$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer File: FED855DD505D24B6FE25BD8656297329F7EF4785.cer (raw, json) Hash identifier: diSE+KhzcDJ1eZFFgsKz8akukJngZ46sZA9hJ/eest8= Subject key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4714479E378989FAB54A6ABE57969ADA804CFCC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft caRepository: rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 10 Sep 2025 23:23:13 +0000 Certificate not after: Wed 09 Sep 2026 23:28:13 +0000 Subordinate resources: IP: 103.105.128.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:14:47:9e:37:89:89:fa:b5:4a:6a:be:57:96:9a:da:80:4c:fc:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 10 23:23:13 2025 GMT Not After : Sep 9 23:28:13 2026 GMT Subject: CN=FED855DD505D24B6FE25BD8656297329F7EF4785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:10:2c:d8:31:c6:3a:da:ad:d8:5e:22:3b:fd: cc:a7:13:e1:4c:84:58:f6:27:4b:09:fa:7e:3c:bd: 58:77:70:8e:66:6f:03:67:73:e3:48:cf:04:f9:ae: 06:9c:01:35:b5:05:f2:9c:b4:7a:39:f1:65:d4:37: c6:90:73:a6:12:f9:34:51:1f:cc:b8:79:fa:ef:0e: 22:fa:e9:24:73:06:2b:17:0b:6f:f4:67:66:f1:dc: 6d:03:f5:52:5b:4c:c8:b1:77:f1:71:69:90:5b:95: 14:8d:30:39:76:38:d7:a5:d5:3c:c4:a0:00:35:1e: 2b:6f:58:a1:10:17:05:6a:c8:92:48:38:bd:fb:68: fc:32:d3:4e:fe:c5:d0:5d:a2:b3:47:33:fe:d6:f8: a5:28:77:5f:ec:15:1d:ad:a7:5e:70:b9:3c:8d:9f: 1d:aa:9d:91:98:c5:14:c1:6f:81:49:6c:7f:42:ee: a9:e7:2b:d3:6e:26:0f:b2:82:be:6e:6b:f4:a2:64: 87:39:0a:42:63:2d:a6:ab:02:64:8f:19:18:e2:82: 37:20:98:60:ac:09:45:ec:8e:12:5a:3e:59:d7:bd: e3:44:82:2e:6d:5c:7f:fa:37:cf:1d:5d:a6:cf:f0: 5f:95:06:cc:d2:57:dd:ec:f5:18:4e:7f:aa:70:97: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.128.0/22 Signature Algorithm: sha256WithRSAEncryption 06:ba:10:6d:0f:d3:89:72:68:13:2d:ab:f7:31:af:2c:0c:96: 87:bb:fb:97:73:c4:ed:db:8f:be:5e:54:63:5b:9c:42:79:88: 83:41:bc:05:bb:7d:47:dc:fd:cc:fc:19:3f:12:4e:e2:ec:39: a2:1f:2e:e0:8e:89:90:81:c6:c1:5c:6a:df:95:76:7f:6c:80: 93:59:be:cc:9d:3d:47:69:49:b1:1d:23:13:00:5d:79:2c:e7: 37:da:da:34:d5:cc:6e:36:67:75:cc:a5:4c:38:f4:74:fe:09: cd:a8:e2:4a:02:25:ac:3a:e9:a0:71:f0:a8:e4:84:0e:a2:3b: 78:98:44:ba:11:80:94:e1:f2:54:20:ea:cb:65:4a:11:f8:31: 81:3a:63:3b:50:0a:c3:ce:2e:7b:5f:c5:17:17:2e:85:e6:2f: f9:00:fe:44:22:2c:76:81:e7:b2:aa:23:b2:07:b2:7b:18:b9: 9e:07:29:57:16:a9:72:09:7a:27:68:d6:e1:29:c3:b1:f5:13: d8:c4:6f:58:59:17:9b:76:86:85:9a:bb:9a:4f:dd:4f:2b:8e: 69:e3:cb:0f:d3:33:fc:9f:02:8f:60:d0:f3:43:3d:de:ad:d4: 87:63:1f:58:5e:f9:3c:73:d2:fa:89:18:9c:93:8f:0a:d7:4e: 0a:78:01:85 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURxRHnjeJifq1Smq+V5aa2oBM/MMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxMDIzMjMxM1oX DTI2MDkwOTIzMjgxM1owMzExMC8GA1UEAxMoRkVEODU1REQ1MDVEMjRCNkZFMjVC RDg2NTYyOTczMjlGN0VGNDc4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPkQLNgxxjrardheIjv9zKcT4UyEWPYnSwn6fjy9WHdwjmZvA2dz40jPBPmu BpwBNbUF8py0ejnxZdQ3xpBzphL5NFEfzLh5+u8OIvrpJHMGKxcLb/RnZvHcbQP1 UltMyLF38XFpkFuVFI0wOXY416XVPMSgADUeK29YoRAXBWrIkkg4vfto/DLTTv7F 0F2is0cz/tb4pSh3X+wVHa2nXnC5PI2fHaqdkZjFFMFvgUlsf0Luqecr024mD7KC vm5r9KJkhzkKQmMtpqsCZI8ZGOKCNyCYYKwJReyOElo+Wde940SCLm1cf/o3zx1d ps/wX5UGzNJX3ez1GE5/qnCXMT0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP7YVd1QXSS2/iW9hlYpcyn370eFMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNDYxZDdhNy1hMTFlLTQwMGItOTE3MC1jNzk3ZWQ4OGQ3MDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0NjFkN2E3 LWExMWUtNDAwYi05MTcwLWM3OTdlZDg4ZDcwMi8wL0ZFRDg1NURENTA1RDI0QjZG RTI1QkQ4NjU2Mjk3MzI5RjdFRjQ3ODUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnaYAwDQYJKoZIhvcNAQELBQADggEBAAa6EG0P04lyaBMtq/cxrywMloe7+5dz xO3bj75eVGNbnEJ5iINBvAW7fUfc/cz8GT8STuLsOaIfLuCOiZCBxsFcat+Vdn9s gJNZvsydPUdpSbEdIxMAXXks5zfa2jTVzG42Z3XMpUw49HT+Cc2o4koCJaw66aBx 8KjkhA6iO3iYRLoRgJTh8lQg6stlShH4MYE6YztQCsPOLntfxRcXLoXmL/kA/kQi LHaB57KqI7IHsnsYuZ4HKVcWqXIJeido1uEpw7H1E9jEb1hZF5t2hoWau5pP3U8r jmnjyw/TM/yfAo9g0PNDPd6t1IdjH1he+Txz0vqJGJyTjwrXTgp4AYU= -----END CERTIFICATE-----Generated at Mon Oct 20 03:25:17 2025 by rpki-client