$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer File: 3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer (raw, json) Hash identifier: omJIMMEVnQD3q718IcIquo8VCx4c/Q90pGqSASxZ54I= Subject key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 532651C9D76098286528AF2F5557E5655DFFC2FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft caRepository: rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 20 Sep 2025 23:51:46 +0000 Certificate not after: Sat 19 Sep 2026 23:56:46 +0000 Subordinate resources: IP: 103.4.76.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:26:51:c9:d7:60:98:28:65:28:af:2f:55:57:e5:65:5d:ff:c2:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 20 23:51:46 2025 GMT Not After : Sep 19 23:56:46 2026 GMT Subject: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c1:b0:d5:58:6a:46:cb:52:3e:ed:4e:88:59: 9b:f7:9f:f2:c9:d7:09:2b:6f:f3:f4:f7:d4:d9:4f: c5:60:d8:32:1c:4c:e9:56:ad:1a:d8:ba:0f:8b:10: 9d:8d:f0:86:7c:a3:a6:f6:25:47:ac:fc:30:e9:f5: 49:4a:a0:1f:96:b2:03:da:81:3a:2c:c2:15:52:e2: a2:eb:e2:4d:60:8d:34:d8:0f:41:d3:9e:11:36:af: 93:5a:6a:7a:d6:50:3b:df:3b:c0:21:ac:51:62:0e: 6d:8b:09:09:b7:b1:3d:73:9e:a2:08:86:4f:ea:e5: df:21:f9:cd:d6:42:17:b5:03:60:6b:98:b6:79:b6: bf:21:79:50:ce:ff:f4:35:97:ba:ab:61:cc:78:0d: c3:29:1c:b6:9a:fd:26:4e:da:0e:27:75:81:de:cd: f4:15:bd:3b:a0:b2:ba:27:b1:88:ba:f3:3e:c1:d0: 01:2c:84:7c:b9:28:fd:86:b6:83:d2:8b:12:5e:6a: 2e:b1:f1:b5:32:c7:66:9d:1d:a2:b5:6a:1a:04:f3: 53:84:b0:ee:2a:8a:9a:ac:fc:c7:48:11:f0:bb:43: b4:4e:a7:9c:87:dc:68:c9:c2:f9:1d:f7:29:2d:30: 68:68:fb:69:b5:1a:4d:9e:7e:64:9c:80:79:0d:d9: 5c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.76.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:ff:a3:9d:8a:c2:74:2c:c0:cf:71:eb:a7:69:5c:99:e6:4d: b2:bc:33:e8:92:1d:be:e9:85:03:1f:51:32:2c:00:8f:90:43: 16:48:ae:b8:6f:5d:d6:c7:92:40:03:9d:ce:00:95:12:51:51: df:31:4e:12:74:dd:e3:71:34:ec:48:96:55:4f:72:a4:35:a9: ce:29:68:5d:36:a9:4f:68:af:e4:70:5c:02:fc:37:1f:ac:8c: 5d:43:c5:2d:36:4c:80:2a:6c:22:ad:63:b1:19:3c:13:e1:f2: 8d:72:3a:66:bc:8b:fd:86:a7:ab:e3:b4:83:5c:a1:d3:2b:c3: 56:5b:21:08:ac:78:a3:a8:0a:ac:47:54:b5:94:4d:26:a7:52: 70:fe:0e:93:d0:41:36:3b:69:c3:62:2a:d1:4f:22:6b:75:81: 29:2a:15:5f:07:09:41:f8:cf:2d:03:05:79:01:d4:02:38:50: 99:18:a8:3a:d5:c3:20:58:7b:fb:24:0a:19:5e:5c:a6:aa:5d: 3f:b2:1b:1a:5e:f9:b0:ff:37:d9:09:3b:64:8c:97:b3:6e:87: f5:2c:b6:2d:1f:f4:3a:f2:2d:be:da:60:2f:6e:4b:73:c7:49: 18:2c:db:a7:8b:9b:cd:ee:6b:60:3c:17:69:a7:07:80:b8:81: 6c:d9:88:f8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUyZRyddgmChlKK8vVVflZV3/wvwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyMDIzNTE0NloX DTI2MDkxOTIzNTY0NlowMzExMC8GA1UEAxMoM0ZCRkU5MkQ1QjIyMEU5QjM2QjM3 QkNEMzA5MUQ3NTRFQTgxNTZEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXBsNVYakbLUj7tTohZm/ef8snXCStv8/T31NlPxWDYMhxM6VatGti6D4sQ nY3whnyjpvYlR6z8MOn1SUqgH5ayA9qBOizCFVLiouviTWCNNNgPQdOeETavk1pq etZQO987wCGsUWIObYsJCbexPXOeogiGT+rl3yH5zdZCF7UDYGuYtnm2vyF5UM7/ 9DWXuqthzHgNwykctpr9Jk7aDid1gd7N9BW9O6CyuiexiLrzPsHQASyEfLko/Ya2 g9KLEl5qLrHxtTLHZp0dorVqGgTzU4Sw7iqKmqz8x0gR8LtDtE6nnIfcaMnC+R33 KS0waGj7abUaTZ5+ZJyAeQ3ZXJUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD+/6S1bIg6bNrN7zTCR11TqgVbTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83Mjk0MDFkMC0yNmE3LTQ3ODctYjY4YS0xODJiMTUyYTk1MTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyOTQwMWQw LTI2YTctNDc4Ny1iNjhhLTE4MmIxNTJhOTUxMy8wLzNGQkZFOTJENUIyMjBFOUIz NkIzN0JDRDMwOTFENzU0RUE4MTU2RDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnBEwwDQYJKoZIhvcNAQELBQADggEBAE3/o52KwnQswM9x66dpXJnmTbK8M+iS Hb7phQMfUTIsAI+QQxZIrrhvXdbHkkADnc4AlRJRUd8xThJ03eNxNOxIllVPcqQ1 qc4paF02qU9or+RwXAL8Nx+sjF1DxS02TIAqbCKtY7EZPBPh8o1yOma8i/2Gp6vj tINcodMrw1ZbIQiseKOoCqxHVLWUTSanUnD+DpPQQTY7acNiKtFPImt1gSkqFV8H CUH4zy0DBXkB1AI4UJkYqDrVwyBYe/skChleXKaqXT+yGxpe+bD/N9kJO2SMl7Nu h/Usti0f9DryLb7aYC9uS3PHSRgs26eLm83ua2A8F2mnB4C4gWzZiPg= -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:56 2025 by rpki-client