$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BF3B675AEBEE64D00B323056545D1F630F1C489E.cer File: BF3B675AEBEE64D00B323056545D1F630F1C489E.cer (raw, json) Hash identifier: zZ6Lk3slEGJW/CxtPni3jNRhWI1KZ3+/RQbMKhgG0YI= Subject key identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 20E8BC0A6D9F09AEBA440EDAA0E43523A5FB556A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft caRepository: rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 10:03:02 +0000 Certificate not after: Tue 02 Jun 2026 10:08:02 +0000 Subordinate resources: IP: 43.227.148.0/22 IP: 103.10.184.0/22 IP: 116.213.48.0/20 IP: 202.69.96.0/20 IP: 202.151.8.0/22 IP: 203.89.16.0/21 IP: 220.157.96.0/20 IP: 223.164.0.0/16 IP: 2403:7200::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e8:bc:0a:6d:9f:09:ae:ba:44:0e:da:a0:e4:35:23:a5:fb:55:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 10:03:02 2025 GMT Not After : Jun 2 10:08:02 2026 GMT Subject: CN=BF3B675AEBEE64D00B323056545D1F630F1C489E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b9:0a:1e:1f:fc:85:db:63:84:87:82:a8:f6: d8:65:91:e0:f8:a6:62:c3:ed:60:be:73:df:41:48: 61:f1:88:7b:8a:83:ed:30:9e:30:d0:73:b8:3c:7c: fb:da:be:10:f8:96:25:11:99:71:00:cd:5e:b2:95: 85:d3:06:c1:68:1a:f1:96:32:58:53:bc:55:cf:69: 50:cb:68:0d:47:7d:74:98:bd:dd:48:d9:4a:93:06: 94:e5:07:7a:1d:c3:56:d8:56:bf:a1:51:cb:f2:e4: 54:2a:34:c7:fb:a4:87:2f:21:96:0d:f2:f1:7f:87: bf:33:68:de:6d:cb:34:cb:09:38:86:2b:0a:4b:49: e3:71:d0:18:82:b1:55:89:fa:9d:b9:56:16:c4:2b: 76:11:ee:a9:8c:a3:1a:58:da:1f:cc:5f:e0:88:e7: 8c:8c:4b:3f:90:85:4a:8a:91:c2:ed:83:36:8e:94: cb:a0:f3:0a:9e:0d:02:a0:fd:7c:aa:43:79:55:33: d6:a4:0e:39:83:58:43:ff:bd:4c:0a:ac:16:ff:e6: 62:44:6a:aa:73:7a:e5:3b:a0:1e:c2:9f:82:5d:16: 5c:02:7c:85:43:b6:42:ab:6a:f5:ad:00:3e:41:3d: 1c:56:0d:39:68:fc:e8:5a:71:69:fc:24:89:e2:5b: ce:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:3B:67:5A:EB:EE:64:D0:0B:32:30:56:54:5D:1F:63:0F:1C:48:9E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/690c9009-ad53-4fa6-a183-34b3457bea03/0/BF3B675AEBEE64D00B323056545D1F630F1C489E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.148.0/22 103.10.184.0/22 116.213.48.0/20 202.69.96.0/20 202.151.8.0/22 203.89.16.0/21 220.157.96.0/20 223.164.0.0/16 IPv6: 2403:7200::/32 Signature Algorithm: sha256WithRSAEncryption 6d:08:4e:72:2a:12:94:63:f4:f7:2a:17:98:5f:40:91:57:7d: 57:89:fc:51:6f:77:c7:cd:5c:ff:5e:86:d9:da:32:e3:cb:fa: b1:72:d9:3a:78:58:1c:57:bb:a5:fa:36:61:98:0c:74:33:88: 69:8e:b5:7d:31:52:2d:76:a4:32:9a:59:5a:46:a6:53:70:53: 3d:b6:d8:23:9f:b8:9c:5f:2f:54:f4:cf:ae:d8:49:04:af:ab: f5:2a:ca:24:de:4b:2d:b4:f3:34:7c:0b:c9:c1:d7:ac:59:d8: 13:e0:4a:b4:30:4f:4d:64:e3:d1:8f:11:3a:fb:cf:f7:47:b9: 3e:b0:f1:0e:ad:52:a2:30:1f:32:b0:61:66:58:b5:c7:cc:47: 81:63:79:67:55:5e:00:3c:97:b6:3c:d7:bf:90:b3:89:58:40: 88:8e:2c:46:34:74:88:4c:61:00:8c:d9:51:dd:fc:53:18:32: d9:c8:fa:23:7a:91:92:76:41:c4:09:d1:36:8a:66:f1:29:19: 26:08:cb:92:26:d7:af:ae:2e:ad:f3:e5:41:94:f7:1a:7e:65: 40:e8:1c:5e:dd:8a:8a:0d:aa:83:85:54:48:dc:5b:71:57:c0: 59:df:de:a1:90:ce:33:fc:56:b7:d2:91:f6:46:c6:5b:88:52: 74:b8:ac:34 -----BEGIN CERTIFICATE----- MIIF/TCCBOWgAwIBAgIUIOi8Cm2fCa66RA7aoOQ1I6X7VWowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzEwMDMwMloX DTI2MDYwMjEwMDgwMlowMzExMC8GA1UEAxMoQkYzQjY3NUFFQkVFNjREMDBCMzIz MDU2NTQ1RDFGNjMwRjFDNDg5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJW5Ch4f/IXbY4SHgqj22GWR4PimYsPtYL5z30FIYfGIe4qD7TCeMNBzuDx8 +9q+EPiWJRGZcQDNXrKVhdMGwWga8ZYyWFO8Vc9pUMtoDUd9dJi93UjZSpMGlOUH eh3DVthWv6FRy/LkVCo0x/ukhy8hlg3y8X+HvzNo3m3LNMsJOIYrCktJ43HQGIKx VYn6nblWFsQrdhHuqYyjGljaH8xf4IjnjIxLP5CFSoqRwu2DNo6Uy6DzCp4NAqD9 fKpDeVUz1qQOOYNYQ/+9TAqsFv/mYkRqqnN65TugHsKfgl0WXAJ8hUO2Qqtq9a0A PkE9HFYNOWj86FpxafwkieJbzvUCAwEAAaOCAvAwggLsMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL87Z1rr7mTQCzIwVlRdH2MPHEieMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82OTBjOTAwOS1hZDUzLTRmYTYtYTE4My0zNGIzNDU3YmVhMDMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5MGM5MDA5 LWFkNTMtNGZhNi1hMTgzLTM0YjM0NTdiZWEwMy8wL0JGM0I2NzVBRUJFRTY0RDAw QjMyMzA1NjU0NUQxRjYzMEYxQzQ4OUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwVwYIKwYBBQUHAQcBAf8ESDBGMDUEAgABMC8D BAIr45QDBAJnCrgDBAR01TADBATKRWADBALKlwgDBAPLWRADBATcnWADAwDfpDAN BAIAAjAHAwUAJANyADANBgkqhkiG9w0BAQsFAAOCAQEAbQhOcioSlGP09yoXmF9A kVd9V4n8UW93x81c/16G2doy48v6sXLZOnhYHFe7pfo2YZgMdDOIaY61fTFSLXak MppZWkamU3BTPbbYI5+4nF8vVPTPrthJBK+r9SrKJN5LLbTzNHwLycHXrFnYE+BK tDBPTWTj0Y8ROvvP90e5PrDxDq1SojAfMrBhZli1x8xHgWN5Z1VeADyXtjzXv5Cz iVhAiI4sRjR0iExhAIzZUd38Uxgy2cj6I3qRknZBxAnRNopm8SkZJgjLkibXr64u rfPlQZT3Gn5lQOgcXt2Kig2qg4VUSNxbcVfAWd/eoZDOM/xWt9KR9kbGW4hSdLis NA== -----END CERTIFICATE-----Generated at Tue Nov 4 02:19:03 2025 by rpki-client