$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer File: 6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.cer (raw, json) Hash identifier: 0MzjWGssxVfETnyAeQBubqDykUqomgvpUrwYP+3qdb4= Subject key identifier: 6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1EF6A01EB82E03C94E5DBA3D86D273ABFEA37EF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft caRepository: rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 18 Jul 2025 12:21:20 +0000 Certificate not after: Fri 17 Jul 2026 12:26:20 +0000 Subordinate resources: IP: 103.175.158.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:f6:a0:1e:b8:2e:03:c9:4e:5d:ba:3d:86:d2:73:ab:fe:a3:7e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 18 12:21:20 2025 GMT Not After : Jul 17 12:26:20 2026 GMT Subject: CN=6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b6:2b:c9:b1:49:3f:9a:a0:54:bf:de:0f:a3: 7d:96:0f:00:5b:8d:6d:87:bb:8d:ca:55:9f:25:32: db:6d:f9:0c:5a:46:82:f7:76:5a:6e:8e:e7:77:fc: 6d:91:20:d7:0f:53:09:79:95:68:50:5c:44:b6:a2: 5c:95:78:3f:f1:ae:14:bb:da:17:a4:af:d9:de:f1: 0b:23:0d:0c:b3:26:2f:6e:17:7f:f7:9f:3b:f2:fe: f4:9d:5f:ca:17:14:b8:18:00:60:a3:ba:c3:74:a6: 59:50:2c:df:de:59:e0:5c:9e:b9:53:4c:6f:66:97: 30:74:b9:4c:94:25:11:cc:46:9c:73:50:d6:33:99: 26:02:34:5a:23:b3:91:30:bd:fe:00:2f:fa:dd:81: 37:43:1c:7d:c5:36:9c:1c:9a:79:ba:f6:24:d4:51: 91:43:8c:d6:56:3e:23:6e:6b:aa:f1:15:53:73:d2: 58:ad:53:2b:01:a6:43:46:45:d0:34:79:b7:f0:5f: aa:32:3a:59:80:f4:66:71:b9:89:96:d1:27:68:63: 8e:33:c2:90:7d:90:7c:31:f0:10:0b:22:a2:ed:0e: 5a:aa:bc:a7:f8:fe:f7:34:41:7f:61:3b:a2:54:08: fd:57:d8:28:8c:cb:a8:65:41:b8:59:80:dc:5b:70: 79:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:FA:BB:BC:88:D3:9C:7F:78:09:5D:A7:D3:D3:5D:D3:AA:2E:95:67 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/73874cf3-adb1-4947-a7e4-a2d32c54ed1f/0/6CFABBBC88D39C7F78095DA7D3D35DD3AA2E9567.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.158.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:01:3a:19:d2:35:e8:72:c2:45:b3:0c:88:7b:7d:3c:44:ea: 4e:fc:ed:2e:fc:78:fe:77:22:5c:be:78:3d:cf:08:fa:26:5e: 99:ea:51:44:b6:7f:26:1d:4d:58:cc:a1:a1:28:45:da:37:61: be:4a:30:06:2c:27:8c:80:d8:cb:e6:52:ea:e0:cf:09:e5:54: bf:49:45:20:fe:5e:3e:7d:5d:d2:c4:aa:93:ba:b2:6d:be:fe: 8f:27:9a:11:91:52:20:0a:12:b8:67:bd:ea:49:ac:5a:f1:11: 16:17:eb:74:c6:5b:ca:7b:1e:88:13:e8:09:4c:f5:c1:23:58: 43:be:07:37:f9:fb:68:f4:31:a4:9f:fb:32:11:67:53:a8:b6: c7:99:f0:d5:2e:a8:74:ad:d5:7a:37:eb:01:cd:27:4d:6c:30: 92:b8:43:6c:7e:58:12:5f:b6:88:e7:49:d9:0a:5f:71:bc:5b: 1e:a1:13:77:a4:ce:59:d2:d8:6d:c8:71:6f:3d:4c:16:3e:d7: 83:d3:44:95:d2:15:59:55:b4:4a:b6:87:43:e1:69:d7:b0:2c: 97:34:72:35:12:ef:e6:59:53:d2:bb:f3:24:14:43:6b:45:50: 78:cb:5a:a8:76:f2:42:4c:9c:7c:bb:91:5c:74:63:5e:a2:35: 97:0f:d7:92 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHvagHrguA8lOXbo9htJzq/6jfvEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxODEyMjEyMFoX DTI2MDcxNzEyMjYyMFowMzExMC8GA1UEAxMoNkNGQUJCQkM4OEQzOUM3Rjc4MDk1 REE3RDNEMzVERDNBQTJFOTU2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKu2K8mxST+aoFS/3g+jfZYPAFuNbYe7jcpVnyUy2235DFpGgvd2Wm6O53f8 bZEg1w9TCXmVaFBcRLaiXJV4P/GuFLvaF6Sv2d7xCyMNDLMmL24Xf/efO/L+9J1f yhcUuBgAYKO6w3SmWVAs395Z4FyeuVNMb2aXMHS5TJQlEcxGnHNQ1jOZJgI0WiOz kTC9/gAv+t2BN0McfcU2nByaebr2JNRRkUOM1lY+I25rqvEVU3PSWK1TKwGmQ0ZF 0DR5t/BfqjI6WYD0ZnG5iZbRJ2hjjjPCkH2QfDHwEAsiou0OWqq8p/j+9zRBf2E7 olQI/VfYKIzLqGVBuFmA3FtweZcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGz6u7yI05x/eAldp9PTXdOqLpVnMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83Mzg3NGNmMy1hZGIxLTQ5NDctYTdlNC1hMmQzMmM1NGVkMWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczODc0Y2Yz LWFkYjEtNDk0Ny1hN2U0LWEyZDMyYzU0ZWQxZi8wLzZDRkFCQkJDODhEMzlDN0Y3 ODA5NURBN0QzRDM1REQzQUEyRTk1NjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnr54wDQYJKoZIhvcNAQELBQADggEBAC8BOhnSNehywkWzDIh7fTxE6k787S78 eP53Ily+eD3PCPomXpnqUUS2fyYdTVjMoaEoRdo3Yb5KMAYsJ4yA2MvmUurgzwnl VL9JRSD+Xj59XdLEqpO6sm2+/o8nmhGRUiAKErhnvepJrFrxERYX63TGW8p7HogT 6AlM9cEjWEO+Bzf5+2j0MaSf+zIRZ1OotseZ8NUuqHSt1Xo36wHNJ01sMJK4Q2x+ WBJftojnSdkKX3G8Wx6hE3ekzlnS2G3IcW89TBY+14PTRJXSFVlVtEq2h0Phadew LJc0cjUS7+ZZU9K78yQUQ2tFUHjLWqh28kJMnHy7kVx0Y16iNZcP15I= -----END CERTIFICATE-----Generated at Sun Jul 20 20:58:29 2025 by rpki-client