$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer File: 919B60E4D7E1171B6624F318ADA1B74502A3A018.cer (raw, json) Hash identifier: W0RIfqBJfDZ3H0+ZbXY2gfc/B3IsY+QeO73FUHNmYTk= Subject key identifier: 91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 10D2F1BEFB6C0C2DA27DA725DD6AAC587FA6AB6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft caRepository: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 05:08:48 +0000 Certificate not after: Tue 02 Jun 2026 05:13:48 +0000 Subordinate resources: IP: 103.106.116.0/24 IP: 2001:df3:a500::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 13:36:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d2:f1:be:fb:6c:0c:2d:a2:7d:a7:25:dd:6a:ac:58:7f:a6:ab:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 05:08:48 2025 GMT Not After : Jun 2 05:13:48 2026 GMT Subject: CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:18:8b:2c:24:0d:9f:83:e3:5c:5c:e4:84: 9c:55:19:37:f3:71:ff:18:3a:bc:07:f4:db:44:59: 41:0c:65:bb:4a:02:ab:a0:8e:5b:93:65:7c:d8:1b: df:73:3b:de:88:78:4f:a7:94:bb:05:e9:63:25:98: d2:97:ca:a3:3d:fe:28:9e:a2:72:0d:2c:63:25:c3: 58:3f:ff:25:d9:1e:ca:9a:de:0b:15:e6:91:c2:f2: f5:08:1b:f2:05:10:94:06:05:9a:83:9b:75:5b:cc: 5e:da:46:d3:5e:cf:cb:d4:8f:fe:7f:52:27:53:bf: 2c:ae:8f:91:8a:65:0c:dd:b9:bc:89:4c:fc:eb:6e: ee:4f:4a:ba:da:4e:41:59:61:bb:a8:6c:98:4a:a2: b1:41:12:ef:38:22:1e:57:5a:87:b3:3a:75:b9:02: 53:2c:7a:61:83:6b:5c:43:22:cf:48:09:01:b4:98: 29:76:d7:f8:8f:a1:3a:00:23:af:1e:45:c7:f4:2c: dd:f2:e8:81:7f:85:02:9d:64:e4:06:38:74:75:0a: 46:a7:2b:cf:de:90:df:f4:91:05:9a:f8:04:1e:5b: b3:04:1b:f3:14:9c:e9:1f:60:32:a7:7f:99:df:e0: c7:1a:ae:b8:d6:7e:4d:42:a4:98:eb:97:e5:4e:09: 17:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.106.116.0/24 IPv6: 2001:df3:a500::/48 Signature Algorithm: sha256WithRSAEncryption 64:17:ab:68:a5:a8:0b:45:65:74:14:33:ba:6a:65:9e:3f:0d: fb:86:6a:32:57:0f:05:72:c7:45:dc:08:a2:fc:6b:20:4c:16: 49:df:d7:03:55:d1:03:50:48:99:75:c1:92:f4:6b:23:27:6e: 77:38:d3:b1:ec:2a:97:6a:3c:4d:fc:0e:97:e3:0c:7c:ad:11: 92:70:ba:82:05:11:83:34:8f:01:71:e3:03:69:0c:2f:ee:cd: 99:31:3d:f6:03:8c:30:57:fe:f5:03:a0:be:d9:5e:f3:60:ff: 92:fb:0b:d3:db:11:d7:82:54:83:59:0d:45:d3:52:4b:72:fc: b9:cd:74:dd:1a:2d:dd:4c:03:6f:c2:34:1a:fc:00:84:d9:16: 07:4c:20:85:40:bc:42:07:f1:00:22:9a:e5:f9:55:e8:0d:e0: c9:68:38:31:a6:b4:f4:eb:a0:09:41:68:8f:5d:41:ee:37:d2: cc:e8:f7:24:27:ca:25:99:41:4d:89:6e:50:ed:34:62:39:59: d5:98:62:c8:a6:23:d8:07:30:33:76:88:a5:48:9f:56:7e:39: d4:62:11:7e:8c:1b:46:93:55:ee:93:52:7f:01:26:69:7f:fa: 4d:32:13:ba:b4:e7:1d:a7:be:c4:c1:37:e0:14:9d:27:ae:df: db:03:8e:5c -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUENLxvvtsDC2ifacl3WqsWH+mq2wwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzA1MDg0OFoX DTI2MDYwMjA1MTM0OFowMzExMC8GA1UEAxMoOTE5QjYwRTREN0UxMTcxQjY2MjRG MzE4QURBMUI3NDUwMkEzQTAxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+FGIssJA2fg+NcXOSEnFUZN/Nx/xg6vAf020RZQQxlu0oCq6COW5NlfNgb 33M73oh4T6eUuwXpYyWY0pfKoz3+KJ6icg0sYyXDWD//JdkeypreCxXmkcLy9Qgb 8gUQlAYFmoObdVvMXtpG017Py9SP/n9SJ1O/LK6PkYplDN25vIlM/Otu7k9KutpO QVlhu6hsmEqisUES7zgiHldah7M6dbkCUyx6YYNrXEMiz0gJAbSYKXbX+I+hOgAj rx5Fx/Qs3fLogX+FAp1k5AY4dHUKRqcrz96Q3/SRBZr4BB5bswQb8xSc6R9gMqd/ md/gxxquuNZ+TUKkmOuX5U4JF/0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJGbYOTX4RcbZiTzGK2ht0UCo6AYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MDBhZWQxZC05NGM5LTQ5YTYtYTYwOS04ODJlMDNjZDA3YmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwMGFlZDFk LTk0YzktNDlhNi1hNjA5LTg4MmUwM2NkMDdiYS8wLzkxOUI2MEU0RDdFMTE3MUI2 NjI0RjMxOEFEQTFCNzQ1MDJBM0EwMTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnanQwDwQCAAIwCQMHACABDfOlADANBgkqhkiG9w0BAQsFAAOCAQEAZBeraKWo C0VldBQzumplnj8N+4ZqMlcPBXLHRdwIovxrIEwWSd/XA1XRA1BImXXBkvRrIydu dzjTsewql2o8TfwOl+MMfK0RknC6ggURgzSPAXHjA2kML+7NmTE99gOMMFf+9QOg vtle82D/kvsL09sR14JUg1kNRdNSS3L8uc103Rot3UwDb8I0GvwAhNkWB0wghUC8 QgfxACKa5flV6A3gyWg4Maa09OugCUFoj11B7jfSzOj3JCfKJZlBTYluUO00YjlZ 1ZhiyKYj2AcwM3aIpUifVn451GIRfowbRpNV7pNSfwEmaX/6TTITurTnHae+xME3 4BSdJ67f2wOOXA== -----END CERTIFICATE-----Generated at Wed Jun 18 05:06:00 2025 by rpki-client