$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F137C794398E5F88909A244EC978EA476CCF76CC.cer File: F137C794398E5F88909A244EC978EA476CCF76CC.cer (raw, json) Hash identifier: udIFwm6Ee8OPGNKoYlaKJKFLULXWeUo+WkTtlXiyPGQ= Subject key identifier: F1:37:C7:94:39:8E:5F:88:90:9A:24:4E:C9:78:EA:47:6C:CF:76:CC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5B8B5FB06C443175F0F20486B8A07C49CE0CCAB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft caRepository: rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 27 Sep 2025 02:14:04 +0000 Certificate not after: Sat 26 Sep 2026 02:19:04 +0000 Subordinate resources: IP: 103.55.224.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:8b:5f:b0:6c:44:31:75:f0:f2:04:86:b8:a0:7c:49:ce:0c:ca:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 27 02:14:04 2025 GMT Not After : Sep 26 02:19:04 2026 GMT Subject: CN=F137C794398E5F88909A244EC978EA476CCF76CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:8b:08:21:09:f4:7c:9d:1e:96:6d:1b:7a: c4:69:3c:63:1f:0c:7e:4e:9e:fe:f4:b6:a0:92:f5: d8:38:98:6c:68:94:41:6e:42:dd:ed:7b:0f:f6:f5: 8e:f8:ad:72:f1:83:15:09:5f:c3:77:f0:d3:05:fd: 28:16:b6:95:65:f1:f4:63:fd:d9:a8:1d:fe:14:8a: c0:32:ae:47:fd:54:ab:38:aa:9d:3b:83:5f:d1:99: 9e:b2:75:38:31:95:10:c9:fd:b7:da:d5:dd:85:3d: 1a:07:9d:93:0f:64:18:72:31:6e:c2:bd:cd:e5:18: 76:df:60:40:86:e7:8e:44:92:82:c1:35:b3:08:e9: 60:95:46:c2:75:80:e7:ae:f4:05:f7:d3:4b:53:cf: 2e:7d:cc:47:d5:cb:87:68:f4:0a:06:1a:c7:8b:86: 36:50:0d:08:b8:dc:99:99:16:5f:60:5c:29:9f:19: 9c:cf:fc:1d:5e:52:b7:1e:2c:eb:68:6e:55:df:91: 4f:d7:e7:dc:57:8f:ba:6e:f9:63:d9:c7:d0:67:77: 45:c6:a3:e4:82:a7:e0:4b:ee:97:e1:2a:ff:5e:d8: 36:c3:f6:3b:e1:1c:68:4a:5e:d8:09:e5:26:29:38: 63:b2:85:da:53:19:9d:36:59:a8:6c:89:85:a0:9f: 68:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F1:37:C7:94:39:8E:5F:88:90:9A:24:4E:C9:78:EA:47:6C:CF:76:CC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8cf2c733-d67f-4813-b8f7-058d95a09587/0/F137C794398E5F88909A244EC978EA476CCF76CC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.55.224.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:20:88:b4:08:e8:9b:de:a9:51:47:ba:47:51:b3:b2:c0:cf: 7e:64:a4:97:34:be:27:3c:d9:8f:76:f3:a9:b5:fc:fc:34:1a: 2a:67:ba:d2:d4:61:8a:5f:7c:62:bf:e5:2a:a6:40:a1:81:30: 00:d1:12:97:47:f2:fc:3d:89:86:af:98:dc:0a:aa:a1:e1:27: 51:7c:a9:38:15:ff:0c:29:7c:89:7b:b7:4d:8f:e7:3a:25:80: 3d:af:7b:c0:0d:84:b0:6d:88:63:50:71:87:e5:b3:74:f3:e9: 99:50:12:a8:da:34:a4:87:cc:1c:c2:85:5b:eb:25:c5:cb:eb: b1:ba:08:8e:3f:c6:2a:65:66:8d:0d:d1:39:27:7d:91:7f:0f: bb:d6:e5:49:56:b2:51:01:08:32:e6:a7:6e:73:a0:55:b8:ca: 2e:75:6e:9a:9c:fd:c2:f6:40:30:a7:4e:06:18:e5:23:73:f4: 4f:34:ef:7f:d0:49:f3:7c:3f:b1:d2:7a:05:6c:50:b1:e1:66: d4:d2:c3:89:b5:d1:5c:a3:ab:88:af:61:0d:4d:ca:bc:67:97: 92:43:3e:cc:44:59:59:dc:da:b2:a3:04:2f:f0:2e:2c:f6:d7: 13:c7:44:f3:70:01:e8:50:7e:86:98:85:8d:7c:fd:12:60:9e: 8b:73:9b:3a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUW4tfsGxEMXXw8gSGuKB8Sc4MyrMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyNzAyMTQwNFoX DTI2MDkyNjAyMTkwNFowMzExMC8GA1UEAxMoRjEzN0M3OTQzOThFNUY4ODkwOUEy NDRFQzk3OEVBNDc2Q0NGNzZDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKzuiwghCfR8nR6WbRt6xGk8Yx8Mfk6e/vS2oJL12DiYbGiUQW5C3e17D/b1 jvitcvGDFQlfw3fw0wX9KBa2lWXx9GP92agd/hSKwDKuR/1UqziqnTuDX9GZnrJ1 ODGVEMn9t9rV3YU9Ggedkw9kGHIxbsK9zeUYdt9gQIbnjkSSgsE1swjpYJVGwnWA 5670BffTS1PPLn3MR9XLh2j0CgYax4uGNlANCLjcmZkWX2BcKZ8ZnM/8HV5Stx4s 62huVd+RT9fn3FePum75Y9nH0Gd3Rcaj5IKn4Evul+Eq/17YNsP2O+EcaEpe2Anl Jik4Y7KF2lMZnTZZqGyJhaCfaGsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPE3x5Q5jl+IkJokTsl46kdsz3bMMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84Y2YyYzczMy1kNjdmLTQ4MTMtYjhmNy0wNThkOTVhMDk1ODcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZjJjNzMz LWQ2N2YtNDgxMy1iOGY3LTA1OGQ5NWEwOTU4Ny8wL0YxMzdDNzk0Mzk4RTVGODg5 MDlBMjQ0RUM5NzhFQTQ3NkNDRjc2Q0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnN+AwDQYJKoZIhvcNAQELBQADggEBAAsgiLQI6JveqVFHukdRs7LAz35kpJc0 vic82Y9286m1/Pw0GipnutLUYYpffGK/5SqmQKGBMADREpdH8vw9iYavmNwKqqHh J1F8qTgV/wwpfIl7t02P5zolgD2ve8ANhLBtiGNQcYfls3Tz6ZlQEqjaNKSHzBzC hVvrJcXL67G6CI4/xiplZo0N0TknfZF/D7vW5UlWslEBCDLmp25zoFW4yi51bpqc /cL2QDCnTgYY5SNz9E8073/QSfN8P7HSegVsULHhZtTSw4m10Vyjq4ivYQ1Nyrxn l5JDPsxEWVnc2rKjBC/wLiz21xPHRPNwAehQfoaYhY18/RJgnotzmzo= -----END CERTIFICATE-----Generated at Mon Oct 20 06:24:59 2025 by rpki-client