$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer File: B6F29F770F5B30B5F7B738F4524506F1A235DABC.cer (raw, json) Hash identifier: j3aE8F/Z6SayxELOS/SPGBTIK9GLVwAqubZK22Lh0Qo= Subject key identifier: B6:F2:9F:77:0F:5B:30:B5:F7:B7:38:F4:52:45:06:F1:A2:35:DA:BC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5D95CEDE3119E7EB5A1C607434575EB014C11796 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft caRepository: rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 12 Aug 2025 16:12:30 +0000 Certificate not after: Tue 11 Aug 2026 16:17:30 +0000 Subordinate resources: IP: 103.224.64.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:95:ce:de:31:19:e7:eb:5a:1c:60:74:34:57:5e:b0:14:c1:17:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 12 16:12:30 2025 GMT Not After : Aug 11 16:17:30 2026 GMT Subject: CN=B6F29F770F5B30B5F7B738F4524506F1A235DABC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9b:c9:76:20:60:dc:b4:2f:7b:be:1e:12:c0: 3e:14:f1:10:9d:6a:38:bd:c4:a0:ef:9c:fc:12:d6: 8b:5f:48:ac:89:f0:37:69:7a:fd:ca:5e:0a:88:a8: 81:26:5b:d2:5a:22:8d:ba:06:df:b2:7d:fe:58:34: 88:82:ed:93:b4:b6:95:cb:57:40:0a:c1:bd:4a:8c: 4a:16:55:6e:0f:32:77:75:37:46:ba:9b:cf:2b:72: 95:b6:de:db:e9:d3:01:ff:cf:03:ee:09:1a:bc:2f: 4e:1b:a6:26:ad:3e:43:9e:3a:c9:35:92:47:3b:f0: f4:77:2e:49:7a:a2:57:52:b8:a3:e7:3f:b7:68:8a: c2:e3:7c:b6:9a:ea:fa:53:85:6c:e0:c1:a3:c9:0b: 5c:93:73:de:4a:f7:b7:d1:b5:3c:9e:8e:7c:d7:e4: d2:7f:54:e1:66:f3:47:09:f1:b4:43:31:b4:3f:84: 88:bb:d5:93:3c:5d:48:1f:99:ce:62:77:77:fc:7c: be:ff:f1:d9:46:68:1d:13:7c:b3:4a:09:2b:7a:1c: 15:d2:86:29:2a:da:85:ac:fe:33:85:7b:bd:fa:c3: 9b:24:5c:9b:0e:dd:f6:22:a0:4f:74:61:9b:41:62: 6e:d2:84:14:37:8b:09:60:f1:1c:ea:a2:29:c4:4f: 32:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B6:F2:9F:77:0F:5B:30:B5:F7:B7:38:F4:52:45:06:F1:A2:35:DA:BC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4a8d54ae-870d-4348-ab58-30090a760a36/0/B6F29F770F5B30B5F7B738F4524506F1A235DABC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.224.64.0/22 Signature Algorithm: sha256WithRSAEncryption 53:b2:ed:68:9b:9b:5d:c3:b2:f2:ea:2e:39:99:6f:9a:48:67: 60:99:d5:f0:e9:b6:98:81:1c:ad:d7:0a:4f:c2:92:2d:66:da: f2:55:20:d1:e8:b5:07:71:ef:25:7c:3f:5a:9a:6c:a5:84:e6: 13:a4:65:8a:64:c3:81:9b:3c:8a:c2:14:9f:8f:af:47:58:1b: 8e:47:ea:ce:68:b4:78:18:2b:bc:fa:a3:8b:ea:6f:ad:31:fb: 01:13:e6:4c:88:e7:b3:05:b6:bb:84:e1:85:7a:99:0e:27:12: 5d:13:7d:55:b3:00:29:eb:ea:39:ad:77:34:a2:e0:6e:eb:24: 61:24:4f:a1:7f:ad:49:dd:41:f0:63:96:c3:be:e3:60:3d:e0: 8f:8a:7d:f3:d8:3b:9b:97:2a:b9:20:f1:6a:47:6e:da:d1:d5: 0e:2b:ad:a0:f5:7f:7d:04:f3:a6:ef:d6:15:d0:e8:5d:3b:41: a6:bb:f1:1c:35:a7:ef:fc:61:ea:bc:29:62:e8:55:0e:0d:ec: e4:a2:c8:ca:33:cf:fd:a3:74:05:47:4d:c0:22:8d:21:4a:2b: e7:64:3b:40:b1:65:65:b3:02:2c:7f:73:ac:56:e6:db:aa:b2: d0:2d:5f:1e:df:ae:6a:43:58:66:ec:28:43:ed:91:3e:0c:ce: 6c:0b:5c:80 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXZXO3jEZ5+taHGB0NFdesBTBF5YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxMjE2MTIzMFoX DTI2MDgxMTE2MTczMFowMzExMC8GA1UEAxMoQjZGMjlGNzcwRjVCMzBCNUY3Qjcz OEY0NTI0NTA2RjFBMjM1REFCQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANabyXYgYNy0L3u+HhLAPhTxEJ1qOL3EoO+c/BLWi19IrInwN2l6/cpeCoio gSZb0loijboG37J9/lg0iILtk7S2lctXQArBvUqMShZVbg8yd3U3Rrqbzytylbbe 2+nTAf/PA+4JGrwvThumJq0+Q546yTWSRzvw9HcuSXqiV1K4o+c/t2iKwuN8tprq +lOFbODBo8kLXJNz3kr3t9G1PJ6OfNfk0n9U4WbzRwnxtEMxtD+EiLvVkzxdSB+Z zmJ3d/x8vv/x2UZoHRN8s0oJK3ocFdKGKSrahaz+M4V7vfrDmyRcmw7d9iKgT3Rh m0FibtKEFDeLCWDxHOqiKcRPMlcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLbyn3cPWzC197c49FJFBvGiNdq8MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80YThkNTRhZS04NzBkLTQzNDgtYWI1OC0zMDA5MGE3NjBhMzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRhOGQ1NGFl LTg3MGQtNDM0OC1hYjU4LTMwMDkwYTc2MGEzNi8wL0I2RjI5Rjc3MEY1QjMwQjVG N0I3MzhGNDUyNDUwNkYxQTIzNURBQkMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn4EAwDQYJKoZIhvcNAQELBQADggEBAFOy7Wibm13DsvLqLjmZb5pIZ2CZ1fDp tpiBHK3XCk/Cki1m2vJVINHotQdx7yV8P1qabKWE5hOkZYpkw4GbPIrCFJ+Pr0dY G45H6s5otHgYK7z6o4vqb60x+wET5kyI57MFtruE4YV6mQ4nEl0TfVWzACnr6jmt dzSi4G7rJGEkT6F/rUndQfBjlsO+42A94I+KffPYO5uXKrkg8WpHbtrR1Q4rraD1 f30E86bv1hXQ6F07Qaa78Rw1p+/8Yeq8KWLoVQ4N7OSiyMozz/2jdAVHTcAijSFK K+dkO0CxZWWzAix/c6xW5tuqstAtXx7frmpDWGbsKEPtkT4MzmwLXIA= -----END CERTIFICATE-----Generated at Mon Nov 3 19:31:20 2025 by rpki-client