$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer File: 6A3996AFE1138238530C2FC92B2AB675FCD218C8.cer (raw, json) Hash identifier: ++fqY6y9waq/iUpgTm4L3SXe4LY+J00u2Rh6RVzQHTU= Subject key identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3DC1814722442DD48F4B9BD66F870EF3D3595165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft caRepository: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 30 Sep 2025 22:48:07 +0000 Certificate not after: Tue 29 Sep 2026 22:53:07 +0000 Subordinate resources: IP: 2001:df4:56c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 23:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c1:81:47:22:44:2d:d4:8f:4b:9b:d6:6f:87:0e:f3:d3:59:51:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 30 22:48:07 2025 GMT Not After : Sep 29 22:53:07 2026 GMT Subject: CN=6A3996AFE1138238530C2FC92B2AB675FCD218C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:15:e1:cd:bf:db:75:05:a3:4d:86:13:1a:6d: 6c:88:8f:55:b8:25:20:15:49:99:4e:2f:7b:30:81: 63:bc:c9:55:14:39:d9:43:7d:5d:91:1a:bd:84:33: 51:09:1b:6a:87:1c:ae:5c:6c:8c:15:64:8b:08:36: 25:33:e7:78:db:9d:b9:c0:39:9c:3b:f5:d3:b4:98: 34:f6:de:4c:94:b6:47:11:c1:7e:41:78:f8:fb:ae: ec:d8:50:b6:87:fa:7d:36:9c:a5:07:25:e5:88:0f: f9:fe:2d:17:41:5d:62:18:56:6c:9e:09:39:3e:89: 42:8e:8a:61:a0:08:a6:ac:a0:30:4b:70:28:c3:fd: 2e:fb:15:fc:2a:fa:35:da:a4:b4:29:a5:af:cc:df: eb:1c:ae:7c:e9:d4:8d:25:51:82:b5:67:99:96:ee: 20:d1:88:b3:4d:df:49:40:9f:af:04:56:01:25:fd: 9d:be:2a:80:ff:9e:4e:e7:68:93:1c:1e:06:87:55: 4d:ee:72:7d:9b:3f:d7:75:ce:7f:83:2e:d6:32:6c: 60:2d:42:32:7a:f1:34:0c:25:5c:8b:7f:cc:64:3f: 04:dc:97:d1:a3:23:a0:c6:d0:53:95:2a:b6:ef:0f: 31:fe:17:ec:fd:7d:3a:55:6e:f2:fa:ec:16:24:09: 28:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:39:96:AF:E1:13:82:38:53:0C:2F:C9:2B:2A:B6:75:FC:D2:18:C8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/1/6A3996AFE1138238530C2FC92B2AB675FCD218C8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:56c0::/48 Signature Algorithm: sha256WithRSAEncryption 5a:4d:16:b6:95:95:c3:4f:63:21:af:dd:4f:49:80:b9:8b:02: a2:76:17:d5:5b:57:f4:18:69:9a:d9:56:62:f8:97:bb:cb:44: d0:df:4a:0a:f1:dc:69:3a:88:01:01:1a:7b:2b:a4:c7:fb:25: 85:53:ae:db:88:b4:89:87:cc:56:ef:9d:4f:e7:1b:59:6b:19: ef:0e:af:53:ff:06:47:14:a6:63:98:0f:fe:91:63:1b:7b:f2: 2a:50:da:65:33:89:c8:67:f8:bc:ae:d8:f7:0c:e9:be:65:e0: 26:71:8f:44:70:ac:dc:77:98:6b:8a:7f:e3:b1:bf:eb:f6:63: a1:6c:5d:19:bc:c1:a0:1a:dc:72:03:68:a3:e6:b1:72:3f:2b: 37:15:a2:8a:30:71:95:b7:85:68:06:c9:f5:9f:8a:29:45:0a: f6:52:5f:0d:76:39:c5:53:d6:d5:d4:c3:46:5e:d8:f2:ec:3c: 96:64:73:15:9e:f3:48:f1:82:0d:00:80:ba:d0:a1:92:7c:fe: 46:80:dd:fb:c6:3d:cc:1b:31:08:da:14:73:0c:b3:c8:df:2d: dd:46:7a:2d:ba:0e:2f:a5:f6:30:40:c6:46:58:a0:f8:85:2e: 48:41:63:0f:fe:ca:54:4e:f7:eb:7c:7a:25:e2:f6:3e:ab:8c: 8a:f1:c1:dd -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUPcGBRyJELdSPS5vWb4cO89NZUWUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkzMDIyNDgwN1oX DTI2MDkyOTIyNTMwN1owMzExMC8GA1UEAxMoNkEzOTk2QUZFMTEzODIzODUzMEMy RkM5MkIyQUI2NzVGQ0QyMThDODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEV4c2/23UFo02GExptbIiPVbglIBVJmU4vezCBY7zJVRQ52UN9XZEavYQz UQkbaoccrlxsjBVkiwg2JTPneNuducA5nDv107SYNPbeTJS2RxHBfkF4+Puu7NhQ tof6fTacpQcl5YgP+f4tF0FdYhhWbJ4JOT6JQo6KYaAIpqygMEtwKMP9LvsV/Cr6 NdqktCmlr8zf6xyufOnUjSVRgrVnmZbuINGIs03fSUCfrwRWASX9nb4qgP+eTudo kxweBodVTe5yfZs/13XOf4Mu1jJsYC1CMnrxNAwlXIt/zGQ/BNyX0aMjoMbQU5Uq tu8PMf4X7P19OlVu8vrsFiQJKH0CAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGo5lq/hE4I4UwwvySsqtnX80hjIMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iYTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JhODliN2Rk LTk5YTctNDUwZS1iZTg0LWIzYmZjNzM0MGYxZi8xLzZBMzk5NkFGRTExMzgyMzg1 MzBDMkZDOTJCMkFCNjc1RkNEMjE4QzgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ30VsAwDQYJKoZIhvcNAQELBQADggEBAFpNFraVlcNPYyGv3U9JgLmLAqJ2 F9VbV/QYaZrZVmL4l7vLRNDfSgrx3Gk6iAEBGnsrpMf7JYVTrtuItImHzFbvnU/n G1lrGe8Or1P/BkcUpmOYD/6RYxt78ipQ2mUzichn+Lyu2PcM6b5l4CZxj0RwrNx3 mGuKf+Oxv+v2Y6FsXRm8waAa3HIDaKPmsXI/KzcVooowcZW3hWgGyfWfiilFCvZS Xw12OcVT1tXUw0Ze2PLsPJZkcxWe80jxgg0AgLrQoZJ8/kaA3fvGPcwbMQjaFHMM s8jfLd1Gei26Di+l9jBAxkZYoPiFLkhBYw/+ylRO9+t8eiXi9j6rjIrxwd0= -----END CERTIFICATE-----Generated at Wed Nov 5 19:13:14 2025 by rpki-client