$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer File: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer (raw, json) Hash identifier: OMeWUTeuM1S/MNB8pNnfq2CLTQ/HgXChYB0r+iC4yFw= Subject key identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7CCFA9FC9E4E8BCE23BA1F32718B0951AFEDCA05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft caRepository: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 20:37:48 +0000 Certificate not after: Tue 02 Jun 2026 20:42:48 +0000 Subordinate resources: IP: 103.151.22.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:cf:a9:fc:9e:4e:8b:ce:23:ba:1f:32:71:8b:09:51:af:ed:ca:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 20:37:48 2025 GMT Not After : Jun 2 20:42:48 2026 GMT Subject: CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:82:d9:6c:df:5d:a6:e3:25:de:57:9d:3b:8b: 63:3d:fd:53:57:96:8b:bc:c0:19:76:e4:87:9f:b7: d9:c4:ae:b0:3f:50:58:a1:0b:a1:56:43:15:9c:7b: 28:dd:af:d1:69:0e:af:ce:b4:ad:4a:6a:0f:f5:79: 87:64:13:01:b4:0e:6b:df:a6:80:2f:7a:68:ce:ab: 31:bf:d8:52:03:e0:43:f1:70:a5:55:6f:71:95:0c: a7:3f:ae:f4:0d:a4:b3:b5:91:8e:e1:18:6a:d8:85: 3d:39:4e:50:5f:21:ca:c7:c9:2f:a8:1d:6c:e2:13: d2:1b:74:18:1b:20:86:d3:58:df:68:b4:3b:37:28: 21:1f:33:41:2c:c2:dd:4d:47:70:2b:c6:ca:09:40: 0a:e6:4a:75:35:03:46:e5:a1:ed:af:cd:48:3e:a7: a0:4e:30:92:53:f9:90:9d:de:a8:4a:19:09:45:f4: 88:c3:00:b5:a8:f6:84:ba:8e:6c:17:55:d7:30:33: f5:e5:f3:a4:d5:ac:f9:b3:08:a3:1d:f9:e5:4d:41: 72:ee:23:0d:a1:3c:37:f6:db:7c:64:2f:51:0d:6f: 58:9d:f4:9d:52:65:b5:1d:21:19:45:16:3b:4a:8c: e0:d0:61:ab:73:27:50:a2:3f:00:92:8c:9b:aa:e0: 80:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.22.0/23 Signature Algorithm: sha256WithRSAEncryption 6c:73:ec:02:37:d7:bd:0d:df:22:7a:62:ba:ea:3f:fe:56:f6: da:98:00:1d:2c:d3:c3:bb:b3:b4:44:7e:dc:a4:8a:3b:ae:26: 3d:d5:81:34:a3:55:31:e4:91:27:df:20:20:d9:b7:cf:72:12: 4c:34:80:13:de:d8:43:3d:51:73:f7:cf:72:55:85:a2:58:8b: de:39:95:3d:9f:35:03:08:4e:dd:00:09:5d:d7:61:56:cd:85: 7b:a7:57:b8:b4:a2:9a:57:32:29:fb:54:85:21:bb:b0:51:81: 0e:09:a5:1b:7a:05:10:08:10:a4:a9:7a:4f:68:bc:da:f2:fa: ed:ad:12:18:7f:bb:f1:35:8e:6d:61:7d:df:9c:63:d5:a1:62: 34:5f:a6:cb:0b:ac:d1:9b:28:28:09:10:5b:90:bb:07:e1:34: 48:7e:a1:dc:6c:72:a0:4e:7e:1b:e8:e0:6e:e7:8f:d9:50:e7: 71:96:ac:75:d9:20:1c:eb:e7:cf:37:fd:97:f2:6b:ec:3d:5c: 7c:45:c4:17:34:fd:d9:a5:c0:c3:a6:64:4e:98:8d:e7:4f:ca: 5b:d2:7a:4a:04:13:23:ba:e1:37:e1:b3:83:d6:9a:34:ec:92: b5:3c:a2:f0:1f:85:b7:de:74:f2:88:19:7b:b2:69:11:5e:34: 91:f9:ea:e4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUfM+p/J5Oi84juh8ycYsJUa/tygUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzIwMzc0OFoX DTI2MDYwMjIwNDI0OFowMzExMC8GA1UEAxMoQkVCM0IzNUJBMUMzREFDQTU5QzZD NTI1RUE5ODIzRkY5MDJBRjk5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6C2WzfXabjJd5XnTuLYz39U1eWi7zAGXbkh5+32cSusD9QWKELoVZDFZx7 KN2v0WkOr860rUpqD/V5h2QTAbQOa9+mgC96aM6rMb/YUgPgQ/FwpVVvcZUMpz+u 9A2ks7WRjuEYatiFPTlOUF8hysfJL6gdbOIT0ht0GBsghtNY32i0OzcoIR8zQSzC 3U1HcCvGyglACuZKdTUDRuWh7a/NSD6noE4wklP5kJ3eqEoZCUX0iMMAtaj2hLqO bBdV1zAz9eXzpNWs+bMIox355U1Bcu4jDaE8N/bbfGQvUQ1vWJ30nVJltR0hGUUW O0qM4NBhq3MnUKI/AJKMm6rggNECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL6zs1uhw9rKWcbFJeqYI/+QKvmYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MGNiNWM5Yi1mMzgzLTRlODEtODEyYy0wZTIyN2FkNDZiMWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUwY2I1Yzli LWYzODMtNGU4MS04MTJjLTBlMjI3YWQ0NmIxYi8wL0JFQjNCMzVCQTFDM0RBQ0E1 OUM2QzUyNUVBOTgyM0ZGOTAyQUY5OTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnlxYwDQYJKoZIhvcNAQELBQADggEBAGxz7AI3170N3yJ6YrrqP/5W9tqYAB0s 08O7s7REftykijuuJj3VgTSjVTHkkSffICDZt89yEkw0gBPe2EM9UXP3z3JVhaJY i945lT2fNQMITt0ACV3XYVbNhXunV7i0oppXMin7VIUhu7BRgQ4JpRt6BRAIEKSp ek9ovNry+u2tEhh/u/E1jm1hfd+cY9WhYjRfpssLrNGbKCgJEFuQuwfhNEh+odxs cqBOfhvo4G7nj9lQ53GWrHXZIBzr5883/Zfya+w9XHxFxBc0/dmlwMOmZE6YjedP ylvSekoEEyO64Tfhs4PWmjTskrU8ovAfhbfedPKIGXuyaRFeNJH56uQ= -----END CERTIFICATE-----Generated at Tue Jun 17 01:30:06 2025 by rpki-client