$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer File: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer (raw, json) Hash identifier: 9RDta6FOBHmHLNHmSaj8E3id1gbuW3LhNn+uakyraF0= Subject key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1D1B3598A74A3B2A541FEF1727567B1E188D9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft caRepository: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 06:44:21 +0000 Certificate not after: Tue 02 Jun 2026 06:49:21 +0000 Subordinate resources: IP: 103.146.62.0/23 IP: 2001:df2:4b80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:1b:35:98:a7:4a:3b:2a:54:1f:ef:17:27:56:7b:1e:18:8d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 06:44:21 2025 GMT Not After : Jun 2 06:49:21 2026 GMT Subject: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c4:af:58:e6:54:b8:ec:0f:14:79:d4:10:90: 0f:40:3f:94:3a:e2:b0:5f:fa:f7:b2:86:7c:e2:68: f2:d8:8b:23:93:dc:0c:9c:43:51:ed:ad:c5:89:0d: cf:af:fe:82:be:e1:78:27:fb:33:9e:cf:22:ed:2c: d3:3d:1b:71:70:4a:e7:e9:b0:91:e6:02:a6:63:a0: d9:8b:af:2b:4d:aa:02:da:cf:ed:55:6a:06:8b:34: a0:93:0c:7c:e1:57:3f:8e:78:3a:62:2c:d6:8e:46: af:16:c0:e9:35:5d:d6:0b:83:ea:91:4d:47:7b:e0: b0:3f:aa:cd:04:22:3a:59:42:fa:e8:55:96:ee:18: 88:c1:cc:69:95:f8:da:4a:29:db:1c:7f:4d:98:f7: 8b:57:81:3c:86:c3:98:c5:df:6c:f6:ea:df:1e:e6: 6c:dc:66:d9:0f:67:e0:4f:d5:81:47:b0:33:3a:bb: fa:79:09:2b:6a:a9:1a:24:77:64:d9:d3:63:3a:12: c6:69:f9:d9:5b:d2:93:e9:85:fd:81:85:7c:53:99: 86:65:54:f3:2d:80:c2:00:9a:f0:48:d2:96:9a:82: f4:08:6a:60:9b:06:7e:09:4b:09:71:5e:00:40:52: 35:76:24:cd:5b:b5:eb:35:99:58:aa:41:28:b2:b0: 39:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.146.62.0/23 IPv6: 2001:df2:4b80::/48 Signature Algorithm: sha256WithRSAEncryption 03:56:bb:aa:f1:17:d5:f1:73:ec:8f:d2:8a:a0:ed:60:cb:02: 60:04:47:5c:16:49:a4:21:39:79:2d:85:49:45:22:a2:c3:cc: d9:67:30:29:31:ca:96:5f:34:a7:01:46:48:50:23:8d:1b:31: 60:c9:0b:7d:92:88:58:85:50:f0:88:f7:7c:23:7a:83:40:a2: 20:55:cd:3e:42:66:cc:a7:43:39:a2:6b:6d:e3:a8:4d:8c:be: 76:53:36:9d:60:f2:fc:ed:5e:d1:79:b3:18:f0:c3:d6:d7:d1: d8:b6:fb:47:7a:57:83:44:ce:ea:ee:27:73:3c:b1:91:02:32: 06:d2:06:94:ec:93:6b:58:a8:dc:d3:1b:3d:ff:21:2a:1e:86: fb:aa:c2:5d:a4:db:21:b3:ed:2c:56:5b:2a:95:85:95:e6:d4: 0d:e2:bd:91:6c:0d:e2:30:43:b9:f4:06:1e:e8:58:fa:73:1c: ea:f5:67:e7:73:9a:51:f6:b6:79:1d:69:0f:55:4f:8e:7b:ec: 72:9a:81:34:76:4d:1a:b1:e9:c7:2b:30:a1:43:13:80:39:a5: e6:6f:4a:0c:33:52:60:3b:7a:22:d1:d4:c4:4f:8b:b1:ac:8e: f8:cc:01:86:73:f7:dd:dc:47:3d:ec:03:a6:03:ab:c8:9e:20: 33:9b:0b:a5 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgITHRs1mKdKOypUH+8XJ1Z7HhiNnTANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjUwNjAzMDY0NDIxWhcN MjYwNjAyMDY0OTIxWjAzMTEwLwYDVQQDEyhCODkzOThCQTYwM0M0M0JERjcxMUEy QjMxRkFEQzhDREZGQzlDQzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAocSvWOZUuOwPFHnUEJAPQD+UOuKwX/r3soZ84mjy2Isjk9wMnENR7a3FiQ3P r/6CvuF4J/szns8i7SzTPRtxcErn6bCR5gKmY6DZi68rTaoC2s/tVWoGizSgkwx8 4Vc/jng6YizWjkavFsDpNV3WC4PqkU1He+CwP6rNBCI6WUL66FWW7hiIwcxplfja SinbHH9NmPeLV4E8hsOYxd9s9urfHuZs3GbZD2fgT9WBR7AzOrv6eQkraqkaJHdk 2dNjOhLGafnZW9KT6YX9gYV8U5mGZVTzLYDCAJrwSNKWmoL0CGpgmwZ+CUsJcV4A QFI1diTNW7XrNZlYqkEosrA5vQIDAQABo4ICyTCCAsUwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUuJOYumA8Q733EaKzH63Izf/JzBYwHwYDVR0jBBgwFoAUuo93 0h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIv QkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgzMzc2Qi5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvdW85 MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L2RlYTc5MzQwLTRkYjItNDU4ZC05NWRkLWFmMjBiNGZjZGIzZC8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAt NGRiMi00NThkLTk1ZGQtYWYyMGI0ZmNkYjNkLzAvQjg5Mzk4QkE2MDNDNDNCREY3 MTFBMkIzMUZBREM4Q0RGRkM5Q0MxNi5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgME AWeSPjAPBAIAAjAJAwcAIAEN8kuAMA0GCSqGSIb3DQEBCwUAA4IBAQADVruq8RfV 8XPsj9KKoO1gywJgBEdcFkmkITl5LYVJRSKiw8zZZzApMcqWXzSnAUZIUCONGzFg yQt9kohYhVDwiPd8I3qDQKIgVc0+QmbMp0M5omtt46hNjL52UzadYPL87V7RebMY 8MPW19HYtvtHeleDRM7q7idzPLGRAjIG0gaU7JNrWKjc0xs9/yEqHob7qsJdpNsh s+0sVlsqlYWV5tQN4r2RbA3iMEO59AYe6Fj6cxzq9Wfnc5pR9rZ5HWkPVU+Oe+xy moE0dk0asenHKzChQxOAOaXmb0oMM1JgO3oi0dTET4uxrI74zAGGc/fd3Ec97AOm A6vIniAzmwul -----END CERTIFICATE-----Generated at Tue Jun 3 23:09:15 2025 by rpki-client