$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer File: B16C4772F3D77045BBA997F94CEACA9E0DCC2865.cer (raw, json) Hash identifier: YCtDgerB3ADpHviMppBN0JPewOo+dWcWdSLbmXr0NSY= Subject key identifier: B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7E6D985487EE6596EDDD5AB54D9A88C899341238 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft caRepository: rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 01 Oct 2025 14:41:02 +0000 Certificate not after: Wed 30 Sep 2026 14:46:02 +0000 Subordinate resources: IP: 180.131.129.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:6d:98:54:87:ee:65:96:ed:dd:5a:b5:4d:9a:88:c8:99:34:12:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 1 14:41:02 2025 GMT Not After : Sep 30 14:46:02 2026 GMT Subject: CN=B16C4772F3D77045BBA997F94CEACA9E0DCC2865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:28:ea:d7:78:fe:38:7c:66:ee:31:61:80: d0:49:9d:fa:86:34:0e:75:fc:d3:f1:47:81:38:cd: f8:e5:70:7c:cc:2e:b0:26:67:5c:11:c5:bd:61:01: 5e:5e:b7:ee:2c:cd:e7:5f:75:07:eb:84:84:ba:7f: 3b:ef:c6:36:35:93:b5:19:15:85:a8:84:5f:e7:60: c0:2e:a8:87:42:d4:12:8e:8d:11:a1:d5:01:8d:36: 51:24:11:ad:fe:da:db:0d:f0:0b:43:01:5c:bd:68: 20:93:f6:55:1e:e1:20:7e:68:06:fc:64:3d:ce:be: 66:e2:f0:c6:d9:fd:46:96:2a:8c:c8:c5:5b:93:90: 4d:1c:21:62:1e:9e:aa:bf:f3:66:e3:6e:7c:1e:de: be:eb:98:0e:05:7c:0b:00:19:ae:7d:ec:43:11:b6: b6:89:0f:97:fd:25:01:e1:82:38:d3:37:71:7c:8c: 57:c2:13:40:b5:e6:f2:1e:14:64:56:25:69:93:0f: fc:10:1c:ec:79:24:37:2a:80:c9:5a:87:01:c3:96: 36:60:4c:43:5a:29:90:94:20:96:44:ff:d4:8d:ac: 07:a3:b0:5c:9d:9c:77:bb:de:a1:67:f9:50:b8:3a: cc:6f:ea:8d:52:87:f9:c4:2c:81:35:f7:ff:0e:ba: 6e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:6C:47:72:F3:D7:70:45:BB:A9:97:F9:4C:EA:CA:9E:0D:CC:28:65 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3c9941a4-28d2-47d1-91e7-acab59084462/0/B16C4772F3D77045BBA997F94CEACA9E0DCC2865.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.131.129.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:7a:da:92:72:91:b1:69:4d:bc:55:db:93:d9:35:3f:f8:2e: f9:e1:27:70:50:e1:68:26:80:ea:ca:ed:27:c6:76:f2:59:af: af:a8:98:7c:b9:4c:32:72:63:66:fc:3b:f4:0f:d1:17:78:20: 48:de:70:ee:bb:93:14:c9:93:0b:23:2d:5e:70:62:3a:cc:78: de:85:ae:36:b9:89:b7:21:9d:52:f7:34:09:18:10:58:f6:a4: 8f:17:d5:c9:e3:c5:57:c8:36:17:92:69:aa:74:cc:78:a9:6d: cf:0e:bb:f6:75:e2:10:c0:be:df:33:81:42:cf:d9:44:33:43: 58:9c:4a:c6:b3:58:d0:97:7e:e3:17:84:c9:68:a9:63:6b:72: 0d:05:6a:65:2f:1d:19:f5:01:57:16:a3:8d:b8:e1:75:8c:f8: 2f:c5:79:b7:da:f2:fe:0e:75:12:5d:f9:c9:9f:45:c6:03:c6: 9e:2c:8c:3d:6b:29:58:7e:7d:10:5b:c7:e1:47:f5:fb:83:46: 30:9f:cf:1c:26:88:7c:3a:c2:27:74:68:60:cf:5d:b2:31:8b: e0:eb:94:99:f0:0a:01:b0:d0:08:01:af:a8:51:99:85:76:f1: 6b:89:e1:03:0a:b7:d9:87:f2:2c:51:3c:60:aa:61:6c:af:36: f6:83:2b:5c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfm2YVIfuZZbt3Vq1TZqIyJk0EjgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAwMTE0NDEwMloX DTI2MDkzMDE0NDYwMlowMzExMC8GA1UEAxMoQjE2QzQ3NzJGM0Q3NzA0NUJCQTk5 N0Y5NENFQUNBOUUwRENDMjg2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCZKOrXeP44fGbuMWGA0Emd+oY0DnX80/FHgTjN+OVwfMwusCZnXBHFvWEB Xl637izN5191B+uEhLp/O+/GNjWTtRkVhaiEX+dgwC6oh0LUEo6NEaHVAY02USQR rf7a2w3wC0MBXL1oIJP2VR7hIH5oBvxkPc6+ZuLwxtn9RpYqjMjFW5OQTRwhYh6e qr/zZuNufB7evuuYDgV8CwAZrn3sQxG2tokPl/0lAeGCONM3cXyMV8ITQLXm8h4U ZFYlaZMP/BAc7HkkNyqAyVqHAcOWNmBMQ1opkJQglkT/1I2sB6OwXJ2cd7veoWf5 ULg6zG/qjVKH+cQsgTX3/w66bv8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLFsR3Lz13BFu6mX+Uzqyp4NzChlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zYzk5NDFhNC0yOGQyLTQ3ZDEtOTFlNy1hY2FiNTkwODQ0NjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjOTk0MWE0 LTI4ZDItNDdkMS05MWU3LWFjYWI1OTA4NDQ2Mi8wL0IxNkM0NzcyRjNENzcwNDVC QkE5OTdGOTRDRUFDQTlFMERDQzI4NjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC0g4EwDQYJKoZIhvcNAQELBQADggEBAI162pJykbFpTbxV25PZNT/4LvnhJ3BQ 4WgmgOrK7SfGdvJZr6+omHy5TDJyY2b8O/QP0Rd4IEjecO67kxTJkwsjLV5wYjrM eN6Frja5ibchnVL3NAkYEFj2pI8X1cnjxVfINheSaap0zHipbc8Ou/Z14hDAvt8z gULP2UQzQ1icSsazWNCXfuMXhMloqWNrcg0FamUvHRn1AVcWo4244XWM+C/Febfa 8v4OdRJd+cmfRcYDxp4sjD1rKVh+fRBbx+FH9fuDRjCfzxwmiHw6wid0aGDPXbIx i+DrlJnwCgGw0AgBr6hRmYV28WuJ4QMKt9mH8ixRPGCqYWyvNvaDK1w= -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:48 2025 by rpki-client