$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer File: B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.cer (raw, json) Hash identifier: 9qf/MapGUWPXKcpJQqUQEfcajSg2tqUGX9UDQlQsZ7I= Subject key identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3D842BC3E3C6A87BA1335208BB1E2F72F1B562E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft caRepository: rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 03 Nov 2025 21:07:07 +0000 Certificate not after: Mon 02 Nov 2026 21:12:07 +0000 Subordinate resources: IP: 2001:df4:64c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:84:2b:c3:e3:c6:a8:7b:a1:33:52:08:bb:1e:2f:72:f1:b5:62:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Nov 3 21:07:07 2025 GMT Not After : Nov 2 21:12:07 2026 GMT Subject: CN=B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8f:6b:25:1d:73:6e:a5:dd:3b:ae:84:19:15: 0d:e9:64:bb:6b:d7:04:34:69:6f:b3:ca:ff:b2:a2: 55:23:62:7a:40:12:6a:91:20:08:db:23:de:07:bf: 33:c5:b4:00:35:83:f4:04:ef:03:e6:9a:c7:98:e3: b1:ee:fb:1e:4b:18:f2:cc:09:73:fc:91:b6:da:b9: 5a:ba:19:04:cc:24:1a:67:34:19:23:35:fc:32:b5: 39:bc:d4:c9:7a:ae:83:bf:0e:e7:75:f0:a2:e6:12: ee:10:63:80:7a:75:90:7a:b6:59:fe:02:c6:0d:e6: e7:2c:0d:8a:d2:15:7f:ce:35:c6:e7:b6:59:84:10: 71:5c:a6:b5:59:37:a8:2d:e2:fd:e9:77:6e:5f:3d: 53:84:47:57:47:77:2c:80:61:12:af:19:c1:f6:49: b5:69:02:05:ad:1f:af:b4:46:3d:78:bd:16:d8:fa: 6e:7d:6e:cd:c9:f0:8c:9f:c5:10:f8:46:0f:40:b0: aa:da:da:20:b8:12:7a:29:2b:0f:a6:a6:f1:82:ad: 22:9e:39:9f:ac:30:65:8f:2a:31:e3:d8:b5:5e:67: b7:8e:f0:53:ef:63:77:e6:d2:85:a9:8c:0a:6d:c2: 91:cb:47:5a:a2:3c:c3:80:8f:e7:ef:8d:50:8a:e6: 43:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:2F:0F:B3:E1:41:D5:2E:D2:A7:1F:A4:83:ED:3C:6D:72:3F:60:E2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cafcbfbb-ba3f-4d53-a04f-14d6f4be0cb1/1/B92F0FB3E141D52ED2A71FA483ED3C6D723F60E2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:64c0::/48 Signature Algorithm: sha256WithRSAEncryption 60:c3:24:fe:a2:1f:b7:d2:45:15:8c:e4:87:00:6e:10:c4:fe: 79:b1:03:ee:ca:20:43:f9:48:58:70:c8:67:a2:ce:5a:04:9d: 9f:69:f0:2f:a5:6a:52:7b:e2:3f:ba:3c:0c:dc:7e:41:46:4d: 11:3a:1a:98:85:cb:c0:19:b6:7b:f3:6e:42:8a:2f:55:a5:f8: 17:e0:d0:1f:1a:25:20:55:9b:e5:b2:ed:29:f7:67:45:7d:0f: 40:c1:ac:ad:d8:7b:8f:82:60:75:c8:7f:76:0b:b7:a0:a9:99: 47:57:04:3e:24:e2:7b:ad:6b:dc:97:03:69:8e:5c:f8:8a:d9: 2e:74:3e:d1:df:1d:1d:ef:e0:5a:fc:00:e8:bc:28:ba:0e:db: 2a:0e:9b:e1:0f:25:30:5c:ee:8f:aa:39:ce:50:f9:f4:79:61: d0:12:52:7e:77:a0:79:99:45:6d:d5:4a:4d:84:91:c0:d3:bd: b3:44:97:2d:6e:30:9c:50:51:2a:d4:9c:42:db:f1:ab:af:ee: dd:d4:9e:ab:2e:f4:e2:c4:28:50:62:ac:d6:c0:c7:2d:7e:04: ea:ea:df:bf:cb:30:78:a3:3a:2b:8f:1f:ba:e9:26:00:6d:b6: 79:40:81:a7:31:16:97:df:fc:9c:5f:ad:06:c5:66:3a:28:bd: 62:c8:99:d6 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUPYQrw+PGqHuhM1IIux4vcvG1YugwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTEwMzIxMDcwN1oX DTI2MTEwMjIxMTIwN1owMzExMC8GA1UEAxMoQjkyRjBGQjNFMTQxRDUyRUQyQTcx RkE0ODNFRDNDNkQ3MjNGNjBFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANSPayUdc26l3TuuhBkVDelku2vXBDRpb7PK/7KiVSNiekASapEgCNsj3ge/ M8W0ADWD9ATvA+aax5jjse77HksY8swJc/yRttq5WroZBMwkGmc0GSM1/DK1ObzU yXqug78O53XwouYS7hBjgHp1kHq2Wf4Cxg3m5ywNitIVf841xue2WYQQcVymtVk3 qC3i/el3bl89U4RHV0d3LIBhEq8ZwfZJtWkCBa0fr7RGPXi9Ftj6bn1uzcnwjJ/F EPhGD0CwqtraILgSeikrD6am8YKtIp45n6wwZY8qMePYtV5nt47wU+9jd+bShamM Cm3CkctHWqI8w4CP5++NUIrmQ+ECAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLkvD7PhQdUu0qcfpIPtPG1yP2DiMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYWZjYmZiYi1iYTNmLTRkNTMtYTA0Zi0xNGQ2ZjRiZTBjYjEvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhZmNiZmJi LWJhM2YtNGQ1My1hMDRmLTE0ZDZmNGJlMGNiMS8xL0I5MkYwRkIzRTE0MUQ1MkVE MkE3MUZBNDgzRUQzQzZENzIzRjYwRTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ30ZMAwDQYJKoZIhvcNAQELBQADggEBAGDDJP6iH7fSRRWM5IcAbhDE/nmx A+7KIEP5SFhwyGeizloEnZ9p8C+lalJ74j+6PAzcfkFGTRE6GpiFy8AZtnvzbkKK L1Wl+Bfg0B8aJSBVm+Wy7Sn3Z0V9D0DBrK3Ye4+CYHXIf3YLt6CpmUdXBD4k4nut a9yXA2mOXPiK2S50PtHfHR3v4Fr8AOi8KLoO2yoOm+EPJTBc7o+qOc5Q+fR5YdAS Un53oHmZRW3VSk2EkcDTvbNEly1uMJxQUSrUnELb8auv7t3Unqsu9OLEKFBirNbA xy1+BOrq37/LMHijOiuPH7rpJgBttnlAgacxFpff/JxfrQbFZjoovWLImdY= -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:11 2025 by rpki-client