$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer File: D6E54AF6C437868899B99F4312CD3DBB493B5D29.cer (raw, json) Hash identifier: SDiauqG3MUgXyrcjbmYyu19+0XMAimqgPtdV5jhWQsY= Subject key identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 52B469F497F8F90A46D78D42CD7EC8B36A8BB505 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft caRepository: rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 04 Oct 2025 03:52:28 +0000 Certificate not after: Sat 03 Oct 2026 03:57:28 +0000 Subordinate resources: IP: 103.39.72.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b4:69:f4:97:f8:f9:0a:46:d7:8d:42:cd:7e:c8:b3:6a:8b:b5:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 4 03:52:28 2025 GMT Not After : Oct 3 03:57:28 2026 GMT Subject: CN=D6E54AF6C437868899B99F4312CD3DBB493B5D29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:19:b8:66:09:e0:b3:b6:6d:99:96:2b:9b: 69:ab:d6:4e:7b:05:6d:df:b0:a2:e4:92:aa:06:14: 1b:21:29:ea:3c:fe:de:df:56:d9:d5:a4:0d:ba:b6: 78:4c:e8:b4:74:4d:88:26:45:e6:41:e8:57:17:75: 1f:3f:b6:06:5a:f6:ec:2d:7e:00:47:e5:90:03:64: 18:eb:29:04:0e:52:97:03:66:04:ca:ce:66:c3:b4: d1:1d:8b:65:a7:7b:97:5b:15:66:4f:8d:76:7b:03: 71:5a:bd:6e:4e:d8:b3:bf:a4:61:ef:f7:ce:46:87: f6:86:df:a9:d7:0e:18:75:c4:68:82:32:90:6f:74: 7d:da:e3:58:5e:3d:b0:bb:99:1b:e5:5f:d8:64:b7: 39:93:fe:be:e7:46:9e:28:f5:28:8d:9b:a5:a2:55: b0:d9:95:cf:b2:da:a4:a5:43:9d:66:f8:9c:d6:64: ed:d5:16:d6:93:d1:83:39:9a:e0:cb:d7:54:a4:dc: e2:4a:f6:4d:cd:d6:33:8c:c0:3a:eb:b8:39:9a:b9: aa:d3:fb:b4:82:13:52:5b:53:2d:35:bb:c0:49:04: b9:81:78:b7:03:f5:d6:aa:80:08:2c:8c:e3:91:ac: 33:fd:92:6b:7a:98:61:7b:8c:4b:80:ac:2a:d4:33: 7f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D6:E5:4A:F6:C4:37:86:88:99:B9:9F:43:12:CD:3D:BB:49:3B:5D:29 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/10c73af5-a2c0-424d-862e-112c58b7270e/0/D6E54AF6C437868899B99F4312CD3DBB493B5D29.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.39.72.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:c5:48:41:1a:a6:5f:cf:11:e4:5a:ac:4e:ac:0e:1e:b7:bf: 12:34:dc:6d:de:9d:83:9b:92:42:68:9f:49:9a:75:25:db:12: db:a6:1e:0f:cb:8d:dd:28:c8:b0:58:db:cd:a3:43:57:f7:33: 69:77:b9:ba:5c:b1:8a:22:ed:dd:3c:ba:81:13:b7:80:d9:46: 6d:70:17:13:4b:9c:ad:22:b4:fd:8f:db:9b:0b:a7:c5:b7:50: bb:da:4c:09:31:53:f5:4d:ba:8f:7b:f0:2c:c3:6f:60:d1:92: 9c:87:d1:8c:da:01:85:67:d9:9d:01:92:ac:26:d2:23:df:aa: b5:7b:71:5d:8f:16:fa:f7:cd:47:6c:36:c8:bb:20:89:09:5e: e3:5b:e0:41:a2:5d:98:1e:bf:03:85:4d:74:9a:7d:f3:0d:31: 44:6f:49:e1:37:e6:72:f8:c2:bf:df:f3:a8:a9:0b:52:9e:3c: db:74:28:91:03:b4:42:59:c1:08:a5:97:ee:93:ae:80:2a:0d: 7f:e7:04:cc:be:c3:06:68:ce:b3:dd:57:5d:8f:ce:b7:56:f4: 9b:ec:18:37:f1:58:37:99:aa:eb:19:d0:92:b2:b5:cb:7d:ae: 2a:b4:ff:8b:fc:0b:a1:e4:7d:64:58:e4:ac:81:e5:8b:e5:e1: f8:32:01:0c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUrRp9Jf4+QpG141CzX7Is2qLtQUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAwNDAzNTIyOFoX DTI2MTAwMzAzNTcyOFowMzExMC8GA1UEAxMoRDZFNTRBRjZDNDM3ODY4ODk5Qjk5 RjQzMTJDRDNEQkI0OTNCNUQyOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALlpGbhmCeCztm2ZliubaavWTnsFbd+wouSSqgYUGyEp6jz+3t9W2dWkDbq2 eEzotHRNiCZF5kHoVxd1Hz+2Blr27C1+AEflkANkGOspBA5SlwNmBMrOZsO00R2L Zad7l1sVZk+NdnsDcVq9bk7Ys7+kYe/3zkaH9obfqdcOGHXEaIIykG90fdrjWF49 sLuZG+Vf2GS3OZP+vudGnij1KI2bpaJVsNmVz7LapKVDnWb4nNZk7dUW1pPRgzma 4MvXVKTc4kr2Tc3WM4zAOuu4OZq5qtP7tIITUltTLTW7wEkEuYF4twP11qqACCyM 45GsM/2Sa3qYYXuMS4CsKtQzf3MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNblSvbEN4aImbmfQxLNPbtJO10pMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xMGM3M2FmNS1hMmMwLTQyNGQtODYyZS0xMTJjNThiNzI3MGUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEwYzczYWY1 LWEyYzAtNDI0ZC04NjJlLTExMmM1OGI3MjcwZS8wL0Q2RTU0QUY2QzQzNzg2ODg5 OUI5OUY0MzEyQ0QzREJCNDkzQjVEMjkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnJ0gwDQYJKoZIhvcNAQELBQADggEBAHrFSEEapl/PEeRarE6sDh63vxI03G3e nYObkkJon0madSXbEtumHg/Ljd0oyLBY282jQ1f3M2l3ubpcsYoi7d08uoETt4DZ Rm1wFxNLnK0itP2P25sLp8W3ULvaTAkxU/VNuo978CzDb2DRkpyH0YzaAYVn2Z0B kqwm0iPfqrV7cV2PFvr3zUdsNsi7IIkJXuNb4EGiXZgevwOFTXSaffMNMURvSeE3 5nL4wr/f86ipC1KePNt0KJEDtEJZwQill+6TroAqDX/nBMy+wwZozrPdV12PzrdW 9JvsGDfxWDeZqusZ0JKytct9riq0/4v8C6HkfWRY5KyB5Yvl4fgyAQw= -----END CERTIFICATE-----Generated at Mon Oct 20 06:28:28 2025 by rpki-client