$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E94D4099064713F1C3A5E211E817CFC2A40E6370.cer File: E94D4099064713F1C3A5E211E817CFC2A40E6370.cer (raw, json) Hash identifier: 9JzL0OwzPSL2XPgqZNXcVxpBg9330Hscw5Fw0CmUjOA= Subject key identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0201A7D00C1A4D052DFDEAB4A97D2BC554D528F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft caRepository: rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 26 Sep 2025 08:42:13 +0000 Certificate not after: Fri 25 Sep 2026 08:47:13 +0000 Subordinate resources: IP: 27.131.248.0/22 IP: 49.0.24.0/23 IP: 103.164.14.0/23 IP: 110.92.72.0/23 IP: 116.254.96.0/22 IP: 121.50.32.0/21 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:01:a7:d0:0c:1a:4d:05:2d:fd:ea:b4:a9:7d:2b:c5:54:d5:28:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 26 08:42:13 2025 GMT Not After : Sep 25 08:47:13 2026 GMT Subject: CN=E94D4099064713F1C3A5E211E817CFC2A40E6370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ee:fe:27:70:17:db:1d:eb:ce:09:df:46:e9: c7:a4:5f:5d:15:07:47:66:b5:cc:bf:c3:62:ab:78: de:fd:68:5f:97:3e:3e:bc:d6:49:60:6f:dc:13:82: 3a:97:45:61:24:16:a1:bf:2a:5d:38:9f:b7:67:a7: fe:7e:a8:43:16:09:9f:9f:8d:be:c9:c6:ea:a4:bb: ef:b1:12:ce:cd:48:12:53:a9:29:42:4e:5d:8b:01: c2:65:a5:43:9a:49:ab:45:c1:8d:d3:d0:f4:59:5f: a7:22:ac:d5:f0:35:d9:b2:ce:45:3c:d5:50:7c:fd: 0a:ae:19:b1:eb:99:71:da:fb:a9:f6:3f:ef:30:35: ff:81:8d:6c:96:fe:93:a5:52:0e:26:1c:f7:a3:34: d3:29:98:42:96:42:67:1a:04:c2:78:f2:47:91:2d: c6:db:29:3d:79:b7:e6:28:c8:43:1e:97:b7:39:70: 01:aa:97:66:16:da:6e:9a:0b:06:13:ea:a2:3f:83: 78:92:a7:5f:90:49:9d:b8:e2:72:81:65:3b:82:c1: 5d:bb:29:77:fd:a6:77:ab:b2:f0:7e:0f:37:9a:f1: f3:9e:1d:6c:b0:77:53:1a:cf:8a:7a:0d:90:e7:a9: bd:ec:98:9d:cc:33:14:bf:c1:12:02:b0:26:0e:14: 3e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:4D:40:99:06:47:13:F1:C3:A5:E2:11:E8:17:CF:C2:A4:0E:63:70 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ff7ae82f-537e-4626-be9e-33394a2dc969/0/E94D4099064713F1C3A5E211E817CFC2A40E6370.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.131.248.0/22 49.0.24.0/23 103.164.14.0/23 110.92.72.0/23 116.254.96.0/22 121.50.32.0/21 Signature Algorithm: sha256WithRSAEncryption 20:4d:30:76:6f:04:46:cd:a0:ff:3e:b7:be:1d:74:18:0e:da: 6a:d2:bd:bb:c4:17:34:46:e1:ae:b0:64:fa:e6:7a:f6:28:4b: 0a:a0:78:1e:27:26:38:ce:bb:d3:57:71:d0:4b:49:8e:5e:e5: a9:0b:79:84:26:e8:30:79:12:9f:a2:b0:f7:52:1a:e6:ca:f5: ac:a5:62:d3:13:d4:1e:e7:13:1d:97:eb:85:6b:fc:eb:b8:8b: 47:22:94:33:63:ed:08:29:ab:35:6f:00:14:2a:0d:1d:7f:71: 7b:ae:d9:10:b3:d5:97:e0:83:71:79:89:ba:f0:40:da:0f:5c: f5:0a:3e:60:2e:0d:34:41:a9:da:fc:44:54:c4:d3:36:19:b4: ec:01:15:bb:b2:97:ec:92:bf:cd:33:2d:da:90:e9:3c:01:62: 75:73:21:d0:b5:52:80:b8:5b:dd:3f:fc:76:9d:97:2b:ff:62: 43:64:a8:5e:45:1d:07:ed:c8:5a:74:57:53:61:63:87:c3:db: ff:a4:1d:9f:03:a4:a1:19:31:ae:b7:79:8b:5d:56:9c:c2:44: 6f:aa:7a:74:f8:8e:61:74:59:7f:87:5f:dd:af:f7:50:d1:9d: 81:d9:18:38:90:fb:1c:bc:95:c0:e2:e1:14:5c:6b:0f:d9:6b: 09:b3:cc:61 -----BEGIN CERTIFICATE----- MIIF4zCCBMugAwIBAgIUAgGn0AwaTQUt/eq0qX0rxVTVKPAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyNjA4NDIxM1oX DTI2MDkyNTA4NDcxM1owMzExMC8GA1UEAxMoRTk0RDQwOTkwNjQ3MTNGMUMzQTVF MjExRTgxN0NGQzJBNDBFNjM3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN/u/idwF9sd684J30bpx6RfXRUHR2a1zL/DYqt43v1oX5c+PrzWSWBv3BOC OpdFYSQWob8qXTift2en/n6oQxYJn5+NvsnG6qS777ESzs1IElOpKUJOXYsBwmWl Q5pJq0XBjdPQ9FlfpyKs1fA12bLORTzVUHz9Cq4ZseuZcdr7qfY/7zA1/4GNbJb+ k6VSDiYc96M00ymYQpZCZxoEwnjyR5EtxtspPXm35ijIQx6XtzlwAaqXZhbabpoL BhPqoj+DeJKnX5BJnbjicoFlO4LBXbspd/2md6uy8H4PN5rx854dbLB3UxrPinoN kOepveyYncwzFL/BEgKwJg4UPt8CAwEAAaOCAtYwggLSMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOlNQJkGRxPxw6XiEegXz8KkDmNwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mZjdhZTgyZi01MzdlLTQ2MjYtYmU5ZS0zMzM5NGEyZGM5NjkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZmN2FlODJm LTUzN2UtNDYyNi1iZTllLTMzMzk0YTJkYzk2OS8wL0U5NEQ0MDk5MDY0NzEzRjFD M0E1RTIxMUU4MTdDRkMyQTQwRTYzNzAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYIKwYBBQUHAQcBAf8ELjAsMCoEAgABMCQD BAIbg/gDBAExABgDBAFnpA4DBAFuXEgDBAJ0/mADBAN5MiAwDQYJKoZIhvcNAQEL BQADggEBACBNMHZvBEbNoP8+t74ddBgO2mrSvbvEFzRG4a6wZPrmevYoSwqgeB4n JjjOu9NXcdBLSY5e5akLeYQm6DB5Ep+isPdSGubK9aylYtMT1B7nEx2X64Vr/Ou4 i0cilDNj7QgpqzVvABQqDR1/cXuu2RCz1Zfgg3F5ibrwQNoPXPUKPmAuDTRBqdr8 RFTE0zYZtOwBFbuyl+ySv80zLdqQ6TwBYnVzIdC1UoC4W90//Hadlyv/YkNkqF5F HQftyFp0V1NhY4fD2/+kHZ8DpKEZMa63eYtdVpzCRG+qenT4jmF0WX+HX92v91DR nYHZGDiQ+xy8lcDi4RRcaw/ZawmzzGE= -----END CERTIFICATE-----Generated at Mon Oct 20 08:03:09 2025 by rpki-client