$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer File: BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer (raw, json) Hash identifier: HZpPyb0atWX6cLiv4yXF6Wof771JqKv9dRmFNrR9Vq8= Subject key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6650A0CF28CB5D783598DC7650F40226F084D2A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft caRepository: rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 01 Jul 2025 01:28:26 +0000 Certificate not after: Tue 30 Jun 2026 01:33:26 +0000 Subordinate resources: IP: 103.146.202.0/23 IP: 2001:df2:6d80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 08:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:50:a0:cf:28:cb:5d:78:35:98:dc:76:50:f4:02:26:f0:84:d2:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 1 01:28:26 2025 GMT Not After : Jun 30 01:33:26 2026 GMT Subject: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:b3:39:17:80:e3:91:f9:4c:6f:e8:2a:54: 69:47:35:b2:1b:72:7e:56:e6:40:1b:bc:2a:4d:18: fc:1f:b3:60:15:6a:48:be:05:e3:12:cf:30:43:6a: 92:98:35:20:bf:6c:a3:f6:ae:b9:da:7c:aa:fa:39: 9a:77:1e:14:19:36:be:7a:05:7e:39:13:5b:12:0e: bd:5f:94:52:62:40:12:bf:40:12:29:2d:de:ea:38: 0e:b0:05:77:b4:fb:08:c4:2d:18:3b:5e:f3:d9:22: d3:89:56:f0:62:c0:3c:e4:d7:8a:b6:f9:9e:e8:8f: 3a:e7:76:73:f6:78:72:b8:e5:d3:03:84:49:18:36: 8a:0a:2b:5a:46:4b:b0:e0:f2:3a:e7:0f:61:b0:93: 85:b5:84:83:a2:58:d3:62:de:04:84:67:29:24:89: a4:7b:26:6b:a7:31:17:6b:77:0a:97:62:36:bd:18: d2:8e:06:02:8c:b2:18:8a:d0:f5:e3:cf:9d:4c:a8: b9:e2:1f:70:fb:19:28:1d:36:e6:7e:54:79:ed:8d: 8b:95:99:16:2b:20:1b:96:1d:37:c9:e9:29:08:aa: 3e:7e:e4:c4:7a:5a:35:ed:42:5e:2e:07:9b:3c:db: fc:fe:85:6e:94:8c:ea:da:95:99:11:05:a4:bb:db: 09:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.202.0/23 IPv6: 2001:df2:6d80::/48 Signature Algorithm: sha256WithRSAEncryption 0c:9f:41:e4:fb:5f:28:35:29:16:f0:64:a4:14:6b:51:aa:04: 9f:58:ef:59:24:c3:24:76:82:e3:01:11:8e:e9:07:f5:63:f0: cd:fc:77:cb:0d:f6:6f:10:5e:27:5e:88:64:73:a9:66:6f:bc: 3b:b5:e6:dd:45:ea:08:29:5d:03:9e:ac:2a:7d:fd:e2:08:ec: ee:03:db:1c:f8:34:70:fd:20:6d:9c:9a:87:57:bb:44:c0:ea: be:bf:c3:96:e2:2a:48:13:1d:af:38:4b:39:6f:5d:10:25:d0: f5:74:2c:db:92:7c:15:0f:56:01:30:17:0b:91:bb:e8:42:b4: 23:a3:9d:c4:08:e2:e6:59:65:fb:a4:00:95:00:f9:90:b4:0e: 27:28:03:f0:27:45:05:63:82:37:8a:14:79:54:6a:de:eb:35: 24:be:1f:e1:2f:8d:76:c7:b8:ee:fa:d4:30:27:94:dd:7e:18: 6a:81:9c:d2:4d:1d:b8:b2:fd:50:53:6c:b8:1f:3c:0f:70:0b: f2:cd:e7:dc:f8:5d:21:f8:78:39:fa:6a:ba:fb:43:cf:27:58: bf:4b:85:4b:eb:c4:7a:ad:a0:51:ea:7a:7d:18:a5:77:d5:1a: 87:40:78:e6:60:58:2b:7f:a5:d2:a2:fb:dc:c7:e6:95:91:6d: 00:eb:a7:0f -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUZlCgzyjLXXg1mNx2UPQCJvCE0qkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwMTAxMjgyNloX DTI2MDYzMDAxMzMyNlowMzExMC8GA1UEAxMoQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VB MUMxQkJGNkUxREMyNEIxRDk4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL2vszkXgOOR+Uxv6CpUaUc1shtyflbmQBu8Kk0Y/B+zYBVqSL4F4xLPMENq kpg1IL9so/auudp8qvo5mnceFBk2vnoFfjkTWxIOvV+UUmJAEr9AEikt3uo4DrAF d7T7CMQtGDte89ki04lW8GLAPOTXirb5nuiPOud2c/Z4crjl0wOESRg2igorWkZL sODyOucPYbCThbWEg6JY02LeBIRnKSSJpHsma6cxF2t3CpdiNr0Y0o4GAoyyGIrQ 9ePPnUyoueIfcPsZKB025n5Uee2Ni5WZFisgG5YdN8npKQiqPn7kxHpaNe1CXi4H mzzb/P6FbpSM6tqVmREFpLvbCV8CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLtp8T0s7cXzSM6hwbv24dwksdmBMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jOGU4ZmY0OS1mNzBhLTRiNmYtYWFlNi04Yzc3NzY5YzVkZWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4ZThmZjQ5 LWY3MGEtNGI2Zi1hYWU2LThjNzc3NjljNWRlZS8wL0JCNjlGMTNEMkNFREM1RjM0 OENFQTFDMUJCRjZFMURDMjRCMUQ5ODEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnksowDwQCAAIwCQMHACABDfJtgDANBgkqhkiG9w0BAQsFAAOCAQEADJ9B5Ptf KDUpFvBkpBRrUaoEn1jvWSTDJHaC4wERjukH9WPwzfx3yw32bxBeJ16IZHOpZm+8 O7Xm3UXqCCldA56sKn394gjs7gPbHPg0cP0gbZyah1e7RMDqvr/DluIqSBMdrzhL OW9dECXQ9XQs25J8FQ9WATAXC5G76EK0I6OdxAji5lll+6QAlQD5kLQOJygD8CdF BWOCN4oUeVRq3us1JL4f4S+Ndse47vrUMCeU3X4YaoGc0k0duLL9UFNsuB88D3AL 8s3n3PhdIfh4OfpquvtDzydYv0uFS+vEeq2gUep6fRild9Uah0B45mBYK3+l0qL7 3MfmlZFtAOunDw== -----END CERTIFICATE-----Generated at Thu Jul 3 09:40:10 2025 by rpki-client