$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer File: B5787D648E70D60E0E09510EBF1809D686E83D03.cer (raw, json) Hash identifier: /QcoQ1SX6rM8osg5M9dzfJ+yy2OjWLsLnwiBZXDkrgU= Subject key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2B132912237932607324469E9027E87C3CBA48FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft caRepository: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 28 May 2025 14:27:53 +0000 Certificate not after: Wed 27 May 2026 14:32:53 +0000 Subordinate resources: IP: 103.172.186.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:13:29:12:23:79:32:60:73:24:46:9e:90:27:e8:7c:3c:ba:48:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 28 14:27:53 2025 GMT Not After : May 27 14:32:53 2026 GMT Subject: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:10:b6:ec:ae:b6:1b:6c:a5:24:eb:e4:9a: d8:9a:d7:b0:87:0c:99:f2:94:84:8e:d1:20:f3:11: 38:33:b7:e9:5d:81:f0:76:79:5e:28:d7:91:f9:fd: 14:01:79:e6:80:18:28:2e:62:c6:2d:b3:16:93:40: 16:93:10:bf:fa:19:10:10:18:04:25:1f:e6:34:46: 70:2a:b9:60:6b:8c:fc:33:36:4e:aa:d6:69:be:e0: 76:be:1e:38:33:74:3c:8f:9e:88:be:71:6f:37:c8: 18:9b:7a:2d:cb:3d:6b:52:29:22:33:b0:e0:b7:9e: ad:dc:e5:81:5f:34:09:bb:8c:35:5e:a0:d3:7b:40: b2:9e:96:f0:9b:7d:58:e4:f2:7d:5e:d3:dd:42:ea: 8d:99:46:53:3d:73:93:bd:93:53:58:be:18:5f:be: d1:fc:d5:de:8d:36:39:8f:10:1c:86:54:f0:95:68: 59:e3:e5:33:a5:3f:cb:22:b4:f0:19:10:1c:ff:9f: 5a:65:59:f0:7c:ec:24:3f:7f:15:85:96:db:f7:27: 60:12:63:25:d8:09:04:9a:ba:6c:49:1a:02:71:53: 7a:ed:03:d6:2d:b0:da:fa:b0:35:94:5e:85:08:dc: 71:e4:26:3e:99:18:37:58:3e:e9:71:3f:c7:6b:9d: 7c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.186.0/23 Signature Algorithm: sha256WithRSAEncryption 52:35:49:72:39:d1:e8:41:08:8b:2c:3a:02:ff:8f:44:d9:c8: e3:61:f4:f4:97:3a:fa:c1:e8:e4:e3:7c:3a:ab:57:b5:5c:41: 01:89:f7:9c:dc:91:15:aa:1e:02:fd:0d:1e:e7:3f:2b:b9:d7: bf:6b:b5:0c:95:47:d9:39:84:b7:16:f6:66:e2:c4:c1:4a:f5: 99:d7:76:87:06:83:45:8c:5c:29:38:27:a2:7c:36:8b:55:0f: 53:76:f3:5d:b5:b3:21:b0:78:18:71:43:9d:4f:7f:53:0f:89: 3c:5f:99:6e:d0:a6:e2:65:f7:d5:3e:5d:4f:72:5e:fd:eb:5b: 55:ce:37:02:19:69:11:47:9f:59:61:42:c8:36:43:26:7a:08: 95:61:db:fa:76:92:b2:4b:61:12:3d:af:6e:71:c4:0c:91:49: 72:d9:c4:f4:7e:bb:69:0a:af:48:c1:a9:fd:7a:00:cf:c8:be: aa:2d:49:4e:c7:19:87:f0:e6:29:da:30:e0:38:0e:5f:15:fe: c1:5d:88:16:70:11:23:d6:5c:c5:8e:62:07:68:fc:c0:00:11: 8b:14:e7:78:f4:e1:26:60:fe:d4:db:5f:2d:e7:6c:fb:70:89: 13:51:7c:73:ea:71:10:c2:6f:32:01:82:02:0a:a4:78:aa:1c: 06:28:4f:d6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKxMpEiN5MmBzJEaekCfofDy6SP8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUyODE0Mjc1M1oX DTI2MDUyNzE0MzI1M1owMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1 MTBFQkYxODA5RDY4NkU4M0QwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK5lELbsrrYbbKUk6+Sa2JrXsIcMmfKUhI7RIPMRODO36V2B8HZ5XijXkfn9 FAF55oAYKC5ixi2zFpNAFpMQv/oZEBAYBCUf5jRGcCq5YGuM/DM2TqrWab7gdr4e ODN0PI+eiL5xbzfIGJt6Lcs9a1IpIjOw4LeerdzlgV80CbuMNV6g03tAsp6W8Jt9 WOTyfV7T3ULqjZlGUz1zk72TU1i+GF++0fzV3o02OY8QHIZU8JVoWePlM6U/yyK0 8BkQHP+fWmVZ8HzsJD9/FYWW2/cnYBJjJdgJBJq6bEkaAnFTeu0D1i2w2vqwNZRe hQjcceQmPpkYN1g+6XE/x2udfOECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLV4fWSOcNYODglRDr8YCdaG6D0DMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIyZjVmMDdj LWYwN2ItNGFhYS1hMGMyLWRmMTdjOTEwYzU4Ni8wL0I1Nzg3RDY0OEU3MEQ2MEUw RTA5NTEwRUJGMTgwOUQ2ODZFODNEMDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrLowDQYJKoZIhvcNAQELBQADggEBAFI1SXI50ehBCIssOgL/j0TZyONh9PSX OvrB6OTjfDqrV7VcQQGJ95zckRWqHgL9DR7nPyu5179rtQyVR9k5hLcW9mbixMFK 9ZnXdocGg0WMXCk4J6J8NotVD1N28121syGweBhxQ51Pf1MPiTxfmW7QpuJl99U+ XU9yXv3rW1XONwIZaRFHn1lhQsg2QyZ6CJVh2/p2krJLYRI9r25xxAyRSXLZxPR+ u2kKr0jBqf16AM/IvqotSU7HGYfw5inaMOA4Dl8V/sFdiBZwESPWXMWOYgdo/MAA EYsU53j04SZg/tTbXy3nbPtwiRNRfHPqcRDCbzIBggIKpHiqHAYoT9Y= -----END CERTIFICATE-----Generated at Tue Nov 4 02:18:55 2025 by rpki-client