$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer File: B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.cer (raw, json) Hash identifier: CqEzsrrh1hf+Xf/Wy5bHXniBBBZi8hNIjnsEB60BU+w= Subject key identifier: B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6A6AD56AAE67F2C91B0923CFEE57DD68512150FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft caRepository: rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 10:44:48 +0000 Certificate not after: Tue 02 Jun 2026 10:49:48 +0000 Subordinate resources: IP: 103.123.236.0/24 IP: 2001:df6:d700::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:6a:d5:6a:ae:67:f2:c9:1b:09:23:cf:ee:57:dd:68:51:21:50:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 10:44:48 2025 GMT Not After : Jun 2 10:49:48 2026 GMT Subject: CN=B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:37:85:39:07:02:9a:d7:79:11:67:31:7a:0f: ed:52:b1:dc:14:29:54:6e:8e:f2:87:d5:44:d6:88: 41:0d:b5:5b:30:56:b4:6a:e2:d5:8d:5c:31:83:cb: 9b:02:cc:17:2e:6d:1b:24:99:36:ba:12:9c:51:94: b9:fb:de:22:26:7f:57:b4:e2:82:50:be:51:1c:86: 87:57:78:3b:c5:89:d2:3d:5f:68:1f:f4:45:72:47: 7d:73:57:04:ad:fa:07:ab:18:1e:8f:54:1d:9f:02: a7:8d:88:00:eb:42:e1:28:1d:f5:4a:36:38:a3:db: 5f:f7:14:df:b4:a5:08:c0:57:6d:c4:34:92:7e:2a: ab:d2:39:47:27:cf:b4:54:95:b3:66:0f:69:6d:96: cf:c1:eb:68:85:5d:24:09:19:26:e2:c8:cf:f5:7d: 4a:5e:ad:da:94:15:3f:3d:b1:76:b1:e4:4e:2d:65: f8:12:b7:b6:15:72:7b:b2:6c:88:ac:03:90:fc:b3: d6:d4:d7:fd:15:c9:bf:29:e7:40:87:54:69:ea:d7: 47:e7:30:59:65:d2:94:6f:08:9f:a2:7f:1f:8c:72: fa:a3:f1:6d:23:79:5a:e5:80:30:7f:e2:4c:87:6a: b9:f8:b6:bc:44:18:34:08:63:1f:da:ca:36:32:b1: 73:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B4:15:3D:CE:E8:7E:15:F9:2A:AB:AC:0D:F6:72:9C:9A:5D:E5:CF:CC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b5c9c394-fcd0-4b4b-bb1a-824770f40342/0/B4153DCEE87E15F92AABAC0DF6729C9A5DE5CFCC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.236.0/24 IPv6: 2001:df6:d700::/48 Signature Algorithm: sha256WithRSAEncryption 43:03:a4:3f:25:c3:d9:c4:00:97:db:14:d1:df:51:09:9d:18: a1:00:c7:0b:7f:a7:61:e9:06:95:de:8f:3e:8c:d1:3b:c9:cc: 60:4e:8d:7e:ee:55:03:a2:e5:c8:79:09:5f:35:70:05:64:18: 01:a1:d2:30:a5:e3:c8:02:20:df:0a:41:26:00:f5:d8:80:d8: 81:3c:63:6b:28:2b:4c:31:91:59:fe:e8:d4:aa:c2:3e:a5:b3: ac:00:1d:80:08:9c:9c:c2:d2:82:f2:94:73:3b:d5:eb:23:68: c8:fa:0c:3b:d1:18:7a:39:fb:6b:f5:f4:23:00:8f:7d:8b:16: 5a:4c:87:a0:0d:ae:9d:54:21:2c:08:d3:84:23:db:2b:0b:9a: 47:ef:52:9e:82:19:5f:81:fa:c3:97:39:98:22:45:6c:84:f2: f6:43:dd:f4:9b:b9:82:a7:9f:73:2f:8b:74:5f:ad:a5:cd:d3: cd:b7:12:66:13:1b:d4:43:14:40:98:ca:53:96:8b:b5:c9:f1: 45:be:44:dc:96:4f:e7:7c:3a:13:6a:67:78:3b:34:2d:48:d4: 66:98:d2:b1:bc:a1:c1:a4:07:09:19:83:84:1e:e6:8d:b7:2c: 37:be:27:25:28:91:64:36:14:68:27:68:03:65:fd:93:7d:90: 95:5e:d7:65 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUamrVaq5n8skbCSPP7lfdaFEhUP0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzEwNDQ0OFoX DTI2MDYwMjEwNDk0OFowMzExMC8GA1UEAxMoQjQxNTNEQ0VFODdFMTVGOTJBQUJB QzBERjY3MjlDOUE1REU1Q0ZDQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKk3hTkHAprXeRFnMXoP7VKx3BQpVG6O8ofVRNaIQQ21WzBWtGri1Y1cMYPL mwLMFy5tGySZNroSnFGUufveIiZ/V7TiglC+URyGh1d4O8WJ0j1faB/0RXJHfXNX BK36B6sYHo9UHZ8Cp42IAOtC4Sgd9Uo2OKPbX/cU37SlCMBXbcQ0kn4qq9I5RyfP tFSVs2YPaW2Wz8HraIVdJAkZJuLIz/V9Sl6t2pQVPz2xdrHkTi1l+BK3thVye7Js iKwDkPyz1tTX/RXJvynnQIdUaerXR+cwWWXSlG8In6J/H4xy+qPxbSN5WuWAMH/i TIdqufi2vEQYNAhjH9rKNjKxc80CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLQVPc7ofhX5KqusDfZynJpd5c/MMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNWM5YzM5NC1mY2QwLTRiNGItYmIxYS04MjQ3NzBmNDAzNDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1YzljMzk0 LWZjZDAtNGI0Yi1iYjFhLTgyNDc3MGY0MDM0Mi8wL0I0MTUzRENFRTg3RTE1Rjky QUFCQUMwREY2NzI5QzlBNURFNUNGQ0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABne+wwDwQCAAIwCQMHACABDfbXADANBgkqhkiG9w0BAQsFAAOCAQEAQwOkPyXD 2cQAl9sU0d9RCZ0YoQDHC3+nYekGld6PPozRO8nMYE6Nfu5VA6LlyHkJXzVwBWQY AaHSMKXjyAIg3wpBJgD12IDYgTxjaygrTDGRWf7o1KrCPqWzrAAdgAicnMLSgvKU czvV6yNoyPoMO9EYejn7a/X0IwCPfYsWWkyHoA2unVQhLAjThCPbKwuaR+9SnoIZ X4H6w5c5mCJFbITy9kPd9Ju5gqefcy+LdF+tpc3TzbcSZhMb1EMUQJjKU5aLtcnx Rb5E3JZP53w6E2pneDs0LUjUZpjSsbyhwaQHCRmDhB7mjbcsN74nJSiRZDYUaCdo A2X9k32QlV7XZQ== -----END CERTIFICATE-----Generated at Sun Jun 8 07:14:05 2025 by rpki-client