$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer File: FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer (raw, json) Hash identifier: hqtUIvLISh+7E6wdSpjrVhCJRSH6RBeqa2e1QJaruJE= Subject key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 257D0C801146113EEBFD68D6A75F8E4F13AD7A17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft caRepository: rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 12 Jun 2025 03:13:58 +0000 Certificate not after: Thu 11 Jun 2026 03:18:58 +0000 Subordinate resources: IP: 103.198.120.0/22 IP: 202.52.48.0/23 IP: 2403:1880::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:7d:0c:80:11:46:11:3e:eb:fd:68:d6:a7:5f:8e:4f:13:ad:7a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 12 03:13:58 2025 GMT Not After : Jun 11 03:18:58 2026 GMT Subject: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:5a:8c:a9:c4:03:7a:dc:29:79:54:c5:81:e9: 23:9a:4a:19:fb:f6:7a:1d:f4:2f:38:fc:85:c5:9f: 4b:e9:b6:c3:67:d4:23:ed:c8:4f:85:ab:ec:8b:6e: 51:1f:5c:00:e1:de:2d:03:1b:2a:92:4d:19:6c:f7: 7d:33:52:95:be:5b:05:d6:49:ce:6c:ba:ec:56:58: d2:56:bd:51:d2:47:07:30:6d:8e:0d:26:4c:21:34: 31:a8:4d:76:86:04:5b:ee:02:af:b5:2d:3f:3c:27: e9:81:03:49:9c:fd:5d:d4:9c:f3:e5:36:d5:85:8d: a9:b3:ca:d8:da:2c:77:a5:03:dc:f2:fe:fb:78:11: df:0a:e7:5e:da:7f:89:2b:0b:1b:9b:b1:93:00:83: c2:d4:dd:91:99:0b:a4:90:b1:7b:92:27:e7:8c:3e: f8:66:3d:94:35:89:c7:91:9b:8d:26:4d:a8:10:ba: 9c:db:e7:46:ec:44:81:2f:84:aa:83:34:5d:22:d0: 3e:19:5f:16:64:44:86:44:54:f5:4c:a2:f5:c4:a4: 56:ff:52:19:a0:5d:ac:ed:60:7b:65:4e:94:48:75: 9b:72:55:ba:74:36:1e:c6:34:6a:38:98:9b:ee:55: c6:33:48:76:f2:c9:01:2d:d5:db:e5:5c:2c:14:dd: e7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.198.120.0/22 202.52.48.0/23 IPv6: 2403:1880::/32 Signature Algorithm: sha256WithRSAEncryption 21:c3:1f:05:83:50:9e:10:c5:3a:a1:2c:1e:a1:c6:88:1e:a4: 1e:36:6e:31:6f:c1:2e:ab:5e:2c:f5:e3:2d:ed:65:4e:b1:91: 85:53:6d:61:51:61:4f:b8:b5:ad:3f:a7:b6:a1:ea:42:41:5a: 71:8b:63:3f:9b:cd:f8:18:b9:5e:c9:1b:aa:58:db:b0:a3:1a: e9:bb:d8:aa:3b:ff:7c:43:07:68:f6:d8:af:c2:f4:75:c1:1c: b9:e4:36:d8:03:a9:9a:d0:3f:8c:b5:53:f3:40:be:1c:2c:75: 2c:ea:61:ea:1c:2e:8d:9f:65:2c:20:97:49:b0:07:5f:36:f0: b6:65:28:a4:95:d4:b5:55:bf:5e:f6:e0:12:a3:c8:47:1a:ba: 71:13:de:0c:17:e7:44:c4:37:8f:f6:79:b6:73:45:08:9d:cf: 3a:46:4b:e1:47:f2:9e:8a:21:96:03:19:a5:47:99:d6:5d:96: 76:71:b3:98:a1:9f:d4:e2:82:98:09:b1:76:4b:de:bf:91:9c: 25:6b:e8:8e:90:e5:0d:a0:a5:70:35:5b:84:46:cf:9a:a8:8a: 92:0b:0c:f4:d1:35:df:6e:82:a6:1b:3c:89:23:fc:0f:26:d6: 1f:e7:26:6b:19:cd:37:ad:72:88:9f:30:c4:f8:6b:21:0a:f6: 8b:43:10:30 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUJX0MgBFGET7r/WjWp1+OTxOtehcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxMjAzMTM1OFoX DTI2MDYxMTAzMTg1OFowMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1 MUM0RTQ0QjBDQkMxM0ZGREE5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPpajKnEA3rcKXlUxYHpI5pKGfv2eh30Lzj8hcWfS+m2w2fUI+3IT4Wr7Itu UR9cAOHeLQMbKpJNGWz3fTNSlb5bBdZJzmy67FZY0la9UdJHBzBtjg0mTCE0MahN doYEW+4Cr7UtPzwn6YEDSZz9XdSc8+U21YWNqbPK2Nosd6UD3PL++3gR3wrnXtp/ iSsLG5uxkwCDwtTdkZkLpJCxe5In54w++GY9lDWJx5GbjSZNqBC6nNvnRuxEgS+E qoM0XSLQPhlfFmREhkRU9Uyi9cSkVv9SGaBdrO1ge2VOlEh1m3JVunQ2HsY0ajiY m+5VxjNIdvLJAS3V2+VcLBTd5/kCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPvTsoyQdVKd7oFRxORLDLwT/9qRMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA4Mzk3N2Y0 LThjMmQtNGViMS1iNGNkLTM1YjQ5MjE2ZTA3My8wL0ZCRDNCMjhDOTA3NTUyOURF RTgxNTFDNEU0NEIwQ0JDMTNGRkRBOTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAJnxngDBAHKNDAwDQQCAAIwBwMFACQDGIAwDQYJKoZIhvcNAQELBQADggEBACHD HwWDUJ4QxTqhLB6hxogepB42bjFvwS6rXiz14y3tZU6xkYVTbWFRYU+4ta0/p7ah 6kJBWnGLYz+bzfgYuV7JG6pY27CjGum72Ko7/3xDB2j22K/C9HXBHLnkNtgDqZrQ P4y1U/NAvhwsdSzqYeocLo2fZSwgl0mwB1828LZlKKSV1LVVv1724BKjyEcaunET 3gwX50TEN4/2ebZzRQidzzpGS+FH8p6KIZYDGaVHmdZdlnZxs5ihn9TigpgJsXZL 3r+RnCVr6I6Q5Q2gpXA1W4RGz5qoipILDPTRNd9ugqYbPIkj/A8m1h/nJmsZzTet coifMMT4ayEK9otDEDA= -----END CERTIFICATE-----Generated at Sun Jun 15 23:10:59 2025 by rpki-client