$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer (raw, json) Hash identifier: E/HHNfzyqdY+O3eKQ7uou3t7amYMsaEY+q3TWw+KL9o= Subject key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5FD60C928AFA6C77600C8A707B7A290137381900 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft caRepository: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Jun 2025 14:48:50 +0000 Certificate not after: Thu 04 Jun 2026 14:53:50 +0000 Subordinate resources: IP: 103.226.48.0/22 IP: 2400:a680::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 03:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d6:0c:92:8a:fa:6c:77:60:0c:8a:70:7b:7a:29:01:37:38:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 5 14:48:50 2025 GMT Not After : Jun 4 14:53:50 2026 GMT Subject: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:6e:4f:90:4a:27:f9:ea:2c:b6:48:cb:f7: 0c:69:5a:59:2b:02:ff:de:48:b4:e0:85:6e:49:2f: 9c:82:9d:0c:d9:6d:8b:6f:bb:28:3c:4c:6a:7b:d4: e1:df:dc:a8:fd:38:8a:e2:52:ef:8e:62:0c:4a:39: b9:ec:55:64:28:3c:cd:a4:f4:c7:19:a3:10:05:1e: 5c:50:5d:a1:52:4b:e7:44:ba:6f:86:c8:2e:4f:51: 96:2b:6b:90:21:02:16:01:38:b2:bc:4e:67:0d:02: b6:74:87:06:c1:86:96:3b:18:27:1a:36:91:b3:59: 36:a4:09:1f:3d:f5:67:51:e9:84:f1:fb:ec:07:3e: fb:c7:b0:66:00:ee:f1:7c:9c:26:ec:0c:cf:a3:3f: 46:1e:21:c4:fc:89:2e:95:f6:e7:53:db:b5:b8:f8: bf:bc:25:dc:2f:a6:0a:89:3b:9c:08:3c:67:3d:63: d0:c3:9f:3f:89:37:02:67:66:28:d4:6a:c0:6a:10: f6:9b:2a:4c:e5:64:3a:54:f9:66:d6:e2:11:8c:2d: 12:c6:a1:ee:f7:a8:37:81:90:2b:5b:eb:a1:07:04: 1d:2f:df:26:2c:ef:f6:02:61:54:3f:71:ce:37:c1: 4c:12:99:ce:4a:ec:55:dd:26:c5:27:e2:1e:73:59: b9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.226.48.0/22 IPv6: 2400:a680::/32 Signature Algorithm: sha256WithRSAEncryption 4d:60:e6:36:23:f4:28:81:c7:3d:1f:72:74:92:df:82:56:7e: dd:4b:de:71:14:cf:44:95:98:1a:cb:0f:61:f5:f1:7a:d8:e1: 06:9b:31:7f:74:36:fe:8c:df:7a:db:86:4c:d7:b6:98:28:9b: e7:aa:7e:59:0b:9f:9c:ad:6a:80:5e:a3:72:66:4b:ae:94:45: b0:8a:e0:ac:ee:25:53:81:d6:b6:94:1e:9e:2b:9f:4c:89:c9: a8:d0:be:ea:d5:82:15:3d:05:17:3a:81:d8:ca:0e:19:6f:20: bc:bd:7b:65:95:9f:30:4b:1d:6e:cb:f2:22:1f:f8:66:10:09: 9d:92:8e:80:b6:b0:2c:dc:e1:29:1e:12:00:a8:48:c0:80:d7: b8:da:2e:a8:9b:fa:4f:1c:1b:2f:6d:3e:60:13:1e:00:76:2e: d4:cf:ea:4d:12:1d:ee:ea:d2:d2:fe:f0:08:8b:f7:cd:7e:55: c2:30:b8:37:69:e9:0e:2c:85:38:11:64:08:31:31:85:01:50: 38:8a:0c:a3:74:9f:93:cb:12:cd:20:bb:81:83:d8:89:cc:bb: 46:49:79:c0:7f:f7:05:90:46:00:2e:3e:f9:e6:b5:70:8e:ab: 75:86:cd:0a:98:78:80:d8:30:2c:80:c0:8a:b1:94:da:e4:0d: 55:e5:12:3a -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUX9YMkor6bHdgDIpwe3opATc4GQAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwNTE0NDg1MFoX DTI2MDYwNDE0NTM1MFowMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2 ODkyNjEyRTBCRUQzRkZGQjUyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMxebk+QSif56iy2SMv3DGlaWSsC/95ItOCFbkkvnIKdDNlti2+7KDxManvU 4d/cqP04iuJS745iDEo5uexVZCg8zaT0xxmjEAUeXFBdoVJL50S6b4bILk9Rlitr kCECFgE4srxOZw0CtnSHBsGGljsYJxo2kbNZNqQJHz31Z1HphPH77Ac++8ewZgDu 8XycJuwMz6M/Rh4hxPyJLpX251Pbtbj4v7wl3C+mCok7nAg8Zz1j0MOfP4k3Amdm KNRqwGoQ9psqTOVkOlT5ZtbiEYwtEsah7veoN4GQK1vroQcEHS/fJizv9gJhVD9x zjfBTBKZzkrsVd0mxSfiHnNZuckCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL4qntyMVW1N14RokmEuC+0//7UrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wNjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA2MGNlNzMz LTc3ZjQtNGUxZC1iNWVjLTYxZWRlNGRhMDc0ZC8wL0JFMkE5RURDOEM1NTZENERE Nzg0Njg5MjYxMkUwQkVEM0ZGRkI1MkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJn4jAwDQQCAAIwBwMFACQApoAwDQYJKoZIhvcNAQELBQADggEBAE1g5jYj9CiB xz0fcnSS34JWft1L3nEUz0SVmBrLD2H18XrY4QabMX90Nv6M33rbhkzXtpgom+eq flkLn5ytaoBeo3JmS66URbCK4KzuJVOB1raUHp4rn0yJyajQvurVghU9BRc6gdjK DhlvILy9e2WVnzBLHW7L8iIf+GYQCZ2SjoC2sCzc4SkeEgCoSMCA17jaLqib+k8c Gy9tPmATHgB2LtTP6k0SHe7q0tL+8AiL981+VcIwuDdp6Q4shTgRZAgxMYUBUDiK DKN0n5PLEs0gu4GD2InMu0ZJecB/9wWQRgAuPvnmtXCOq3WGzQqYeIDYMCyAwIqx lNrkDVXlEjo= -----END CERTIFICATE-----Generated at Wed Jul 2 23:35:01 2025 by rpki-client