$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer File: F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer (raw, json) Hash identifier: MIyn7dNkKSABkqgcWHpuAER2spy7UjoUe9gHguCG9O4= Subject key identifier: F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 02A1ACF469C7C9EC74E106F675057AC66FC56144 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft caRepository: rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 07:10:11 +0000 Certificate not after: Tue 02 Jun 2026 07:15:11 +0000 Subordinate resources: IP: 103.151.32.0/23 IP: 2406:1340::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a1:ac:f4:69:c7:c9:ec:74:e1:06:f6:75:05:7a:c6:6f:c5:61:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 07:10:11 2025 GMT Not After : Jun 2 07:15:11 2026 GMT Subject: CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:e2:36:7d:60:53:9e:fc:4a:28:15:c2:c0: 5e:a9:65:e2:d3:cf:f7:fe:2e:fb:b3:15:51:ea:38: 5b:ec:97:64:93:03:c6:6d:d5:3f:e7:51:da:e1:9e: 73:58:a3:f3:75:e8:de:dd:d4:2c:e7:f2:cd:aa:fb: 09:3d:7e:c3:6d:9d:00:a2:7d:a8:27:3d:89:3f:4f: 2d:5a:3f:e9:11:c9:7a:3f:c8:ad:a6:57:bf:85:d4: 25:42:4b:88:34:a0:53:fc:3f:10:d7:75:a1:79:b0: 59:f8:fa:a2:0e:8b:b3:00:70:51:17:1a:88:55:e9: de:5e:53:69:45:ca:98:7a:23:96:be:d0:69:46:87: bd:9e:24:7f:5e:8f:2f:94:48:54:c2:a7:ff:d6:ff: 82:c0:e6:a5:9f:3c:bd:8e:b8:50:38:8f:44:92:49: 87:a2:15:6e:fb:31:3a:69:d1:72:b0:86:d4:f8:50: fa:83:d8:f0:7d:5f:aa:99:27:9b:8a:f9:d2:84:a0: 85:2b:82:54:1e:9e:33:cb:ed:ac:c0:cb:69:f3:41: 99:ea:25:90:c4:c4:33:e2:1e:d4:f1:41:16:29:a4: 05:c9:e7:7c:ed:2d:c5:a2:f8:5f:bd:7a:eb:38:58: a0:26:4a:c6:5a:99:da:9d:15:0a:4b:b8:d4:e4:5b: 24:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.32.0/23 IPv6: 2406:1340::/32 Signature Algorithm: sha256WithRSAEncryption 00:18:bb:58:42:3b:4b:00:3a:17:e3:1d:36:60:2f:31:61:ae: 0b:7f:f5:56:76:31:85:c3:d7:ba:b9:c5:12:7a:fb:86:3c:56: 95:b3:de:fc:32:1d:a4:d8:1b:50:88:18:6c:53:90:79:e7:89: a0:8f:09:6c:01:72:de:25:6f:f4:a6:97:60:95:c2:71:44:25: 64:68:7c:c9:de:70:b5:89:f9:eb:e0:a9:26:71:51:5b:d8:5d: 67:7e:ad:8e:5c:c3:a1:10:d1:32:38:31:d9:29:9a:38:0d:8d: c3:e7:7e:62:0f:97:11:fe:28:df:3a:21:06:00:5d:87:71:7b: f0:b4:cf:19:07:c5:8f:75:94:11:a9:e0:46:65:bc:75:f1:f4: 42:ea:62:ed:39:01:d9:3f:72:2b:99:39:c1:07:9d:23:f8:64: f3:1c:b7:e6:1e:b1:0d:c2:0c:68:42:d7:16:cc:d2:81:0a:e3: cb:72:da:d1:36:a8:65:95:55:a9:f4:6c:bb:fe:ef:ba:32:fb: 05:e3:ad:c9:76:43:df:bc:71:c4:14:07:5a:01:2b:a1:82:f8: 9f:1f:a2:7b:37:02:0b:13:97:b4:6f:4a:6d:f6:c9:e4:71:9c: d8:06:22:44:6f:45:2c:78:f9:b3:8e:03:46:b2:45:67:b1:85: 42:8c:0f:fa -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUAqGs9GnHyex04Qb2dQV6xm/FYUQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzA3MTAxMVoX DTI2MDYwMjA3MTUxMVowMzExMC8GA1UEAxMoRjEwREVBODVBMTk5MTM4RDBBRDk2 REM0RDNDQjUzN0NEQTY2MkM1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMqp4jZ9YFOe/EooFcLAXqll4tPP9/4u+7MVUeo4W+yXZJMDxm3VP+dR2uGe c1ij83Xo3t3ULOfyzar7CT1+w22dAKJ9qCc9iT9PLVo/6RHJej/IraZXv4XUJUJL iDSgU/w/ENd1oXmwWfj6og6LswBwURcaiFXp3l5TaUXKmHojlr7QaUaHvZ4kf16P L5RIVMKn/9b/gsDmpZ88vY64UDiPRJJJh6IVbvsxOmnRcrCG1PhQ+oPY8H1fqpkn m4r50oSghSuCVB6eM8vtrMDLafNBmeolkMTEM+Ie1PFBFimkBcnnfO0txaL4X716 6zhYoCZKxlqZ2p0VCku41ORbJIMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPEN6oWhmRONCtltxNPLU3zaZixTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNTk2YmNjOC0zOGNkLTQ0MzctODBiMS01YmFlOWY4NTc5MzcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1OTZiY2M4 LTM4Y2QtNDQzNy04MGIxLTViYWU5Zjg1NzkzNy8wL0YxMERFQTg1QTE5OTEzOEQw QUQ5NkRDNEQzQ0I1MzdDREE2NjJDNTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnlyAwDQQCAAIwBwMFACQGE0AwDQYJKoZIhvcNAQELBQADggEBAAAYu1hCO0sA OhfjHTZgLzFhrgt/9VZ2MYXD17q5xRJ6+4Y8VpWz3vwyHaTYG1CIGGxTkHnniaCP CWwBct4lb/Sml2CVwnFEJWRofMnecLWJ+evgqSZxUVvYXWd+rY5cw6EQ0TI4Mdkp mjgNjcPnfmIPlxH+KN86IQYAXYdxe/C0zxkHxY91lBGp4EZlvHXx9ELqYu05Adk/ ciuZOcEHnSP4ZPMct+YesQ3CDGhC1xbM0oEK48ty2tE2qGWVVan0bLv+77oy+wXj rcl2Q9+8ccQUB1oBK6GC+J8fons3AgsTl7RvSm32yeRxnNgGIkRvRSx4+bOOA0ay RWexhUKMD/o= -----END CERTIFICATE-----Generated at Sun Jun 29 12:34:04 2025 by rpki-client