$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer File: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer (raw, json) Hash identifier: Pi61qVoI3fsfAj0Oy38KGY48q1XXIF5eaF8k2dHcTcU= Subject key identifier: D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0FF2F8CD4AF02860C3A7AD1BE87F02E41FED8EC5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft caRepository: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 19 Sep 2025 21:47:04 +0000 Certificate not after: Fri 18 Sep 2026 21:52:04 +0000 Subordinate resources: IP: 103.65.142.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f2:f8:cd:4a:f0:28:60:c3:a7:ad:1b:e8:7f:02:e4:1f:ed:8e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 19 21:47:04 2025 GMT Not After : Sep 18 21:52:04 2026 GMT Subject: CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c2:1b:c9:bf:0f:5b:0b:57:39:bb:1d:57:f1: fd:e5:dd:0b:25:ca:f0:4b:05:0d:9f:78:9c:de:39: 1f:ed:47:8e:00:c5:e0:22:33:6b:d5:69:6f:dc:b4: bd:47:7d:90:f8:f2:f0:2d:3f:c7:b1:7a:1e:f8:a9: 26:75:49:91:4e:6e:a0:17:0a:28:c9:24:9a:4c:42: d6:84:e8:79:57:5e:35:93:7c:65:9a:c9:f1:a6:f6: a6:4f:47:a6:ee:dd:63:87:73:83:b5:a5:db:44:52: b1:a6:1a:f6:d2:69:2b:ca:5f:17:17:3c:26:7a:be: 06:b3:d5:7d:18:d1:3e:1b:f0:96:ea:f7:63:32:cc: 40:05:c8:e1:30:59:2d:64:2b:9a:9c:80:50:cd:f7: fc:9d:4d:64:56:21:b9:ad:c6:78:92:b4:b3:b2:c1: a7:01:b8:1a:35:01:61:c1:08:fc:35:28:4c:ec:d6: ec:0a:9e:32:a6:c6:2f:34:9f:b0:47:27:35:f2:c9: 10:9b:a9:bc:6f:10:38:b3:08:34:6b:6a:e6:73:36: 48:2c:00:fc:62:02:b2:c2:05:a7:dd:8b:65:4c:5f: 72:4f:48:a8:96:b8:be:d3:26:90:e6:c9:6f:4a:db: 50:dc:f7:a6:b7:07:87:a8:04:ee:bf:f8:69:22:ad: c5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.65.142.0/23 Signature Algorithm: sha256WithRSAEncryption 6b:9c:cb:06:ac:2b:2a:06:a2:d4:e6:e7:f5:9e:0b:66:46:60: 68:11:f1:d2:cb:f3:b7:40:6e:ef:cc:44:e3:24:84:ce:41:3e: a0:8d:a1:1f:fb:52:5d:eb:c8:35:87:bc:12:d8:57:b2:2a:ba: a4:4c:51:d2:19:5d:c2:63:4e:5e:99:b3:e5:93:51:15:63:91: 41:b5:46:71:32:39:56:c8:83:72:34:2e:95:e8:cd:a6:74:23: 71:65:4a:7a:aa:b8:fa:5e:e2:ee:ef:bb:e7:f7:40:80:97:22: b5:d9:91:19:7a:50:94:43:b8:97:a8:74:d6:ff:b8:7a:0a:9d: b4:d1:69:b2:d2:94:ac:13:69:bf:d8:e9:07:8d:38:6b:ac:ae: e7:37:bb:ae:f2:6d:90:7a:00:23:27:f9:8d:d4:02:b7:48:28: ce:7b:03:7d:32:eb:c7:6a:77:95:f2:d2:3d:74:65:b6:68:f2: 48:c8:5a:98:64:b1:0b:2c:73:42:c2:28:18:4d:97:5c:1b:08: 90:7f:64:6a:87:28:f5:e5:f6:d7:70:bc:da:3c:c7:b5:7f:dc: 57:8e:a2:22:b6:04:97:fc:66:5a:3f:f5:c0:db:9e:1e:85:e3: 3d:c2:c5:3a:3c:57:08:f3:62:1b:1c:0a:07:ec:b4:96:22:8b: 7e:1f:6e:70 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUD/L4zUrwKGDDp60b6H8C5B/tjsUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxOTIxNDcwNFoX DTI2MDkxODIxNTIwNFowMzExMC8GA1UEAxMoRDY5QjM4N0U2QjlDQUYxQkQyNkIy ODZBOTQ4RDVBNzdGQjg1RjgwQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMLCG8m/D1sLVzm7HVfx/eXdCyXK8EsFDZ94nN45H+1HjgDF4CIza9Vpb9y0 vUd9kPjy8C0/x7F6HvipJnVJkU5uoBcKKMkkmkxC1oToeVdeNZN8ZZrJ8ab2pk9H pu7dY4dzg7Wl20RSsaYa9tJpK8pfFxc8Jnq+BrPVfRjRPhvwlur3YzLMQAXI4TBZ LWQrmpyAUM33/J1NZFYhua3GeJK0s7LBpwG4GjUBYcEI/DUoTOzW7AqeMqbGLzSf sEcnNfLJEJupvG8QOLMINGtq5nM2SCwA/GICssIFp92LZUxfck9IqJa4vtMmkObJ b0rbUNz3prcHh6gE7r/4aSKtxScCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNabOH5rnK8b0msoapSNWnf7hfgKMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yMDM4ZjNhMS1hYzBmLTRmN2MtOWM2Yy02YjI3NTY2ZmU3MGMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwMzhmM2Ex LWFjMGYtNGY3Yy05YzZjLTZiMjc1NjZmZTcwYy8wL0Q2OUIzODdFNkI5Q0FGMUJE MjZCMjg2QTk0OEQ1QTc3RkI4NUY4MEEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnQY4wDQYJKoZIhvcNAQELBQADggEBAGucywasKyoGotTm5/WeC2ZGYGgR8dLL 87dAbu/MROMkhM5BPqCNoR/7Ul3ryDWHvBLYV7IquqRMUdIZXcJjTl6Zs+WTURVj kUG1RnEyOVbIg3I0LpXozaZ0I3FlSnqquPpe4u7vu+f3QICXIrXZkRl6UJRDuJeo dNb/uHoKnbTRabLSlKwTab/Y6QeNOGusruc3u67ybZB6ACMn+Y3UArdIKM57A30y 68dqd5Xy0j10ZbZo8kjIWphksQssc0LCKBhNl1wbCJB/ZGqHKPXl9tdwvNo8x7V/ 3FeOoiK2BJf8Zlo/9cDbnh6F4z3CxTo8VwjzYhscCgfstJYii34fbnA= -----END CERTIFICATE-----Generated at Mon Oct 20 03:59:50 2025 by rpki-client