$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer File: 8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.cer (raw, json) Hash identifier: zTJv3ETz7bGByqqVyAJErtxleWeB3TOgahSYvbp3AG8= Subject key identifier: 8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1D08D3BB3AE9CAFA6DB62486A1EE3D96A9D99CF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft caRepository: rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 13 Jun 2025 05:58:40 +0000 Certificate not after: Fri 12 Jun 2026 06:03:40 +0000 Subordinate resources: IP: 103.118.3.0/24 IP: 2001:df5:bf00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:08:d3:bb:3a:e9:ca:fa:6d:b6:24:86:a1:ee:3d:96:a9:d9:9c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 13 05:58:40 2025 GMT Not After : Jun 12 06:03:40 2026 GMT Subject: CN=8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5e:a2:45:98:42:67:69:8c:96:ed:a4:14:1a: ad:7a:c2:4e:81:eb:fb:f8:5f:39:75:97:c7:21:93: 4b:db:0a:d4:21:e2:cb:c7:7b:6b:30:a9:0c:0e:38: bd:16:01:e5:47:6e:71:49:76:a4:20:6d:37:d2:ca: 56:19:bc:8c:91:37:33:dd:49:4b:06:ee:bb:8f:f6: 21:7a:2c:a2:ad:15:f2:1d:05:33:5c:1a:bb:49:ed: 52:c7:27:44:1d:bd:4e:80:50:47:17:cb:7c:96:7e: 2c:0f:a4:87:7e:89:33:b9:40:a6:e8:0b:7d:96:0d: b3:47:9d:48:c4:92:36:15:ca:0e:c0:2b:c9:37:ef: c5:31:c5:73:2d:8b:78:fe:6c:5c:83:07:48:e6:d6: f4:af:ca:59:0c:33:fa:60:e0:f9:3b:90:cc:a4:8a: 5f:41:9f:23:ca:0f:0d:5c:2f:b1:fa:9d:6b:f3:35: 21:1a:68:e1:a7:1f:bc:38:38:3e:dd:7f:13:f1:12: f6:29:7b:7c:2e:e0:98:e6:d9:f6:c7:a2:5f:1b:fa: ab:1c:18:15:a3:90:fe:9c:66:d7:a2:bf:f1:8e:46: a3:98:1d:c3:6b:de:e9:43:41:34:b9:08:00:6d:95: 08:61:f6:b2:37:35:f9:3f:8e:c1:7f:5f:cd:0a:e2: f9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:0D:C7:9B:66:A9:6F:A7:FA:31:80:C2:0B:06:A5:C4:3C:9C:FE:A1 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8d5bbd81-0332-4202-9c92-eb1746a8cd9d/0/8B0DC79B66A96FA7FA3180C20B06A5C43C9CFEA1.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.118.3.0/24 IPv6: 2001:df5:bf00::/48 Signature Algorithm: sha256WithRSAEncryption 95:b2:4f:c3:9c:0c:9c:17:01:e0:b2:4a:ec:a2:92:a5:1b:e0: a7:19:14:5c:7d:0c:2b:b0:c7:3a:6b:b3:a8:b9:1a:70:08:0f: 37:60:c1:32:77:39:f0:d6:dc:87:54:01:b2:76:52:94:f6:32: 37:cf:30:74:81:7c:0c:b7:ab:9c:82:61:e8:96:7d:ac:72:d2: f1:d2:5c:53:0c:7e:1a:fe:c6:1e:9b:37:8d:db:c8:d2:12:4a: 36:be:ac:33:ad:2d:63:d3:6a:50:24:65:3f:e2:ef:ee:44:7d: 03:05:95:f3:d3:e4:0b:10:c3:06:ce:81:8e:72:6f:18:1c:fa: 42:3f:71:c0:61:17:cb:90:98:81:bb:0b:57:62:d0:54:ce:78: 5c:c0:be:28:73:82:08:a0:f8:5e:0e:2e:a9:d8:54:9f:77:17: 35:0f:3d:ae:b1:b2:9b:42:5d:57:ab:81:3d:03:07:3d:37:46: 84:23:73:90:44:ea:6d:ab:32:15:25:b6:20:10:20:6c:5c:7e: 7e:de:eb:1e:0f:0d:c1:05:5c:e2:78:0b:3b:1b:ad:b8:63:f5: de:3d:15:d3:80:d7:79:2b:8f:40:40:92:93:83:94:6d:f2:e5: 10:d6:72:f0:0e:fd:36:05:c7:26:a9:24:96:4c:ee:08:0e:7e: e2:45:0f:df -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUHQjTuzrpyvpttiSGoe49lqnZnPYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxMzA1NTg0MFoX DTI2MDYxMjA2MDM0MFowMzExMC8GA1UEAxMoOEIwREM3OUI2NkE5NkZBN0ZBMzE4 MEMyMEIwNkE1QzQzQzlDRkVBMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOReokWYQmdpjJbtpBQarXrCToHr+/hfOXWXxyGTS9sK1CHiy8d7azCpDA44 vRYB5UducUl2pCBtN9LKVhm8jJE3M91JSwbuu4/2IXosoq0V8h0FM1wau0ntUscn RB29ToBQRxfLfJZ+LA+kh36JM7lApugLfZYNs0edSMSSNhXKDsAryTfvxTHFcy2L eP5sXIMHSObW9K/KWQwz+mDg+TuQzKSKX0GfI8oPDVwvsfqda/M1IRpo4acfvDg4 Pt1/E/ES9il7fC7gmObZ9seiXxv6qxwYFaOQ/pxm16K/8Y5Go5gdw2ve6UNBNLkI AG2VCGH2sjc1+T+OwX9fzQri+fsCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIsNx5tmqW+n+jGAwgsGpcQ8nP6hMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84ZDViYmQ4MS0wMzMyLTQyMDItOWM5Mi1lYjE3NDZhOGNkOWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkNWJiZDgx LTAzMzItNDIwMi05YzkyLWViMTc0NmE4Y2Q5ZC8wLzhCMERDNzlCNjZBOTZGQTdG QTMxODBDMjBCMDZBNUM0M0M5Q0ZFQTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABndgMwDwQCAAIwCQMHACABDfW/ADANBgkqhkiG9w0BAQsFAAOCAQEAlbJPw5wM nBcB4LJK7KKSpRvgpxkUXH0MK7DHOmuzqLkacAgPN2DBMnc58Nbch1QBsnZSlPYy N88wdIF8DLernIJh6JZ9rHLS8dJcUwx+Gv7GHps3jdvI0hJKNr6sM60tY9NqUCRl P+Lv7kR9AwWV89PkCxDDBs6BjnJvGBz6Qj9xwGEXy5CYgbsLV2LQVM54XMC+KHOC CKD4Xg4uqdhUn3cXNQ89rrGym0JdV6uBPQMHPTdGhCNzkETqbasyFSW2IBAgbFx+ ft7rHg8NwQVc4ngLOxutuGP13j0V04DXeSuPQECSk4OUbfLlENZy8A79NgXHJqkk lkzuCA5+4kUP3w== -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:24 2025 by rpki-client