$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer File: B911D34F2E80140D63AE02F4CBE719E7D972C6F6.cer (raw, json) Hash identifier: cxTVlaoAtzWfKURxO/ny6bYV+/QUGiVf9B/Zk6GBSaE= Subject key identifier: B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 73C63DE7944267983E94F18DD92049DA83207A44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft caRepository: rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Jun 2025 19:38:33 +0000 Certificate not after: Tue 16 Jun 2026 19:43:33 +0000 Subordinate resources: IP: 103.150.22.0/24 IP: 2001:df3:4f80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 10:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c6:3d:e7:94:42:67:98:3e:94:f1:8d:d9:20:49:da:83:20:7a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 17 19:38:33 2025 GMT Not After : Jun 16 19:43:33 2026 GMT Subject: CN=B911D34F2E80140D63AE02F4CBE719E7D972C6F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:f2:52:ab:ea:1d:3e:ba:0b:7d:e8:41:0e: 28:a4:aa:00:fe:7d:98:84:ec:de:96:b3:5f:fe:80: 25:66:ba:95:f7:91:91:fd:33:7f:eb:13:9b:75:41: 5a:38:82:01:dd:ca:59:34:a9:0e:99:ed:41:a5:00: c0:4e:a3:4b:bf:c7:81:ad:c6:a4:38:0c:78:e3:bf: 86:88:7f:6c:67:76:29:94:ba:b8:ff:c2:1f:42:c7: 55:67:7c:e3:77:63:2b:80:00:7f:0e:3f:06:07:f5: 3f:ff:a9:a3:83:9e:f5:4a:1f:8d:1e:d5:7a:f3:9f: 1c:b4:de:d0:b2:e4:9a:08:ca:5d:64:c7:05:9a:3b: 4c:28:0b:d3:17:fd:b5:0b:d8:6e:e6:de:78:c8:f1: 7c:2e:4c:9e:68:9d:0b:f3:3a:29:b2:c5:5c:27:a9: 20:9c:b8:7f:b4:fb:65:13:f4:d0:71:b1:58:ca:2c: 80:0b:4e:40:d4:ba:ec:74:f3:6c:1f:87:2b:d0:bf: 01:7b:41:51:cf:ee:0c:81:f6:a6:eb:bb:65:db:3a: 8d:66:bd:96:98:e4:43:01:d9:77:54:a2:22:85:ea: 1d:b1:1e:52:51:43:37:14:6a:4f:49:55:5c:f3:62: f1:2d:cb:ca:e7:0d:c5:ee:d1:c5:81:ef:51:81:79: cb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:11:D3:4F:2E:80:14:0D:63:AE:02:F4:CB:E7:19:E7:D9:72:C6:F6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/46a84de5-61d1-4618-9fb4-43f631a1289a/0/B911D34F2E80140D63AE02F4CBE719E7D972C6F6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.22.0/24 IPv6: 2001:df3:4f80::/48 Signature Algorithm: sha256WithRSAEncryption 38:0c:53:02:d9:48:44:f8:a9:00:a4:33:50:63:1b:7e:27:f0: e6:1c:c6:e3:ac:6d:8e:18:3b:43:d6:f3:27:b4:f8:85:73:df: 1b:74:53:01:28:ef:c6:ee:46:54:99:21:c2:53:83:56:6d:6e: 6b:07:61:ae:43:d7:e6:32:89:52:a5:4b:00:68:3c:ea:f8:7a: c6:e9:22:81:dc:8a:56:64:e9:bd:89:22:3f:a1:c4:ed:e6:dc: 6e:80:80:45:aa:de:36:c2:12:6d:78:bc:8d:a1:9b:d9:7c:cb: 8a:2d:a8:95:60:34:50:eb:9f:78:15:c5:5e:f8:63:42:1d:08: 63:54:ee:76:b6:1f:50:c5:5d:ca:67:56:13:68:b7:85:39:a2: 89:c0:f1:96:97:b8:89:84:7e:37:fa:f0:01:f1:72:63:dd:26: 7c:b4:e8:3c:02:2b:96:6c:5b:1d:77:34:08:3f:3f:d3:85:37: 07:99:2f:41:08:9e:26:0d:d9:a9:b7:1b:d0:01:5f:d9:7c:17: b5:31:10:bc:e5:ca:dc:46:5b:35:53:6a:91:6f:05:27:2a:6b: 72:5e:89:92:2a:ac:6c:98:c3:08:8c:fe:f8:25:87:2a:8a:db: 53:5a:b0:cd:dc:6c:78:c0:ae:36:65:96:e1:c6:0b:a8:36:22: f7:0e:0b:f0 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUc8Y955RCZ5g+lPGN2SBJ2oMgekQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxNzE5MzgzM1oX DTI2MDYxNjE5NDMzM1owMzExMC8GA1UEAxMoQjkxMUQzNEYyRTgwMTQwRDYzQUUw MkY0Q0JFNzE5RTdEOTcyQzZGNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMQU8lKr6h0+ugt96EEOKKSqAP59mITs3pazX/6AJWa6lfeRkf0zf+sTm3VB WjiCAd3KWTSpDpntQaUAwE6jS7/Hga3GpDgMeOO/hoh/bGd2KZS6uP/CH0LHVWd8 43djK4AAfw4/Bgf1P/+po4Oe9UofjR7VevOfHLTe0LLkmgjKXWTHBZo7TCgL0xf9 tQvYbubeeMjxfC5MnmidC/M6KbLFXCepIJy4f7T7ZRP00HGxWMosgAtOQNS67HTz bB+HK9C/AXtBUc/uDIH2puu7Zds6jWa9lpjkQwHZd1SiIoXqHbEeUlFDNxRqT0lV XPNi8S3LyucNxe7RxYHvUYF5y/ECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLkR008ugBQNY64C9MvnGefZcsb2MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NmE4NGRlNS02MWQxLTQ2MTgtOWZiNC00M2Y2MzFhMTI4OWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ2YTg0ZGU1 LTYxZDEtNDYxOC05ZmI0LTQzZjYzMWExMjg5YS8wL0I5MTFEMzRGMkU4MDE0MEQ2 M0FFMDJGNENCRTcxOUU3RDk3MkM2RjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnlhYwDwQCAAIwCQMHACABDfNPgDANBgkqhkiG9w0BAQsFAAOCAQEAOAxTAtlI RPipAKQzUGMbfifw5hzG46xtjhg7Q9bzJ7T4hXPfG3RTASjvxu5GVJkhwlODVm1u awdhrkPX5jKJUqVLAGg86vh6xukigdyKVmTpvYkiP6HE7ebcboCARareNsISbXi8 jaGb2XzLii2olWA0UOufeBXFXvhjQh0IY1TudrYfUMVdymdWE2i3hTmiicDxlpe4 iYR+N/rwAfFyY90mfLToPAIrlmxbHXc0CD8/04U3B5kvQQieJg3Zqbcb0AFf2XwX tTEQvOXK3EZbNVNqkW8FJyprcl6JkiqsbJjDCIz++CWHKorbU1qwzdxseMCuNmWW 4cYLqDYi9w4L8A== -----END CERTIFICATE-----Generated at Wed Jun 18 09:48:39 2025 by rpki-client