$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer File: D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.cer (raw, json) Hash identifier: IfGV5ahzY8rlyIYDvUgDAYJKnCSPjR+9PHZPTSDLKU8= Subject key identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3D626798E1F37990FE3508F724BD5D6A641676F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft caRepository: rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 03 Aug 2025 00:09:05 +0000 Certificate not after: Sun 02 Aug 2026 00:14:05 +0000 Subordinate resources: IP: 103.176.200.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:62:67:98:e1:f3:79:90:fe:35:08:f7:24:bd:5d:6a:64:16:76:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 3 00:09:05 2025 GMT Not After : Aug 2 00:14:05 2026 GMT Subject: CN=D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:65:5f:8d:2d:33:af:7c:87:ba:4e:74:9f:3a: 72:21:61:7d:f2:67:f9:21:70:d1:b0:e0:e9:99:cb: 01:d7:c3:06:97:75:95:ef:03:fc:51:58:b0:29:64: 99:e5:3f:40:f2:85:95:57:50:0c:7a:80:2d:3c:1b: 1f:6c:1b:96:a0:13:eb:b4:54:96:4c:cb:5b:22:99: 8c:7c:68:23:d1:2e:34:cc:49:c6:56:79:17:4c:99: a4:1a:ea:11:a9:c1:52:a8:c9:6c:71:7e:d5:bb:5b: 7a:ed:e2:90:ca:c2:98:2a:9c:e2:49:73:5d:c3:27: 34:e5:21:b8:59:75:41:dc:56:74:e3:e8:8b:0b:73: c7:0f:13:51:1b:cb:83:c9:7f:92:96:80:be:f2:91: 2d:5d:ad:f6:bd:cb:6b:58:d0:ac:00:25:7f:f1:a8: 62:94:de:da:21:c1:06:31:18:43:75:ab:16:78:9b: 24:ab:67:08:d3:6b:0c:1d:e7:56:57:82:18:6f:21: c1:17:db:b0:18:e6:1d:be:d5:e1:01:84:19:8c:e7: f5:5e:bd:a0:2f:05:fe:7f:f4:7d:4f:ac:35:91:e2: 90:26:33:f9:2e:f4:3b:21:24:ea:4b:10:49:73:50: d7:2f:eb:9c:68:fe:35:55:da:49:a0:f7:74:cd:92: 21:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:C1:F1:3C:67:CD:02:54:5D:EB:AA:84:6E:B2:8F:6E:A3:FC:EB:66 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cca2e0db-e293-41c5-8583-38015758421c/0/D6C1F13C67CD02545DEBAA846EB28F6EA3FCEB66.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.176.200.0/23 Signature Algorithm: sha256WithRSAEncryption 02:6d:f6:6c:f3:46:38:c1:9d:3a:33:b3:ef:05:2a:a2:d8:ad: 11:bf:d2:03:2f:fe:d5:98:9b:d9:a2:27:76:0b:54:64:5b:62: 31:f0:09:53:89:c1:62:c5:ca:0f:43:c5:46:81:52:dc:94:0c: b6:0e:41:de:f8:47:38:c5:cd:e9:6e:7b:5b:99:a4:37:31:8f: 2b:86:e0:8c:88:ab:6a:e3:8e:8f:8b:af:e7:28:9f:58:20:ca: 73:ee:93:9e:cb:c2:40:0b:f4:71:a5:45:10:0e:17:44:0b:24: 52:a6:66:09:10:4d:bb:42:57:ad:ef:b5:dc:53:a7:71:12:4a: bc:1d:fb:d1:1a:b0:2c:e2:48:79:84:2d:93:ab:7e:2a:b3:8c: 8a:70:60:22:6f:32:c4:9d:e3:dc:d7:66:5f:4a:59:3c:cc:73: 74:92:07:d0:b2:44:a5:ae:15:70:66:41:a3:1d:e6:f9:4a:73: a2:b4:99:ae:33:4b:63:af:0e:09:27:60:6e:96:18:89:2c:a0: df:65:3c:45:1b:56:9a:36:23:f5:f5:b6:2a:65:b5:89:d0:30: 7f:b9:1a:df:06:94:1a:e3:1d:25:cc:ac:8f:1c:46:5b:8c:19: d9:4e:30:01:f5:15:10:f2:a7:c9:18:a1:60:13:c7:df:37:f0: 6b:49:3d:34 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPWJnmOHzeZD+NQj3JL1damQWdvUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgwMzAwMDkwNVoX DTI2MDgwMjAwMTQwNVowMzExMC8GA1UEAxMoRDZDMUYxM0M2N0NEMDI1NDVERUJB QTg0NkVCMjhGNkVBM0ZDRUI2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVlX40tM698h7pOdJ86ciFhffJn+SFw0bDg6ZnLAdfDBpd1le8D/FFYsClk meU/QPKFlVdQDHqALTwbH2wblqAT67RUlkzLWyKZjHxoI9EuNMxJxlZ5F0yZpBrq EanBUqjJbHF+1btbeu3ikMrCmCqc4klzXcMnNOUhuFl1QdxWdOPoiwtzxw8TURvL g8l/kpaAvvKRLV2t9r3La1jQrAAlf/GoYpTe2iHBBjEYQ3WrFnibJKtnCNNrDB3n VleCGG8hwRfbsBjmHb7V4QGEGYzn9V69oC8F/n/0fU+sNZHikCYz+S70OyEk6ksQ SXNQ1y/rnGj+NVXaSaD3dM2SIScCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNbB8TxnzQJUXeuqhG6yj26j/OtmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jY2EyZTBkYi1lMjkzLTQxYzUtODU4My0zODAxNTc1ODQyMWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYTJlMGRi LWUyOTMtNDFjNS04NTgzLTM4MDE1NzU4NDIxYy8wL0Q2QzFGMTNDNjdDRDAyNTQ1 REVCQUE4NDZFQjI4RjZFQTNGQ0VCNjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsMgwDQYJKoZIhvcNAQELBQADggEBAAJt9mzzRjjBnTozs+8FKqLYrRG/0gMv /tWYm9miJ3YLVGRbYjHwCVOJwWLFyg9DxUaBUtyUDLYOQd74RzjFzelue1uZpDcx jyuG4IyIq2rjjo+Lr+con1ggynPuk57LwkAL9HGlRRAOF0QLJFKmZgkQTbtCV63v tdxTp3ESSrwd+9EasCziSHmELZOrfiqzjIpwYCJvMsSd49zXZl9KWTzMc3SSB9Cy RKWuFXBmQaMd5vlKc6K0ma4zS2OvDgknYG6WGIksoN9lPEUbVpo2I/X1tipltYnQ MH+5Gt8GlBrjHSXMrI8cRluMGdlOMAH1FRDyp8kYoWATx9838GtJPTQ= -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:39 2025 by rpki-client