$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer File: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer (raw, json) Hash identifier: U6vtC77jiewbdAlBTLkT/bL4fRDT9vkX6k8qNXr07Qs= Subject key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 54519CABBF7746E97966C1E61C40416F26C1F641 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft caRepository: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 22 Sep 2025 22:48:37 +0000 Certificate not after: Mon 21 Sep 2026 22:53:37 +0000 Subordinate resources: IP: 103.43.26.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:51:9c:ab:bf:77:46:e9:79:66:c1:e6:1c:40:41:6f:26:c1:f6:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 22 22:48:37 2025 GMT Not After : Sep 21 22:53:37 2026 GMT Subject: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:09:6f:ab:73:a0:b5:b9:b6:1b:b3:e6:2e:41: e1:a3:d2:b5:7b:46:cd:5d:0b:e4:86:5d:ef:4e:ab: 0f:28:4d:7d:d1:a9:ba:69:4d:3c:de:7b:d9:f3:3b: 90:11:c4:a8:3f:8b:f6:48:d0:d7:a5:c8:79:02:c9: 6a:f9:78:08:cc:7b:8f:09:2e:7b:f1:15:33:f9:c6: 4c:64:1d:f4:f9:d1:44:bb:dd:b6:f4:d3:e0:34:a6: 9b:30:23:ae:54:90:20:c5:8b:c5:29:1e:33:29:c6: dc:5b:49:28:63:3a:80:da:b0:a7:b4:26:47:6d:c2: 51:16:94:a3:22:ce:39:1f:6c:61:97:4f:29:02:c7: 54:d0:1a:3b:33:6c:92:90:9b:e6:d9:0c:a1:43:15: 07:cb:f2:72:f4:79:38:30:96:7d:a2:9d:53:f3:0b: bc:fd:48:ba:8c:40:70:21:4e:51:31:64:7f:b4:60: ef:18:f8:a5:1d:ec:51:a3:8b:51:55:ce:88:c3:1d: 81:ce:29:01:ea:5c:25:50:4c:19:7d:19:fb:4d:61: 90:12:98:6d:86:e7:5c:44:0c:4e:75:31:cd:9f:a2: f3:c4:20:42:cd:e4:8f:cc:ae:5f:a1:c9:82:dc:ff: 36:5f:7b:26:0b:44:0a:75:53:70:cc:33:b7:22:ae: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.43.26.0/23 Signature Algorithm: sha256WithRSAEncryption 60:8d:59:f6:e3:7f:9d:72:e3:b5:68:eb:00:82:af:11:02:ad: 61:7d:ad:6e:d8:85:a7:fa:2a:f8:7e:79:2f:da:d2:59:9e:15: ea:58:ac:94:2e:db:0a:06:e1:a8:bf:c0:d3:ec:35:c6:db:7a: 7c:e9:c8:56:ec:8c:4b:ae:82:a7:c2:9e:92:59:96:c7:c6:15: 49:fd:2e:67:4f:99:b7:c3:39:85:6d:6d:63:18:45:5a:fc:10: 61:ec:18:90:bc:19:43:97:06:d5:24:5d:dd:b8:3b:ba:04:cc: 10:e2:4e:35:ac:30:d8:54:50:06:3f:71:f9:d4:cf:59:1e:87: c4:f5:58:cc:5c:30:17:07:03:05:71:22:d8:cc:d6:f5:16:be: 74:f1:15:1f:bc:71:b8:de:56:13:6d:7c:cb:96:ef:17:12:59: ba:49:fd:bd:a8:4f:ab:b6:88:0b:b4:fa:d8:a9:04:ca:de:c0: f6:47:9f:74:3d:9e:b2:75:0c:b5:b2:86:0b:61:9b:cb:30:e5: 34:cc:78:ff:d6:0a:39:4c:18:5d:27:d0:5c:8e:47:f3:23:75: d9:67:42:84:f7:1a:cc:9e:c3:f8:9a:36:36:39:2e:e8:fd:66: 71:90:73:ae:bf:f0:de:21:ab:ba:34:2a:e9:c2:64:6a:ac:86: c9:9e:8f:d6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVFGcq793Rul5ZsHmHEBBbybB9kEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyMjIyNDgzN1oX DTI2MDkyMTIyNTMzN1owMzExMC8GA1UEAxMoQkVFMzZBQjgzNTFBRkU4MEYxQjBD RThGMTJBQTQwMDg5ODI5QkI2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPMJb6tzoLW5thuz5i5B4aPStXtGzV0L5IZd706rDyhNfdGpumlNPN572fM7 kBHEqD+L9kjQ16XIeQLJavl4CMx7jwkue/EVM/nGTGQd9PnRRLvdtvTT4DSmmzAj rlSQIMWLxSkeMynG3FtJKGM6gNqwp7QmR23CURaUoyLOOR9sYZdPKQLHVNAaOzNs kpCb5tkMoUMVB8vycvR5ODCWfaKdU/MLvP1IuoxAcCFOUTFkf7Rg7xj4pR3sUaOL UVXOiMMdgc4pAepcJVBMGX0Z+01hkBKYbYbnXEQMTnUxzZ+i88QgQs3kj8yuX6HJ gtz/Nl97JgtECnVTcMwztyKui4sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL7jarg1Gv6A8bDOjxKqQAiYKbtvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81MTI0YjRiNS03ODEzLTQ2Y2QtOWRiNC1hM2NkNTg1ZTBlZDQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxMjRiNGI1 LTc4MTMtNDZjZC05ZGI0LWEzY2Q1ODVlMGVkNC8wL0JFRTM2QUI4MzUxQUZFODBG MUIwQ0U4RjEyQUE0MDA4OTgyOUJCNkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnKxowDQYJKoZIhvcNAQELBQADggEBAGCNWfbjf51y47Vo6wCCrxECrWF9rW7Y haf6Kvh+eS/a0lmeFepYrJQu2woG4ai/wNPsNcbbenzpyFbsjEuugqfCnpJZlsfG FUn9LmdPmbfDOYVtbWMYRVr8EGHsGJC8GUOXBtUkXd24O7oEzBDiTjWsMNhUUAY/ cfnUz1keh8T1WMxcMBcHAwVxItjM1vUWvnTxFR+8cbjeVhNtfMuW7xcSWbpJ/b2o T6u2iAu0+tipBMrewPZHn3Q9nrJ1DLWyhgthm8sw5TTMeP/WCjlMGF0n0FyOR/Mj ddlnQoT3Gsyew/iaNjY5Luj9ZnGQc66/8N4hq7o0KunCZGqshsmej9Y= -----END CERTIFICATE-----Generated at Mon Oct 20 03:30:46 2025 by rpki-client