$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer File: 19093F7761A9E337D03405604750BFD4ADC2121E.cer (raw, json) Hash identifier: AY0MeHjX0z3Qk7nBxi4rlw91GaDcYvdlfw+QLMPLXSc= Subject key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6317C73A38822E87C294BFC2D1444E15E976DB31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft caRepository: rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 25 Jul 2025 19:41:00 +0000 Certificate not after: Fri 24 Jul 2026 19:46:00 +0000 Subordinate resources: IP: 103.106.216.0/22 IP: 2402:4840::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:17:c7:3a:38:82:2e:87:c2:94:bf:c2:d1:44:4e:15:e9:76:db:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 25 19:41:00 2025 GMT Not After : Jul 24 19:46:00 2026 GMT Subject: CN=19093F7761A9E337D03405604750BFD4ADC2121E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bd:65:b8:03:72:56:a3:08:bc:48:4e:25:51: 38:48:4e:31:f3:11:ff:ad:13:f2:cf:90:43:67:a9: 43:15:5f:bc:b0:53:95:3b:a4:81:60:b5:16:9e:88: 29:a2:21:5c:f9:61:c2:b6:1e:27:8e:17:e4:21:c2: fe:4c:2a:f5:03:7b:01:0c:85:60:06:36:9c:d2:0f: 98:20:37:b0:2c:4d:aa:08:cd:81:1a:a8:06:69:3e: ec:ca:b8:73:39:ae:aa:9c:27:7d:72:d6:b9:e4:5b: 40:37:88:50:47:05:c5:01:05:63:4c:88:f8:b2:ca: e1:5a:d2:05:b1:20:f1:d0:05:05:d6:5a:83:59:c6: c5:08:f2:e2:bd:87:66:43:79:4a:e0:3f:fa:08:de: 47:77:2d:fe:30:fb:c5:54:f0:a3:c3:d8:8b:ad:df: ce:a6:1a:cc:6a:c4:25:f6:9f:43:12:26:69:87:8c: 50:d1:7f:4c:0e:21:2f:a6:77:4c:ac:73:57:ec:cb: 7b:88:19:aa:3d:43:f2:61:82:f3:72:cf:7b:19:6b: 69:7f:9f:0c:d0:9c:39:99:52:13:e9:86:fe:ad:fa: 5c:69:31:cc:a6:49:cd:78:89:d4:64:f4:bf:d2:eb: 9d:2b:d1:0c:8b:54:9a:dc:72:83:8d:92:4a:e0:6d: 1a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.106.216.0/22 IPv6: 2402:4840::/32 Signature Algorithm: sha256WithRSAEncryption 98:4c:61:20:88:7c:fa:81:5c:5d:04:ca:0c:ee:7f:66:8c:62: 96:ca:69:cb:16:b1:25:fa:1b:a5:86:b4:1c:49:e7:28:c4:ba: 77:d7:79:c5:d7:61:5f:2d:dd:27:17:f2:79:92:f0:12:0c:de: 90:c7:18:54:58:a6:ee:13:f8:23:72:2b:e3:ec:61:d2:28:a4: 58:e6:69:6f:34:55:a8:29:df:5a:3f:81:fb:36:e1:f9:e3:36: dd:c8:da:fe:4a:55:ab:5f:e8:86:e0:d5:74:b3:a4:a5:e2:14: 31:75:e7:94:de:69:c3:f9:dc:f6:b3:22:cd:b7:b3:7f:7b:e6: e1:50:84:f4:5c:de:e7:0f:2d:34:c4:97:77:4b:18:e6:03:29: 18:53:f2:c9:3b:5d:bd:51:8f:dd:0f:ec:e2:39:ce:38:a0:4b: 37:dd:2a:dc:15:02:60:02:50:2f:9c:8b:12:12:48:46:8a:50: 00:36:70:2f:5e:bc:a4:2e:db:9f:35:58:1e:be:cb:f7:7a:f7: cd:10:ae:d9:0a:02:1e:26:07:31:bb:ef:67:5e:0b:5c:2f:2d: 1c:79:8a:ca:b6:aa:0a:82:a7:24:ed:0a:46:c9:c1:5c:6e:c4: e0:83:ec:36:ac:b6:b3:4d:49:0d:0c:d2:a8:09:60:78:3c:38: 86:c5:7c:e3 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUYxfHOjiCLofClL/C0UROFel22zEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcyNTE5NDEwMFoX DTI2MDcyNDE5NDYwMFowMzExMC8GA1UEAxMoMTkwOTNGNzc2MUE5RTMzN0QwMzQw NTYwNDc1MEJGRDRBREMyMTIxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMm9ZbgDclajCLxITiVROEhOMfMR/60T8s+QQ2epQxVfvLBTlTukgWC1Fp6I KaIhXPlhwrYeJ44X5CHC/kwq9QN7AQyFYAY2nNIPmCA3sCxNqgjNgRqoBmk+7Mq4 czmuqpwnfXLWueRbQDeIUEcFxQEFY0yI+LLK4VrSBbEg8dAFBdZag1nGxQjy4r2H ZkN5SuA/+gjeR3ct/jD7xVTwo8PYi63fzqYazGrEJfafQxImaYeMUNF/TA4hL6Z3 TKxzV+zLe4gZqj1D8mGC83LPexlraX+fDNCcOZlSE+mG/q36XGkxzKZJzXiJ1GT0 v9LrnSvRDItUmtxyg42SSuBtGocCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBkJP3dhqeM30DQFYEdQv9StwhIeMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMTdiZDUwMi00MmMyLTQwMGQtYTJhZC1kMTc1NDM2NWE0NWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxN2JkNTAy LTQyYzItNDAwZC1hMmFkLWQxNzU0MzY1YTQ1ZC8wLzE5MDkzRjc3NjFBOUUzMzdE MDM0MDU2MDQ3NTBCRkQ0QURDMjEyMUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJnatgwDQQCAAIwBwMFACQCSEAwDQYJKoZIhvcNAQELBQADggEBAJhMYSCIfPqB XF0Eygzuf2aMYpbKacsWsSX6G6WGtBxJ5yjEunfXecXXYV8t3ScX8nmS8BIM3pDH GFRYpu4T+CNyK+PsYdIopFjmaW80Vagp31o/gfs24fnjNt3I2v5KVatf6Ibg1XSz pKXiFDF155TeacP53PazIs23s3975uFQhPRc3ucPLTTEl3dLGOYDKRhT8sk7Xb1R j90P7OI5zjigSzfdKtwVAmACUC+cixISSEaKUAA2cC9evKQu2581WB6+y/d6980Q rtkKAh4mBzG772deC1wvLRx5isq2qgqCpyTtCkbJwVxuxOCD7DastrNNSQ0M0qgJ YHg8OIbFfOM= -----END CERTIFICATE-----Generated at Fri Aug 8 13:10:49 2025 by rpki-client