$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer File: F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer (raw, json) Hash identifier: 430LgtGFmwz6NovgnudXGptdcITIN+4pGoz1Sg9knRc= Subject key identifier: F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 78B57E0F539BC42CCBC887112E1BC4C5424301F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft caRepository: rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 12 Aug 2025 11:26:37 +0000 Certificate not after: Tue 11 Aug 2026 11:31:37 +0000 Subordinate resources: IP: 103.121.58.0/24 IP: 2001:df6:3f00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b5:7e:0f:53:9b:c4:2c:cb:c8:87:11:2e:1b:c4:c5:42:43:01:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 12 11:26:37 2025 GMT Not After : Aug 11 11:31:37 2026 GMT Subject: CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e7:20:39:49:02:8a:4a:fe:4e:c1:31:e1:9f: 46:d2:d0:d8:a4:c7:bb:df:fd:e1:fc:8b:88:e8:e5: 47:9f:b1:aa:92:b8:a1:2c:0a:48:f6:a4:53:19:36: 97:df:67:db:f9:87:2d:2c:be:ae:22:3b:22:c3:02: 36:cd:c3:69:e8:11:18:9a:95:fa:ac:62:d5:22:01: 13:c7:57:1e:94:04:86:3c:6e:18:72:5a:60:29:db: ef:d2:06:94:a3:3d:32:b1:5b:98:69:a4:76:ef:d9: 82:55:dc:fb:3e:77:91:60:0e:56:a4:9d:a9:6f:cc: 76:1d:89:48:1b:fe:08:b9:01:76:8b:5f:1a:5d:f1: e0:cb:4b:3a:1b:c9:59:b4:8d:d5:a9:77:f4:4a:09: 17:af:a1:64:12:01:28:34:77:6c:a4:ca:32:e4:d5: 42:50:2a:fb:31:b7:06:97:23:e1:4e:7f:0e:97:0f: 06:65:d6:47:92:11:0b:32:7a:74:8d:4e:19:78:cf: 50:c4:5a:c2:0d:30:56:de:d1:64:a7:21:97:05:aa: e8:60:d1:4d:8f:ae:29:51:4e:8c:af:41:58:ac:0a: 16:db:a2:56:90:c3:b0:cb:40:3f:a7:16:94:90:b5: cd:ff:bf:44:21:4a:6d:71:1a:87:01:5a:26:e5:be: 81:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.58.0/24 IPv6: 2001:df6:3f00::/48 Signature Algorithm: sha256WithRSAEncryption 4b:6c:d3:6a:1a:df:14:ef:43:84:14:27:09:50:55:16:ed:e9: 68:18:80:fe:52:92:98:65:59:3c:27:b2:ee:01:6d:ca:60:4a: d9:fd:9f:0d:d3:f1:28:6a:3a:10:27:97:0f:a8:c6:e3:65:6f: 2b:cc:52:52:ca:08:df:1e:69:2a:e0:6b:c6:95:d3:4b:74:c0: ad:90:89:98:d5:77:d5:af:48:b5:bb:2f:07:43:27:6e:3d:96: e3:cb:6a:31:b9:01:09:ed:ed:73:44:5c:37:1b:2b:12:67:34: 3c:05:51:ba:31:ae:0b:1e:8d:2b:b8:d2:98:67:80:7d:67:a7: 1b:41:3e:bc:26:9b:e9:d1:e8:bb:49:e6:69:3f:28:d5:ff:65: 59:05:81:7c:62:17:d2:1a:f4:0a:50:39:43:03:f1:6b:fd:ea: 98:91:67:af:79:0b:9e:95:6a:c8:9a:08:71:9d:2d:a6:fc:ec: 60:ad:00:08:ec:cb:94:13:82:40:fa:17:ec:bf:81:f0:ff:af: 0b:2d:0f:e0:45:e3:3c:42:aa:38:d1:9d:5f:c2:22:03:8e:9d: de:c2:0c:10:3d:cb:b6:d4:74:66:71:66:70:bb:09:7c:89:e9: 6d:a9:02:43:7e:fe:a9:c8:6e:06:09:f6:dd:04:ad:10:61:aa: dc:2d:b8:78 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUeLV+D1ObxCzLyIcRLhvExUJDAfgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxMjExMjYzN1oX DTI2MDgxMTExMzEzN1owMzExMC8GA1UEAxMoRjA3RkZGNDcyRUQ5QzcwMDczQkM5 ODg2NUE0QTVBNkMyQjBFQTM1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOHnIDlJAopK/k7BMeGfRtLQ2KTHu9/94fyLiOjlR5+xqpK4oSwKSPakUxk2 l99n2/mHLSy+riI7IsMCNs3DaegRGJqV+qxi1SIBE8dXHpQEhjxuGHJaYCnb79IG lKM9MrFbmGmkdu/ZglXc+z53kWAOVqSdqW/Mdh2JSBv+CLkBdotfGl3x4MtLOhvJ WbSN1al39EoJF6+hZBIBKDR3bKTKMuTVQlAq+zG3Bpcj4U5/DpcPBmXWR5IRCzJ6 dI1OGXjPUMRawg0wVt7RZKchlwWq6GDRTY+uKVFOjK9BWKwKFtuiVpDDsMtAP6cW lJC1zf+/RCFKbXEahwFaJuW+gZ0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPB//0cu2ccAc7yYhlpKWmwrDqNeMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MjRkYjU2Ny0zM2E4LTRjZTAtYmNmZi1jYjBmMGE4NWMyMzkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyNGRiNTY3 LTMzYTgtNGNlMC1iY2ZmLWNiMGYwYTg1YzIzOS8wL0YwN0ZGRjQ3MkVEOUM3MDA3 M0JDOTg4NjVBNEE1QTZDMkIwRUEzNUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABneTowDwQCAAIwCQMHACABDfY/ADANBgkqhkiG9w0BAQsFAAOCAQEAS2zTahrf FO9DhBQnCVBVFu3paBiA/lKSmGVZPCey7gFtymBK2f2fDdPxKGo6ECeXD6jG42Vv K8xSUsoI3x5pKuBrxpXTS3TArZCJmNV31a9ItbsvB0Mnbj2W48tqMbkBCe3tc0Rc NxsrEmc0PAVRujGuCx6NK7jSmGeAfWenG0E+vCab6dHou0nmaT8o1f9lWQWBfGIX 0hr0ClA5QwPxa/3qmJFnr3kLnpVqyJoIcZ0tpvzsYK0ACOzLlBOCQPoX7L+B8P+v Cy0P4EXjPEKqONGdX8IiA46d3sIMED3LttR0ZnFmcLsJfInpbakCQ37+qchuBgn2 3QStEGGq3C24eA== -----END CERTIFICATE-----Generated at Sat Aug 23 09:02:12 2025 by rpki-client