$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer File: 6A75F95EA11C3F984C5C610FE9222026394BA8E9.cer (raw, json) Hash identifier: RwF/DDxj1T2XbucpK4qeYd6WPTYlLD/k7any5I5P3tA= Subject key identifier: 6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5DED9B1DCAA1A47CDFFDF3BD8FFBF11E86595299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft caRepository: rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 05:07:54 +0000 Certificate not after: Tue 02 Jun 2026 05:12:54 +0000 Subordinate resources: IP: 103.151.94.0/23 IP: 2001:df3:b880::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ed:9b:1d:ca:a1:a4:7c:df:fd:f3:bd:8f:fb:f1:1e:86:59:52:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 05:07:54 2025 GMT Not After : Jun 2 05:12:54 2026 GMT Subject: CN=6A75F95EA11C3F984C5C610FE9222026394BA8E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5f:0a:35:5d:68:f9:4e:f5:2a:75:fc:fe:27: fe:4b:6f:4e:91:00:7a:48:de:d8:eb:e4:d5:ca:db: ae:37:30:7d:e0:4d:d3:73:b9:b5:0d:42:9f:f4:ce: 00:5a:30:af:a2:90:b4:55:f3:8f:90:91:d9:5e:88: f2:85:2b:84:d9:76:d2:66:ea:98:fc:d0:42:6f:76: 5d:22:54:e4:54:a6:aa:8c:b4:79:ac:f2:c3:fe:96: ba:d6:d8:f1:f0:02:8a:87:4b:4f:8c:2b:6b:cc:b1: 5d:2d:69:55:3c:23:5b:4b:d5:51:60:0e:7a:ff:4f: b7:df:66:6a:ec:f2:41:3f:b6:c7:a2:73:b8:48:35: 8e:21:cf:41:54:f5:02:ea:78:ca:7c:6f:24:bd:27: 4d:2a:64:b8:41:48:c1:9c:7e:fa:65:78:7a:80:35: a4:8c:05:93:f8:03:c1:37:d0:83:05:cf:5c:8d:d8: b3:c6:c5:7f:a6:53:9a:34:6d:38:70:31:bb:40:4d: a3:d3:07:5b:2e:44:e5:51:4f:8a:17:cf:06:cc:70: 29:2e:62:27:6e:90:c2:6e:15:10:e0:1b:50:d2:62: 0f:ca:88:a4:10:00:72:2a:70:98:b5:8a:92:54:f8: 8e:f5:32:12:13:3e:9f:14:17:d8:f8:18:3b:dc:d0: ca:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:75:F9:5E:A1:1C:3F:98:4C:5C:61:0F:E9:22:20:26:39:4B:A8:E9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/aa433934-3844-4653-8fac-1858b2823d1c/0/6A75F95EA11C3F984C5C610FE9222026394BA8E9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.94.0/23 IPv6: 2001:df3:b880::/48 Signature Algorithm: sha256WithRSAEncryption 90:20:e8:8b:90:8d:91:e9:29:63:13:01:9d:8e:65:1e:99:5c: 9d:00:3c:16:d7:43:27:b8:26:83:f8:91:1e:a1:a3:a0:9e:5b: 64:2a:c4:20:70:f9:a1:2b:6d:2b:15:63:b7:7f:d7:35:19:58: b3:c4:a0:f9:90:a9:8e:a1:b8:17:4e:38:2b:a6:cb:6b:b4:e4: 16:ea:cb:b2:54:5d:68:0a:89:71:92:59:3d:8e:f3:9b:00:79: 55:a4:03:10:37:79:3b:d5:61:a9:00:64:5d:ae:b4:4f:b1:21: 52:f4:ba:f3:b5:29:07:72:a4:67:43:68:04:27:c5:26:97:16: 8a:a9:8e:8e:dc:4d:36:ab:6d:26:96:26:5d:53:fd:14:ef:53: 05:b8:52:49:f2:f7:aa:1f:cb:54:9c:cb:aa:08:40:6d:73:a6: 86:93:43:da:0b:a0:89:b6:50:09:71:fd:1e:a0:4f:91:0c:7a: 5c:5e:32:93:25:07:83:88:00:b3:ca:04:fd:df:37:13:94:77: 78:c8:af:7e:21:1c:55:86:3f:47:3a:74:58:c9:ae:93:a4:63: bb:2d:da:ec:6e:56:9d:62:5a:8e:24:e7:ea:cd:8b:de:1c:7e: 00:e7:fa:4d:b9:36:d0:f2:e8:c5:de:2d:7e:fc:87:43:a5:22: a0:2c:95:77 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUXe2bHcqhpHzf/fO9j/vxHoZZUpkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzA1MDc1NFoX DTI2MDYwMjA1MTI1NFowMzExMC8GA1UEAxMoNkE3NUY5NUVBMTFDM0Y5ODRDNUM2 MTBGRTkyMjIwMjYzOTRCQThFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANRfCjVdaPlO9Sp1/P4n/ktvTpEAekje2Ovk1crbrjcwfeBN03O5tQ1Cn/TO AFowr6KQtFXzj5CR2V6I8oUrhNl20mbqmPzQQm92XSJU5FSmqoy0eazyw/6WutbY 8fACiodLT4wra8yxXS1pVTwjW0vVUWAOev9Pt99mauzyQT+2x6JzuEg1jiHPQVT1 Aup4ynxvJL0nTSpkuEFIwZx++mV4eoA1pIwFk/gDwTfQgwXPXI3Ys8bFf6ZTmjRt OHAxu0BNo9MHWy5E5VFPihfPBsxwKS5iJ26Qwm4VEOAbUNJiD8qIpBAAcipwmLWK klT4jvUyEhM+nxQX2PgYO9zQyj8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGp1+V6hHD+YTFxhD+kiICY5S6jpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hYTQzMzkzNC0zODQ0LTQ2NTMtOGZhYy0xODU4YjI4MjNkMWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FhNDMzOTM0 LTM4NDQtNDY1My04ZmFjLTE4NThiMjgyM2QxYy8wLzZBNzVGOTVFQTExQzNGOTg0 QzVDNjEwRkU5MjIyMDI2Mzk0QkE4RTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnl14wDwQCAAIwCQMHACABDfO4gDANBgkqhkiG9w0BAQsFAAOCAQEAkCDoi5CN kekpYxMBnY5lHplcnQA8FtdDJ7gmg/iRHqGjoJ5bZCrEIHD5oSttKxVjt3/XNRlY s8Sg+ZCpjqG4F044K6bLa7TkFurLslRdaAqJcZJZPY7zmwB5VaQDEDd5O9VhqQBk Xa60T7EhUvS687UpB3KkZ0NoBCfFJpcWiqmOjtxNNqttJpYmXVP9FO9TBbhSSfL3 qh/LVJzLqghAbXOmhpND2gugibZQCXH9HqBPkQx6XF4ykyUHg4gAs8oE/d83E5R3 eMivfiEcVYY/Rzp0WMmuk6Rjuy3a7G5WnWJajiTn6s2L3hx+AOf6Tbk20PLoxd4t fvyHQ6UioCyVdw== -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:59 2025 by rpki-client