce:ec: 7e:30:d0:47:a3:37:a7:63:9e:c9:7f:78:f8:0c:da: f1:b6:e9:27:0e:a1:a1:39:34:94:62:f7:bb:cf:0c: 61:a2:9e:25:8c:89:36:f2:e4:47:ca:c2:ad:73:c7: 71:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E0:9D:0E:1D:26:3D:BD:91:4D:0C:4E:0C:AA:7E:5E:50:D0:22:46:F1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2c01fd44-8cd6-4d9f-9bd1-8367ad9cd9ea/0/E09D0E1D263DBD914D0C4E0CAA7E5E50D02246F1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.178.170.0/23 Signature Algorithm: sha256WithRSAEncryption 48:9c:a0:5b:64:4a:eb:51:2e:57:a7:f7:e1:4e:8a:81:c1:79: 50:46:2a:6c:13:7f:5e:86:fe:53:2c:a2:84:ce:75:2e:f9:de: cb:e2:7f:94:ec:b6:5a:6b:32:25:df:cc:a2:bc:39:bf:76:85: 31:bd:e5:4b:c2:20:64:ca:1f:88:e4:13:33:f8:c7:fd:df:66: 5e:47:3b:b6:ab:58:bd:00:32:1f:74:73:4c:7b:b5:7c:95:50: 95:45:c0:fb:47:df:be:23:d9:c9:da:99:6f:92:a3:02:00:3e: 86:b2:e7:46:e3:1b:62:11:1b:24:2b:91:f5:94:4a:6d:73:bb: eb:4d:54:7c:94:47:d7:56:c0:1e:ec:75:4c:a7:0e:00:f2:15: 40:8b:4c:99:1f:5f:e2:46:d5:db:06:03:12:a4:83:18:23:e3: e0:d8:33:cd:12:db:7c:04:c2:72:b6:db:d5:99:36:db:9b:4b: 4e:1c:4d:4e:9c:4e:be:05:d1:96:de:b3:dd:fe:5d:91:e6:55: ae:95:9a:e1:34:f9:ef:70:03:6e:3c:21:df:0b:84:03:4c:1f: 4d:8e:d3:36:3a:48:ff:d2:33:21:fc:d5:77:b7:bf:a5:2e:c8: 73:63:74:ee:b4:7c:b9:92:e4:d2:50:2e:22:62:be:84:bb:b5: 43:fb:b5:64 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUD5dKRa13CXqOKimn22PG6/9kK7AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyNDEyMzI0NVoX DTI2MDkyMzEyMzc0NVowMzExMC8GA1UEAxMoRTA5RDBFMUQyNjNEQkQ5MTREMEM0 RTBDQUE3RTVFNTBEMDIyNDZGMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMD8yI8JMDoXPI8G23MjPZwU8FRejmssKoiQ1Kp41VvJbm6OQWsqttKHpwrN 1hHBrgHHyX6mdM3H38FuKym6+mnu/nziYkvoitwyn3uqlhP+E4DOfTUCdOd76DOV ECgwukg9U32rJMjnqqXz9jEHqhoamQ46PLf2/jlF/gZo4YKAHr+FjQcGD1U3PY80 A/+DO4xiQ7/9oDxxtP4La42A0eZQmZuZXsOED/gCf6epO58sW5WMCT+MyJl1I20h h1Ie758ZQvw4Gpl0dSW2nLOWwc7sfjDQR6M3p2OeyX94+Aza8bbpJw6hoTk0lGL3 u88MYaKeJYyJNvLkR8rCrXPHcT8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOCdDh0mPb2RTQxODKp+XlDQIkbxMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYzAxZmQ0NC04Y2Q2LTRkOWYtOWJkMS04MzY3YWQ5Y2Q5ZWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMDFmZDQ0 LThjZDYtNGQ5Zi05YmQxLTgzNjdhZDljZDllYS8wL0UwOUQwRTFEMjYzREJEOTE0 RDBDNEUwQ0FBN0U1RTUwRDAyMjQ2RjEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsqowDQYJKoZIhvcNAQELBQADggEBAEicoFtkSutRLlen9+FOioHBeVBGKmwT f16G/lMsooTOdS753svif5TstlprMiXfzKK8Ob92hTG95UvCIGTKH4jkEzP4x/3f Zl5HO7arWL0AMh90c0x7tXyVUJVFwPtH374j2cnamW+SowIAPoay50bjG2IRGyQr kfWUSm1zu+tNVHyUR9dWwB7sdUynDgDyFUCLTJkfX+JG1dsGAxKkgxgj4+DYM80S 23wEwnK229WZNtubS04cTU6cTr4F0Zbes93+XZHmVa6VmuE0+e9wA248Id8LhANM H02O0zY6SP/SMyH81Xe3v6UuyHNjdO60fLmS5NJQLiJivoS7tUP7tWQ= -----END CERTIFICATE-----Generated at Mon Oct 20 05:58:39 2025 by rpki-client