$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19B904DED71657E1E79F9B50507DCCCB817E9635.cer File: 19B904DED71657E1E79F9B50507DCCCB817E9635.cer (raw, json) Hash identifier: qxXpI+9v4x773L80S3uLb3cBQ+W8ODwcJOCIjC/B9UI= Subject key identifier: 19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 07AD19409D0FDE6B4A708654789B3038188BCDE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft caRepository: rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 12 Sep 2025 05:58:44 +0000 Certificate not after: Fri 11 Sep 2026 06:03:44 +0000 Subordinate resources: IP: 103.83.84.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ad:19:40:9d:0f:de:6b:4a:70:86:54:78:9b:30:38:18:8b:cd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Sep 12 05:58:44 2025 GMT Not After : Sep 11 06:03:44 2026 GMT Subject: CN=19B904DED71657E1E79F9B50507DCCCB817E9635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:2e:8c:76:89:f2:c6:03:5a:88:14:ff:35: 4a:22:09:58:2e:a0:08:08:58:f6:b9:15:fe:d6:b6: 67:59:bc:e3:63:6e:b5:13:fb:73:d8:8f:84:fe:18: 72:67:51:75:18:13:6f:85:78:10:59:91:e3:f6:3e: cd:5a:30:44:60:94:42:a6:78:bb:c6:4c:e0:3d:d9: 5d:b4:fd:41:7f:d8:12:e1:c7:31:ae:12:bf:b1:cd: 06:07:f1:85:17:df:ae:1d:4a:21:e8:55:c5:45:f8: 88:88:2c:e5:c0:fd:bd:c1:8f:bd:8c:06:07:82:a5: 6c:70:3d:6e:bd:0b:3c:e6:65:65:fe:12:4e:4e:86: 6f:f8:50:17:08:5f:a9:71:23:1a:5d:4b:0c:fa:35: e7:9f:7c:04:d0:1e:d7:6c:61:a3:76:aa:11:63:65: 97:df:b0:94:a4:65:aa:e6:05:8f:b0:0d:8b:f4:4d: 7a:99:61:ab:29:d8:34:94:e3:a5:48:df:bb:d1:e1: a8:41:15:85:d9:3d:93:1a:81:91:7a:72:f9:4b:77: 87:bb:75:30:f9:54:a9:a2:99:56:10:57:60:8f:c1: 0a:cb:72:6e:8a:82:42:24:a7:cc:6f:4e:80:68:c7: f8:a8:e8:3e:93:ef:bb:09:c6:67:b9:78:6b:32:56: f2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:B9:04:DE:D7:16:57:E1:E7:9F:9B:50:50:7D:CC:CB:81:7E:96:35 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/36e40a98-93ef-4af8-a436-469740154782/0/19B904DED71657E1E79F9B50507DCCCB817E9635.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.83.84.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:e5:87:a7:61:98:73:ca:e8:d6:83:5b:b0:b8:c5:7c:53:00: 0d:d3:1d:e1:09:d0:c1:1a:61:a2:90:21:6e:8f:38:c1:4b:bc: 07:60:fa:4d:2b:6d:cc:ec:21:6c:02:1f:86:89:96:6d:a5:21: 06:7b:a6:55:5b:1b:dd:7a:62:b0:1b:66:68:a9:24:64:ba:12: f7:cf:72:13:75:f6:33:ff:b5:f9:87:1e:c8:7e:a2:94:e6:5b: bb:25:0f:08:83:91:da:d2:b3:4b:08:df:ab:b1:b5:83:b5:4f: 04:e9:2f:9f:98:72:cc:1c:90:8e:6c:3a:61:80:0e:c3:b4:de: b3:a1:96:2f:68:42:39:1e:e7:80:21:88:29:12:ab:0a:1d:94: 2e:4c:6d:8a:05:f9:59:5f:31:8a:76:64:da:f2:cf:c1:d9:93: 94:b8:43:99:f4:dd:ec:09:ed:18:ae:be:33:8f:51:54:79:9f: 85:2f:47:c9:18:f0:5c:23:c0:78:54:9e:7f:f9:fd:fc:b4:65: ed:ca:95:d1:cf:80:77:7a:37:0b:c2:da:b7:7e:d5:9b:30:b2: 1b:0b:dc:34:e7:22:10:46:41:e4:f5:4d:b4:c6:64:d1:5b:73: 0a:0d:c7:29:bd:91:f2:67:b4:a9:b7:42:d2:00:2f:96:1c:bf: fe:bc:fb:6c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUB60ZQJ0P3mtKcIZUeJswOBiLzeAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDkxMjA1NTg0NFoX DTI2MDkxMTA2MDM0NFowMzExMC8GA1UEAxMoMTlCOTA0REVENzE2NTdFMUU3OUY5 QjUwNTA3RENDQ0I4MTdFOTYzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9fLox2ifLGA1qIFP81SiIJWC6gCAhY9rkV/ta2Z1m842NutRP7c9iPhP4Y cmdRdRgTb4V4EFmR4/Y+zVowRGCUQqZ4u8ZM4D3ZXbT9QX/YEuHHMa4Sv7HNBgfx hRffrh1KIehVxUX4iIgs5cD9vcGPvYwGB4KlbHA9br0LPOZlZf4STk6Gb/hQFwhf qXEjGl1LDPo15598BNAe12xho3aqEWNll9+wlKRlquYFj7ANi/RNeplhqynYNJTj pUjfu9HhqEEVhdk9kxqBkXpy+Ut3h7t1MPlUqaKZVhBXYI/BCstyboqCQiSnzG9O gGjH+KjoPpPvuwnGZ7l4azJW8sUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBm5BN7XFlfh55+bUFB9zMuBfpY1MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zNmU0MGE5OC05M2VmLTRhZjgtYTQzNi00Njk3NDAxNTQ3ODIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM2ZTQwYTk4 LTkzZWYtNGFmOC1hNDM2LTQ2OTc0MDE1NDc4Mi8wLzE5QjkwNERFRDcxNjU3RTFF NzlGOUI1MDUwN0RDQ0NCODE3RTk2MzUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnU1QwDQYJKoZIhvcNAQELBQADggEBABrlh6dhmHPK6NaDW7C4xXxTAA3THeEJ 0MEaYaKQIW6POMFLvAdg+k0rbczsIWwCH4aJlm2lIQZ7plVbG916YrAbZmipJGS6 EvfPchN19jP/tfmHHsh+opTmW7slDwiDkdrSs0sI36uxtYO1TwTpL5+YcswckI5s OmGADsO03rOhli9oQjke54AhiCkSqwodlC5MbYoF+VlfMYp2ZNryz8HZk5S4Q5n0 3ewJ7RiuvjOPUVR5n4UvR8kY8FwjwHhUnn/5/fy0Ze3KldHPgHd6NwvC2rd+1Zsw shsL3DTnIhBGQeT1TbTGZNFbcwoNxym9kfJntKm3QtIAL5Ycv/68+2w= -----END CERTIFICATE-----Generated at Mon Nov 3 19:35:15 2025 by rpki-client