$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer File: F8F2A2C885D477DE76A5B2E75D699D5C06240751.cer (raw, json) Hash identifier: l31PJhzcRhndoG6m3DBYhYZXnv3N/k1WCFmdL3v0KqA= Subject key identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 444CFB88D6E854968FF6FCF4DA26234AEFBC246B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft caRepository: rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 15 Aug 2025 00:48:43 +0000 Certificate not after: Fri 14 Aug 2026 00:53:43 +0000 Subordinate resources: IP: 103.160.94.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:16:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:4c:fb:88:d6:e8:54:96:8f:f6:fc:f4:da:26:23:4a:ef:bc:24:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 15 00:48:43 2025 GMT Not After : Aug 14 00:53:43 2026 GMT Subject: CN=F8F2A2C885D477DE76A5B2E75D699D5C06240751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:81:2c:ac:aa:a4:ed:cb:e6:85:c6:56:8e: 70:9a:85:62:8e:b8:9f:dd:dd:bd:1a:d5:98:58:46: b6:6e:bd:11:99:b3:8a:53:ce:ab:ef:94:a7:1e:e1: 32:73:4e:66:eb:ea:4c:bb:e8:e8:25:4c:d6:18:3b: c0:12:0c:92:88:4b:4c:74:9d:9e:47:18:4a:3d:f0: 58:d6:05:a0:ed:4d:ac:9d:a4:f0:fb:16:6b:c4:f1: 2c:00:35:7c:0b:9c:72:85:54:9d:32:01:fe:2c:33: f6:b1:ee:01:4c:e2:37:67:b3:a2:10:62:99:a5:da: 66:a4:eb:4e:7c:1d:37:6a:66:cc:c5:0a:f6:0f:8b: 87:8a:dd:78:ca:36:c7:18:f8:a1:e9:2c:32:68:e8: 45:12:51:50:d3:b7:09:0c:04:cc:8b:f8:fe:6d:09: 63:b3:a5:2f:42:ce:5f:ee:c2:fd:ff:8b:a1:ea:ce: 8e:d9:06:a6:fb:6b:3a:02:cf:29:e0:f5:c2:e9:73: a7:25:63:62:9d:5c:f4:56:8a:e2:b7:e2:5f:de:65: 9a:ed:bb:5c:b5:67:4e:ae:90:0f:79:9e:26:f9:d1: fa:f7:0e:5f:24:33:fd:7f:78:4e:d8:95:6f:53:33: 73:f2:7c:c2:b7:28:2e:9b:33:70:ba:e6:83:93:8f: 2c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:F2:A2:C8:85:D4:77:DE:76:A5:B2:E7:5D:69:9D:5C:06:24:07:51 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a59e5658-ab10-4297-92f4-f6a2663e54c0/0/F8F2A2C885D477DE76A5B2E75D699D5C06240751.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.94.0/23 Signature Algorithm: sha256WithRSAEncryption 87:b8:e3:b8:11:fb:80:d4:95:87:80:f6:54:f8:d0:1a:f3:3c: 35:6d:c9:b6:86:b2:24:69:05:4a:26:0a:fb:53:d1:7c:79:7a: 1f:be:b8:87:9d:a8:bf:64:2a:0b:a7:d9:bd:8a:e5:ac:00:e5: 36:7e:11:41:5f:cd:95:7a:d7:c2:58:64:4e:8f:55:c2:d6:7e: f0:df:ff:a6:1c:49:f0:74:a2:e3:a0:97:18:4e:27:de:ad:03: f5:fe:ed:df:3d:3c:a4:62:fd:79:d1:ad:e9:99:f2:8f:6a:67: a2:b3:15:0b:b5:71:ff:62:0a:d2:8b:34:52:db:9f:a8:32:57: d5:f3:46:92:ff:2a:c6:f7:a8:28:41:ee:d8:98:c4:1b:d9:21: 01:d8:52:22:b1:91:ec:96:bf:78:8e:5b:49:25:ba:1e:98:9a: ce:92:1d:92:4e:f9:ba:51:59:18:04:71:1c:da:e2:86:38:7b: 69:30:43:8f:01:c2:24:92:c6:b8:dc:d0:29:3b:89:0c:83:35: 9e:9e:36:5e:cc:c1:c3:25:a5:be:fb:34:48:94:56:bc:9c:42: 40:af:db:f4:dc:e9:18:b7:2e:23:16:c3:5f:90:2b:1b:ef:79: ed:05:bf:61:6b:2b:b3:36:e9:25:b7:2e:6c:c4:23:8a:f4:d6: 1a:aa:68:a5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUREz7iNboVJaP9vz02iYjSu+8JGswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxNTAwNDg0M1oX DTI2MDgxNDAwNTM0M1owMzExMC8GA1UEAxMoRjhGMkEyQzg4NUQ0NzdERTc2QTVC MkU3NUQ2OTlENUMwNjI0MDc1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL1kgSysqqTty+aFxlaOcJqFYo64n93dvRrVmFhGtm69EZmzilPOq++Upx7h MnNOZuvqTLvo6CVM1hg7wBIMkohLTHSdnkcYSj3wWNYFoO1NrJ2k8PsWa8TxLAA1 fAuccoVUnTIB/iwz9rHuAUziN2ezohBimaXaZqTrTnwdN2pmzMUK9g+Lh4rdeMo2 xxj4oeksMmjoRRJRUNO3CQwEzIv4/m0JY7OlL0LOX+7C/f+LoerOjtkGpvtrOgLP KeD1wulzpyVjYp1c9FaK4rfiX95lmu27XLVnTq6QD3meJvnR+vcOXyQz/X94TtiV b1Mzc/J8wrcoLpszcLrmg5OPLEUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPjyosiF1HfedqWy511pnVwGJAdRMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hNTllNTY1OC1hYjEwLTQyOTctOTJmNC1mNmEyNjYzZTU0YzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1OWU1NjU4 LWFiMTAtNDI5Ny05MmY0LWY2YTI2NjNlNTRjMC8wL0Y4RjJBMkM4ODVENDc3REU3 NkE1QjJFNzVENjk5RDVDMDYyNDA3NTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnoF4wDQYJKoZIhvcNAQELBQADggEBAIe447gR+4DUlYeA9lT40BrzPDVtybaG siRpBUomCvtT0Xx5eh++uIedqL9kKgun2b2K5awA5TZ+EUFfzZV618JYZE6PVcLW fvDf/6YcSfB0ouOglxhOJ96tA/X+7d89PKRi/XnRremZ8o9qZ6KzFQu1cf9iCtKL NFLbn6gyV9XzRpL/Ksb3qChB7tiYxBvZIQHYUiKxkeyWv3iOW0kluh6Yms6SHZJO +bpRWRgEcRza4oY4e2kwQ48BwiSSxrjc0Ck7iQyDNZ6eNl7MwcMlpb77NEiUVryc QkCv2/Tc6Ri3LiMWw1+QKxvvee0Fv2FrK7M26SW3LmzEI4r01hqqaKU= -----END CERTIFICATE-----Generated at Sat Aug 23 07:20:50 2025 by rpki-client