$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer File: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer (raw, json) Hash identifier: uKAtBxAXInQfXKl9XzCkrFxMhkTsWYWpoygzAKrrHk0= Subject key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 094B7F5F361DF50F206203D98F2DD19965F82DE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft caRepository: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 05 Mar 2025 05:23:10 +0000 Certificate not after: Wed 04 Mar 2026 05:28:10 +0000 Subordinate resources: IP: 58.65.240.0/21 IP: 115.166.96.0/19 IP: 2403:ff00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:4b:7f:5f:36:1d:f5:0f:20:62:03:d9:8f:2d:d1:99:65:f8:2d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 5 05:23:10 2025 GMT Not After : Mar 4 05:28:10 2026 GMT Subject: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:22:80:c3:1f:c1:86:0b:9c:40:16:24:15: e4:f9:90:d6:3a:ad:d0:3f:35:af:da:96:20:06:10: 1a:f7:fb:7b:c3:86:aa:63:69:bd:4a:06:65:c8:41: f8:1f:1a:6d:99:d3:db:7f:4a:ee:50:e9:61:93:b0: ed:12:f4:f4:ce:7a:25:cb:cb:b9:8b:d9:9a:33:0d: 81:b1:8f:e1:8c:a9:af:e1:45:65:f7:30:e3:e7:00: 78:d0:c7:39:cd:00:e1:46:fd:ba:4b:5e:a3:c5:63: 36:4d:5d:b6:be:5d:7f:11:19:6c:b9:25:35:e2:16: aa:54:ea:93:32:ed:93:62:05:87:50:8d:a8:8c:14: 80:51:b5:3d:68:4c:d0:76:5c:01:f0:dd:1e:a3:dc: b6:55:66:d5:7c:98:65:e4:f2:69:8c:50:35:b3:14: 33:64:ba:f9:a0:84:ce:48:d2:84:0c:44:c7:61:2c: 40:44:c9:5a:ec:44:8e:a8:b0:64:1f:97:c4:65:51: 35:e4:71:64:df:fe:1f:95:d0:59:80:bc:49:85:d0: c2:5d:19:79:08:de:3f:9e:01:f3:a4:9e:c2:7a:3a: 41:1e:c7:3f:53:60:5f:38:f5:11:60:cf:69:45:e8: fb:d7:64:b1:25:fd:44:cd:98:93:c4:f1:5b:ab:00: c2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.65.240.0/21 115.166.96.0/19 IPv6: 2403:ff00::/32 Signature Algorithm: sha256WithRSAEncryption 2d:9f:88:9f:e6:be:be:30:ee:5f:52:2b:d1:71:a7:48:cb:a6: 36:ff:f5:e0:92:1c:ec:d3:f7:89:15:db:fa:f5:39:05:40:a9: 53:e1:cc:ae:7a:a9:58:93:fc:5d:e1:0d:dc:d5:4d:d9:84:90: 87:47:95:53:57:83:c8:ce:0b:81:51:88:56:3e:69:fb:1b:b7: 6b:9a:a2:eb:88:8d:a6:50:e1:7c:fd:3a:ff:ae:11:58:10:ec: f2:af:80:c9:be:77:ac:e4:ad:2e:58:7b:0d:be:38:86:89:44: 5c:f4:a9:b1:96:7d:85:9a:62:3c:be:de:f8:6d:e6:4c:29:04: 72:a8:5c:8b:37:10:c9:9b:3b:f2:52:b3:06:46:74:b5:24:5a: 5b:c2:50:a6:05:3d:68:91:d7:b5:62:27:f9:6f:dc:7d:ce:ea: f4:30:81:51:1f:31:b3:44:8c:56:2d:ab:39:24:51:c2:33:3e: 62:49:f4:82:f4:9a:9a:34:d5:33:d8:fc:b8:e2:a0:ac:8e:c1: fa:32:2c:13:02:ea:87:59:7a:b6:e6:7e:7a:88:47:86:b1:8a: c0:30:17:05:30:f0:e0:1b:fa:15:78:b5:09:d1:d0:c0:65:65: 97:1f:ba:b4:4c:c0:61:49:5c:41:93:15:b0:b0:a2:44:fb:0b: a0:f8:4e:fd -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUCUt/XzYd9Q8gYgPZjy3RmWX4LeAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMwNTA1MjMxMFoX DTI2MDMwNDA1MjgxMFowMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZE MkJFRDM5RjBGQTE1MjYxOTA5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKbjIoDDH8GGC5xAFiQV5PmQ1jqt0D81r9qWIAYQGvf7e8OGqmNpvUoGZchB +B8abZnT239K7lDpYZOw7RL09M56JcvLuYvZmjMNgbGP4Yypr+FFZfcw4+cAeNDH Oc0A4Ub9ukteo8VjNk1dtr5dfxEZbLklNeIWqlTqkzLtk2IFh1CNqIwUgFG1PWhM 0HZcAfDdHqPctlVm1XyYZeTyaYxQNbMUM2S6+aCEzkjShAxEx2EsQETJWuxEjqiw ZB+XxGVRNeRxZN/+H5XQWYC8SYXQwl0ZeQjeP54B86Sewno6QR7HP1NgXzj1EWDP aUXo+9dksSX9RM2Yk8TxW6sAwq8CAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEez+/Odjf5bxc/SvtOfD6FSYZCXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkZDQ3ZjU2 LWVjNTMtNDJlYi05YjhiLWZhMDhmODc0ZDMxOS8wLzQ3QjNGQkYzOUQ4REZFNUJD NUNGRDJCRUQzOUYwRkExNTI2MTkwOTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAM6QfADBAVzpmAwDQQCAAIwBwMFACQD/wAwDQYJKoZIhvcNAQELBQADggEBAC2f iJ/mvr4w7l9SK9Fxp0jLpjb/9eCSHOzT94kV2/r1OQVAqVPhzK56qViT/F3hDdzV TdmEkIdHlVNXg8jOC4FRiFY+afsbt2uaouuIjaZQ4Xz9Ov+uEVgQ7PKvgMm+d6zk rS5Yew2+OIaJRFz0qbGWfYWaYjy+3vht5kwpBHKoXIs3EMmbO/JSswZGdLUkWlvC UKYFPWiR17ViJ/lv3H3O6vQwgVEfMbNEjFYtqzkkUcIzPmJJ9IL0mpo01TPY/Lji oKyOwfoyLBMC6odZerbmfnqIR4axisAwFwUw8OAb+hV4tQnR0MBlZZcfurRMwGFJ XEGTFbCwokT7C6D4Tv0= -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:53 2025 by rpki-client