$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer File: 6886844AB176920850E0984917E9713667D0A025.cer (raw, json) Hash identifier: mGx2t/KJ5BgtXyzY+Aj5Wu2xlsWfwXEktnZCcDEV6+I= Subject key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5FD0A6B01B3B5E685E76FEF0E522B0B5F118916A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft caRepository: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 27 Sep 2025 06:48:23 +0000 Certificate not after: Sat 26 Sep 2026 06:53:23 +0000 Subordinate resources: IP: 103.51.106.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d0:a6:b0:1b:3b:5e:68:5e:76:fe:f0:e5:22:b0:b5:f1:18:91:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 27 06:48:23 2025 GMT Not After : Sep 26 06:53:23 2026 GMT Subject: CN=6886844AB176920850E0984917E9713667D0A025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:81:3a:9e:41:25:c1:02:a2:81:9f:d6:f1:46: a0:bf:36:9b:fd:8e:41:83:83:46:3d:6c:59:e4:5d: 08:1e:ed:15:7a:3d:24:02:2f:df:95:d7:b6:87:90: 2d:4a:df:e2:f7:de:f6:6c:e3:00:29:35:5f:fb:14: 63:f4:52:32:52:83:8d:9f:21:45:13:bf:b5:ca:cc: a3:2b:8c:57:a0:ae:e1:5b:09:c8:41:d9:64:29:e3: 04:4f:13:93:3a:54:5a:e1:7d:f4:ae:15:8d:82:2c: 8e:03:0a:05:ca:89:f3:ae:a3:5c:f9:b1:50:08:c5: 95:59:4e:5e:8b:e1:8b:dd:80:14:1f:0e:b6:a3:f7: f3:24:cf:f9:78:88:ad:43:4e:83:9a:38:a3:46:f1: e6:57:6a:09:13:d8:2f:2d:69:a7:c9:ae:cc:df:ad: d4:ca:a2:73:4e:0a:6e:57:88:d3:7c:23:d3:6d:2d: ff:2b:a4:e3:89:cd:18:2c:32:9e:01:27:0a:50:b2: c4:d4:0e:12:0d:96:9e:f2:64:0b:de:c5:fb:ea:23: 00:ce:d1:9e:38:46:22:81:df:15:49:41:58:a2:0d: 90:71:b0:1e:4f:ad:c2:cc:5b:21:e4:88:e6:b6:9e: 0e:32:ad:b8:80:dd:f2:ca:15:40:3a:2f:d9:a8:38: 70:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.51.106.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:c1:cf:dc:79:8a:9f:e2:28:0b:68:1e:c3:da:1e:58:d1:aa: 88:b7:b1:e4:1a:5a:37:75:12:89:0b:77:02:94:fb:90:97:21: a8:a7:47:d7:5f:41:2c:16:9e:08:a7:ac:c3:27:da:a7:3a:17: cd:04:c3:ee:47:61:e3:e0:88:04:d3:33:78:0a:6f:f4:56:20: 11:70:30:00:5d:85:6b:6a:23:22:10:52:69:a0:10:da:86:3d: b7:e2:28:29:50:87:cc:3c:0c:61:fd:62:8c:24:56:68:91:4d: e6:d1:82:c4:9e:52:85:e0:c5:b0:2e:f8:99:7e:1b:33:6a:bc: d1:09:62:fe:c2:76:1c:8b:3e:50:5f:da:b0:f6:5b:e2:54:92: db:07:6e:05:61:01:ab:27:4b:7a:79:5a:01:30:c3:56:6e:7c: d6:f3:6b:e3:5b:72:82:9b:f5:3a:df:f7:b9:c2:a3:42:b0:87: 4d:43:7b:c5:c4:38:e9:ce:b6:8c:3c:35:57:0a:af:a7:0c:ca: d3:57:fe:41:ab:2a:2e:ff:7b:0b:e7:cb:b8:4e:0e:9e:ab:40: 5d:df:79:5d:e8:3b:30:cd:88:f4:82:46:99:09:fa:e8:9e:c5: c5:05:ca:2a:9b:57:47:c5:51:fe:f8:16:d3:0c:24:bf:d0:fc: 70:ab:87:c6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUX9CmsBs7Xmhedv7w5SKwtfEYkWowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyNzA2NDgyM1oX DTI2MDkyNjA2NTMyM1owMzExMC8GA1UEAxMoNjg4Njg0NEFCMTc2OTIwODUwRTA5 ODQ5MTdFOTcxMzY2N0QwQTAyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALeBOp5BJcECooGf1vFGoL82m/2OQYODRj1sWeRdCB7tFXo9JAIv35XXtoeQ LUrf4vfe9mzjACk1X/sUY/RSMlKDjZ8hRRO/tcrMoyuMV6Cu4VsJyEHZZCnjBE8T kzpUWuF99K4VjYIsjgMKBcqJ866jXPmxUAjFlVlOXovhi92AFB8OtqP38yTP+XiI rUNOg5o4o0bx5ldqCRPYLy1pp8muzN+t1Mqic04KbleI03wj020t/yuk44nNGCwy ngEnClCyxNQOEg2WnvJkC97F++ojAM7RnjhGIoHfFUlBWKINkHGwHk+twsxbIeSI 5raeDjKtuIDd8soVQDov2ag4cLkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGiGhEqxdpIIUOCYSRfpcTZn0KAlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80NDU1Y2IyOS01Mjc2LTRhNzktYjMzYS1jYzUxNTE3YmRkMTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0NTVjYjI5 LTUyNzYtNGE3OS1iMzNhLWNjNTE1MTdiZGQxOC8wLzY4ODY4NDRBQjE3NjkyMDg1 MEUwOTg0OTE3RTk3MTM2NjdEMEEwMjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnM2owDQYJKoZIhvcNAQELBQADggEBAEvBz9x5ip/iKAtoHsPaHljRqoi3seQa Wjd1EokLdwKU+5CXIainR9dfQSwWnginrMMn2qc6F80Ew+5HYePgiATTM3gKb/RW IBFwMABdhWtqIyIQUmmgENqGPbfiKClQh8w8DGH9YowkVmiRTebRgsSeUoXgxbAu +Jl+GzNqvNEJYv7CdhyLPlBf2rD2W+JUktsHbgVhAasnS3p5WgEww1ZufNbza+Nb coKb9Trf97nCo0Kwh01De8XEOOnOtow8NVcKr6cMytNX/kGrKi7/ewvny7hODp6r QF3feV3oOzDNiPSCRpkJ+uiexcUFyiqbV0fFUf74FtMMJL/Q/HCrh8Y= -----END CERTIFICATE-----Generated at Mon Oct 20 08:26:38 2025 by rpki-client