$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer File: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer (raw, json) Hash identifier: 2fT63KLCXqMeNF8epUj2h/GzjEB2JPAf/yEXIUJW37w= Subject key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 388DB54FCA1F091960AEC45940D4F404CB48653D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft caRepository: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 13 Sep 2025 05:34:15 +0000 Certificate not after: Sat 12 Sep 2026 05:39:15 +0000 Subordinate resources: IP: 103.42.241.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:8d:b5:4f:ca:1f:09:19:60:ae:c4:59:40:d4:f4:04:cb:48:65:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 13 05:34:15 2025 GMT Not After : Sep 12 05:39:15 2026 GMT Subject: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a5:db:fd:30:6d:84:2f:c9:3a:26:3f:bc:eb: 52:44:a3:62:84:27:60:2b:5d:fd:69:1f:6e:08:04: 76:7e:2b:e0:ec:02:c1:fe:45:b1:4d:72:98:cd:34: d3:66:bc:58:1d:27:9e:4a:df:f1:7c:d8:c5:0e:fe: c9:15:a3:be:74:35:39:d4:38:f4:eb:36:0f:c6:16: 50:a7:c0:2d:e3:55:08:23:9e:98:dc:ad:8e:69:2b: f6:9e:ff:f5:66:95:6b:c5:df:bb:ee:5b:28:85:22: e4:45:86:3c:6b:82:5a:fa:44:4e:3b:d6:ff:90:b6: 08:f5:7d:9c:43:1c:12:8e:94:47:a3:c1:65:02:95: 7c:cc:7a:a0:32:cd:22:25:5b:0c:b4:83:9b:54:8c: 40:cc:1f:c6:cc:ec:47:a4:57:9e:d0:0d:b6:bc:ca: c9:b7:d9:25:dc:cd:25:a0:80:06:53:6c:4b:e9:49: c1:21:60:ef:68:01:0b:bb:61:99:42:1c:6e:b9:de: 17:a6:82:bd:6b:e3:5e:b7:62:7f:a8:d7:48:e9:e5: 9a:13:0a:70:19:a0:8b:85:1d:ec:58:9b:2b:b1:9e: 5e:64:00:f6:d9:82:36:d9:66:68:8a:23:df:82:87: 79:6c:3f:5d:dc:51:99:02:35:e6:4e:11:f9:29:6a: 17:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.42.241.0/24 Signature Algorithm: sha256WithRSAEncryption 22:05:19:47:b3:d1:b8:3f:59:64:5c:31:5b:7b:86:2d:c7:fd: e4:ee:52:49:01:ad:e3:25:5f:b6:e9:06:ef:6c:f7:c8:34:f3: 7b:91:67:fc:dc:17:39:8a:66:75:8e:fe:e9:ec:08:63:67:ca: e2:c5:91:39:72:05:de:8e:38:7d:f8:d7:f8:1d:28:26:8e:07: 3e:db:73:89:2c:47:63:68:7a:b1:e7:d4:c7:64:32:b8:fa:f7: 7b:fc:6d:14:c8:66:50:02:7f:83:a8:13:04:9e:ee:1f:b6:02: 9b:5a:cc:bb:33:5a:68:65:42:75:25:d7:9a:cd:eb:c1:7c:1b: e7:b7:91:e2:a9:c7:62:5d:15:0c:b1:58:e9:6a:9a:bf:f1:6a: 65:27:13:f2:f9:fe:a4:02:08:3b:7b:4f:b8:d6:2c:08:0f:bc: df:c2:df:1d:3f:a6:15:cf:6a:54:46:31:5d:05:87:d2:8d:a6: 62:f9:a3:3e:3d:da:b3:4f:dd:b1:6f:13:94:2a:ed:fc:8b:6a: ac:07:75:92:cb:54:46:2e:96:d4:a9:16:88:fc:73:d1:0f:f1: 49:cd:b3:c9:a8:64:eb:27:fd:ab:f1:78:9c:0c:31:62:82:d0: b7:fd:94:9e:de:05:5e:a7:33:d0:36:da:aa:18:f1:07:68:c1: a7:c4:cf:7e -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOI21T8ofCRlgrsRZQNT0BMtIZT0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxMzA1MzQxNVoX DTI2MDkxMjA1MzkxNVowMzExMC8GA1UEAxMoQjhDOUUzNzZBMjA3MjM2NDExMjAz NkRBN0E3QkJCNENBRTRBQzM3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO6l2/0wbYQvyTomP7zrUkSjYoQnYCtd/WkfbggEdn4r4OwCwf5FsU1ymM00 02a8WB0nnkrf8XzYxQ7+yRWjvnQ1OdQ49Os2D8YWUKfALeNVCCOemNytjmkr9p7/ 9WaVa8Xfu+5bKIUi5EWGPGuCWvpETjvW/5C2CPV9nEMcEo6UR6PBZQKVfMx6oDLN IiVbDLSDm1SMQMwfxszsR6RXntANtrzKybfZJdzNJaCABlNsS+lJwSFg72gBC7th mUIcbrneF6aCvWvjXrdif6jXSOnlmhMKcBmgi4Ud7FibK7GeXmQA9tmCNtlmaIoj 34KHeWw/XdxRmQI15k4R+SlqF7kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLjJ43aiByNkESA22np7u0yuSsN8MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNzYzZTcxYS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3NjNlNzFh LTljODUtNDE3Ni04ZmE0LWI3YTI5YWZiOTc3ZC8wL0I4QzlFMzc2QTIwNzIzNjQx MTIwMzZEQTdBN0JCQjRDQUU0QUMzN0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnKvEwDQYJKoZIhvcNAQELBQADggEBACIFGUez0bg/WWRcMVt7hi3H/eTuUkkB reMlX7bpBu9s98g083uRZ/zcFzmKZnWO/unsCGNnyuLFkTlyBd6OOH341/gdKCaO Bz7bc4ksR2NoerHn1MdkMrj693v8bRTIZlACf4OoEwSe7h+2AptazLszWmhlQnUl 15rN68F8G+e3keKpx2JdFQyxWOlqmr/xamUnE/L5/qQCCDt7T7jWLAgPvN/C3x0/ phXPalRGMV0Fh9KNpmL5oz492rNP3bFvE5Qq7fyLaqwHdZLLVEYultSpFoj8c9EP 8UnNs8moZOsn/avxeJwMMWKC0Lf9lJ7eBV6nM9A22qoY8QdowafEz34= -----END CERTIFICATE-----Generated at Mon Oct 20 03:27:23 2025 by rpki-client