$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer File: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer (raw, json) Hash identifier: nhOQZF/Vu4lxGE7JTMnQo7fYg70qotaUMdWKVfwifQg= Subject key identifier: DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0B7396A6318A2004BC36CF6324EF7D50C5C300CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft caRepository: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 23 Jun 2025 19:53:21 +0000 Certificate not after: Mon 22 Jun 2026 19:58:21 +0000 Subordinate resources: IP: 103.52.213.0/24 IP: 103.185.196.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:73:96:a6:31:8a:20:04:bc:36:cf:63:24:ef:7d:50:c5:c3:00:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 23 19:53:21 2025 GMT Not After : Jun 22 19:58:21 2026 GMT Subject: CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:4b:f1:66:8b:88:9d:73:4c:34:66:9f:11:84: fc:6e:87:c8:89:cb:48:77:31:68:28:24:93:61:fb: 6e:57:2b:33:32:f6:40:a7:89:b8:2f:77:20:21:16: f6:c9:33:56:fe:96:3f:78:36:c9:56:92:43:fc:38: 1b:4d:b8:de:92:a3:e7:53:2c:e9:af:b8:2b:fe:da: d6:46:2d:7e:a3:df:3e:19:8b:c6:3f:3c:6e:c5:4f: f4:4f:3c:41:4e:5d:5f:1a:4a:3c:94:38:8c:79:f8: 21:bd:2c:11:02:fc:b1:87:76:f7:30:18:be:b5:b1: 74:e6:5a:97:71:ae:83:c9:a5:ba:1d:ea:c2:46:1e: 62:dc:c2:23:bc:de:3a:b7:05:b8:72:b9:9e:4c:0f: 67:20:18:03:7b:b6:cf:69:ce:09:e2:a3:22:4b:b1: 43:01:82:d1:40:ae:50:de:0c:16:aa:a2:b3:c5:85: 01:57:f6:e7:d5:52:f4:a6:6e:d9:7c:14:cc:48:f4: c1:89:46:7c:21:cd:0f:49:9d:bd:36:1c:96:fc:1b: d5:5c:df:5d:9a:eb:09:dc:b5:e5:f7:49:60:99:f1: 17:89:28:ff:8b:1d:84:14:1c:a8:80:85:5e:f8:1a: 41:bc:b5:c5:60:50:37:90:6a:90:1b:68:89:0b:bf: 82:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.52.213.0/24 103.185.196.0/24 Signature Algorithm: sha256WithRSAEncryption 51:2a:0b:ed:e2:1f:76:d7:17:53:77:08:b8:d6:0f:a8:50:e0: 46:6b:8d:8c:80:0f:f6:64:f2:67:54:00:2a:d7:8f:ad:6b:66: 39:ac:03:0b:8a:d1:8f:a4:0c:e1:88:c9:13:ee:96:6b:27:2f: 16:3c:5c:8a:35:39:0c:72:ad:d4:7f:a7:58:bf:bc:a3:eb:a5: 55:a8:e9:0e:43:81:23:c9:64:66:4f:62:3c:a7:a0:7f:48:df: f0:50:7e:4e:e2:4f:d2:0f:d0:c4:87:27:9c:38:bb:93:85:07: 92:22:9f:f5:21:02:15:e3:14:18:5b:1e:3a:f3:4e:2b:f1:cd: 8b:37:68:f1:17:b6:22:c0:a3:89:ae:ea:0c:7d:16:e7:c0:43: 66:89:24:cf:9c:db:e0:a7:8f:18:53:bc:08:55:28:94:93:5f: 21:65:3b:be:eb:ab:e4:b8:69:61:09:6b:0a:0f:83:e4:52:ad: 53:a6:38:92:bc:e7:df:11:7e:9a:48:d1:d1:f5:cb:08:b8:25: 52:5e:6f:b6:ed:a3:c1:f7:f5:0f:57:de:3b:e1:12:2e:33:03: ce:00:3f:eb:45:89:44:de:e4:04:59:4d:04:b8:51:c7:be:1b: 8f:29:0b:e3:62:f6:79:ef:40:8a:a6:71:1e:67:4a:af:ca:9d: df:14:4d:e4 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUC3OWpjGKIAS8Ns9jJO99UMXDAMswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYyMzE5NTMyMVoX DTI2MDYyMjE5NTgyMVowMzExMC8GA1UEAxMoREI5QjREMTI3OUU2QzY0QjBDRERG NTkzRkIwMDZCMzk5MkQ1REY2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANhL8WaLiJ1zTDRmnxGE/G6HyInLSHcxaCgkk2H7blcrMzL2QKeJuC93ICEW 9skzVv6WP3g2yVaSQ/w4G0243pKj51Ms6a+4K/7a1kYtfqPfPhmLxj88bsVP9E88 QU5dXxpKPJQ4jHn4Ib0sEQL8sYd29zAYvrWxdOZal3Gug8mluh3qwkYeYtzCI7ze OrcFuHK5nkwPZyAYA3u2z2nOCeKjIkuxQwGC0UCuUN4MFqqis8WFAVf259VS9KZu 2XwUzEj0wYlGfCHND0mdvTYclvwb1VzfXZrrCdy15fdJYJnxF4ko/4sdhBQcqICF XvgaQby1xWBQN5BqkBtoiQu/gpECAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNubTRJ55sZLDN31k/sAazmS1d9vMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84ZTlhYmIxYS1kNmMwLTQ1NGYtODcwYS04YmVlZGQ4MWZjZDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhlOWFiYjFh LWQ2YzAtNDU0Zi04NzBhLThiZWVkZDgxZmNkMi8wL0RCOUI0RDEyNzlFNkM2NEIw Q0RERjU5M0ZCMDA2QjM5OTJENURGNkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BABnNNUDBABnucQwDQYJKoZIhvcNAQELBQADggEBAFEqC+3iH3bXF1N3CLjWD6hQ 4EZrjYyAD/Zk8mdUACrXj61rZjmsAwuK0Y+kDOGIyRPulmsnLxY8XIo1OQxyrdR/ p1i/vKPrpVWo6Q5DgSPJZGZPYjynoH9I3/BQfk7iT9IP0MSHJ5w4u5OFB5Iin/Uh AhXjFBhbHjrzTivxzYs3aPEXtiLAo4mu6gx9FufAQ2aJJM+c2+CnjxhTvAhVKJST XyFlO77rq+S4aWEJawoPg+RSrVOmOJK8598RfppI0dH1ywi4JVJeb7bto8H39Q9X 3jvhEi4zA84AP+tFiUTe5ARZTQS4Uce+G48pC+Ni9nnvQIqmcR5nSq/Knd8UTeQ= -----END CERTIFICATE-----Generated at Sun Jun 29 12:20:29 2025 by rpki-client