$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer File: 44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer (raw, json) Hash identifier: yRSsCmd1X2wzNk3uxe+jIiFN8jJokXhdt/H6h4UXA/A= Subject key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 701CB22396A015B208E6550B155A79AE15D25856 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft caRepository: rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 18:31:36 +0000 Certificate not after: Tue 02 Jun 2026 18:36:36 +0000 Subordinate resources: IP: 36.37.64.0/18 IP: 61.8.64.0/20 IP: 123.231.128.0/17 IP: 125.213.128.0/19 IP: 182.23.0.0/17 IP: 183.91.64.0/19 IP: 202.152.0.0/18 IP: 2400:8000::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1c:b2:23:96:a0:15:b2:08:e6:55:0b:15:5a:79:ae:15:d2:58:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 18:31:36 2025 GMT Not After : Jun 2 18:36:36 2026 GMT Subject: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:52:7b:53:08:d5:c4:47:9a:c3:96:0c:06:cf: 64:e3:99:4b:29:92:b6:3a:09:d3:a4:e5:a0:a7:9f: da:26:35:3a:f4:61:4d:7e:5f:3b:ab:ef:b0:83:90: 2b:bd:20:bd:fd:f6:9f:dd:64:31:19:6d:69:53:f6: d9:27:90:24:bb:b4:be:fe:b6:f2:07:f4:93:d7:c8: da:1c:7a:b6:18:df:a0:a8:2f:af:24:58:53:d2:8e: 4f:51:d2:5f:72:d2:8c:af:3c:30:b0:5a:1c:61:3d: c3:64:b4:1e:c7:fc:f7:9c:42:7f:55:8b:1d:b1:75: e6:99:2e:54:1e:5a:29:bd:9b:76:c8:11:a3:7b:7a: f6:9b:d6:91:b6:3b:2d:68:79:ba:0e:48:ae:20:1c: ef:34:7f:ff:0b:fd:78:75:b3:19:41:e3:bf:d9:d9: b2:7c:ce:98:36:3c:e2:8a:31:7d:b8:56:aa:c3:79: 86:e5:d3:1d:6b:09:3f:68:66:f6:d7:14:8a:d5:b1: 95:1e:53:da:8a:17:44:f3:0c:a8:b6:70:e0:93:96: f0:fb:2d:0e:e0:64:36:b1:72:bc:50:49:b2:da:a9: 29:dd:f9:91:3d:03:77:c8:dd:c3:1d:9b:cd:97:bc: 01:73:0c:d3:fd:98:af:cd:b1:66:0d:aa:bd:00:35: 3f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.37.64.0/18 61.8.64.0/20 123.231.128.0/17 125.213.128.0/19 182.23.0.0/17 183.91.64.0/19 202.152.0.0/18 IPv6: 2400:8000::/32 Signature Algorithm: sha256WithRSAEncryption 0f:09:a8:fc:6d:af:43:5d:87:69:bd:a4:e1:f5:5d:93:bb:b8: ee:e2:f5:07:df:79:b9:d5:0d:f6:df:56:97:20:d4:24:a2:a9: e8:fc:69:8e:16:09:a4:0c:60:ac:7c:2f:a4:5e:3a:81:a8:b3: c8:5f:22:d0:af:f9:d1:91:f6:bb:ef:6e:a4:7a:47:82:e1:8c: 23:f9:28:fd:e2:0f:06:a2:52:aa:17:43:90:86:42:fa:df:b7: 9c:8a:58:ac:40:76:7e:09:c4:74:08:cd:1c:c8:b0:10:28:9d: e7:06:1b:e6:66:a1:b6:34:d6:50:e2:e0:15:4f:95:03:15:8c: 8b:ff:9a:ef:c9:b6:42:fb:e1:56:29:94:03:20:c6:fa:fd:2f: 90:27:6d:02:8a:a5:94:b8:90:91:b0:ea:a7:5b:a9:5a:33:cc: 4c:7c:26:8f:08:90:05:24:66:a0:e0:12:54:0c:4d:a1:31:8d: c1:46:ce:4a:d9:f2:79:72:40:09:1b:51:f9:d3:19:df:1d:24: de:04:6d:ac:1a:a3:58:ba:3f:63:38:09:c9:b4:f1:f1:fe:58: ce:2e:6a:8c:19:eb:ca:b8:7a:c5:2d:81:d8:fe:95:a6:c3:ad: 65:1f:d1:82:f2:19:57:d9:64:c7:31:35:45:79:68:39:4d:cc: ae:dc:ed:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcByyI5agFbII5lULFVp5rhXSWFYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzE4MzEzNloX DTI2MDYwMjE4MzYzNlowMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYx ODY0QTBERUE0N0VDRjY2NzUyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZSe1MI1cRHmsOWDAbPZOOZSymStjoJ06TloKef2iY1OvRhTX5fO6vvsIOQ K70gvf32n91kMRltaVP22SeQJLu0vv628gf0k9fI2hx6thjfoKgvryRYU9KOT1HS X3LSjK88MLBaHGE9w2S0Hsf895xCf1WLHbF15pkuVB5aKb2bdsgRo3t69pvWkbY7 LWh5ug5IriAc7zR//wv9eHWzGUHjv9nZsnzOmDY84ooxfbhWqsN5huXTHWsJP2hm 9tcUitWxlR5T2ooXRPMMqLZw4JOW8PstDuBkNrFyvFBJstqpKd35kT0Dd8jdwx2b zZe8AXMM0/2Yr82xZg2qvQA1P3kCAwEAAaOCAuswggLnMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFES/ZoK2tJMEjG8YZKDepH7PZnUrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRl LWY5MjEtNDI3NC04NDk3LTI5ODdkOTA5NTQzZS8wLzQ0QkY2NjgyQjZCNDkzMDQ4 QzZGMTg2NEEwREVBNDdFQ0Y2Njc1MkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwUgYIKwYBBQUHAQcBAf8EQzBBMDAEAgABMCoD BAYkJUADBAQ9CEADBAd754ADBAV91YADBAe2FwADBAW3W0ADBAbKmAAwDQQCAAIw BwMFACQAgAAwDQYJKoZIhvcNAQELBQADggEBAA8JqPxtr0Ndh2m9pOH1XZO7uO7i 9QffebnVDfbfVpcg1CSiqej8aY4WCaQMYKx8L6ReOoGos8hfItCv+dGR9rvvbqR6 R4LhjCP5KP3iDwaiUqoXQ5CGQvrft5yKWKxAdn4JxHQIzRzIsBAonecGG+ZmobY0 1lDi4BVPlQMVjIv/mu/JtkL74VYplAMgxvr9L5AnbQKKpZS4kJGw6qdbqVozzEx8 Jo8IkAUkZqDgElQMTaExjcFGzkrZ8nlyQAkbUfnTGd8dJN4Ebawao1i6P2M4Ccm0 8fH+WM4uaowZ68q4esUtgdj+labDrWUf0YLyGVfZZMcxNUV5aDlNzK7c7QI= -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:09 2025 by rpki-client