$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer File: 6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.cer (raw, json) Hash identifier: G7qObjTe8dXBr1fWQAJgNcRYL5vsJd8gJfq/wk8rpiM= Subject key identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3A3E71350816C2E152EF808A63E11198A597F27C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft caRepository: rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 08 Oct 2025 02:23:16 +0000 Certificate not after: Wed 07 Oct 2026 02:28:16 +0000 Subordinate resources: IP: 103.156.226.0/23 IP: 2406:8ec0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:3e:71:35:08:16:c2:e1:52:ef:80:8a:63:e1:11:98:a5:97:f2:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 8 02:23:16 2025 GMT Not After : Oct 7 02:28:16 2026 GMT Subject: CN=6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:15:d0:5e:58:d4:33:0d:87:2d:5b:d7:c2:f4: 8c:bd:d1:33:c8:f7:ad:19:46:a5:03:d5:d2:46:b2: ac:01:64:02:c1:7a:e4:c1:ca:cd:29:7d:44:65:97: 20:b9:7d:a2:43:ae:59:68:0d:9b:3a:45:73:82:c9: 37:b7:83:4f:3f:c4:e3:10:96:87:56:c5:2d:a6:b1: 54:b6:11:12:5a:9c:34:dc:1f:c3:86:79:02:f8:b1: d2:c2:d9:df:22:92:06:0c:ef:ac:c7:17:08:bd:78: df:6c:af:99:80:9b:6b:d5:21:45:08:42:41:ed:c7: 19:83:d1:56:0e:5e:45:d3:36:03:1c:60:db:08:0b: 22:e3:fe:49:3e:16:23:a2:91:05:22:4a:83:de:b9: b8:7c:61:49:e0:c6:fd:84:6c:74:7f:40:61:6f:b8: 06:17:6c:5c:b4:d6:89:e4:c6:bf:1a:c6:28:39:aa: cb:29:9d:98:de:8a:94:8c:ff:cf:93:80:eb:7a:b5: c8:28:fe:99:ea:84:8a:6d:6e:e9:80:a6:5e:90:58: a4:15:b8:23:76:1c:83:5f:df:5c:83:9f:6b:84:63: 7b:de:ee:42:54:30:33:b5:43:9c:f6:03:bc:c3:13: 25:09:c6:d2:a6:b9:b4:9d:e9:96:26:96:60:a8:ca: 59:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6E:12:35:C8:FC:3F:2E:F6:D9:D2:45:D0:60:7A:A6:D7:63:C5:D4:E7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b5355c5a-efc8-48f7-902f-6e31fc42995a/0/6E1235C8FC3F2EF6D9D245D0607AA6D763C5D4E7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.226.0/23 IPv6: 2406:8ec0::/32 Signature Algorithm: sha256WithRSAEncryption 58:ca:5d:14:67:5d:4c:c5:69:bf:f0:ef:61:6e:bd:ff:99:0b: ef:e1:69:ca:e4:cc:ab:f1:6a:dd:b6:9c:af:01:4e:9a:e8:97: 51:12:1e:2f:16:5b:b3:9e:fe:2e:03:79:ff:df:99:1b:83:8f: cd:f6:b4:58:f9:a6:7b:1f:66:ad:2b:f5:79:f0:d3:9c:76:c3: 1f:89:54:a2:fb:be:8c:05:a8:1d:11:ee:bd:6a:7b:25:7b:66: 87:a9:f1:2d:42:91:d5:99:fb:37:08:7e:2f:0e:7c:18:80:40: 6a:75:e1:f7:57:2c:9e:04:72:65:6a:31:26:29:c9:bd:66:d2: c0:2a:57:fd:e3:c8:e6:03:b2:e3:35:d1:87:e1:24:8e:dd:77: 45:b3:d8:e0:2c:a9:7b:a7:a7:cf:81:c7:c2:6a:b5:aa:91:78: 74:6a:9b:0b:7f:17:d0:0c:b9:dd:c4:58:2c:74:2b:06:b0:05: 14:f6:f7:87:5d:7e:52:fc:81:bf:40:4b:bb:66:64:b5:65:82: cc:7c:fa:0d:18:15:6d:e7:e1:b4:c1:e7:b3:1a:8d:09:34:fd: b4:fc:e6:1c:35:b0:9f:74:59:a9:96:0d:d5:45:7a:27:1b:c7: 81:2d:e9:5d:19:12:4d:4a:a9:0f:78:27:4d:85:fd:b6:86:64: 92:f3:03:9c -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUOj5xNQgWwuFS74CKY+ERmKWX8nwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAwODAyMjMxNloX DTI2MTAwNzAyMjgxNlowMzExMC8GA1UEAxMoNkUxMjM1QzhGQzNGMkVGNkQ5RDI0 NUQwNjA3QUE2RDc2M0M1RDRFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN8V0F5Y1DMNhy1b18L0jL3RM8j3rRlGpQPV0kayrAFkAsF65MHKzSl9RGWX ILl9okOuWWgNmzpFc4LJN7eDTz/E4xCWh1bFLaaxVLYRElqcNNwfw4Z5Avix0sLZ 3yKSBgzvrMcXCL1432yvmYCba9UhRQhCQe3HGYPRVg5eRdM2Axxg2wgLIuP+ST4W I6KRBSJKg965uHxhSeDG/YRsdH9AYW+4BhdsXLTWieTGvxrGKDmqyymdmN6KlIz/ z5OA63q1yCj+meqEim1u6YCmXpBYpBW4I3Ycg1/fXIOfa4Rje97uQlQwM7VDnPYD vMMTJQnG0qa5tJ3pliaWYKjKWUMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG4SNcj8Py722dJF0GB6ptdjxdTnMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNTM1NWM1YS1lZmM4LTQ4ZjctOTAyZi02ZTMxZmM0Mjk5NWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1MzU1YzVh LWVmYzgtNDhmNy05MDJmLTZlMzFmYzQyOTk1YS8wLzZFMTIzNUM4RkMzRjJFRjZE OUQyNDVEMDYwN0FBNkQ3NjNDNUQ0RTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnnOIwDQQCAAIwBwMFACQGjsAwDQYJKoZIhvcNAQELBQADggEBAFjKXRRnXUzF ab/w72Fuvf+ZC+/hacrkzKvxat22nK8BTprol1ESHi8WW7Oe/i4Def/fmRuDj832 tFj5pnsfZq0r9Xnw05x2wx+JVKL7vowFqB0R7r1qeyV7Zoep8S1CkdWZ+zcIfi8O fBiAQGp14fdXLJ4EcmVqMSYpyb1m0sAqV/3jyOYDsuM10YfhJI7dd0Wz2OAsqXun p8+Bx8JqtaqReHRqmwt/F9AMud3EWCx0KwawBRT294ddflL8gb9AS7tmZLVlgsx8 +g0YFW3n4bTB57MajQk0/bT85hw1sJ90WamWDdVFeicbx4Et6V0ZEk1KqQ94J02F /baGZJLzA5w= -----END CERTIFICATE-----Generated at Mon Oct 20 06:35:22 2025 by rpki-client