$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer File: B2BCF7264F89246583B384F354CB350DF3B6AADB.cer (raw, json) Hash identifier: ORM8OP6poLOYi2RRogXUZzDwzIYbGyy6rJPn3i+hoF0= Subject key identifier: B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 73C8A23B07034984CABCC7A43311FE1AB7057AC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft caRepository: rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 02 Jun 2025 23:39:38 +0000 Certificate not after: Mon 01 Jun 2026 23:44:38 +0000 Subordinate resources: IP: 202.47.90.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c8:a2:3b:07:03:49:84:ca:bc:c7:a4:33:11:fe:1a:b7:05:7a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 2 23:39:38 2025 GMT Not After : Jun 1 23:44:38 2026 GMT Subject: CN=B2BCF7264F89246583B384F354CB350DF3B6AADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:22:24:d0:9d:7b:d1:c6:a1:86:0a:f8:1f: 3b:6e:31:3c:4e:85:24:b7:0c:b1:08:ed:92:6d:c7: f7:87:5d:32:bf:3c:e0:ab:6f:42:18:15:fd:3a:2b: a6:7e:f3:54:e6:f2:81:1e:45:71:0f:b0:cb:d9:0b: 2f:9f:3b:c7:86:02:45:91:aa:06:ba:32:f4:72:e9: c3:44:c6:56:39:a0:f6:7b:30:95:77:db:fe:6d:10: 8b:69:ce:5d:30:2b:67:10:37:d1:c1:32:42:6d:cb: c5:ba:64:3f:98:e5:e0:f0:e5:b1:3f:95:69:94:d8: 92:71:51:bd:f8:38:10:c9:ea:29:ac:7b:e6:6b:fd: 8e:f9:02:86:fd:9c:c0:26:2b:9c:4b:22:db:99:f0: 06:81:93:d3:5a:77:78:08:b7:f5:63:fd:7f:44:fb: 72:64:96:59:86:2e:7c:35:4a:d7:3a:1b:fe:1c:3b: da:dd:a1:2e:13:84:ff:8e:4a:69:4a:09:df:44:35: ed:34:b4:75:22:02:48:2d:a0:1e:ed:42:fe:d5:8f: dc:5d:13:4f:05:e8:82:9c:0b:d6:81:54:2a:3c:a6: f1:09:8b:87:5d:ef:ad:f1:1d:ad:5b:53:e0:49:4e: 15:1f:80:78:4c:7d:36:5a:4a:0e:a9:27:d1:a2:85: f6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.47.90.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:e9:11:3f:43:1c:c5:3d:a9:dd:b0:58:5b:6a:8f:cc:4a:c9: e8:42:bc:7c:08:19:ca:79:d7:0e:09:43:a3:b8:d2:63:24:84: 08:d5:52:e7:93:d6:aa:50:5b:a9:a2:7e:4e:44:6f:e6:4a:30: 3b:6f:85:2f:5f:d4:c1:f6:6b:ae:18:01:7a:46:76:58:f6:26: 67:64:35:d2:81:6e:b9:23:a6:5b:a6:2e:bd:1d:c2:ea:af:26: 49:c6:64:0d:b5:4b:ec:c5:ca:5f:8f:0b:1f:62:5c:c0:0f:1e: d5:d6:ed:56:73:7e:d1:e2:9c:84:cf:c9:b3:2e:27:f4:6c:93: 18:21:f2:a9:22:1c:07:3a:44:0a:33:64:76:c4:1d:45:87:3f: 83:23:e8:48:2c:aa:6c:77:12:df:08:48:cc:11:7c:84:9e:61: f4:39:aa:f9:7d:ad:3a:4f:c5:0a:d6:b2:52:10:b2:f0:5d:ac: 59:0b:4a:85:9c:f6:52:24:7d:fc:a6:b1:23:8d:04:58:9f:4d: 9e:1f:70:d1:e0:f2:73:f4:c0:a1:4a:57:5b:0b:5f:1e:d8:c1: 35:a8:8e:a3:0c:12:8c:b0:be:61:cd:07:16:0c:3b:0d:ec:5f: 68:dc:fa:17:7a:9f:25:58:65:1a:c4:7a:31:9c:68:ff:cc:6f: e5:76:fe:3f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUc8iiOwcDSYTKvMekMxH+GrcFesMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMjIzMzkzOFoX DTI2MDYwMTIzNDQzOFowMzExMC8GA1UEAxMoQjJCQ0Y3MjY0Rjg5MjQ2NTgzQjM4 NEYzNTRDQjM1MERGM0I2QUFEQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMCZIiTQnXvRxqGGCvgfO24xPE6FJLcMsQjtkm3H94ddMr884KtvQhgV/Tor pn7zVObygR5FcQ+wy9kLL587x4YCRZGqBroy9HLpw0TGVjmg9nswlXfb/m0Qi2nO XTArZxA30cEyQm3LxbpkP5jl4PDlsT+VaZTYknFRvfg4EMnqKax75mv9jvkChv2c wCYrnEsi25nwBoGT01p3eAi39WP9f0T7cmSWWYYufDVK1zob/hw72t2hLhOE/45K aUoJ30Q17TS0dSICSC2gHu1C/tWP3F0TTwXogpwL1oFUKjym8QmLh13vrfEdrVtT 4ElOFR+AeEx9NlpKDqkn0aKF9mECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLK89yZPiSRlg7OE81TLNQ3ztqrbMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iMmEwYTc3MS02MmQyLTQyMzgtYTQwNi03OTk5ZjIyNDg0OWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyYTBhNzcx LTYyZDItNDIzOC1hNDA2LTc5OTlmMjI0ODQ5Yy8wL0IyQkNGNzI2NEY4OTI0NjU4 M0IzODRGMzU0Q0IzNTBERjNCNkFBREIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHKL1owDQYJKoZIhvcNAQELBQADggEBAJvpET9DHMU9qd2wWFtqj8xKyehCvHwI Gcp51w4JQ6O40mMkhAjVUueT1qpQW6mifk5Eb+ZKMDtvhS9f1MH2a64YAXpGdlj2 JmdkNdKBbrkjplumLr0dwuqvJknGZA21S+zFyl+PCx9iXMAPHtXW7VZzftHinITP ybMuJ/Rskxgh8qkiHAc6RAozZHbEHUWHP4Mj6Egsqmx3Et8ISMwRfISeYfQ5qvl9 rTpPxQrWslIQsvBdrFkLSoWc9lIkffymsSONBFifTZ4fcNHg8nP0wKFKV1sLXx7Y wTWojqMMEoywvmHNBxYMOw3sX2jc+hd6nyVYZRrEejGcaP/Mb+V2/j8= -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:54 2025 by rpki-client