$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer File: B5F8E7712A83BE2BD78CFC40658C8032F03B6682.cer (raw, json) Hash identifier: 9BOnz8sgUzEugPQlyUkU2TnqnUVjtfjCxO14G0y5J7c= Subject key identifier: B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 62CD7943C1F109199C82E5E5BB8F955E48E1D178 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft caRepository: rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 22 Aug 2025 04:10:54 +0000 Certificate not after: Fri 21 Aug 2026 04:15:54 +0000 Subordinate resources: IP: 103.38.108.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:cd:79:43:c1:f1:09:19:9c:82:e5:e5:bb:8f:95:5e:48:e1:d1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 22 04:10:54 2025 GMT Not After : Aug 21 04:15:54 2026 GMT Subject: CN=B5F8E7712A83BE2BD78CFC40658C8032F03B6682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:44:3d:ce:8b:7f:5e:88:98:37:8b:6c:bc:35: d6:ef:c2:b1:4a:07:72:10:94:9a:b0:12:38:d9:c8: 61:a6:89:9b:8b:6d:25:00:9d:97:89:77:88:40:a8: 5f:7b:54:28:9f:9e:85:04:f0:6a:7a:67:42:37:b9: 3f:8e:a7:2e:a4:62:de:13:86:98:9e:16:d4:5f:de: e8:b4:aa:90:8a:d7:70:ab:4b:c4:a8:b8:05:c3:a8: 75:f5:7f:a6:00:5c:b6:69:fc:4d:e4:a1:ca:2c:45: df:b6:db:73:41:a6:54:e3:66:c7:2b:49:b3:76:b7: 9e:6a:9e:86:c4:16:11:dc:51:b5:d8:ca:c0:cd:b6: 31:72:53:2d:f5:d3:18:fa:f5:04:5c:e1:d4:44:f8: 2f:08:8e:ea:e4:7a:71:25:0c:30:16:d1:3c:a4:d9: 5f:1a:e0:4f:da:2c:15:5e:4e:9d:81:34:57:9c:1f: 2d:38:96:80:4c:d3:20:c4:0a:60:bf:95:e0:0b:a2: d5:1a:cf:ee:1b:08:b0:51:97:38:88:5c:b2:26:a3: 5c:bf:54:4a:8c:e4:d3:42:01:a3:5d:e2:90:2e:9e: fd:6a:6b:a2:e8:4d:9d:2d:d4:0f:3a:5e:9c:e9:09: a4:fb:82:48:61:4d:af:bc:c4:94:c8:b9:bb:2b:e8: 57:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:F8:E7:71:2A:83:BE:2B:D7:8C:FC:40:65:8C:80:32:F0:3B:66:82 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cdb59a10-58d0-462e-b09b-1919b1c35d72/0/B5F8E7712A83BE2BD78CFC40658C8032F03B6682.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.38.108.0/23 Signature Algorithm: sha256WithRSAEncryption 87:ca:29:c8:c2:98:7e:73:41:da:91:3c:d8:db:9b:e7:61:85: 94:e5:59:af:a9:0e:24:75:e5:fc:4d:aa:02:a4:ca:b6:ee:27: 94:55:f9:91:5d:f9:1e:96:82:4d:36:27:1a:46:80:0c:54:a8: fa:96:56:f2:0c:ee:ac:be:30:9a:ec:31:09:8f:a3:4e:29:7b: 81:ce:08:ee:f9:9a:6c:eb:19:22:7d:c2:eb:83:38:4a:ff:2c: c6:67:b9:b3:af:4e:5f:43:a5:ed:5d:10:1a:06:cf:06:d0:8c: a7:39:79:70:7a:3d:44:e2:e4:70:ae:c3:5a:cc:f0:95:ce:00: 34:be:8e:f6:56:94:ee:80:0e:35:30:dd:9d:fc:a2:df:61:50: 40:9a:34:9a:3b:cc:d7:87:86:8d:92:b5:95:0d:f4:29:45:91: 02:e4:d0:f3:92:45:ba:af:f5:2b:c3:95:82:45:ab:d9:e3:3b: f5:2e:6d:1f:f5:66:a2:5f:02:5c:6b:a1:69:d1:a5:12:75:dd: 25:93:ff:c7:7c:4c:d3:e9:e4:3f:c5:1c:a0:3f:e3:de:d1:fa: 66:a6:90:5b:8e:20:af:46:79:f5:df:40:0e:4c:51:21:12:c5: 03:4f:ed:fa:52:f1:8b:bf:ce:72:4b:9a:59:01:00:67:2c:49: c8:8d:95:b1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYs15Q8HxCRmcguXlu4+VXkjh0XgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyMjA0MTA1NFoX DTI2MDgyMTA0MTU1NFowMzExMC8GA1UEAxMoQjVGOEU3NzEyQTgzQkUyQkQ3OENG QzQwNjU4QzgwMzJGMDNCNjY4MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKZEPc6Lf16ImDeLbLw11u/CsUoHchCUmrASONnIYaaJm4ttJQCdl4l3iECo X3tUKJ+ehQTwanpnQje5P46nLqRi3hOGmJ4W1F/e6LSqkIrXcKtLxKi4BcOodfV/ pgBctmn8TeShyixF37bbc0GmVONmxytJs3a3nmqehsQWEdxRtdjKwM22MXJTLfXT GPr1BFzh1ET4LwiO6uR6cSUMMBbRPKTZXxrgT9osFV5OnYE0V5wfLTiWgEzTIMQK YL+V4Aui1RrP7hsIsFGXOIhcsiajXL9USozk00IBo13ikC6e/WprouhNnS3UDzpe nOkJpPuCSGFNr7zElMi5uyvoV3UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLX453Eqg74r14z8QGWMgDLwO2aCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jZGI1OWExMC01OGQwLTQ2MmUtYjA5Yi0xOTE5YjFjMzVkNzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NkYjU5YTEw LTU4ZDAtNDYyZS1iMDliLTE5MTliMWMzNWQ3Mi8wL0I1RjhFNzcxMkE4M0JFMkJE NzhDRkM0MDY1OEM4MDMyRjAzQjY2ODIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnJmwwDQYJKoZIhvcNAQELBQADggEBAIfKKcjCmH5zQdqRPNjbm+dhhZTlWa+p DiR15fxNqgKkyrbuJ5RV+ZFd+R6Wgk02JxpGgAxUqPqWVvIM7qy+MJrsMQmPo04p e4HOCO75mmzrGSJ9wuuDOEr/LMZnubOvTl9Dpe1dEBoGzwbQjKc5eXB6PUTi5HCu w1rM8JXOADS+jvZWlO6ADjUw3Z38ot9hUECaNJo7zNeHho2StZUN9ClFkQLk0POS Rbqv9SvDlYJFq9njO/UubR/1ZqJfAlxroWnRpRJ13SWT/8d8TNPp5D/FHKA/497R +mamkFuOIK9GefXfQA5MUSESxQNP7fpS8Yu/znJLmlkBAGcsSciNlbE= -----END CERTIFICATE-----Generated at Sat Aug 23 09:01:39 2025 by rpki-client