$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer (raw, json) Hash identifier: NHIgTUx1Twj8rtoHLRB2O2lNkT1Bh4fqEmjbawJofrs= Subject key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1F0D8F009BEFC781CF6123F0E26D7C31FA5067F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft caRepository: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 07 Sep 2025 02:45:39 +0000 Certificate not after: Sun 06 Sep 2026 02:50:39 +0000 Subordinate resources: IP: 27.111.48.0/20 IP: 103.3.220.0/22 IP: 112.215.0.0/16 IP: 121.52.0.0/17 IP: 202.152.224.0/19 IP: 203.78.112.0/20 IP: 2400:9800::/32 IP: 2407:7600::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:0d:8f:00:9b:ef:c7:81:cf:61:23:f0:e2:6d:7c:31:fa:50:67:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 7 02:45:39 2025 GMT Not After : Sep 6 02:50:39 2026 GMT Subject: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:03:16:68:e6:29:b9:f1:89:54:05:9a:e1:ec: 23:bf:1a:f8:10:60:56:1a:83:1b:14:b3:1c:aa:8a: 9a:4e:b2:19:a1:49:46:fa:c4:28:61:69:18:92:4b: ee:dc:40:00:75:88:08:7e:62:70:c5:89:3b:b5:39: 6b:f4:1d:60:c4:6d:04:fd:49:76:7f:b7:a4:eb:7c: 46:02:56:61:23:03:39:88:77:3b:f3:99:93:8d:5e: e2:f1:b1:fb:4f:d3:2e:fd:3a:08:5a:53:06:18:d0: 59:de:85:f6:05:81:86:80:61:97:c0:46:8a:c1:ad: 65:9c:cf:f3:91:4c:81:de:46:67:2c:04:dc:26:9e: 67:35:a1:eb:7e:ac:b0:2f:f9:a5:de:12:12:b8:e1: a0:7c:3d:3b:83:a7:74:8c:40:61:a0:b0:8a:cd:ed: 38:e2:e4:3e:5a:b1:81:c2:ef:f9:4b:f7:5b:ae:b9: e6:23:04:bc:bd:39:38:24:30:5c:36:83:42:ac:a1: a2:c3:a6:1c:5e:ce:32:e6:83:9e:7e:2a:05:54:30: ec:89:eb:c2:ba:1b:e7:c5:65:bb:4b:1a:22:0b:38: 93:07:4b:42:74:80:d8:dd:8d:27:f0:9d:c9:cd:70: b6:2e:b9:64:3e:64:18:08:dd:92:76:70:16:93:41: 94:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.111.48.0/20 103.3.220.0/22 112.215.0.0/16 121.52.0.0/17 202.152.224.0/19 203.78.112.0/20 IPv6: 2400:9800::/32 2407:7600::/32 Signature Algorithm: sha256WithRSAEncryption 55:d3:24:a6:18:16:1a:7d:06:52:ef:e3:8a:79:86:07:c1:c8: e8:19:bd:87:6f:ee:5d:87:c3:43:f9:72:12:f0:e9:63:43:1d: 50:ec:86:eb:61:fb:70:bd:91:e2:7c:3b:18:21:4d:26:e4:b1: 5e:dc:ac:ba:1e:e0:55:63:bc:25:79:4a:f3:f0:d8:e0:44:4f: c6:5e:17:ae:79:e2:b4:0a:0d:4a:6a:b5:a5:be:26:f4:ce:16: f2:18:97:4d:31:1f:3d:54:0a:4c:64:25:72:cf:1b:c5:a1:2c: 7d:a1:6b:f5:40:01:bd:3b:56:e5:56:60:77:4f:6c:b0:5f:39: d8:1f:5d:16:15:60:39:11:77:02:fe:38:de:a2:62:98:65:88: b2:cc:31:a7:0c:c1:22:34:a5:ee:ad:46:95:3a:54:f9:79:1f: 6e:39:b7:64:eb:b2:65:7d:94:96:3e:8c:00:2a:06:4c:0c:3e: 07:37:ac:28:37:0e:91:28:cb:73:4f:08:7b:07:b2:5b:9d:1b: 1a:d1:96:5b:5f:1f:26:79:b1:8c:55:3a:5f:1b:a3:1e:bf:c3: b6:20:d7:2b:72:f1:db:79:d8:32:4e:4f:df:05:a4:87:6e:9d: 4a:0d:f9:4b:31:9a:fb:f3:79:be:d8:e4:28:28:5d:9e:84:86: ca:1c:98:21 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHw2PAJvvx4HPYSPw4m18MfpQZ/MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkwNzAyNDUzOVoX DTI2MDkwNjAyNTAzOVowMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5 QUMyMjExREFGRDIwOTU2ODdEQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIDFmjmKbnxiVQFmuHsI78a+BBgVhqDGxSzHKqKmk6yGaFJRvrEKGFpGJJL 7txAAHWICH5icMWJO7U5a/QdYMRtBP1Jdn+3pOt8RgJWYSMDOYh3O/OZk41e4vGx +0/TLv06CFpTBhjQWd6F9gWBhoBhl8BGisGtZZzP85FMgd5GZywE3CaeZzWh636s sC/5pd4SErjhoHw9O4OndIxAYaCwis3tOOLkPlqxgcLv+Uv3W6655iMEvL05OCQw XDaDQqyhosOmHF7OMuaDnn4qBVQw7Inrwrob58Vlu0saIgs4kwdLQnSA2N2NJ/Cd yc1wti65ZD5kGAjdknZwFpNBlA0CAwEAAaOCAuswggLnMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLSTpc6/CeELw12awiEdr9IJVofaMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBh LWE0ZWMtNDlkYi1iZTg5LThkN2U3ZmMyYzIyNy8wL0I0OTNBNUNFQkYwOUUxMEJD MzVEOUFDMjIxMURBRkQyMDk1Njg3REEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwUgYIKwYBBQUHAQcBAf8EQzBBMCkEAgABMCMD BAQbbzADBAJnA9wDAwBw1wMEB3k0AAMEBcqY4AMEBMtOcDAUBAIAAjAOAwUAJACY AAMFACQHdgAwDQYJKoZIhvcNAQELBQADggEBAFXTJKYYFhp9BlLv44p5hgfByOgZ vYdv7l2Hw0P5chLw6WNDHVDshuth+3C9keJ8OxghTSbksV7crLoe4FVjvCV5SvPw 2OBET8ZeF6554rQKDUpqtaW+JvTOFvIYl00xHz1UCkxkJXLPG8WhLH2ha/VAAb07 VuVWYHdPbLBfOdgfXRYVYDkRdwL+ON6iYphliLLMMacMwSI0pe6tRpU6VPl5H245 t2TrsmV9lJY+jAAqBkwMPgc3rCg3DpEoy3NPCHsHsludGxrRlltfHyZ5sYxVOl8b ox6/w7Yg1yty8dt52DJOT98FpIdunUoN+Usxmvvzeb7Y5CgoXZ6EhsocmCE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:30:58 2025 by rpki-client