$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer File: B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer (raw, json) Hash identifier: ZY612KOdOZRpW2pBveKX7txO4Jr1u+vKhgRGvoMUDSg= Subject key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2FBE53D5BF5D710A5AE1C603575184D3D7F69B7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft caRepository: rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 20 Aug 2025 01:38:35 +0000 Certificate not after: Wed 19 Aug 2026 01:43:35 +0000 Subordinate resources: AS: 137363 IP: 103.116.172.0/22 IP: 202.10.32.0/23 IP: 202.10.48.0/21 IP: 202.10.62.0/24 IP: 2402:fdc0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:be:53:d5:bf:5d:71:0a:5a:e1:c6:03:57:51:84:d3:d7:f6:9b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 20 01:38:35 2025 GMT Not After : Aug 19 01:43:35 2026 GMT Subject: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c5:f2:a1:8a:e2:8b:a8:9d:2e:1f:c9:f5:b9: 62:68:13:ae:c4:26:f8:b9:a4:4f:51:fd:0b:6e:ce: 1e:41:74:19:f1:03:ca:b1:0f:7e:31:88:c2:02:2d: 5f:fd:1c:70:93:8e:63:8c:ee:15:e7:55:3d:92:e7: af:d8:f8:0a:0a:01:f1:e6:b9:f4:1d:a8:7f:fc:db: b3:b1:0c:d9:b4:48:a1:80:40:98:21:24:a4:c6:4d: 72:fe:da:5d:2a:f4:f1:8c:0f:2f:84:d1:85:ef:23: fa:bd:cb:42:53:97:d7:04:53:f1:ef:d2:02:0d:a7: 0f:df:e6:1b:d4:57:02:70:bf:92:14:1e:e8:b0:86: 0e:94:63:4d:a6:b6:37:3f:d1:34:81:5d:81:85:1d: c5:c5:86:24:ae:42:8e:23:77:32:65:ce:c9:d5:9a: da:bc:18:ae:7a:04:9b:94:62:46:7a:c0:44:fd:aa: cf:62:04:f8:2a:ab:e8:d7:99:33:bb:08:8a:40:de: 22:4e:da:cc:b6:ce:a3:b4:7d:59:a4:e3:6d:d9:cf: 71:ae:fc:2b:44:04:3b:b9:6d:43:e8:13:50:49:61: 78:c0:90:f4:76:c2:11:d1:53:4a:91:86:8e:ba:d1: 4b:97:ed:e9:0e:4b:3a:2b:a3:1e:7f:1f:09:b4:9c: 14:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.172.0/22 202.10.32.0/23 202.10.48.0/21 202.10.62.0/24 IPv6: 2402:fdc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 137363 Signature Algorithm: sha256WithRSAEncryption 37:a3:d0:02:71:59:7a:4f:99:b2:1a:80:4e:c8:61:cc:2f:26: 6d:c6:2c:a5:6e:35:0a:5b:e3:82:ed:05:32:a3:50:a6:7c:e1: 66:ea:18:1f:34:a7:1c:83:59:b0:86:ad:22:b4:0c:64:1e:0b: f9:68:63:1c:69:68:f8:14:13:60:4d:64:30:ee:fd:7e:b0:d9: 23:10:31:bb:2d:36:53:22:5d:e3:fa:a5:49:cb:7d:69:b0:cd: 38:6f:91:85:02:72:4a:1a:2f:1c:77:f0:55:92:22:d5:a0:f3: 24:68:a9:3e:71:79:e8:2c:46:5b:64:ca:c5:d5:92:0c:0c:2a: 14:7a:e2:8e:9e:a2:08:d0:ec:8d:25:8d:4f:84:72:38:0e:b4: 8c:d4:4e:9c:17:38:29:09:08:00:da:9b:70:6f:09:e2:5d:23: 16:a9:37:f5:81:e4:71:63:19:ff:c9:ca:be:20:38:f3:aa:45: c6:d1:8e:0e:44:62:54:ce:c6:e2:78:62:1b:52:09:0c:e6:28: 33:3f:90:bc:7d:4e:fc:3d:7d:ab:5a:6e:77:0b:17:5b:b9:f4: 09:c3:08:8b:dc:ee:f5:52:4c:a3:b6:2e:75:ea:db:06:13:a6: 2c:df:f2:81:63:22:3b:ac:97:48:38:c4:0b:44:0f:49:cc:55: 12:26:31:72 -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgIUL75T1b9dcQpa4cYDV1GE09f2m30wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyMDAxMzgzNVoX DTI2MDgxOTAxNDMzNVowMzExMC8GA1UEAxMoQjZFRTFGNjFENkU4RTlFRUM2NDBD Q0MxRDc5MURCQTEyNDk5M0NBMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANPF8qGK4ouonS4fyfW5YmgTrsQm+LmkT1H9C27OHkF0GfEDyrEPfjGIwgIt X/0ccJOOY4zuFedVPZLnr9j4CgoB8ea59B2of/zbs7EM2bRIoYBAmCEkpMZNcv7a XSr08YwPL4TRhe8j+r3LQlOX1wRT8e/SAg2nD9/mG9RXAnC/khQe6LCGDpRjTaa2 Nz/RNIFdgYUdxcWGJK5CjiN3MmXOydWa2rwYrnoEm5RiRnrARP2qz2IE+Cqr6NeZ M7sIikDeIk7azLbOo7R9WaTjbdnPca78K0QEO7ltQ+gTUElheMCQ9HbCEdFTSpGG jrrRS5ft6Q5LOiujHn8fCbScFFUCAwEAAaOCAvUwggLxMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLbuH2HW6OnuxkDMwdeR26EkmTyjMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMTA4NWI0YS1mNTczLTQyZjMtODI1Yy0xY2YwYzg3MmIxNTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxMDg1YjRh LWY1NzMtNDJmMy04MjVjLTFjZjBjODcyYjE1Mi8wL0I2RUUxRjYxRDZFOEU5RUVD NjQwQ0NDMUQ3OTFEQkExMjQ5OTNDQTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQAYIKwYBBQUHAQcBAf8EMTAvMB4EAgABMBgD BAJndKwDBAHKCiADBAPKCjADBADKCj4wDQQCAAIwBwMFACQC/cAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAhiTMA0GCSqGSIb3DQEBCwUAA4IBAQA3o9ACcVl6T5my GoBOyGHMLyZtxiylbjUKW+OC7QUyo1CmfOFm6hgfNKccg1mwhq0itAxkHgv5aGMc aWj4FBNgTWQw7v1+sNkjEDG7LTZTIl3j+qVJy31psM04b5GFAnJKGi8cd/BVkiLV oPMkaKk+cXnoLEZbZMrF1ZIMDCoUeuKOnqII0OyNJY1PhHI4DrSM1E6cFzgpCQgA 2ptwbwniXSMWqTf1geRxYxn/ycq+IDjzqkXG0Y4ORGJUzsbieGIbUgkM5igzP5C8 fU78PX2rWm53CxdbufQJwwiL3O71Ukyjti516tsGE6Ys3/KBYyI7rJdIOMQLRA9J zFUSJjFy -----END CERTIFICATE-----Generated at Sat Aug 23 09:01:57 2025 by rpki-client