$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer File: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer (raw, json) Hash identifier: VYoyIMZ0L26W3YnaWw1BpsDJf8jyKGh9IsHEQVV5nXE= Subject key identifier: 2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6F3023445350624176706C98161B5788F9F8D342 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft caRepository: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 02 Oct 2025 21:33:33 +0000 Certificate not after: Thu 01 Oct 2026 21:38:33 +0000 Subordinate resources: IP: 103.225.17.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:30:23:44:53:50:62:41:76:70:6c:98:16:1b:57:88:f9:f8:d3:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 2 21:33:33 2025 GMT Not After : Oct 1 21:38:33 2026 GMT Subject: CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c8:2c:f5:b7:57:1c:21:22:75:3f:be:5e:4c: 84:5b:86:8f:e2:d0:fe:f0:34:36:ce:4f:4a:c6:de: 64:bb:99:b5:80:ff:f4:63:a9:d4:16:82:b7:4f:ed: 71:a1:2b:cf:e6:c7:3f:d7:27:6a:18:8e:7a:76:a7: 60:97:88:2f:43:0c:eb:8d:ad:c9:fb:58:a7:1e:a7: df:0d:f4:82:ba:cb:6a:d1:de:51:68:18:b5:69:8e: 23:12:14:df:68:ad:0d:48:89:b7:a0:2b:02:3b:b0: c4:d3:1b:99:d0:a1:7a:bc:66:d7:e8:09:f2:cb:40: b3:c0:23:22:5d:5e:f3:7e:cf:17:f3:e0:2a:d5:10: ae:f3:a1:b1:90:3f:32:79:01:a9:d7:b4:6e:17:3f: 40:a5:91:15:e2:4f:7a:16:6d:93:51:9b:cd:ab:72: 37:2c:96:45:fe:77:79:45:01:86:da:3a:cb:c4:2e: 5d:d5:75:d2:1c:1e:c0:db:9b:12:06:84:7e:e5:53: 6d:2c:38:b2:20:d2:34:8c:52:79:f6:ff:06:69:ef: c4:be:0a:da:86:74:b3:d0:45:77:e0:0f:d0:d4:0b: 84:38:af:70:19:a7:6a:ca:91:84:a1:ca:89:db:6c: 5a:2c:59:dc:6f:22:2c:a6:7f:36:e1:ce:ac:ea:59: 74:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.225.17.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:b3:e3:d0:43:09:ca:78:c7:5d:e8:b8:fc:7f:58:26:04:b3: b5:4f:99:73:f0:80:94:1f:21:9c:2c:ec:50:94:bf:fc:a8:c9: 7f:e2:c9:86:8a:83:4e:b5:1e:6a:e5:ea:6f:b1:30:47:0d:da: 5a:ee:bd:bc:3d:84:77:ba:62:87:0d:29:5f:72:a5:98:e7:d9: 52:a9:bd:3b:6a:90:03:e2:8f:f2:5b:89:df:27:62:22:fa:46: 45:7d:fc:e6:a0:80:dc:7e:fa:92:a1:13:dd:a2:1e:52:e7:e2: b3:27:8a:a5:b8:01:60:42:25:bc:15:23:e1:8f:de:81:aa:dd: c0:0b:0f:74:41:bf:02:ae:1c:49:4e:1d:d3:47:38:84:30:d9: a0:6b:e1:95:5f:78:74:71:40:95:d2:1f:7e:c3:8a:08:bd:2b: e4:f7:db:c6:74:34:90:59:b9:fa:29:b2:d6:86:a2:57:7c:24: 69:5a:ab:a6:2c:33:d3:de:7d:e0:6a:67:41:92:3c:60:e9:10: 49:b1:17:14:65:d5:df:54:ab:53:96:66:d9:e6:cd:2f:cd:bf: cb:10:d0:17:63:ba:68:7a:93:32:93:1e:42:88:09:09:df:64: f9:c2:db:1f:63:4c:f7:94:d1:ea:3c:89:ab:c8:b6:68:ce:74: 99:a5:95:d8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbzAjRFNQYkF2cGyYFhtXiPn400IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAwMjIxMzMzM1oX DTI2MTAwMTIxMzgzM1owMzExMC8GA1UEAxMoMkIwRDNENzBBMDI3QjUzQzdBRDIx N0ZFMjJDQTBFRDExMUZERjNCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN3ILPW3VxwhInU/vl5MhFuGj+LQ/vA0Ns5PSsbeZLuZtYD/9GOp1BaCt0/t caErz+bHP9cnahiOenanYJeIL0MM642tyftYpx6n3w30grrLatHeUWgYtWmOIxIU 32itDUiJt6ArAjuwxNMbmdCherxm1+gJ8stAs8AjIl1e837PF/PgKtUQrvOhsZA/ MnkBqde0bhc/QKWRFeJPehZtk1GbzatyNyyWRf53eUUBhto6y8QuXdV10hwewNub EgaEfuVTbSw4siDSNIxSefb/BmnvxL4K2oZ0s9BFd+AP0NQLhDivcBmnasqRhKHK idtsWixZ3G8iLKZ/NuHOrOpZdLUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCsNPXCgJ7U8etIX/iLKDtER/fOwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81YzcyZDNmNS1kZDUzLTRiNzQtOTQ3Yy02YmI1MTBmNGY1MDMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjNzJkM2Y1 LWRkNTMtNGI3NC05NDdjLTZiYjUxMGY0ZjUwMy8wLzJCMEQzRDcwQTAyN0I1M0M3 QUQyMTdGRTIyQ0EwRUQxMTFGREYzQjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn4REwDQYJKoZIhvcNAQELBQADggEBAH6z49BDCcp4x13ouPx/WCYEs7VPmXPw gJQfIZws7FCUv/yoyX/iyYaKg061Hmrl6m+xMEcN2lruvbw9hHe6YocNKV9ypZjn 2VKpvTtqkAPij/Jbid8nYiL6RkV9/OaggNx++pKhE92iHlLn4rMniqW4AWBCJbwV I+GP3oGq3cALD3RBvwKuHElOHdNHOIQw2aBr4ZVfeHRxQJXSH37Digi9K+T328Z0 NJBZufopstaGold8JGlaq6YsM9PefeBqZ0GSPGDpEEmxFxRl1d9Uq1OWZtnmzS/N v8sQ0Bdjumh6kzKTHkKICQnfZPnC2x9jTPeU0eo8iavItmjOdJmlldg= -----END CERTIFICATE-----Generated at Mon Oct 20 06:14:07 2025 by rpki-client