$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer File: 094D556CA0B55AF4A636873A1B1E7032B2C9813C.cer (raw, json) Hash identifier: /hqBOdNLllorUq/jSD1sAM2PKJhzNKALovDcN+XEfrs= Subject key identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 03DAFA9150CD399DFBEB69B2D458462059C3F772 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft caRepository: rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 27 Oct 2025 09:48:23 +0000 Certificate not after: Mon 26 Oct 2026 09:53:23 +0000 Subordinate resources: IP: 103.112.144.0/23 IP: 2001:df4:ad00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:da:fa:91:50:cd:39:9d:fb:eb:69:b2:d4:58:46:20:59:c3:f7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 27 09:48:23 2025 GMT Not After : Oct 26 09:53:23 2026 GMT Subject: CN=094D556CA0B55AF4A636873A1B1E7032B2C9813C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:49:59:a7:38:c9:42:0d:63:1e:ef:de:9c:db: 2d:2b:91:b0:5f:92:00:58:b9:d6:5b:ac:30:5d:6f: 64:24:f4:e2:01:26:45:15:b6:67:bb:75:b6:87:4c: fa:d5:ea:7b:e3:e5:a3:af:3a:14:46:a9:b3:cc:d7: da:3c:88:d4:33:2a:ab:5c:b7:62:b1:58:8b:76:46: e5:e4:89:c8:cc:2f:ef:11:be:a3:e3:ee:8c:64:f7: e5:6b:13:62:30:9d:73:27:59:0e:f3:fb:43:9c:09: ec:2f:4a:e5:af:25:ac:44:69:95:a0:87:a9:ab:b0: 81:d4:c2:7c:cc:fd:da:76:1c:77:e3:ef:35:0f:f6: 0c:ff:db:5d:28:11:d6:d1:ed:85:ff:f8:fb:0e:45: 27:f6:ac:a7:90:b5:78:82:37:7f:30:94:e5:49:5f: e2:a0:7c:d5:57:8d:e2:74:eb:2a:20:0c:09:c5:12: 7a:73:42:73:f3:20:04:5d:7a:14:56:ae:7f:2e:68: c8:f1:74:8a:45:69:46:07:c1:1e:a8:c8:e6:d4:e4: f7:ce:20:4c:fc:29:80:07:10:33:41:74:e6:2e:42: 9f:0c:d2:b2:91:ec:6c:1d:cc:57:88:fa:bc:c5:da: 06:23:76:7d:ce:bd:07:2c:ac:5f:26:5a:dc:60:ae: 2b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:4D:55:6C:A0:B5:5A:F4:A6:36:87:3A:1B:1E:70:32:B2:C9:81:3C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8cd08eb3-937d-4304-9167-463d7c58d5e4/0/094D556CA0B55AF4A636873A1B1E7032B2C9813C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.112.144.0/23 IPv6: 2001:df4:ad00::/48 Signature Algorithm: sha256WithRSAEncryption 02:bb:07:62:e8:53:b6:75:38:aa:f1:ab:64:0e:66:7f:e8:a4: e9:a3:da:71:ec:8b:78:3f:2d:2f:71:20:67:b7:27:67:e4:1a: dc:b5:8a:d8:d7:14:57:f2:bf:32:e5:4c:7d:b8:18:58:db:38: ef:89:81:b9:f0:e1:a2:6d:e6:de:a4:fd:f0:1b:04:7d:31:07: 34:83:25:e2:a6:c8:37:b8:0f:e8:d0:5c:ad:20:cb:cf:5a:5d: 53:4f:f8:4a:d7:05:4a:fa:fd:72:7c:ae:0f:bf:2b:79:9a:52: c9:95:e1:72:c4:e0:ac:f4:df:c4:c8:bc:64:50:67:3d:4f:ed: 8a:92:4f:39:1a:fa:0c:bd:25:de:43:6e:68:4f:ae:f7:7a:4e: ce:a2:26:59:9e:a5:62:e6:77:c9:68:58:60:73:39:83:79:e5: 65:d8:8b:8e:8e:b7:fe:d5:99:b8:b3:76:8d:5d:b3:56:88:ee: 48:78:8e:9b:53:19:7b:9c:d3:df:58:f3:b7:d8:1f:8c:67:4a: 83:c5:12:ec:65:ca:81:7c:ea:05:91:cd:cc:38:45:61:81:a8: e3:ae:3f:cc:41:b9:c6:09:47:20:e2:f2:c9:b4:ee:1f:95:c0: 67:7a:9e:23:4c:02:d3:31:4b:86:80:d3:51:9b:87:94:05:ea: e7:5d:4c:3e -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUA9r6kVDNOZ3762my1FhGIFnD93IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyNzA5NDgyM1oX DTI2MTAyNjA5NTMyM1owMzExMC8GA1UEAxMoMDk0RDU1NkNBMEI1NUFGNEE2MzY4 NzNBMUIxRTcwMzJCMkM5ODEzQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMhJWac4yUINYx7v3pzbLSuRsF+SAFi51lusMF1vZCT04gEmRRW2Z7t1todM +tXqe+Plo686FEaps8zX2jyI1DMqq1y3YrFYi3ZG5eSJyMwv7xG+o+PujGT35WsT YjCdcydZDvP7Q5wJ7C9K5a8lrERplaCHqauwgdTCfMz92nYcd+PvNQ/2DP/bXSgR 1tHthf/4+w5FJ/asp5C1eII3fzCU5Ulf4qB81VeN4nTrKiAMCcUSenNCc/MgBF16 FFaufy5oyPF0ikVpRgfBHqjI5tTk984gTPwpgAcQM0F05i5CnwzSspHsbB3MV4j6 vMXaBiN2fc69ByysXyZa3GCuKzECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAlNVWygtVr0pjaHOhsecDKyyYE8MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84Y2QwOGViMy05MzdkLTQzMDQtOTE2Ny00NjNkN2M1OGQ1ZTQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZDA4ZWIz LTkzN2QtNDMwNC05MTY3LTQ2M2Q3YzU4ZDVlNC8wLzA5NEQ1NTZDQTBCNTVBRjRB NjM2ODczQTFCMUU3MDMyQjJDOTgxM0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFncJAwDwQCAAIwCQMHACABDfStADANBgkqhkiG9w0BAQsFAAOCAQEAArsHYuhT tnU4qvGrZA5mf+ik6aPaceyLeD8tL3EgZ7cnZ+Qa3LWK2NcUV/K/MuVMfbgYWNs4 74mBufDhom3m3qT98BsEfTEHNIMl4qbIN7gP6NBcrSDLz1pdU0/4StcFSvr9cnyu D78reZpSyZXhcsTgrPTfxMi8ZFBnPU/tipJPORr6DL0l3kNuaE+u93pOzqImWZ6l YuZ3yWhYYHM5g3nlZdiLjo63/tWZuLN2jV2zVojuSHiOm1MZe5zT31jzt9gfjGdK g8US7GXKgXzqBZHNzDhFYYGo464/zEG5xglHIOLyybTuH5XAZ3qeI0wC0zFLhoDT UZuHlAXq511MPg== -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:17 2025 by rpki-client