$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer File: EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.cer (raw, json) Hash identifier: ypIX2UhAHOUMmW0vcjDXnoB7S16WSF/FQC8vVn5epfM= Subject key identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2EC68AD79A20BAFE57C75F4ED72FDBDB155935F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft caRepository: rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 26 Sep 2025 17:21:13 +0000 Certificate not after: Fri 25 Sep 2026 17:26:13 +0000 Subordinate resources: IP: 202.47.92.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c6:8a:d7:9a:20:ba:fe:57:c7:5f:4e:d7:2f:db:db:15:59:35:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 26 17:21:13 2025 GMT Not After : Sep 25 17:26:13 2026 GMT Subject: CN=EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:a7:52:8d:be:43:cd:34:8b:54:64:db:82: b1:57:a7:0a:9b:93:9c:02:dc:4e:b5:17:aa:b0:d4: 68:ca:25:60:62:8f:8e:12:0c:eb:d9:7d:bc:ec:84: 56:cc:d6:50:4a:70:64:22:57:fa:8f:e1:72:70:68: 82:68:ab:96:b8:ab:c4:a5:af:bc:58:57:c5:d7:90: b8:1e:5a:cf:86:30:0a:3b:9a:b1:4f:a6:b7:ec:01: e9:e4:a6:f4:f6:28:1b:6f:b4:e7:01:b6:7d:15:7f: fb:9a:bb:8c:5d:72:93:ce:39:7d:77:e4:e5:2a:98: 92:ea:f9:dc:de:1a:48:23:06:7f:d9:d7:6c:5b:e9: 4f:2f:bd:c5:24:bd:3c:72:d6:a9:6f:58:70:ca:0a: f0:d9:1e:e8:83:3e:74:93:de:0e:bd:c3:3d:07:eb: 07:b9:79:b5:6e:01:03:b4:c2:e8:f8:d1:01:93:4d: af:70:c0:d9:63:62:3f:7e:76:2b:30:b9:f0:5b:5b: 2d:4d:9d:7e:87:ac:a0:07:96:b7:cb:bb:fa:5f:6b: 3c:5a:d7:5c:aa:f7:ba:60:ab:30:80:42:45:91:02: ba:06:3f:62:c1:5c:b3:2d:13:43:85:0c:93:ff:ef: 40:be:41:d0:c9:90:7b:72:19:31:24:34:6b:f9:80: 97:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:5E:33:0B:F8:DC:FF:6D:09:DF:49:07:4B:46:B2:2E:BD:FB:D4:54 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a371db9b-7c40-4966-991b-5138b3693246/0/EA5E330BF8DCFF6D09DF49074B46B22EBDFBD454.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.92.0/23 Signature Algorithm: sha256WithRSAEncryption 60:74:fd:db:12:c0:c2:8a:e1:4b:99:1d:3f:38:b6:0b:f3:1a: f0:a1:d0:66:29:ba:fe:0b:56:e5:94:fc:30:fc:ca:93:82:4d: af:18:ee:0c:38:63:5a:d3:fa:0c:9f:14:a1:49:51:09:73:77: 75:a0:b0:18:de:ce:1d:84:17:64:3d:c9:04:4c:bd:b5:03:a9: b5:9b:d9:3e:69:d2:af:dd:89:13:b4:99:31:87:a4:fe:58:ea: 09:e8:88:9e:fd:ea:57:97:43:13:cf:de:3e:db:9c:40:47:a2: 51:48:3a:81:4b:2b:8a:7d:1e:3e:32:f9:c7:ff:55:c4:7c:74: 72:a8:5f:30:b4:1e:24:be:b6:6d:2a:95:f1:d6:d6:6e:d6:d3: a2:18:71:63:3f:85:cd:22:e8:92:2b:a2:a4:84:c1:1e:19:a9: d7:fb:de:a7:14:fc:14:00:f6:26:c7:dd:07:c0:76:c2:f0:b0: 8f:21:de:63:18:f8:3e:47:bf:b6:07:1b:5f:68:90:43:82:00: d5:72:f6:30:06:58:55:ae:c9:1a:8c:dc:ea:f9:3e:b8:a8:af: 49:54:8c:ca:d0:66:a2:df:5a:bd:50:1f:36:22:5c:e9:73:f8: ac:a5:3a:87:6f:01:78:8d:a8:93:87:60:87:d8:7d:76:77:7f: a7:6c:ea:69 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULsaK15oguv5Xx19O1y/b2xVZNfcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyNjE3MjExM1oX DTI2MDkyNTE3MjYxM1owMzExMC8GA1UEAxMoRUE1RTMzMEJGOERDRkY2RDA5REY0 OTA3NEI0NkIyMkVCREZCRDQ1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKiHp1KNvkPNNItUZNuCsVenCpuTnALcTrUXqrDUaMolYGKPjhIM69l9vOyE VszWUEpwZCJX+o/hcnBogmirlrirxKWvvFhXxdeQuB5az4YwCjuasU+mt+wB6eSm 9PYoG2+05wG2fRV/+5q7jF1yk845fXfk5SqYkur53N4aSCMGf9nXbFvpTy+9xSS9 PHLWqW9YcMoK8Nke6IM+dJPeDr3DPQfrB7l5tW4BA7TC6PjRAZNNr3DA2WNiP352 KzC58FtbLU2dfoesoAeWt8u7+l9rPFrXXKr3umCrMIBCRZECugY/YsFcsy0TQ4UM k//vQL5B0MmQe3IZMSQ0a/mAlzMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOpeMwv43P9tCd9JB0tGsi69+9RUMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMzcxZGI5Yi03YzQwLTQ5NjYtOTkxYi01MTM4YjM2OTMyNDYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EzNzFkYjli LTdjNDAtNDk2Ni05OTFiLTUxMzhiMzY5MzI0Ni8wL0VBNUUzMzBCRjhEQ0ZGNkQw OURGNDkwNzRCNDZCMjJFQkRGQkQ0NTQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHKL1wwDQYJKoZIhvcNAQELBQADggEBAGB0/dsSwMKK4UuZHT84tgvzGvCh0GYp uv4LVuWU/DD8ypOCTa8Y7gw4Y1rT+gyfFKFJUQlzd3WgsBjezh2EF2Q9yQRMvbUD qbWb2T5p0q/diRO0mTGHpP5Y6gnoiJ796leXQxPP3j7bnEBHolFIOoFLK4p9Hj4y +cf/VcR8dHKoXzC0HiS+tm0qlfHW1m7W06IYcWM/hc0i6JIroqSEwR4Zqdf73qcU /BQA9ibH3QfAdsLwsI8h3mMY+D5Hv7YHG19okEOCANVy9jAGWFWuyRqM3Or5Prio r0lUjMrQZqLfWr1QHzYiXOlz+KylOodvAXiNqJOHYIfYfXZ3f6ds6mk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:03:04 2025 by rpki-client