$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer File: 10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer (raw, json) Hash identifier: 6Tt5qyowtakZ+xIfhNb6dHBBbKxYcSGPCtX1wzRhOio= Subject key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 156F5BA2513F22ED69DE5BA40563C5A98E2CBE31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft caRepository: rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 07:39:20 +0000 Certificate not after: Tue 02 Jun 2026 07:44:20 +0000 Subordinate resources: IP: 45.64.96.0/22 IP: 103.28.148.0/23 IP: 103.31.250.0/23 IP: 2001:df0:273::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:6f:5b:a2:51:3f:22:ed:69:de:5b:a4:05:63:c5:a9:8e:2c:be:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 07:39:20 2025 GMT Not After : Jun 2 07:44:20 2026 GMT Subject: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:82:9f:2b:60:c1:a8:98:94:91:8f:5c:d5: 73:23:b7:94:eb:e6:b6:58:1c:60:51:32:e5:8d:08: de:a4:a4:2a:28:8b:21:51:99:be:b6:76:10:b2:6c: 18:e3:0b:4f:ec:27:76:c2:97:17:b2:16:5c:f9:a1: 26:08:ea:66:97:49:e5:13:64:d7:d8:f6:6b:34:40: d3:39:51:2d:e2:76:4b:e3:1c:d0:87:66:63:b7:95: c8:aa:5f:3a:f0:90:f8:27:09:28:80:cc:56:c3:31: eb:c0:cb:15:4b:d9:94:f5:fb:18:81:52:63:f3:f3: 23:f9:2c:88:d3:de:7b:1a:04:72:5e:93:f7:6c:b3: 22:ce:e9:fc:5e:ed:5b:46:55:ed:ac:12:4d:04:fb: 9d:7a:24:33:be:ac:c0:f0:60:9c:5e:76:f6:36:2d: 56:d7:2c:3e:b0:18:d3:0a:18:7b:9a:08:95:dd:e5: 3c:25:88:6b:69:d4:1a:a1:9a:c8:43:30:d8:42:b1: f6:7d:6b:cd:0b:65:d6:47:f5:c9:83:29:99:82:fd: ad:07:cd:de:3e:9a:7a:7a:72:21:81:e6:17:77:0f: c3:8f:11:17:0c:31:87:9d:b8:be:d4:e7:4a:69:02: 14:c2:9a:a1:b3:a7:58:03:6b:ce:b9:a8:42:c7:d3: 2d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.64.96.0/22 103.28.148.0/23 103.31.250.0/23 IPv6: 2001:df0:273::/48 Signature Algorithm: sha256WithRSAEncryption 33:7e:99:d7:37:03:a1:8e:51:7d:61:df:48:ea:ba:79:82:20: 97:76:1a:c4:45:a7:67:d0:3e:33:01:5c:7d:ab:06:e8:a3:d0: 89:0c:f0:39:e1:e5:03:1b:8b:86:c0:6d:7b:35:94:4a:aa:66: f5:a0:23:8d:dd:bd:10:3e:2b:b9:9e:10:5a:97:39:04:bf:73: 81:a5:75:10:4c:aa:1e:f1:92:e1:7a:05:79:0c:2d:74:a5:fb: e5:93:6d:11:74:a3:81:b0:7b:b4:e8:be:a7:b8:77:2c:80:ca: 90:88:70:c1:10:18:38:5f:d0:aa:79:77:77:2f:c1:6e:c8:4b: 6c:5e:ea:cd:a0:df:4e:1a:cd:82:01:0e:9a:8e:6f:78:5c:6f: 7b:5e:16:b1:ff:16:d0:78:f2:c3:b7:07:e7:ed:0d:75:29:0e: c6:b8:6c:9c:d2:e9:7f:ad:98:f9:a7:91:f7:d1:10:bc:de:c8: b7:13:91:59:5c:db:2f:71:14:80:f0:34:1e:ce:81:d8:c2:8d: b4:a0:13:7a:b1:4a:e3:17:b0:25:e5:8b:50:e8:d7:dd:f2:f7: 7a:33:cf:1d:03:eb:1c:2b:ef:92:e6:88:b5:15:1b:10:2b:34: b4:f4:f9:61:24:2f:e1:f8:7a:40:03:5f:81:f1:43:30:d2:27: 6b:45:41:ee -----BEGIN CERTIFICATE----- MIIF4jCCBMqgAwIBAgIUFW9bolE/Iu1p3lukBWPFqY4svjEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzA3MzkyMFoX DTI2MDYwMjA3NDQyMFowMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3 NkFFMkIwOUMyMzQyN0MxOTFBNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALyGgp8rYMGomJSRj1zVcyO3lOvmtlgcYFEy5Y0I3qSkKiiLIVGZvrZ2ELJs GOMLT+wndsKXF7IWXPmhJgjqZpdJ5RNk19j2azRA0zlRLeJ2S+Mc0IdmY7eVyKpf OvCQ+CcJKIDMVsMx68DLFUvZlPX7GIFSY/PzI/ksiNPeexoEcl6T92yzIs7p/F7t W0ZV7awSTQT7nXokM76swPBgnF529jYtVtcsPrAY0woYe5oIld3lPCWIa2nUGqGa yEMw2EKx9n1rzQtl1kf1yYMpmYL9rQfN3j6aenpyIYHmF3cPw48RFwwxh524vtTn SmkCFMKaobOnWANrzrmoQsfTLSECAwEAAaOCAtUwggLRMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBDKF3bvqK81KS52risJwjQnwZGmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiYzZhYTAz LTFiNGQtNDM4ZS1hOWYzLWVmZWFhZTZiMDkyMS8wLzEwQ0ExNzc2RUZBOEFGMzUy OTJFNzZBRTJCMDlDMjM0MjdDMTkxQTYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwPAYIKwYBBQUHAQcBAf8ELTArMBgEAgABMBID BAItQGADBAFnHJQDBAFnH/owDwQCAAIwCQMHACABDfACczANBgkqhkiG9w0BAQsF AAOCAQEAM36Z1zcDoY5RfWHfSOq6eYIgl3YaxEWnZ9A+MwFcfasG6KPQiQzwOeHl AxuLhsBtezWUSqpm9aAjjd29ED4ruZ4QWpc5BL9zgaV1EEyqHvGS4XoFeQwtdKX7 5ZNtEXSjgbB7tOi+p7h3LIDKkIhwwRAYOF/Qqnl3dy/BbshLbF7qzaDfThrNggEO mo5veFxve14Wsf8W0Hjyw7cH5+0NdSkOxrhsnNLpf62Y+aeR99EQvN7ItxORWVzb L3EUgPA0Hs6B2MKNtKATerFK4xewJeWLUOjX3fL3ejPPHQPrHCvvkuaItRUbECs0 tPT5YSQv4fh6QANfgfFDMNIna0VB7g== -----END CERTIFICATE-----Generated at Mon Nov 3 19:34:26 2025 by rpki-client