$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CB8106D827747D008C9DE9181B4EC6739C8EE800.cer File: CB8106D827747D008C9DE9181B4EC6739C8EE800.cer (raw, json) Hash identifier: b+SXXQiFn9X4yDO1o741d1oL5zB25WtakIdhz91MEbI= Subject key identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 40353CE4B3B3AA0169157E180E765519B8027431 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft caRepository: rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 08:56:21 +0000 Certificate not after: Tue 02 Jun 2026 09:01:21 +0000 Subordinate resources: IP: 103.21.204.0/22 IP: 103.248.196.0/22 IP: 2400:f340::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:35:3c:e4:b3:b3:aa:01:69:15:7e:18:0e:76:55:19:b8:02:74:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 08:56:21 2025 GMT Not After : Jun 2 09:01:21 2026 GMT Subject: CN=CB8106D827747D008C9DE9181B4EC6739C8EE800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:e4:e6:f3:c6:14:2f:33:5e:d6:55:d0:c9: 1a:9e:f6:86:93:ba:7f:00:f8:4e:67:52:f5:8a:c3: f3:39:5d:98:2d:6f:ac:ac:71:05:92:ec:d8:22:36: f4:b3:31:86:57:f0:e5:12:68:83:ea:9e:71:40:19: 3f:f3:0d:32:3c:0e:98:f4:bb:cd:bf:1c:89:92:18: 1d:cc:ff:77:8c:57:eb:29:92:d8:98:80:42:ce:31: 65:86:0a:57:ee:ac:fb:48:f5:75:8a:a6:4e:bc:82: 01:60:b9:97:24:8b:fc:19:67:c6:d8:08:d1:da:75: 5b:50:c5:bb:d9:1e:1e:9f:20:bb:f3:8b:ae:ea:30: 4d:83:d6:67:78:54:5b:14:6e:d6:a6:fb:81:95:ce: ad:db:a5:3c:8a:cf:29:4b:3f:7d:4f:86:a9:38:4e: 81:fb:45:cd:9e:a4:ab:c2:53:48:ed:15:5e:6c:7f: 98:3b:b7:52:8c:e5:f6:68:a5:33:bb:dc:57:34:9f: c5:9f:2d:c4:22:d4:94:9e:58:be:29:34:85:b5:fb: db:18:ac:59:fb:24:d7:02:29:92:a7:93:db:24:9f: e0:8c:f5:bd:42:4e:ac:bc:5e:3b:d4:2b:cc:e9:cd: 7f:1c:f9:3d:b6:14:95:87:88:48:27:33:1d:ae:6e: bc:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:81:06:D8:27:74:7D:00:8C:9D:E9:18:1B:4E:C6:73:9C:8E:E8:00 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6be578d0-d3aa-4f0f-bb9d-f74b49c6a655/0/CB8106D827747D008C9DE9181B4EC6739C8EE800.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.204.0/22 103.248.196.0/22 IPv6: 2400:f340::/32 Signature Algorithm: sha256WithRSAEncryption 9c:8d:07:72:9c:64:90:75:33:13:2a:60:0d:ab:d2:e4:d2:e2: ab:23:f4:1c:6f:09:46:d4:a0:fa:82:e4:8c:35:38:9c:83:0e: 8f:b4:d7:06:5d:33:0b:5a:c9:74:dc:c9:7f:74:2d:c1:96:1a: 27:24:53:f0:7a:e2:62:5f:00:bf:62:f1:a3:a3:09:f8:2a:1f: d2:e8:cc:94:c6:26:f6:58:18:5b:79:d0:7c:1b:29:86:79:be: bc:e2:1d:9e:9f:3a:cb:7f:26:70:d6:86:8f:2b:7f:fb:17:18: a0:21:23:7f:ac:c9:47:37:95:6b:95:c7:d2:30:5e:70:6c:aa: b7:73:f3:f9:1f:f4:7e:d0:cd:db:6f:84:fc:66:da:74:e5:77: dd:56:14:0d:da:f0:d3:ac:b7:06:70:b0:00:cb:e3:85:94:97: f6:c6:e6:4e:3e:65:08:46:40:c5:0c:bc:9a:00:70:47:97:21: b2:25:cf:6e:c7:15:e3:b0:08:15:8a:9e:ec:8d:4c:47:75:a4: 6d:f2:2f:02:14:48:72:6c:7c:e3:07:b7:67:77:f3:83:10:42: 3c:e3:5f:0b:66:68:b5:fc:86:19:34:7c:3d:07:e3:99:10:1e: 00:9b:7c:c4:44:47:bf:ee:63:c5:32:d8:3c:52:af:81:7b:55: 6d:5d:8f:97 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUQDU85LOzqgFpFX4YDnZVGbgCdDEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzA4NTYyMVoX DTI2MDYwMjA5MDEyMVowMzExMC8GA1UEAxMoQ0I4MTA2RDgyNzc0N0QwMDhDOURF OTE4MUI0RUM2NzM5QzhFRTgwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKly5ObzxhQvM17WVdDJGp72hpO6fwD4TmdS9YrD8zldmC1vrKxxBZLs2CI2 9LMxhlfw5RJog+qecUAZP/MNMjwOmPS7zb8ciZIYHcz/d4xX6ymS2JiAQs4xZYYK V+6s+0j1dYqmTryCAWC5lySL/BlnxtgI0dp1W1DFu9keHp8gu/OLruowTYPWZ3hU WxRu1qb7gZXOrdulPIrPKUs/fU+GqThOgftFzZ6kq8JTSO0VXmx/mDu3Uozl9mil M7vcVzSfxZ8txCLUlJ5Yvik0hbX72xisWfsk1wIpkqeT2ySf4Iz1vUJOrLxeO9Qr zOnNfxz5PbYUlYeISCczHa5uvJECAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMuBBtgndH0AjJ3pGBtOxnOcjugAMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YmU1NzhkMC1kM2FhLTRmMGYtYmI5ZC1mNzRiNDljNmE2NTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZiZTU3OGQw LWQzYWEtNGYwZi1iYjlkLWY3NGI0OWM2YTY1NS8wL0NCODEwNkQ4Mjc3NDdEMDA4 QzlERTkxODFCNEVDNjczOUM4RUU4MDAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAJnFcwDBAJn+MQwDQQCAAIwBwMFACQA80AwDQYJKoZIhvcNAQELBQADggEBAJyN B3KcZJB1MxMqYA2r0uTS4qsj9BxvCUbUoPqC5Iw1OJyDDo+01wZdMwtayXTcyX90 LcGWGickU/B64mJfAL9i8aOjCfgqH9LozJTGJvZYGFt50HwbKYZ5vrziHZ6fOst/ JnDWho8rf/sXGKAhI3+syUc3lWuVx9IwXnBsqrdz8/kf9H7QzdtvhPxm2nTld91W FA3a8NOstwZwsADL44WUl/bG5k4+ZQhGQMUMvJoAcEeXIbIlz27HFeOwCBWKnuyN TEd1pG3yLwIUSHJsfOMHt2d384MQQjzjXwtmaLX8hhk0fD0H45kQHgCbfMRER7/u Y8Uy2DxSr4F7VW1dj5c= -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:39 2025 by rpki-client