$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/20566897603B029812606C25ABC972BAC5BF4AFB.cer File: 20566897603B029812606C25ABC972BAC5BF4AFB.cer (raw, json) Hash identifier: c43OBI5Rs6RVKmPhhjW9/9efRNh0RReqqPZolbsdZck= Subject key identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3D6337FEFDC16EDACBC3B8893838A908D6F29B81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft caRepository: rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 27 Oct 2025 12:43:27 +0000 Certificate not after: Mon 26 Oct 2026 12:48:27 +0000 Subordinate resources: IP: 203.190.40.0/21 IP: 2406:1b00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:63:37:fe:fd:c1:6e:da:cb:c3:b8:89:38:38:a9:08:d6:f2:9b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 27 12:43:27 2025 GMT Not After : Oct 26 12:48:27 2026 GMT Subject: CN=20566897603B029812606C25ABC972BAC5BF4AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:fe:36:7b:26:b0:fe:b1:1f:c0:22:cd:6c: f1:24:51:68:72:66:e2:cb:a8:09:02:76:3f:cf:75: f8:f5:39:9a:2e:86:56:9f:cb:49:f3:21:2a:2e:d1: 57:8d:2d:a4:b0:92:70:44:30:c8:e7:b0:01:7a:90: 14:5f:90:59:a4:96:84:67:6d:19:d5:ae:60:98:93: ed:4c:4a:eb:fd:cd:c0:c5:94:65:35:58:42:8b:a1: 63:0e:08:b7:ec:72:d7:cd:90:e4:1c:b9:4c:03:ae: 65:45:fa:e4:34:9e:4b:c4:3c:d2:3e:3b:02:19:8f: 1f:32:82:ff:c0:76:6c:0f:89:09:55:f1:56:88:72: cc:94:56:f1:65:e8:6e:0f:30:ca:97:08:21:c1:24: 62:17:f7:fe:dc:8e:48:e7:b8:d4:5e:8f:1f:86:a5: a0:76:7d:1a:89:75:33:68:fa:5b:d5:3c:e3:41:3a: d0:69:c9:6e:ab:2d:90:48:df:a3:75:4b:be:b7:07: 3a:19:ea:9c:59:3f:7e:de:bb:25:de:0a:6d:9a:1d: 82:11:50:86:5a:36:a7:a5:c1:20:4c:3f:9d:2a:10: 2f:70:0e:87:69:d9:cd:d9:61:68:7a:cc:b3:e7:59: c7:c5:52:46:ec:3a:85:8b:81:88:7e:fe:1c:c5:10: 30:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:56:68:97:60:3B:02:98:12:60:6C:25:AB:C9:72:BA:C5:BF:4A:FB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9dacc365-e194-4ac0-953a-4df3a5900b14/0/20566897603B029812606C25ABC972BAC5BF4AFB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.190.40.0/21 IPv6: 2406:1b00::/32 Signature Algorithm: sha256WithRSAEncryption 54:7e:1b:cc:48:5d:b5:e9:b8:c9:23:48:68:0a:75:9c:8c:b0: 6a:c2:67:11:f4:ad:bd:05:da:da:6c:f4:3c:ba:c4:33:7b:de: 40:cc:f5:09:11:a7:e3:63:17:75:d7:47:9a:ef:10:e5:76:9b: d0:78:eb:6b:99:de:b5:a0:05:0f:f4:c5:f7:39:62:91:43:09: 2b:eb:8f:35:86:19:5b:a3:22:84:db:cb:60:9d:5c:66:9f:0b: 62:af:15:41:cd:08:73:61:69:d2:bb:9e:44:3d:c3:a3:c4:97: bb:5d:d5:a1:05:6b:b0:58:e5:e2:c6:ec:aa:29:7e:5f:dd:29: b4:b3:17:9e:bd:4f:fc:b1:1f:47:87:59:18:e6:b9:f2:a1:36: dd:86:02:f7:da:e2:17:94:b8:30:80:0a:04:b8:1f:a9:0a:ae: d8:52:02:80:e9:cc:b8:8a:e5:c6:b8:a3:ec:7a:8c:d3:44:fe: cb:c3:a5:9e:7f:1a:ee:37:11:e5:1d:00:94:da:19:82:68:b4: 53:4a:64:2c:f5:be:5f:87:1a:ba:a9:97:16:72:d5:c3:16:50: d5:76:a9:7c:41:8e:9c:8b:14:0c:be:0e:97:09:2c:df:29:ac: 7f:3c:ae:e2:55:d4:8b:63:10:05:fd:e7:7a:26:68:7b:9e:79: 31:d2:26:1f -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUPWM3/v3BbtrLw7iJODipCNbym4EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyNzEyNDMyN1oX DTI2MTAyNjEyNDgyN1owMzExMC8GA1UEAxMoMjA1NjY4OTc2MDNCMDI5ODEyNjA2 QzI1QUJDOTcyQkFDNUJGNEFGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALHs/jZ7JrD+sR/AIs1s8SRRaHJm4suoCQJ2P891+PU5mi6GVp/LSfMhKi7R V40tpLCScEQwyOewAXqQFF+QWaSWhGdtGdWuYJiT7UxK6/3NwMWUZTVYQouhYw4I t+xy182Q5By5TAOuZUX65DSeS8Q80j47AhmPHzKC/8B2bA+JCVXxVohyzJRW8WXo bg8wypcIIcEkYhf3/tyOSOe41F6PH4aloHZ9Gol1M2j6W9U840E60GnJbqstkEjf o3VLvrcHOhnqnFk/ft67Jd4KbZodghFQhlo2p6XBIEw/nSoQL3AOh2nZzdlhaHrM s+dZx8VSRuw6hYuBiH7+HMUQMLcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCBWaJdgOwKYEmBsJavJcrrFv0r7MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZGFjYzM2NS1lMTk0LTRhYzAtOTUzYS00ZGYzYTU5MDBiMTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkYWNjMzY1 LWUxOTQtNGFjMC05NTNhLTRkZjNhNTkwMGIxNC8wLzIwNTY2ODk3NjAzQjAyOTgx MjYwNkMyNUFCQzk3MkJBQzVCRjRBRkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAPLvigwDQQCAAIwBwMFACQGGwAwDQYJKoZIhvcNAQELBQADggEBAFR+G8xIXbXp uMkjSGgKdZyMsGrCZxH0rb0F2tps9Dy6xDN73kDM9QkRp+NjF3XXR5rvEOV2m9B4 62uZ3rWgBQ/0xfc5YpFDCSvrjzWGGVujIoTby2CdXGafC2KvFUHNCHNhadK7nkQ9 w6PEl7td1aEFa7BY5eLG7Kopfl/dKbSzF569T/yxH0eHWRjmufKhNt2GAvfa4heU uDCACgS4H6kKrthSAoDpzLiK5ca4o+x6jNNE/svDpZ5/Gu43EeUdAJTaGYJotFNK ZCz1vl+HGrqplxZy1cMWUNV2qXxBjpyLFAy+DpcJLN8prH88ruJV1ItjEAX953om aHueeTHSJh8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:39:11 2025 by rpki-client