$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer File: B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.cer (raw, json) Hash identifier: kdKR/GfsAcRzGrVqUjsPGWHBbrFiR1idKlVrhRKKWMI= Subject key identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 13AF8653F816E68BED0D497BEDCE1054096C9F3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft caRepository: rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 18 Oct 2025 05:08:08 +0000 Certificate not after: Sat 17 Oct 2026 05:13:08 +0000 Subordinate resources: IP: 103.125.16.0/22 IP: 2403:ea40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:af:86:53:f8:16:e6:8b:ed:0d:49:7b:ed:ce:10:54:09:6c:9f:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 18 05:08:08 2025 GMT Not After : Oct 17 05:13:08 2026 GMT Subject: CN=B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ab:29:d6:bb:4a:4c:0d:39:b2:44:fa:63:15: e7:74:c6:16:5b:52:ca:29:e2:1b:67:a6:c6:33:99: 50:be:2e:53:11:86:00:80:82:07:65:7b:84:97:01: e0:4e:29:4c:f3:8a:3c:b1:24:ba:61:45:d3:96:2d: 1d:be:c6:17:70:4c:f1:68:66:28:b0:b4:3d:9b:7c: 30:05:ac:da:4b:4c:80:39:50:f8:9a:00:04:48:45: 70:8a:bb:10:a6:b1:f8:5f:ea:f3:3e:d2:2a:e4:95: 6e:a2:91:41:24:a1:d0:9c:36:aa:17:77:e3:2d:e4: 5f:ad:ea:a4:6f:e7:ed:37:14:be:fa:2b:70:4b:29: b9:1d:ca:24:6c:6b:c2:68:04:07:d3:b9:01:93:1f: fb:8d:7d:b4:fe:31:46:05:48:b7:5d:c7:cb:cc:22: e9:27:67:4c:e7:4b:c0:14:e1:14:5d:3b:14:57:38: 07:c3:7a:6b:f8:cc:d6:17:54:ff:13:46:88:ee:4f: 55:b2:64:93:7e:e7:60:a0:73:48:41:f7:f9:d0:33: 27:84:db:da:c6:aa:2d:8f:a9:9c:0b:cd:60:7b:df: 60:5c:b2:02:31:1f:b0:ff:77:1f:f0:03:5a:58:35: b3:31:ac:d6:09:a1:8a:3b:36:cc:02:20:f2:a6:a3: 6d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:A9:68:6B:1E:95:DC:B6:87:72:AD:A5:5B:B1:38:AE:4D:0E:14:DB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e58d6dca-6d7b-4811-862b-0dc5d57fa2d9/0/B3A9686B1E95DCB68772ADA55BB138AE4D0E14DB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.125.16.0/22 IPv6: 2403:ea40::/32 Signature Algorithm: sha256WithRSAEncryption 81:a4:dd:e2:f8:67:ae:78:06:f0:36:a5:b5:c6:db:dc:a5:cc: 2a:73:21:9a:1f:11:df:ec:f6:65:29:6a:2f:ed:81:49:ac:eb: 96:c9:11:12:9a:c5:6e:78:00:ec:f7:07:e1:23:26:1b:6f:a8: 8f:80:50:fc:fd:40:58:58:7b:25:a2:ad:67:74:62:73:6e:b5: f0:11:6b:7e:04:66:58:66:7e:00:2d:02:54:10:2d:39:95:cb: 76:d4:80:56:c1:24:f0:87:6e:c5:58:53:8a:6c:03:29:6c:83: 98:c9:08:83:75:be:3a:83:82:84:d7:ce:a7:5b:a0:88:2a:c2: 15:bc:37:b5:cb:ab:02:01:f5:7f:76:18:e4:32:dd:c4:85:e8: 2f:58:f9:80:91:d0:e8:ba:41:87:3d:52:d5:56:1d:76:e6:97: 9c:f7:ba:d5:01:eb:57:d4:24:f9:c7:c1:60:44:6e:b4:7d:a6: eb:3e:aa:7f:9b:3e:6d:6e:19:c8:49:6c:b7:34:87:95:e5:5e: b1:bc:8b:86:10:f8:f0:86:83:9f:db:ee:25:88:06:18:fb:a7: 8a:7d:19:7b:ea:84:a5:a2:41:1d:76:10:5c:41:4d:d2:86:84: 18:34:80:f7:ee:f6:80:8d:e9:59:10:69:4b:cf:f9:1c:f1:62: d4:6c:f3:7c -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUE6+GU/gW5ovtDUl77c4QVAlsnzswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAxODA1MDgwOFoX DTI2MTAxNzA1MTMwOFowMzExMC8GA1UEAxMoQjNBOTY4NkIxRTk1RENCNjg3NzJB REE1NUJCMTM4QUU0RDBFMTREQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOarKda7SkwNObJE+mMV53TGFltSyiniG2emxjOZUL4uUxGGAICCB2V7hJcB 4E4pTPOKPLEkumFF05YtHb7GF3BM8WhmKLC0PZt8MAWs2ktMgDlQ+JoABEhFcIq7 EKax+F/q8z7SKuSVbqKRQSSh0Jw2qhd34y3kX63qpG/n7TcUvvorcEspuR3KJGxr wmgEB9O5AZMf+419tP4xRgVIt13Hy8wi6SdnTOdLwBThFF07FFc4B8N6a/jM1hdU /xNGiO5PVbJkk37nYKBzSEH3+dAzJ4Tb2saqLY+pnAvNYHvfYFyyAjEfsP93H/AD Wlg1szGs1gmhijs2zAIg8qajbecCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLOpaGseldy2h3KtpVuxOK5NDhTbMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lNThkNmRjYS02ZDdiLTQ4MTEtODYyYi0wZGM1ZDU3ZmEyZDkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1OGQ2ZGNh LTZkN2ItNDgxMS04NjJiLTBkYzVkNTdmYTJkOS8wL0IzQTk2ODZCMUU5NURDQjY4 NzcyQURBNTVCQjEzOEFFNEQwRTE0REIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnfRAwDQQCAAIwBwMFACQD6kAwDQYJKoZIhvcNAQELBQADggEBAIGk3eL4Z654 BvA2pbXG29ylzCpzIZofEd/s9mUpai/tgUms65bJERKaxW54AOz3B+EjJhtvqI+A UPz9QFhYeyWirWd0YnNutfARa34EZlhmfgAtAlQQLTmVy3bUgFbBJPCHbsVYU4ps Aylsg5jJCIN1vjqDgoTXzqdboIgqwhW8N7XLqwIB9X92GOQy3cSF6C9Y+YCR0Oi6 QYc9UtVWHXbml5z3utUB61fUJPnHwWBEbrR9pus+qn+bPm1uGchJbLc0h5XlXrG8 i4YQ+PCGg5/b7iWIBhj7p4p9GXvqhKWiQR12EFxBTdKGhBg0gPfu9oCN6VkQaUvP +RzxYtRs83w= -----END CERTIFICATE-----Generated at Mon Oct 20 06:59:42 2025 by rpki-client