$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer File: A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.cer (raw, json) Hash identifier: x+qW5+5pFLBy+lEtjC4RY++LPtWb0wbNdbp6o/yEH4A= Subject key identifier: A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 548F1FF524F0FCEBBC4914B695F85F0948F275CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft caRepository: rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 04 Jul 2025 22:10:46 +0000 Certificate not after: Fri 03 Jul 2026 22:15:46 +0000 Subordinate resources: IP: 103.147.254.0/23 IP: 2405:c5c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:48:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:8f:1f:f5:24:f0:fc:eb:bc:49:14:b6:95:f8:5f:09:48:f2:75:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 4 22:10:46 2025 GMT Not After : Jul 3 22:15:46 2026 GMT Subject: CN=A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:06:1a:90:b1:71:6a:fe:28:c4:23:37:2a:b8: 6f:86:af:78:45:c1:1e:ea:c5:c6:bd:12:12:8e:08: 40:9b:02:5d:f0:ce:44:57:68:09:74:2d:c5:11:7e: 4a:02:ed:f5:bc:0b:5f:40:8a:4d:11:05:0a:e6:e5: 4e:eb:fa:cc:37:e5:70:4a:b2:aa:92:f4:88:c5:37: 74:41:6a:d8:ca:d9:26:dd:64:96:f3:af:e6:eb:86: 46:78:5f:0f:d4:26:1a:5c:de:66:f0:c7:4d:d3:47: 55:ad:45:9b:13:0e:0b:96:15:ba:61:6b:05:8a:f1: 9c:f5:c2:28:c6:a2:83:d2:f5:08:41:2c:2b:97:5c: 33:d9:d5:94:da:58:d2:5e:ae:be:8b:c2:ad:b0:08: ee:fa:13:a6:62:6f:5e:34:20:36:c4:54:18:91:53: 9d:07:81:3b:d2:1c:d3:18:de:3f:98:38:d9:3f:f4: 90:95:64:35:5f:c3:81:97:b2:64:ec:96:62:7c:a2: 6d:95:67:b3:5d:ba:27:a9:f0:8b:84:59:dd:83:52: 33:aa:9b:7d:aa:b2:80:bd:ac:20:e1:d9:e7:ba:6f: 4d:56:9f:9c:40:a3:f8:72:34:09:55:44:e2:dd:d0: 85:cd:23:25:8a:83:69:87:2f:eb:03:0e:3f:ba:52: 9d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:C7:B1:CA:0B:90:88:55:EE:58:F1:99:1C:CC:95:B5:7C:4C:8E:0D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/60e4750e-4393-43ec-9ab5-d247bbc07d86/0/A6C7B1CA0B908855EE58F1991CCC95B57C4C8E0D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.147.254.0/23 IPv6: 2405:c5c0::/32 Signature Algorithm: sha256WithRSAEncryption 42:c8:64:63:b9:d5:60:14:41:5e:4f:22:44:7a:8f:d1:87:b3: d8:1b:42:bb:93:d2:1d:89:ff:4a:01:1b:c5:8e:0c:5a:8f:d5: 1a:f9:f4:04:0b:55:7e:b1:f9:d5:dd:d4:d8:b5:86:1c:89:c3: fb:eb:43:e9:d8:6d:87:eb:4a:20:b5:f0:78:26:80:7b:24:82: de:6a:12:83:c3:7a:90:35:f5:3f:f0:e1:d6:9f:cb:03:55:7d: 89:bc:77:b3:b2:a0:ae:9c:5d:c7:b5:2e:f6:2c:2c:c7:54:1c: 2d:94:f3:a5:38:ed:ee:1c:69:e5:36:6d:3a:c0:9a:42:ab:66: 2a:d5:48:95:04:3d:40:8c:69:96:fb:51:e1:f4:0b:af:de:1b: 6f:44:ab:c7:4c:c1:ea:f1:9e:81:68:06:3c:4e:1a:ca:64:89: 2c:6e:22:03:f5:b2:e1:85:69:a1:86:a7:ca:3f:30:cf:72:d9: e0:02:4d:d3:7e:49:8d:8d:f7:c1:4d:58:45:91:60:77:ca:22: 84:99:4d:4e:bf:26:0f:8a:f6:26:07:e6:1f:5c:0f:ef:6d:ea: 6d:66:cb:47:18:1d:41:85:c6:fc:a9:d8:17:b2:9d:b0:da:a1: 66:69:68:4a:77:36:2f:fc:e2:7e:f5:df:9a:2d:97:84:d0:8c: 70:ce:ec:19 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUVI8f9STw/Ou8SRS2lfhfCUjydc4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcwNDIyMTA0NloX DTI2MDcwMzIyMTU0NlowMzExMC8GA1UEAxMoQTZDN0IxQ0EwQjkwODg1NUVFNThG MTk5MUNDQzk1QjU3QzRDOEUwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKAGGpCxcWr+KMQjNyq4b4aveEXBHurFxr0SEo4IQJsCXfDORFdoCXQtxRF+ SgLt9bwLX0CKTREFCublTuv6zDflcEqyqpL0iMU3dEFq2MrZJt1klvOv5uuGRnhf D9QmGlzeZvDHTdNHVa1FmxMOC5YVumFrBYrxnPXCKMaig9L1CEEsK5dcM9nVlNpY 0l6uvovCrbAI7voTpmJvXjQgNsRUGJFTnQeBO9Ic0xjeP5g42T/0kJVkNV/DgZey ZOyWYnyibZVns126J6nwi4RZ3YNSM6qbfaqygL2sIOHZ57pvTVafnECj+HI0CVVE 4t3Qhc0jJYqDaYcv6wMOP7pSnbsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKbHscoLkIhV7ljxmRzMlbV8TI4NMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82MGU0NzUwZS00MzkzLTQzZWMtOWFiNS1kMjQ3YmJjMDdkODYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwZTQ3NTBl LTQzOTMtNDNlYy05YWI1LWQyNDdiYmMwN2Q4Ni8wL0E2QzdCMUNBMEI5MDg4NTVF RTU4RjE5OTFDQ0M5NUI1N0M0QzhFMEQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnk/4wDQQCAAIwBwMFACQFxcAwDQYJKoZIhvcNAQELBQADggEBAELIZGO51WAU QV5PIkR6j9GHs9gbQruT0h2J/0oBG8WODFqP1Rr59AQLVX6x+dXd1Ni1hhyJw/vr Q+nYbYfrSiC18HgmgHskgt5qEoPDepA19T/w4dafywNVfYm8d7OyoK6cXce1LvYs LMdUHC2U86U47e4caeU2bTrAmkKrZirVSJUEPUCMaZb7UeH0C6/eG29Eq8dMwerx noFoBjxOGspkiSxuIgP1suGFaaGGp8o/MM9y2eACTdN+SY2N98FNWEWRYHfKIoSZ TU6/Jg+K9iYH5h9cD+9t6m1my0cYHUGFxvyp2BeynbDaoWZpaEp3Ni/84n7135ot l4TQjHDO7Bk= -----END CERTIFICATE-----Generated at Mon Jul 21 12:48:01 2025 by rpki-client