$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer File: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer (raw, json) Hash identifier: q3EiOYXVX5d6i6w4YzU63GM5OQ27W452GV+oLbEXhjU= Subject key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6EE8EF8CEE81F88AE8C1DF628DEE29F705C72622 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft caRepository: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 12 Apr 2025 16:40:15 +0000 Certificate not after: Sat 11 Apr 2026 16:45:15 +0000 Subordinate resources: IP: 36.50.216.0/23 IP: 2001:df3:7bc0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e8:ef:8c:ee:81:f8:8a:e8:c1:df:62:8d:ee:29:f7:05:c7:26:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 12 16:40:15 2025 GMT Not After : Apr 11 16:45:15 2026 GMT Subject: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:3d:79:b9:16:64:66:a2:78:3a:f7:69:f3: 4c:fd:78:a6:31:71:cf:d0:9b:2a:00:d8:31:73:6d: db:b5:e9:17:74:2c:14:c3:ef:96:8f:aa:7b:b5:2b: 0b:5d:97:92:8f:a4:06:c2:1f:38:ad:66:55:35:21: 65:f5:ac:e4:6c:c8:7e:b0:c8:da:f8:76:80:3d:1d: 9a:c8:22:6e:bc:7f:c5:95:64:0d:6e:6d:d2:15:bb: 8c:d7:76:1b:e1:b5:53:3c:f5:59:d8:91:bb:1b:f2: 05:24:3f:7d:c8:57:77:f9:b5:85:81:2f:7c:c1:ba: a2:75:55:89:6e:61:19:de:33:ea:d7:91:a6:65:f5: 7f:42:3e:b5:16:e6:4e:c1:7b:e4:71:c2:44:36:dc: e7:86:ad:8f:97:f8:2d:c4:ad:09:55:a5:cc:6d:e4: c5:e2:26:0f:db:cd:dc:a9:05:da:d1:14:61:fa:9d: 5d:b1:68:7e:af:8c:e9:48:73:94:f0:f7:52:cf:7e: 22:07:54:57:f3:e1:44:5a:0e:b1:ca:7e:a4:7c:5d: f9:d8:44:98:1c:e7:6f:11:0b:37:d9:f2:90:ca:c2: 46:3d:95:55:19:aa:62:c2:8e:fd:9f:7e:dc:a9:f3: e8:8e:2c:75:e5:c6:98:37:de:35:6c:60:d0:18:84: 23:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.216.0/23 IPv6: 2001:df3:7bc0::/48 Signature Algorithm: sha256WithRSAEncryption 24:81:bc:1d:a5:01:9b:a6:d1:2c:73:06:2c:f1:0a:02:11:43: c2:8a:ab:f7:68:c5:a5:55:70:9d:e8:28:17:0d:86:37:a1:5a: ce:1c:03:45:a8:76:fa:7d:0e:5e:7f:f3:ac:21:cb:c9:97:57: 8b:f1:50:18:e4:07:46:40:19:8b:d4:78:09:04:a1:d9:40:9a: f2:ff:96:75:96:e8:d7:e1:27:e7:6b:53:7b:1e:f4:c9:ed:46: c9:55:05:3e:1f:d0:39:b8:bd:02:ae:8c:bc:8b:df:5d:05:2b: a4:14:44:71:85:b2:1c:37:d0:1d:b2:de:4f:26:08:df:c8:fd: d4:50:be:e1:41:88:01:ba:81:d3:37:96:63:eb:f3:d2:91:c5: ce:1d:8d:4a:af:77:5f:1d:d5:d0:76:07:94:49:d8:bc:36:f2: d9:3d:c0:36:da:17:b5:e4:36:dc:2e:98:c6:27:60:3e:2f:51: 93:8a:f5:eb:99:17:66:ac:48:59:8e:d3:de:ab:66:13:a0:c1: c1:e3:c9:c8:7a:f7:ec:62:e9:4e:ac:13:bd:c1:31:1a:1f:74: 33:76:32:2a:75:37:16:db:38:79:25:bc:c8:8d:7b:0f:6d:15: 11:d0:b2:db:0d:e2:5c:d9:cd:5f:82:50:26:f5:bc:54:a5:f6: cd:b2:da:04 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUbujvjO6B+Irowd9ije4p9wXHJiIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDQxMjE2NDAxNVoX DTI2MDQxMTE2NDUxNVowMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3 RUUwNTcyMjhFRDY3QTk4MDk5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK39PXm5FmRmong692nzTP14pjFxz9CbKgDYMXNt27XpF3QsFMPvlo+qe7Ur C12Xko+kBsIfOK1mVTUhZfWs5GzIfrDI2vh2gD0dmsgibrx/xZVkDW5t0hW7jNd2 G+G1Uzz1WdiRuxvyBSQ/fchXd/m1hYEvfMG6onVViW5hGd4z6teRpmX1f0I+tRbm TsF75HHCRDbc54atj5f4LcStCVWlzG3kxeImD9vN3KkF2tEUYfqdXbFofq+M6Uhz lPD3Us9+IgdUV/PhRFoOscp+pHxd+dhEmBznbxELN9nykMrCRj2VVRmqYsKO/Z9+ 3Knz6I4sdeXGmDfeNWxg0BiEI0cCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG27EA2NRmmrilx+4FcijtZ6mAmeMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1OTg5ZmFm LTQ4ZmItNGY0MC05ZTc3LTI0M2Q3OGE1YjVjNC8wLzZEQkIxMDBEOEQ0NjY5QUI4 QTVDN0VFMDU3MjI4RUQ2N0E5ODA5OUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAEkMtgwDwQCAAIwCQMHACABDfN7wDANBgkqhkiG9w0BAQsFAAOCAQEAJIG8HaUB m6bRLHMGLPEKAhFDwoqr92jFpVVwnegoFw2GN6FazhwDRah2+n0OXn/zrCHLyZdX i/FQGOQHRkAZi9R4CQSh2UCa8v+WdZbo1+En52tTex70ye1GyVUFPh/QObi9Aq6M vIvfXQUrpBREcYWyHDfQHbLeTyYI38j91FC+4UGIAbqB0zeWY+vz0pHFzh2NSq93 Xx3V0HYHlEnYvDby2T3ANtoXteQ23C6YxidgPi9Rk4r165kXZqxIWY7T3qtmE6DB wePJyHr37GLpTqwTvcExGh90M3YyKnU3Fts4eSW8yI17D20VEdCy2w3iXNnNX4JQ JvW8VKX2zbLaBA== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:05 2025 by rpki-client