$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer File: FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer (raw, json) Hash identifier: j0VkXuE2v9bhblCLOr78zCiijG6K4WZNNh7nZUl+aB0= Subject key identifier: FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4CBDF0193121BD6AD4769440A12410677342832D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft caRepository: rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 15 Oct 2025 22:17:07 +0000 Certificate not after: Wed 14 Oct 2026 22:22:07 +0000 Subordinate resources: IP: 103.160.182.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:bd:f0:19:31:21:bd:6a:d4:76:94:40:a1:24:10:67:73:42:83:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 15 22:17:07 2025 GMT Not After : Oct 14 22:22:07 2026 GMT Subject: CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c1:2d:ae:ab:09:31:6b:17:5e:23:72:d3:87: bc:c5:d3:0e:fc:0d:0c:6e:5a:3c:fc:f3:0d:d1:79: c9:94:06:b2:6c:f7:df:ee:14:05:a4:ba:30:57:f8: 22:d8:b2:85:88:e5:cb:26:01:6b:3b:66:ee:36:4c: 2b:8e:04:ba:3f:b4:3c:16:b1:e6:c3:02:03:66:08: 68:34:a6:43:7e:4f:03:a8:ca:25:b4:a9:a5:83:76: d3:44:db:fd:7a:76:94:0f:45:ad:b3:60:08:1d:16: a2:57:64:44:de:31:39:e8:93:0b:b5:91:d9:47:a9: 47:7b:07:27:0f:b4:10:73:f4:30:ef:f7:a3:d7:0b: fc:25:bc:e5:6b:b3:df:73:7e:61:69:69:7b:b2:bb: 49:8a:77:2f:57:e6:6d:1c:d7:d7:a7:df:63:23:37: 79:d2:c9:ce:e3:df:5a:09:7c:ed:8d:0e:45:cb:4e: c6:f0:88:7d:75:fb:22:87:cc:85:28:8b:6a:6b:8f: 31:9c:ac:d4:38:dd:46:73:94:03:3e:50:98:9a:19: 6f:2b:71:a3:f8:f3:33:79:3e:57:a7:2e:de:98:fe: f1:25:45:b7:f8:f8:e3:a0:4a:f6:89:bc:4a:53:0d: 58:e7:7c:27:70:ff:37:7e:fe:2e:2c:64:58:29:1b: 0e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.182.0/23 Signature Algorithm: sha256WithRSAEncryption 92:33:bb:80:91:0f:e1:3b:1a:2c:95:6d:0d:bb:57:87:2d:89: 52:64:c4:a0:ef:9f:77:be:6a:55:8f:db:c8:83:c7:04:67:59: 3d:7d:fa:a9:4c:7b:cc:06:3b:56:1d:0d:4c:e5:4c:24:66:e9: 03:e0:06:89:a7:2b:ed:99:72:d8:a3:03:4b:50:e4:49:34:ca: 11:59:8f:b6:5a:08:59:27:37:36:10:3c:b1:0c:0f:3c:9d:80: 05:60:b9:b9:e5:d0:b4:d2:b2:cc:21:44:d0:33:c7:ff:b0:fa: e4:a0:1d:a0:1a:ce:5a:6e:f1:01:ff:b1:5c:90:78:92:a1:07: 94:3c:cd:d6:78:4b:95:5c:6b:45:29:ca:d3:fe:41:e7:c1:17: c2:96:4a:2d:2b:26:a6:a0:3c:63:cb:82:18:74:b1:f2:7a:6e: 8b:55:80:aa:39:bd:94:71:9b:b4:03:ac:87:f7:d2:3b:03:8b: 14:3a:6a:9e:84:70:b0:66:75:e7:c1:b6:5b:54:ee:79:3c:77: 2f:8d:a9:ff:e1:10:9c:63:62:c8:af:8b:a6:7a:f9:bf:10:0a: bd:eb:57:26:07:17:cf:e7:a3:0e:cf:22:dc:c3:6d:57:e0:57: 30:0e:64:ec:b3:85:a6:95:5d:2e:bc:9d:5a:74:b4:8a:3f:ab: 70:f4:8f:47 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTL3wGTEhvWrUdpRAoSQQZ3NCgy0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAxNTIyMTcwN1oX DTI2MTAxNDIyMjIwN1owMzExMC8GA1UEAxMoRkRFNkFCRUUxQjk1MkY0REY4NUQ2 MzJBODkyM0ZFNThBODE4NzkyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANTBLa6rCTFrF14jctOHvMXTDvwNDG5aPPzzDdF5yZQGsmz33+4UBaS6MFf4 ItiyhYjlyyYBaztm7jZMK44Euj+0PBax5sMCA2YIaDSmQ35PA6jKJbSppYN200Tb /Xp2lA9FrbNgCB0WoldkRN4xOeiTC7WR2UepR3sHJw+0EHP0MO/3o9cL/CW85Wuz 33N+YWlpe7K7SYp3L1fmbRzX16ffYyM3edLJzuPfWgl87Y0ORctOxvCIfXX7IofM hSiLamuPMZys1DjdRnOUAz5QmJoZbytxo/jzM3k+V6cu3pj+8SVFt/j446BK9om8 SlMNWOd8J3D/N37+LixkWCkbDgsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP3mq+4blS9N+F1jKokj/lioGHkqMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMjc0NGRkZS03YzFmLTRjYmEtOTNjMC05ZjA2NjllZWVkOTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyNzQ0ZGRl LTdjMWYtNGNiYS05M2MwLTlmMDY2OWVlZWQ5Mi8wL0ZERTZBQkVFMUI5NTJGNERG ODVENjMyQTg5MjNGRTU4QTgxODc5MkEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnoLYwDQYJKoZIhvcNAQELBQADggEBAJIzu4CRD+E7GiyVbQ27V4ctiVJkxKDv n3e+alWP28iDxwRnWT19+qlMe8wGO1YdDUzlTCRm6QPgBomnK+2ZctijA0tQ5Ek0 yhFZj7ZaCFknNzYQPLEMDzydgAVgubnl0LTSsswhRNAzx/+w+uSgHaAazlpu8QH/ sVyQeJKhB5Q8zdZ4S5Vca0UpytP+QefBF8KWSi0rJqagPGPLghh0sfJ6botVgKo5 vZRxm7QDrIf30jsDixQ6ap6EcLBmdefBtltU7nk8dy+Nqf/hEJxjYsivi6Z6+b8Q Cr3rVyYHF8/now7PItzDbVfgVzAOZOyzhaaVXS68nVp0tIo/q3D0j0c= -----END CERTIFICATE-----Generated at Mon Oct 20 06:32:11 2025 by rpki-client