$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.cer File: 8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.cer (raw, json) Hash identifier: asI5jhSEjvK6RfIdCUKIULqxka5pOujURS40aB7hW70= Subject key identifier: 8B:A2:B5:E0:7F:AD:57:28:C7:DE:FB:F4:FC:10:BD:04:43:53:F6:FF Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 79D8AEF10AEB7DD6D3760D3137D9B30D57E4E076 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.mft caRepository: rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Jun 2025 18:38:21 +0000 Certificate not after: Tue 16 Jun 2026 18:43:21 +0000 Subordinate resources: IP: 103.133.144.0/22 IP: 2404:4ec0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:d8:ae:f1:0a:eb:7d:d6:d3:76:0d:31:37:d9:b3:0d:57:e4:e0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 17 18:38:21 2025 GMT Not After : Jun 16 18:43:21 2026 GMT Subject: CN=8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e7:df:ff:f0:88:c2:90:d0:4a:40:83:b3:5e: de:30:5a:94:1a:75:c6:f3:89:f8:a2:44:29:ed:86: 73:8e:17:c0:4a:04:54:60:41:7a:87:fb:43:31:3c: 3b:18:10:cb:45:4d:3a:c6:bb:85:89:50:97:b0:4c: 19:59:98:e9:5f:4c:63:75:8f:55:77:8d:24:0d:d7: be:4b:ac:a9:1d:09:e9:97:6c:5a:6e:d5:9c:b9:4e: d9:f5:93:63:7e:37:86:1e:c1:c1:7b:7d:d1:aa:8d: 72:45:d1:a0:82:b9:18:4c:9c:80:fe:74:83:ef:18: e0:8c:66:5f:6e:71:2c:43:bb:c1:fe:6a:58:5f:40: 96:15:ce:7a:a1:ac:51:83:a1:f6:84:65:55:6e:37: 93:70:07:45:ed:bb:da:b3:04:3b:95:f0:d3:5b:b0: 99:7a:97:dd:c4:0e:26:1c:30:59:7c:21:df:0a:70: 20:3f:a8:99:ab:8e:90:5e:f0:bf:75:93:1a:51:a6: dd:ca:b6:f4:cc:62:4d:23:09:c8:b5:8f:41:4e:7b: 63:ff:90:78:d2:f1:79:cf:ac:ca:97:57:5e:48:fd: bb:2a:13:50:74:44:03:29:d4:ad:ae:f4:5e:59:d3: d5:bb:f3:c9:a0:f3:8a:43:bb:ee:f5:84:52:11:9b: 6c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:A2:B5:E0:7F:AD:57:28:C7:DE:FB:F4:FC:10:BD:04:43:53:F6:FF X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8c76c85f-9a4f-4afc-969b-8da2536c5c24/0/8BA2B5E07FAD5728C7DEFBF4FC10BD044353F6FF.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.133.144.0/22 IPv6: 2404:4ec0::/32 Signature Algorithm: sha256WithRSAEncryption 65:69:f0:34:ca:72:0e:47:3a:1e:43:6c:10:28:1b:e0:a6:30: c7:9f:49:75:11:56:2a:d7:a5:38:47:e1:a1:a9:56:22:c5:44: c8:c4:79:61:5f:ee:49:b2:10:55:c0:fb:32:8c:2f:b1:92:88: 32:8d:3e:7f:22:15:e4:97:c8:57:40:fa:37:98:13:06:cc:6f: cd:62:ea:d2:42:fa:c1:a6:0a:a9:6c:62:b7:6d:a9:56:f6:84: ce:9e:ed:3e:93:ed:68:f6:5f:db:aa:31:62:1c:3e:ff:6a:e7: ad:76:9f:ff:56:50:78:7c:6f:63:42:c0:30:b6:93:4b:74:4f: c7:82:c4:34:39:1e:32:63:d9:c1:e8:a0:53:f7:88:80:f1:1a: 59:2f:fc:4d:38:f0:50:0d:c7:13:6b:2d:ec:3e:d1:1e:5a:bc: e7:da:3b:ce:3b:4a:13:21:78:95:3c:b7:a3:e1:1c:0b:f8:14: d1:fe:21:ec:88:62:3b:d0:03:fd:fb:86:22:94:bf:81:bd:be: c0:a3:d2:fc:00:b7:bc:0a:a8:2d:19:81:a2:24:43:f8:09:b1: 08:f4:cf:64:d6:89:82:fd:d7:19:8f:f8:c4:09:8e:0e:5b:b6: af:f2:52:a7:0f:6d:85:62:62:c8:1d:35:b1:c2:9d:c2:88:82: 04:5f:03:6e -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUediu8QrrfdbTdg0xN9mzDVfk4HYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYxNzE4MzgyMVoX DTI2MDYxNjE4NDMyMVowMzExMC8GA1UEAxMoOEJBMkI1RTA3RkFENTcyOEM3REVG QkY0RkMxMEJEMDQ0MzUzRjZGRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfn3//wiMKQ0EpAg7Ne3jBalBp1xvOJ+KJEKe2Gc44XwEoEVGBBeof7QzE8 OxgQy0VNOsa7hYlQl7BMGVmY6V9MY3WPVXeNJA3XvkusqR0J6ZdsWm7VnLlO2fWT Y343hh7BwXt90aqNckXRoIK5GEycgP50g+8Y4IxmX25xLEO7wf5qWF9AlhXOeqGs UYOh9oRlVW43k3AHRe272rMEO5Xw01uwmXqX3cQOJhwwWXwh3wpwID+omauOkF7w v3WTGlGm3cq29MxiTSMJyLWPQU57Y/+QeNLxec+sypdXXkj9uyoTUHREAynUra70 XlnT1bvzyaDzikO77vWEUhGbbOcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIuiteB/rVcox9779PwQvQRDU/b/MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84Yzc2Yzg1Zi05YTRmLTRhZmMtOTY5Yi04ZGEyNTM2YzVjMjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjNzZjODVm LTlhNGYtNGFmYy05NjliLThkYTI1MzZjNWMyNC8wLzhCQTJCNUUwN0ZBRDU3MjhD N0RFRkJGNEZDMTBCRDA0NDM1M0Y2RkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnhZAwDQQCAAIwBwMFACQETsAwDQYJKoZIhvcNAQELBQADggEBAGVp8DTKcg5H Oh5DbBAoG+CmMMefSXURVirXpThH4aGpViLFRMjEeWFf7kmyEFXA+zKML7GSiDKN Pn8iFeSXyFdA+jeYEwbMb81i6tJC+sGmCqlsYrdtqVb2hM6e7T6T7Wj2X9uqMWIc Pv9q5612n/9WUHh8b2NCwDC2k0t0T8eCxDQ5HjJj2cHooFP3iIDxGlkv/E048FAN xxNrLew+0R5avOfaO847ShMheJU8t6PhHAv4FNH+IeyIYjvQA/37hiKUv4G9vsCj 0vwAt7wKqC0ZgaIkQ/gJsQj0z2TWiYL91xmP+MQJjg5btq/yUqcPbYViYsgdNbHC ncKIggRfA24= -----END CERTIFICATE-----Generated at Sun Jun 29 14:55:08 2025 by rpki-client