$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer File: 194F6EF659F1115C068AB59065D57F150E23F5B6.cer (raw, json) Hash identifier: 7enNy+Gt4ZTBxOD8+kRx7HO7hAGMhily3oxqBNLgrRA= Subject key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 23DFA733248B744766169D8F585AA3A5DC400C81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft caRepository: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 23 Sep 2025 02:10:39 +0000 Certificate not after: Tue 22 Sep 2026 02:15:39 +0000 Subordinate resources: IP: 43.240.224.0/22 IP: 103.248.216.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:df:a7:33:24:8b:74:47:66:16:9d:8f:58:5a:a3:a5:dc:40:0c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 23 02:10:39 2025 GMT Not After : Sep 22 02:15:39 2026 GMT Subject: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:30:df:55:c1:10:cd:49:b0:61:cd:ad:45:dc: 4b:42:47:10:62:5d:c3:d8:ab:0f:2f:2d:b1:04:0b: f4:cb:c2:cb:95:c8:9a:51:8f:d1:71:04:95:44:f5: 39:48:f6:44:ae:a3:6a:97:ac:fe:b2:c5:49:b4:9e: 61:70:9c:4e:26:ca:9f:35:62:df:dc:b3:f0:13:f0: f8:24:cb:84:db:e1:e0:53:e1:ed:33:10:bb:c3:23: 2a:04:e0:23:aa:d5:a7:7f:03:b8:0b:69:a9:6f:9a: 10:13:62:ea:e1:56:5c:8f:0d:91:15:cc:53:74:2b: 34:0a:66:71:73:90:04:e2:46:e7:67:5a:e0:45:0e: 88:c3:91:1c:f6:8b:b5:d5:13:80:84:b9:31:5e:ac: 72:f2:cf:4f:60:a9:06:18:c2:90:57:fe:f4:e6:5f: ff:54:71:f6:9a:c1:03:26:17:6a:4f:7c:b2:33:d9: 0c:30:55:30:db:44:82:c5:ea:04:69:44:21:9d:c4: c0:82:fe:df:d7:62:e9:61:12:e2:e0:53:54:b3:52: 6f:83:c2:86:75:89:81:8f:c2:f3:07:b9:09:cc:1c: 3f:82:63:04:fc:57:46:31:75:99:08:8e:a4:9f:85: 98:c0:8f:4c:fe:68:75:42:50:31:a8:b1:fc:92:1c: 4a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.224.0/22 103.248.216.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:46:b6:ec:f8:de:63:c8:3f:e9:a1:9a:0b:59:2c:95:f2:91: 30:f8:d7:8a:63:30:45:13:a7:05:3c:ba:65:52:2c:7a:9c:03: 73:85:dd:e7:46:b7:37:7d:0f:c9:33:9c:88:8a:f1:13:4c:ec: 14:e9:84:94:ef:9b:13:cf:87:59:9e:03:83:7e:4f:9a:d4:03: 20:8d:eb:0f:7b:6b:d2:de:f7:6c:e0:f2:ca:2d:a8:2b:5b:ea: e0:ec:9e:82:3d:7c:69:dc:69:e6:fb:16:01:30:82:4c:f0:3d: 7f:3c:a4:f4:ec:a9:a4:0a:14:15:41:c5:e4:27:df:a0:9b:49: 75:c0:0c:1e:1c:ec:3f:16:da:bf:33:a5:55:26:78:7c:bc:9e: 86:45:58:5a:10:ba:82:38:b3:65:d3:bf:fe:d9:94:57:13:70: 67:89:c7:43:f3:69:3b:2f:3e:fd:62:d4:cd:e4:21:8d:d0:8c: 35:51:2d:b5:cf:b7:53:f2:b1:54:ad:51:78:61:1b:bb:9b:52: 89:e5:fc:36:48:b7:7c:2a:36:e0:68:f4:8c:af:38:14:d0:89: be:34:e5:c7:d2:e8:e5:f1:58:77:7e:42:32:14:57:8e:9c:ed: d1:e5:82:b5:3d:b3:8e:e6:fa:b0:f0:a8:dc:90:ab:fd:01:3d: 49:f0:6f:50 -----BEGIN CERTIFICATE----- MIIFyzCCBLOgAwIBAgIUI9+nMySLdEdmFp2PWFqjpdxADIEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkyMzAyMTAzOVoX DTI2MDkyMjAyMTUzOVowMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFC NTkwNjVENTdGMTUwRTIzRjVCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANkw31XBEM1JsGHNrUXcS0JHEGJdw9irDy8tsQQL9MvCy5XImlGP0XEElUT1 OUj2RK6japes/rLFSbSeYXCcTibKnzVi39yz8BPw+CTLhNvh4FPh7TMQu8MjKgTg I6rVp38DuAtpqW+aEBNi6uFWXI8NkRXMU3QrNApmcXOQBOJG52da4EUOiMORHPaL tdUTgIS5MV6scvLPT2CpBhjCkFf+9OZf/1Rx9prBAyYXak98sjPZDDBVMNtEgsXq BGlEIZ3EwIL+39di6WES4uBTVLNSb4PChnWJgY/C8we5CcwcP4JjBPxXRjF1mQiO pJ+FmMCPTP5odUJQMaix/JIcSuUCAwEAAaOCAr4wggK6MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBlPbvZZ8RFcBoq1kGXVfxUOI/W2MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmYWJlYzcx LTdlY2ItNGRiZC1hNDIxLTk5YjljZDIwOTAzYS8wLzE5NEY2RUY2NTlGMTExNUMw NjhBQjU5MDY1RDU3RjE1MEUyM0Y1QjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD BAIr8OADBAJn+NgwDQYJKoZIhvcNAQELBQADggEBAC1Gtuz43mPIP+mhmgtZLJXy kTD414pjMEUTpwU8umVSLHqcA3OF3edGtzd9D8kznIiK8RNM7BTphJTvmxPPh1me A4N+T5rUAyCN6w97a9Le92zg8sotqCtb6uDsnoI9fGncaeb7FgEwgkzwPX88pPTs qaQKFBVBxeQn36CbSXXADB4c7D8W2r8zpVUmeHy8noZFWFoQuoI4s2XTv/7ZlFcT cGeJx0PzaTsvPv1i1M3kIY3QjDVRLbXPt1PysVStUXhhG7ubUonl/DZIt3wqNuBo 9IyvOBTQib405cfS6OXxWHd+QjIUV46c7dHlgrU9s47m+rDwqNyQq/0BPUnwb1A= -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:16 2025 by rpki-client