$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer File: BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.cer (raw, json) Hash identifier: DXXfG6w9i/SIL/MYgIDPcRb7iZqTSTwQxYQnUIQVe2c= Subject key identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5DBCB7C34D167B5CD43043F2B9CB374868D77C8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft caRepository: rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 09 Aug 2025 03:04:35 +0000 Certificate not after: Sat 08 Aug 2026 03:09:35 +0000 Subordinate resources: IP: 103.27.194.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:bc:b7:c3:4d:16:7b:5c:d4:30:43:f2:b9:cb:37:48:68:d7:7c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 9 03:04:35 2025 GMT Not After : Aug 8 03:09:35 2026 GMT Subject: CN=BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d6:d9:bf:fc:e3:8f:c9:45:44:20:cb:d2:07: da:da:59:c3:0f:9d:a6:0d:4b:a8:db:c9:4f:28:26: ca:27:1f:f7:5b:fb:53:96:1b:4f:1b:a5:39:90:71: 8c:b6:00:e5:a2:96:f8:b7:e8:3e:67:14:43:ad:2f: d5:1f:5c:1e:99:6d:02:8b:9f:f0:e2:59:3d:d8:1f: d7:9b:63:8a:cb:92:4c:16:40:4d:38:94:5e:a2:ac: c7:d3:9e:ad:9a:23:d3:1b:90:9b:5a:da:9b:86:a2: c9:4d:02:90:68:35:fe:bf:5c:b6:0b:ae:83:89:dc: a5:89:c9:05:cf:37:a6:9f:ed:ff:00:e8:e6:53:3f: df:52:c8:0e:fb:74:8d:ed:b0:1c:a4:69:c8:73:07: de:69:1c:51:80:62:c0:7f:fc:e7:11:e4:fc:95:ab: ae:77:28:df:63:dd:cf:ac:21:d6:97:af:1f:bd:6e: 89:57:9c:9f:98:ff:d4:95:93:b5:f1:a3:39:47:f0: d3:17:01:53:07:f7:b7:65:2f:41:4b:c6:bc:30:bb: 8f:d8:8f:6c:37:ed:73:93:6c:97:1e:29:87:5a:02: 55:76:84:87:fe:e5:6b:43:35:28:81:4f:a4:65:f3: cd:cc:f9:6d:73:6a:bd:46:8d:00:d3:05:1f:37:e0: 55:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:10:5E:0C:07:AE:74:86:CD:F8:EC:FE:5F:D7:C8:6B:E6:78:16:B0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8d48bb88-a758-443f-b708-48e387d66f57/0/BA105E0C07AE7486CDF8ECFE5FD7C86BE67816B0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.27.194.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:dc:76:c6:98:4b:11:8f:e4:dd:1a:a6:5d:97:8a:25:60:cb: d7:92:bb:05:ea:63:11:5e:78:3d:8e:fc:8a:3e:84:84:20:ee: 05:41:02:b2:e6:01:7c:de:df:2e:ee:61:d6:39:9c:05:cf:ce: 59:68:b2:63:52:a1:ed:3e:cd:9f:48:8b:48:d2:b0:05:76:72: b0:b9:aa:f0:60:dc:3b:af:1d:9a:dd:82:59:63:7e:e2:3d:33: 69:59:c6:6d:c8:26:f4:21:5e:09:e8:3f:6c:77:10:ed:83:80: 63:34:a4:e0:21:6a:a1:a2:6c:1e:1a:5f:8e:79:44:a1:7a:4a: 53:1c:6c:3f:59:dc:aa:d5:09:bc:dd:52:7b:f9:9a:bb:4a:0d: 67:41:2f:4b:1b:85:36:d5:93:e7:77:bc:84:91:82:ec:3f:9b: 95:80:a0:2d:05:df:50:21:2f:4c:d9:e1:fe:9f:9a:ed:21:41: ea:ba:7e:62:d6:a8:9c:88:e5:de:21:c0:07:9c:9a:20:aa:5a: a4:6b:3c:c7:3f:ea:df:17:a8:6e:5f:a9:6f:b2:91:23:99:12: c9:4f:08:01:84:5d:8a:eb:e5:89:19:69:b2:da:7d:9a:ae:5d: f9:76:83:fd:5e:05:84:04:c8:91:16:dd:ac:98:97:6a:72:0a: 11:cb:d2:fa -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXby3w00We1zUMEPyucs3SGjXfI4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgwOTAzMDQzNVoX DTI2MDgwODAzMDkzNVowMzExMC8GA1UEAxMoQkExMDVFMEMwN0FFNzQ4NkNERjhF Q0ZFNUZEN0M4NkJFNjc4MTZCMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANfW2b/844/JRUQgy9IH2tpZww+dpg1LqNvJTygmyicf91v7U5YbTxulOZBx jLYA5aKW+LfoPmcUQ60v1R9cHpltAouf8OJZPdgf15tjisuSTBZATTiUXqKsx9Oe rZoj0xuQm1ram4aiyU0CkGg1/r9ctguug4ncpYnJBc83pp/t/wDo5lM/31LIDvt0 je2wHKRpyHMH3mkcUYBiwH/85xHk/JWrrnco32Pdz6wh1pevH71uiVecn5j/1JWT tfGjOUfw0xcBUwf3t2UvQUvGvDC7j9iPbDftc5Nslx4ph1oCVXaEh/7la0M1KIFP pGXzzcz5bXNqvUaNANMFHzfgVZkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLoQXgwHrnSGzfjs/l/XyGvmeBawMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84ZDQ4YmI4OC1hNzU4LTQ0M2YtYjcwOC00OGUzODdkNjZmNTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkNDhiYjg4 LWE3NTgtNDQzZi1iNzA4LTQ4ZTM4N2Q2NmY1Ny8wL0JBMTA1RTBDMDdBRTc0ODZD REY4RUNGRTVGRDdDODZCRTY3ODE2QjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnG8IwDQYJKoZIhvcNAQELBQADggEBAFvcdsaYSxGP5N0apl2XiiVgy9eSuwXq YxFeeD2O/Io+hIQg7gVBArLmAXze3y7uYdY5nAXPzllosmNSoe0+zZ9Ii0jSsAV2 crC5qvBg3DuvHZrdglljfuI9M2lZxm3IJvQhXgnoP2x3EO2DgGM0pOAhaqGibB4a X455RKF6SlMcbD9Z3KrVCbzdUnv5mrtKDWdBL0sbhTbVk+d3vISRguw/m5WAoC0F 31AhL0zZ4f6fmu0hQeq6fmLWqJyI5d4hwAecmiCqWqRrPMc/6t8XqG5fqW+ykSOZ EslPCAGEXYrr5YkZabLafZquXfl2g/1eBYQEyJEW3ayYl2pyChHL0vo= -----END CERTIFICATE-----Generated at Sat Aug 23 08:59:32 2025 by rpki-client