$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer File: 6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.cer (raw, json) Hash identifier: NhZhoDzI2WPQYc9P382O0pEyt9G8KSEe9B6/bxmc3YU= Subject key identifier: 6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4BA8BAF1DF58D945732D0AB3856533E51811CBFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft caRepository: rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 10:18:54 +0000 Certificate not after: Tue 02 Jun 2026 10:23:54 +0000 Subordinate resources: IP: 103.105.252.0/22 IP: 2402:35c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:25:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a8:ba:f1:df:58:d9:45:73:2d:0a:b3:85:65:33:e5:18:11:cb:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 10:18:54 2025 GMT Not After : Jun 2 10:23:54 2026 GMT Subject: CN=6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:c6:88:e3:83:d1:ec:31:cc:88:18:1a:67: 7f:91:c1:30:c4:ca:50:bd:38:3d:1f:32:d1:c9:0c: 09:10:0a:13:2b:8a:02:e5:c2:99:ef:61:4e:0b:a1: 4e:c3:0a:f0:20:0c:f7:6a:9f:57:8c:66:60:bf:4e: e9:d4:1a:71:de:b5:ac:5c:48:13:07:b8:94:bf:fc: 16:e7:1c:f8:86:82:60:01:bd:80:68:09:1d:37:54: 80:f8:49:6f:40:78:d8:30:92:74:99:41:61:6e:60: d7:20:90:9b:9e:0e:89:51:35:a3:d1:45:97:d5:c9: 2c:23:dd:36:fa:03:9f:8b:ad:dc:90:b3:01:0a:09: af:93:98:1f:23:5c:07:d7:7c:95:70:d9:06:5f:1d: c9:5d:3a:18:d4:c6:12:2d:e0:ec:82:e7:98:07:e0: ad:b5:f2:18:1b:3a:14:d6:fd:5d:fd:61:b8:53:87: 4f:b1:b0:c3:a9:f4:0d:a8:fc:85:1e:2f:3b:93:5d: 53:22:ed:87:ce:ab:8c:1c:f3:1b:a2:a8:02:3f:a7: c8:4c:f1:90:86:7e:40:78:3d:d9:24:f8:93:a4:48: 6b:a9:88:eb:2c:88:83:a6:9c:8d:0b:0f:f3:95:53: 18:7d:29:a8:6b:f9:03:ac:91:cd:dc:18:37:c8:a4: ba:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6A:9D:C5:66:C8:CB:F1:D7:CE:B1:7F:C9:91:7A:CD:58:2E:5C:0A:95 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/316aa54f-7158-43af-b336-be4714816fad/0/6A9DC566C8CBF1D7CEB17FC9917ACD582E5C0A95.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.105.252.0/22 IPv6: 2402:35c0::/32 Signature Algorithm: sha256WithRSAEncryption 5b:ee:11:5a:52:fe:e6:c4:74:b2:5a:53:d2:4d:f1:bf:f6:a6: 32:3b:86:da:a5:b0:7f:f9:62:71:e9:91:8c:4c:99:7a:1b:71: a9:f7:8c:1c:7f:ee:73:77:46:20:08:14:11:45:95:75:4e:c3: a6:93:45:3f:77:db:a8:d4:61:7b:48:b0:bb:13:d4:ba:7b:5e: 3d:82:de:04:12:e7:f0:2a:32:36:01:47:76:14:d3:af:5e:a6: fb:2e:33:c6:e1:52:6b:77:2e:dd:47:c4:c5:78:1d:75:d2:20: b5:6d:a5:b3:e2:81:b2:4d:f0:bb:e5:fb:23:7a:9d:fd:f9:51: e8:c2:d0:82:8f:5d:31:46:73:09:95:35:75:54:73:6b:b8:94: f1:46:59:f4:26:cb:16:80:c8:9c:47:e4:a9:9d:bd:43:78:e6: 22:be:30:2e:d6:3b:2e:4b:34:69:c5:a5:10:d5:e9:86:a5:49: 6f:1f:70:31:b2:5b:40:4b:f6:33:72:33:87:6d:6d:ed:a4:10: 02:2d:df:1d:3d:98:90:04:08:41:95:11:6f:5e:44:06:8c:43: 3d:37:90:7a:56:fc:47:70:5a:f6:16:1b:b7:90:56:f6:36:c0: ba:d3:1a:d3:f6:95:22:83:cc:d9:ac:48:a2:33:5f:ee:76:cf: 64:c2:df:89 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUS6i68d9Y2UVzLQqzhWUz5RgRy/8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzEwMTg1NFoX DTI2MDYwMjEwMjM1NFowMzExMC8GA1UEAxMoNkE5REM1NjZDOENCRjFEN0NFQjE3 RkM5OTE3QUNENTgyRTVDMEE5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMqmxojjg9HsMcyIGBpnf5HBMMTKUL04PR8y0ckMCRAKEyuKAuXCme9hTguh TsMK8CAM92qfV4xmYL9O6dQacd61rFxIEwe4lL/8Fucc+IaCYAG9gGgJHTdUgPhJ b0B42DCSdJlBYW5g1yCQm54OiVE1o9FFl9XJLCPdNvoDn4ut3JCzAQoJr5OYHyNc B9d8lXDZBl8dyV06GNTGEi3g7ILnmAfgrbXyGBs6FNb9Xf1huFOHT7Gww6n0Daj8 hR4vO5NdUyLth86rjBzzG6KoAj+nyEzxkIZ+QHg92ST4k6RIa6mI6yyIg6acjQsP 85VTGH0pqGv5A6yRzdwYN8ikuvkCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGqdxWbIy/HXzrF/yZF6zVguXAqVMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMTZhYTU0Zi03MTU4LTQzYWYtYjMzNi1iZTQ3MTQ4MTZmYWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxNmFhNTRm LTcxNTgtNDNhZi1iMzM2LWJlNDcxNDgxNmZhZC8wLzZBOURDNTY2QzhDQkYxRDdD RUIxN0ZDOTkxN0FDRDU4MkU1QzBBOTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnafwwDQQCAAIwBwMFACQCNcAwDQYJKoZIhvcNAQELBQADggEBAFvuEVpS/ubE dLJaU9JN8b/2pjI7htqlsH/5YnHpkYxMmXobcan3jBx/7nN3RiAIFBFFlXVOw6aT RT9326jUYXtIsLsT1Lp7Xj2C3gQS5/AqMjYBR3YU069epvsuM8bhUmt3Lt1HxMV4 HXXSILVtpbPigbJN8Lvl+yN6nf35UejC0IKPXTFGcwmVNXVUc2u4lPFGWfQmyxaA yJxH5KmdvUN45iK+MC7WOy5LNGnFpRDV6YalSW8fcDGyW0BL9jNyM4dtbe2kEAIt 3x09mJAECEGVEW9eRAaMQz03kHpW/EdwWvYWG7eQVvY2wLrTGtP2lSKDzNmsSKIz X+52z2TC34k= -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:09 2025 by rpki-client