$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3D13C6FB9DB22CE134706325357C20E1DC9A1269.cer File: 3D13C6FB9DB22CE134706325357C20E1DC9A1269.cer (raw, json) Hash identifier: IU7mPMCGlJAK/GIryYu0RKeAdJnjLSqR0bOoWXwNbqQ= Subject key identifier: 3D:13:C6:FB:9D:B2:2C:E1:34:70:63:25:35:7C:20:E1:DC:9A:12:69 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7B7C86F4B798817DFBC3A333DC7F0D7B11545757 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.mft caRepository: rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 29 Aug 2025 09:17:47 +0000 Certificate not after: Fri 28 Aug 2026 09:22:47 +0000 Subordinate resources: IP: 103.24.56.0/22 IP: 202.9.85.0/24 IP: 2001:df0:a8::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7c:86:f4:b7:98:81:7d:fb:c3:a3:33:dc:7f:0d:7b:11:54:57:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 29 09:17:47 2025 GMT Not After : Aug 28 09:22:47 2026 GMT Subject: CN=3D13C6FB9DB22CE134706325357C20E1DC9A1269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:17:5a:7a:fa:00:b3:03:3c:ef:b5:8b:0d:81: fb:4d:26:12:43:6d:84:31:cf:c3:a7:c0:be:1d:3b: d8:a3:94:56:f6:45:69:06:32:b3:15:3d:42:76:b8: 47:6a:62:d6:52:6d:c3:de:cf:5e:c2:8e:c0:e3:ad: ba:e0:2a:75:c4:d7:bc:63:cf:11:80:cf:f9:92:38: c4:28:db:5b:f3:d4:4a:56:86:2d:da:f2:14:af:72: f5:83:4e:dc:e3:8b:cc:b5:ef:09:93:47:18:16:2e: 12:4a:ad:2d:38:33:c9:84:16:25:0a:63:5f:a1:04: 73:67:1b:1e:81:ff:34:cc:c5:a1:c8:7f:51:6e:7b: fc:51:fe:71:66:e3:ec:e2:ea:34:49:8c:84:01:49: 17:fc:f2:81:0d:33:4f:08:8f:fb:22:be:14:96:ca: 5c:49:8c:10:0f:40:e8:e3:0a:d7:e0:eb:1e:5f:53: 76:95:07:72:45:1a:8d:c8:ed:5b:6f:c0:47:08:0d: 6c:db:6b:c8:46:12:a1:72:e6:9a:f6:39:a5:06:2a: 40:06:d1:8a:71:10:7f:73:0a:23:ee:9d:2f:fe:7d: 8f:c6:80:d0:7b:ff:52:4f:0c:ef:ff:f8:fa:2a:0a: cd:77:cb:ad:aa:d7:1d:cd:1a:b8:1e:cb:71:1f:43: 15:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3D:13:C6:FB:9D:B2:2C:E1:34:70:63:25:35:7C:20:E1:DC:9A:12:69 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bd1ee5e2-338c-4d20-807e-e50b75583db8/0/3D13C6FB9DB22CE134706325357C20E1DC9A1269.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.56.0/22 202.9.85.0/24 IPv6: 2001:df0:a8::/48 Signature Algorithm: sha256WithRSAEncryption 78:18:84:5d:6a:7a:5a:d4:8b:79:ff:47:a7:7d:0d:2d:d7:19: c7:37:76:b8:94:f2:9b:42:b0:7b:37:a5:e6:5b:93:ae:d9:28: 8a:74:12:27:e0:14:9f:9a:5e:a8:20:f7:8b:2f:8f:4a:02:dd: 05:ff:4b:cf:60:00:60:ec:b7:0d:57:d0:ae:a7:65:05:2c:eb: ab:42:0d:09:22:df:39:7c:e9:b9:42:1a:43:ff:33:37:11:a8: 5f:4f:0e:57:14:b3:ec:09:e1:a4:9d:4b:33:b6:69:12:e0:f2: 69:4b:08:eb:47:e8:c5:23:d7:82:82:57:bf:e4:82:1f:e5:ad: a9:62:b8:8a:fb:85:c3:ef:7a:0b:7b:70:2f:f5:a1:89:4a:1b: b5:0b:a5:72:76:dd:2b:d0:ac:5b:d5:1f:6b:93:a2:f5:55:31: a7:7f:dc:30:e6:41:f1:4b:03:b2:d9:ff:44:23:75:c7:63:39: eb:cf:d3:5d:72:69:60:e4:d3:8e:0b:f4:46:aa:72:b6:7b:d3: 59:24:cd:50:80:fe:de:06:02:b8:0b:63:88:71:2c:72:48:78: dd:e0:79:43:0e:75:eb:62:d7:a1:28:35:7b:0c:5f:a5:80:c0: 55:7c:24:ea:64:2f:09:c3:2e:9a:c3:2b:00:3b:03:17:c9:ef: 3a:ec:34:e8 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUe3yG9LeYgX37w6Mz3H8NexFUV1cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgyOTA5MTc0N1oX DTI2MDgyODA5MjI0N1owMzExMC8GA1UEAxMoM0QxM0M2RkI5REIyMkNFMTM0NzA2 MzI1MzU3QzIwRTFEQzlBMTI2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALsXWnr6ALMDPO+1iw2B+00mEkNthDHPw6fAvh072KOUVvZFaQYysxU9Qna4 R2pi1lJtw97PXsKOwOOtuuAqdcTXvGPPEYDP+ZI4xCjbW/PUSlaGLdryFK9y9YNO 3OOLzLXvCZNHGBYuEkqtLTgzyYQWJQpjX6EEc2cbHoH/NMzFoch/UW57/FH+cWbj 7OLqNEmMhAFJF/zygQ0zTwiP+yK+FJbKXEmMEA9A6OMK1+DrHl9TdpUHckUajcjt W2/ARwgNbNtryEYSoXLmmvY5pQYqQAbRinEQf3MKI+6dL/59j8aA0Hv/Uk8M7//4 +ioKzXfLrarXHc0auB7LcR9DFesCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFD0TxvudsizhNHBjJTV8IOHcmhJpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZDFlZTVlMi0zMzhjLTRkMjAtODA3ZS1lNTBiNzU1ODNkYjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JkMWVlNWUy LTMzOGMtNGQyMC04MDdlLWU1MGI3NTU4M2RiOC8wLzNEMTNDNkZCOURCMjJDRTEz NDcwNjMyNTM1N0MyMEUxREM5QTEyNjkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BAJnGDgDBADKCVUwDwQCAAIwCQMHACABDfAAqDANBgkqhkiG9w0BAQsFAAOCAQEA eBiEXWp6WtSLef9Hp30NLdcZxzd2uJTym0Kwezel5luTrtkoinQSJ+AUn5peqCD3 iy+PSgLdBf9Lz2AAYOy3DVfQrqdlBSzrq0INCSLfOXzpuUIaQ/8zNxGoX08OVxSz 7AnhpJ1LM7ZpEuDyaUsI60foxSPXgoJXv+SCH+WtqWK4ivuFw+96C3twL/WhiUob tQulcnbdK9CsW9Ufa5Oi9VUxp3/cMOZB8UsDstn/RCN1x2M568/TXXJpYOTTjgv0 RqpytnvTWSTNUID+3gYCuAtjiHEsckh43eB5Qw5162LXoSg1ewxfpYDAVXwk6mQv CcMumsMrADsDF8nvOuw06A== -----END CERTIFICATE-----Generated at Fri Sep 5 08:16:07 2025 by rpki-client