$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer File: 6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.cer (raw, json) Hash identifier: HJIkBIkTnOHy9Nuq863a2bnMGhSg2+e1VSDe5cmQXQY= Subject key identifier: 6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 403D3FE11F9452D727210C4370755563E556C9AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft caRepository: rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 01 Aug 2025 07:33:00 +0000 Certificate not after: Fri 31 Jul 2026 07:38:00 +0000 Subordinate resources: IP: 103.101.194.0/23 IP: 103.103.180.0/23 IP: 2001:df2:ab00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:31:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:3d:3f:e1:1f:94:52:d7:27:21:0c:43:70:75:55:63:e5:56:c9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 1 07:33:00 2025 GMT Not After : Jul 31 07:38:00 2026 GMT Subject: CN=6A200D6FC5434DAD6106CEE5439CA1270DDCBC92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:56:21:d1:be:2c:06:4c:39:9e:e8:15:6c:56: e7:ef:a7:cb:d1:18:87:f3:f1:39:eb:dd:36:13:21: 1e:d6:ad:06:b3:76:66:e6:05:34:4e:c6:22:cc:ac: fb:00:39:ae:a9:38:f3:50:f7:0a:87:9c:af:13:cc: 8f:08:f4:fd:8b:95:a9:b7:a1:8f:de:1a:28:c8:01: 3e:94:c5:2b:cc:a2:3a:62:ee:a9:82:18:a3:b6:78: d4:8a:f4:38:01:f1:17:b2:cb:aa:3a:1c:61:2f:0b: 18:14:d5:62:b0:4b:ee:fc:3f:01:e9:b9:3c:91:01: 93:48:d6:db:0e:cb:d9:d4:0e:65:e1:6c:a2:f4:5c: 51:bb:8b:b6:42:0b:d5:98:b5:42:d5:93:e5:e9:cc: ad:69:2d:d5:07:b1:56:70:d0:5e:67:61:3b:f9:fd: 09:44:0e:3c:d0:d1:d3:38:be:46:a0:21:a9:3b:c4: fd:ad:ff:39:ca:4f:f4:47:ac:71:ef:cb:6e:33:ba: cc:e9:87:0c:6e:29:0c:14:c0:d2:11:03:54:24:02: e8:4b:e6:cc:27:df:bf:5d:7b:1b:cf:c1:7e:ab:a2: df:01:88:a2:aa:e0:50:85:a3:2e:ca:fb:c0:83:f0: d6:c5:11:f3:2d:4b:01:97:6b:29:e7:27:f5:53:c4: 3c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:20:0D:6F:C5:43:4D:AD:61:06:CE:E5:43:9C:A1:27:0D:DC:BC:92 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/28d0fca8-5c2d-4e35-bd7d-b448aa75f2be/0/6A200D6FC5434DAD6106CEE5439CA1270DDCBC92.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.101.194.0/23 103.103.180.0/23 IPv6: 2001:df2:ab00::/48 Signature Algorithm: sha256WithRSAEncryption 20:a5:e5:0b:b6:4b:eb:ca:22:3f:bd:2c:9a:f0:f2:f0:23:74: bf:8b:84:4a:ac:71:ec:74:06:1a:ff:4b:bb:45:5f:ba:74:fb: f4:03:97:66:ab:0e:2c:76:73:22:d6:d1:f2:f1:c3:25:49:1d: 63:b8:25:9a:a5:bd:a4:0a:e0:27:e5:f5:97:26:af:6a:fd:d7: 9a:5f:d3:cd:a8:07:ab:62:3d:1a:23:2b:ef:cd:32:eb:83:f3: e5:8f:f5:14:b5:77:a0:a4:4e:c0:c0:fa:16:ab:20:a8:50:f0: c8:01:48:3a:74:29:bc:87:6c:e0:d1:87:49:88:3d:d7:e0:02: 02:88:c1:20:08:f0:3b:f9:67:3b:12:ef:3c:e3:38:bf:fa:44: 36:14:58:8f:e3:a8:66:df:20:8c:1e:de:8a:b1:63:06:3f:ed: 27:d3:47:78:90:7e:10:6b:30:5d:20:0a:71:ce:e8:49:91:bd: b5:58:f7:13:50:6f:c7:6d:63:25:29:17:97:91:e6:46:a2:fa: f0:03:af:36:07:b0:69:fb:44:d2:ab:4b:cd:28:37:bc:8e:6e: 0a:32:10:74:e9:d8:a7:6a:5d:be:1f:ef:5c:f3:ac:74:53:ab: 5d:a3:f6:fc:30:6b:79:a5:08:92:89:65:2c:83:fa:c5:cf:94: 01:c2:06:b3 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUQD0/4R+UUtcnIQxDcHVVY+VWyaowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgwMTA3MzMwMFoX DTI2MDczMTA3MzgwMFowMzExMC8GA1UEAxMoNkEyMDBENkZDNTQzNERBRDYxMDZD RUU1NDM5Q0ExMjcwRERDQkM5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtWIdG+LAZMOZ7oFWxW5++ny9EYh/PxOevdNhMhHtatBrN2ZuYFNE7GIsys +wA5rqk481D3CoecrxPMjwj0/YuVqbehj94aKMgBPpTFK8yiOmLuqYIYo7Z41Ir0 OAHxF7LLqjocYS8LGBTVYrBL7vw/Aem5PJEBk0jW2w7L2dQOZeFsovRcUbuLtkIL 1Zi1QtWT5enMrWkt1QexVnDQXmdhO/n9CUQOPNDR0zi+RqAhqTvE/a3/OcpP9Ees ce/LbjO6zOmHDG4pDBTA0hEDVCQC6EvmzCffv117G8/Bfqui3wGIoqrgUIWjLsr7 wIPw1sUR8y1LAZdrKecn9VPEPPsCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGogDW/FQ02tYQbO5UOcoScN3LySMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yOGQwZmNhOC01YzJkLTRlMzUtYmQ3ZC1iNDQ4YWE3NWYyYmUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4ZDBmY2E4 LTVjMmQtNGUzNS1iZDdkLWI0NDhhYTc1ZjJiZS8wLzZBMjAwRDZGQzU0MzREQUQ2 MTA2Q0VFNTQzOUNBMTI3MEREQ0JDOTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BAFnZcIDBAFnZ7QwDwQCAAIwCQMHACABDfKrADANBgkqhkiG9w0BAQsFAAOCAQEA IKXlC7ZL68oiP70smvDy8CN0v4uESqxx7HQGGv9Lu0VfunT79AOXZqsOLHZzItbR 8vHDJUkdY7glmqW9pArgJ+X1lyavav3Xml/TzagHq2I9GiMr780y64Pz5Y/1FLV3 oKROwMD6FqsgqFDwyAFIOnQpvIds4NGHSYg91+ACAojBIAjwO/lnOxLvPOM4v/pE NhRYj+OoZt8gjB7eirFjBj/tJ9NHeJB+EGswXSAKcc7oSZG9tVj3E1Bvx21jJSkX l5HmRqL68AOvNgewaftE0qtLzSg3vI5uCjIQdOnYp2pdvh/vXPOsdFOrXaP2/DBr eaUIkollLIP6xc+UAcIGsw== -----END CERTIFICATE-----Generated at Wed Aug 6 11:19:39 2025 by rpki-client