$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer File: 1D4A7562F096F3F753E388C14594BA75AE09E7F3.cer (raw, json) Hash identifier: s57JD/OEN8NC6JpSdiqteRQMueV3gksHMKcdOciC8JY= Subject key identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 55469129732646694D71795CA5766BBB0DD56273 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft caRepository: rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 11 Mar 2025 11:41:22 +0000 Certificate not after: Tue 10 Mar 2026 11:46:22 +0000 Subordinate resources: IP: 103.107.176.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:46:91:29:73:26:46:69:4d:71:79:5c:a5:76:6b:bb:0d:d5:62:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 11 11:41:22 2025 GMT Not After : Mar 10 11:46:22 2026 GMT Subject: CN=1D4A7562F096F3F753E388C14594BA75AE09E7F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:15:79:5b:05:f4:a3:ff:d2:3d:cc:f5:e4:91: 38:76:aa:f1:14:b8:bc:cd:9f:6f:dd:24:61:6d:48: d8:77:43:be:11:bf:bc:85:40:e2:e0:9c:ab:90:4d: f5:71:50:b5:66:0a:a2:46:d2:a8:13:2f:71:64:21: b8:28:b1:b6:42:a3:f1:5e:6b:f5:98:05:c8:39:5f: b9:7a:3b:ea:fb:ee:42:f0:56:55:b4:36:a4:a8:6d: 1a:2a:57:54:bf:c8:b4:20:39:bc:b1:51:44:d5:f8: f0:60:98:6a:68:be:8c:cc:44:5b:ca:50:7c:cd:99: c4:53:2a:82:75:93:c0:2b:59:72:46:c6:62:6c:00: 2d:bf:7b:c5:10:be:70:6c:e6:60:32:f3:6c:b9:ce: e3:bc:8d:e5:89:ae:c5:5f:77:2e:e3:0b:9b:fb:f0: 13:fb:ae:86:c9:69:65:65:f8:7b:ba:31:08:f1:9e: 29:e7:3f:54:2b:4f:ec:44:2b:fc:68:ce:69:80:32: aa:ff:fc:e3:42:1f:64:7b:50:18:8c:ad:4b:d7:13: d0:64:88:10:dd:b2:91:de:14:5b:bb:6d:5f:90:b7: 94:19:31:d9:e2:ce:3e:c7:3e:49:be:30:d5:40:4a: 61:e2:31:58:4c:10:7b:1d:b3:ac:c2:3f:36:f8:0d: 74:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:4A:75:62:F0:96:F3:F7:53:E3:88:C1:45:94:BA:75:AE:09:E7:F3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d36ab04d-68c7-4249-b109-46b28cf803f3/0/1D4A7562F096F3F753E388C14594BA75AE09E7F3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.176.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:2b:e5:ee:75:d8:0e:a0:9e:2d:be:8d:03:e7:3f:83:8c:ee: c2:b0:52:a1:0d:20:88:d8:36:c7:9a:46:e3:bb:bb:95:8c:14: be:ae:6d:d6:e7:16:bb:7a:68:02:5c:c3:5d:4e:86:6d:0c:37: ea:f7:00:c9:92:5f:c4:62:b6:6a:84:9e:6b:cf:24:67:c9:ec: ad:98:ce:9b:92:d4:b7:f5:54:a0:6b:30:7e:6a:e3:50:91:24: 41:9a:b8:58:76:e8:0e:9a:90:2c:42:49:2c:1f:1f:c8:86:9c: c7:f7:c0:8e:bd:cc:96:60:fa:74:fb:11:9d:b9:8d:94:74:e5: ad:2e:a9:67:3f:b8:db:be:51:a8:9c:d6:f6:3f:4d:9a:28:01: 3d:2e:90:c4:0c:99:d8:b2:a5:f5:90:ca:15:98:74:03:bf:98: 0b:3d:96:dc:5a:5a:f8:70:0e:bb:0d:4d:a5:28:f8:58:6c:82: 31:1f:be:69:a2:16:b3:28:f3:82:b3:63:57:8a:d7:c1:32:53: 2e:34:e4:f2:f0:de:8a:eb:77:8f:84:29:e2:9c:34:b3:48:30: c3:b4:6e:cc:1f:95:49:c2:3a:eb:3e:f4:90:e2:65:bb:79:aa: 65:87:41:64:e7:64:6e:f0:05:3c:6d:d8:de:cc:35:ae:de:fd: 9e:6a:c2:fa -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVUaRKXMmRmlNcXlcpXZruw3VYnMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDMxMTExNDEyMloX DTI2MDMxMDExNDYyMlowMzExMC8GA1UEAxMoMUQ0QTc1NjJGMDk2RjNGNzUzRTM4 OEMxNDU5NEJBNzVBRTA5RTdGMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANAVeVsF9KP/0j3M9eSROHaq8RS4vM2fb90kYW1I2HdDvhG/vIVA4uCcq5BN 9XFQtWYKokbSqBMvcWQhuCixtkKj8V5r9ZgFyDlfuXo76vvuQvBWVbQ2pKhtGipX VL/ItCA5vLFRRNX48GCYami+jMxEW8pQfM2ZxFMqgnWTwCtZckbGYmwALb97xRC+ cGzmYDLzbLnO47yN5YmuxV93LuMLm/vwE/uuhslpZWX4e7oxCPGeKec/VCtP7EQr /GjOaYAyqv/840IfZHtQGIytS9cT0GSIEN2ykd4UW7ttX5C3lBkx2eLOPsc+Sb4w 1UBKYeIxWEwQex2zrMI/NvgNdGUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB1KdWLwlvP3U+OIwUWUunWuCefzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMzZhYjA0ZC02OGM3LTQyNDktYjEwOS00NmIyOGNmODAzZjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QzNmFiMDRk LTY4YzctNDI0OS1iMTA5LTQ2YjI4Y2Y4MDNmMy8wLzFENEE3NTYyRjA5NkYzRjc1 M0UzODhDMTQ1OTRCQTc1QUUwOUU3RjMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFna7AwDQYJKoZIhvcNAQELBQADggEBAIor5e512A6gni2+jQPnP4OM7sKwUqEN IIjYNseaRuO7u5WMFL6ubdbnFrt6aAJcw11Ohm0MN+r3AMmSX8RitmqEnmvPJGfJ 7K2YzpuS1Lf1VKBrMH5q41CRJEGauFh26A6akCxCSSwfH8iGnMf3wI69zJZg+nT7 EZ25jZR05a0uqWc/uNu+Uaic1vY/TZooAT0ukMQMmdiypfWQyhWYdAO/mAs9ltxa WvhwDrsNTaUo+FhsgjEfvmmiFrMo84KzY1eK18EyUy405PLw3orrd4+EKeKcNLNI MMO0bswflUnCOus+9JDiZbt5qmWHQWTnZG7wBTxt2N7MNa7e/Z5qwvo= -----END CERTIFICATE-----Generated at Mon Nov 3 19:33:39 2025 by rpki-client