$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer File: BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.cer (raw, json) Hash identifier: o1W1RgiWx/JwTPzu9WmcAbwOU/v8qJIQmkDe+38Jt9o= Subject key identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 49969E5878CE987138109D9E89B3439138EA2AD1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft caRepository: rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 03:18:34 +0000 Certificate not after: Tue 02 Jun 2026 03:23:34 +0000 Subordinate resources: IP: 103.41.247.0/24 IP: 103.141.61.0/24 IP: 2001:df4:6c00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:96:9e:58:78:ce:98:71:38:10:9d:9e:89:b3:43:91:38:ea:2a:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 03:18:34 2025 GMT Not After : Jun 2 03:23:34 2026 GMT Subject: CN=BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:56:a5:03:6a:2e:37:2d:12:0c:5c:cf:f0:40: 11:96:ef:bf:8c:ee:5d:35:2a:98:3a:d7:6d:d8:cb: 28:6a:c9:74:5d:9f:26:4b:2e:c7:fd:58:b4:0d:18: 2b:f7:a2:2c:75:c3:10:cf:63:90:ef:7f:ac:e1:fb: 8e:7a:21:41:75:9a:24:e3:3c:dc:48:30:8a:aa:cb: d7:31:ce:91:e2:d7:f7:16:90:d2:7c:26:65:a8:f2: 77:d3:cf:63:27:36:fe:c7:0f:71:b8:db:3a:05:91: b8:51:3e:ee:cb:69:96:3f:6a:1f:0b:f2:2d:0a:20: ea:f1:3b:b3:ee:e9:50:53:d2:5c:33:94:37:5f:de: 40:fa:67:25:36:f7:57:81:52:59:55:4d:98:63:8b: c7:85:df:44:47:7d:65:7b:01:f6:37:a6:02:88:f5: bc:14:ac:fe:84:c9:fd:9e:df:dc:d5:e2:58:52:ee: 99:78:1e:0d:ed:b7:74:11:6f:cb:a3:e4:8c:f3:a7: 00:36:2e:f6:95:04:8d:24:e7:9a:cf:ee:20:ab:e9: 0b:92:ac:84:35:0a:c3:79:65:a3:83:23:ea:3d:0d: be:00:67:1b:24:16:f6:07:dc:49:74:28:f3:84:ca: 9d:3d:ff:bc:4e:78:4a:ce:2a:a1:7d:f8:30:ad:6a: e1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:8C:DE:6F:E3:DF:9F:A1:ED:A6:CE:A4:62:F7:7E:F6:04:78:99:0D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b59cfd04-69d0-4d4c-8d09-2d2213842c2c/0/BD8CDE6FE3DF9FA1EDA6CEA462F77EF60478990D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.247.0/24 103.141.61.0/24 IPv6: 2001:df4:6c00::/48 Signature Algorithm: sha256WithRSAEncryption 99:7e:fd:b4:83:a9:6d:b6:f5:72:48:ee:3d:ab:53:6e:ab:8f: 0e:cd:98:ac:2b:ef:5d:68:6e:d0:71:11:50:93:ad:7f:ae:b6: b7:56:3f:c3:e5:84:9e:9a:6c:ea:cb:34:55:c4:a5:67:65:2d: 9e:d2:c5:69:21:0d:dc:4a:95:8e:4a:e3:fa:55:db:14:04:41: 3c:1d:00:59:0d:b9:02:94:78:0a:6a:f0:ea:ac:1e:29:0a:48: eb:4e:28:01:91:4b:5a:41:fe:9f:b7:4c:0c:b5:c8:3d:82:9a: 5e:64:dc:f9:d8:2c:ec:7c:b5:df:24:e7:3a:b1:ad:ab:5d:3b: fe:e6:42:2a:d1:d7:0a:88:20:3a:cf:57:69:f5:a1:c7:0f:8d: be:3d:d6:d6:74:2d:4e:73:3f:42:d0:5d:a9:8a:34:7a:40:d5: bd:c4:c7:4f:ae:f5:99:ed:87:fb:90:43:85:c3:0f:e0:3d:a8: bb:07:c9:03:7f:c2:d9:12:54:a4:30:aa:63:39:e3:7c:c4:1a: a0:a4:1d:f4:d7:58:08:99:0b:a9:f2:69:8c:4d:16:b1:25:4d: 28:71:81:01:8f:aa:b4:81:9e:3a:18:c9:05:e7:fc:89:f4:d8: f1:7b:50:18:15:a5:6b:96:30:fd:d5:fa:42:50:58:a4:06:54: 6b:53:9f:f3 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUSZaeWHjOmHE4EJ2eibNDkTjqKtEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzAzMTgzNFoX DTI2MDYwMjAzMjMzNFowMzExMC8GA1UEAxMoQkQ4Q0RFNkZFM0RGOUZBMUVEQTZD RUE0NjJGNzdFRjYwNDc4OTkwRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRWpQNqLjctEgxcz/BAEZbvv4zuXTUqmDrXbdjLKGrJdF2fJksux/1YtA0Y K/eiLHXDEM9jkO9/rOH7jnohQXWaJOM83EgwiqrL1zHOkeLX9xaQ0nwmZajyd9PP Yyc2/scPcbjbOgWRuFE+7stplj9qHwvyLQog6vE7s+7pUFPSXDOUN1/eQPpnJTb3 V4FSWVVNmGOLx4XfREd9ZXsB9jemAoj1vBSs/oTJ/Z7f3NXiWFLumXgeDe23dBFv y6PkjPOnADYu9pUEjSTnms/uIKvpC5KshDUKw3llo4Mj6j0NvgBnGyQW9gfcSXQo 84TKnT3/vE54Ss4qoX34MK1q4TUCAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL2M3m/j35+h7abOpGL3fvYEeJkNMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNTljZmQwNC02OWQwLTRkNGMtOGQwOS0yZDIyMTM4NDJjMmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I1OWNmZDA0 LTY5ZDAtNGQ0Yy04ZDA5LTJkMjIxMzg0MmMyYy8wL0JEOENERTZGRTNERjlGQTFF REE2Q0VBNDYyRjc3RUY2MDQ3ODk5MEQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BABnKfcDBABnjT0wDwQCAAIwCQMHACABDfRsADANBgkqhkiG9w0BAQsFAAOCAQEA mX79tIOpbbb1ckjuPatTbquPDs2YrCvvXWhu0HERUJOtf662t1Y/w+WEnpps6ss0 VcSlZ2UtntLFaSEN3EqVjkrj+lXbFARBPB0AWQ25ApR4Cmrw6qweKQpI604oAZFL WkH+n7dMDLXIPYKaXmTc+dgs7Hy13yTnOrGtq107/uZCKtHXCoggOs9XafWhxw+N vj3W1nQtTnM/QtBdqYo0ekDVvcTHT671me2H+5BDhcMP4D2ouwfJA3/C2RJUpDCq YznjfMQaoKQd9NdYCJkLqfJpjE0WsSVNKHGBAY+qtIGeOhjJBef8ifTY8XtQGBWl a5Yw/dX6QlBYpAZUa1Of8w== -----END CERTIFICATE-----Generated at Tue Jun 3 23:11:08 2025 by rpki-client