$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer File: 131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.cer (raw, json) Hash identifier: 6/9wFB87Qwp1MMJpM6k91EIescDmm0E+QKo9uijKaxw= Subject key identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 316652832DDA4AE4B53137904AEE9E3963DF703E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft caRepository: rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 21 Jun 2025 18:01:05 +0000 Certificate not after: Sat 20 Jun 2026 18:06:05 +0000 Subordinate resources: IP: 103.174.24.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 09:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:66:52:83:2d:da:4a:e4:b5:31:37:90:4a:ee:9e:39:63:df:70:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 21 18:01:05 2025 GMT Not After : Jun 20 18:06:05 2026 GMT Subject: CN=131807BDDAAF97ED72214DFBC5C539ACB04FDCBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:0d:38:4b:1c:0d:89:69:33:b6:6f:3e:d7: 16:b2:1d:da:2e:25:c8:5d:aa:ce:42:30:04:ff:66: c4:6e:42:a2:be:4d:c5:f3:aa:3b:e5:de:3b:bf:aa: fb:14:d9:73:7f:90:4f:76:9e:f6:5c:4a:fd:16:9f: 12:97:ca:d1:fb:1a:e8:c5:3f:f4:9f:c4:6a:40:0a: 32:20:9b:61:6f:34:e2:c8:10:0f:30:cd:b1:4c:ec: 87:45:87:fb:c9:f5:33:f1:45:3e:b3:31:ac:fb:81: 5e:1c:3e:5f:97:40:1d:6a:28:7a:db:e8:84:d4:08: bf:11:83:7c:6f:0d:0b:8f:91:da:9c:64:6b:05:d9: 2f:6c:2f:1f:f0:97:80:a8:22:d3:32:55:24:fb:67: 98:f8:1c:01:97:e9:db:24:f4:2d:b8:3a:2f:50:cb: f7:05:3b:8b:b3:e8:95:e3:95:6f:ab:82:ab:d9:85: df:fa:e7:c6:d0:6e:c6:9b:f5:ff:86:49:e0:ae:65: 6f:52:a3:e3:00:2f:b1:dd:fd:d3:7e:ee:de:16:c9: 6a:d0:a4:d8:81:01:c9:d7:d0:1a:25:fc:72:51:de: b0:1e:9f:5a:f8:10:dc:fd:2a:90:08:be:d4:50:a9: c3:17:40:65:0a:bc:00:a7:47:28:74:ef:c8:5d:b0: 8e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:18:07:BD:DA:AF:97:ED:72:21:4D:FB:C5:C5:39:AC:B0:4F:DC:BE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/bf25b968-0927-4594-887e-67f53f967b12/0/131807BDDAAF97ED72214DFBC5C539ACB04FDCBE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.174.24.0/23 Signature Algorithm: sha256WithRSAEncryption 49:77:55:4d:7e:13:11:99:7a:b8:91:8a:86:3b:34:f3:be:f3: 0e:61:fd:6a:3f:9e:55:1f:54:21:6f:5d:d8:df:26:d4:04:49: 2d:b5:e3:96:38:df:a0:5d:02:45:7b:ef:d5:c1:54:88:0d:31: c9:a5:6e:21:b2:c1:70:86:62:2b:cd:fb:fe:5e:01:40:fd:c1: 82:1f:d1:56:d1:d5:9f:8c:31:5d:0b:6b:f2:91:d4:4e:60:c0: a0:e6:0b:96:4e:cc:27:d5:c1:19:53:23:ff:92:22:d0:b0:1e: 05:84:a7:1d:e5:e9:94:a7:d8:0e:09:02:e8:46:f9:4f:b9:ce: c1:4a:55:0f:fd:ae:2e:7c:07:4f:1e:9e:c9:a4:28:2d:98:e9: a5:05:fc:3a:9c:2d:7a:ac:46:ea:0b:fb:83:60:74:d2:c0:b2: 38:5c:7d:89:b5:b5:a6:23:45:f6:ff:d4:c2:05:e5:60:2f:a0: 41:27:51:e0:da:57:40:0e:53:c1:21:81:7c:66:09:a9:df:5b: 85:8c:52:74:7b:28:cd:6b:5a:c0:4a:e7:fb:3e:96:6a:4f:d8: f3:54:33:8e:ef:38:f4:14:5e:97:6a:f0:a9:3c:75:fb:c7:3d: e6:d9:f2:68:bf:e5:b0:da:49:6c:b1:be:e5:95:31:41:9f:77: a0:9b:dc:8b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMWZSgy3aSuS1MTeQSu6eOWPfcD4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYyMTE4MDEwNVoX DTI2MDYyMDE4MDYwNVowMzExMC8GA1UEAxMoMTMxODA3QkREQUFGOTdFRDcyMjE0 REZCQzVDNTM5QUNCMDRGRENCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMg/DThLHA2JaTO2bz7XFrId2i4lyF2qzkIwBP9mxG5Cor5NxfOqO+XeO7+q +xTZc3+QT3ae9lxK/RafEpfK0fsa6MU/9J/EakAKMiCbYW804sgQDzDNsUzsh0WH +8n1M/FFPrMxrPuBXhw+X5dAHWooetvohNQIvxGDfG8NC4+R2pxkawXZL2wvH/CX gKgi0zJVJPtnmPgcAZfp2yT0Lbg6L1DL9wU7i7PoleOVb6uCq9mF3/rnxtBuxpv1 /4ZJ4K5lb1Kj4wAvsd39037u3hbJatCk2IEBydfQGiX8clHesB6fWvgQ3P0qkAi+ 1FCpwxdAZQq8AKdHKHTvyF2wjkMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBMYB73ar5ftciFN+8XFOaywT9y+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iZjI1Yjk2OC0wOTI3LTQ1OTQtODg3ZS02N2Y1M2Y5NjdiMTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JmMjViOTY4 LTA5MjctNDU5NC04ODdlLTY3ZjUzZjk2N2IxMi8wLzEzMTgwN0JEREFBRjk3RUQ3 MjIxNERGQkM1QzUzOUFDQjA0RkRDQkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrhgwDQYJKoZIhvcNAQELBQADggEBAEl3VU1+ExGZeriRioY7NPO+8w5h/Wo/ nlUfVCFvXdjfJtQESS2145Y436BdAkV779XBVIgNMcmlbiGywXCGYivN+/5eAUD9 wYIf0VbR1Z+MMV0La/KR1E5gwKDmC5ZOzCfVwRlTI/+SItCwHgWEpx3l6ZSn2A4J AuhG+U+5zsFKVQ/9ri58B08ensmkKC2Y6aUF/DqcLXqsRuoL+4NgdNLAsjhcfYm1 taYjRfb/1MIF5WAvoEEnUeDaV0AOU8EhgXxmCanfW4WMUnR7KM1rWsBK5/s+lmpP 2PNUM47vOPQUXpdq8Kk8dfvHPebZ8mi/5bDaSWyxvuWVMUGfd6Cb3Is= -----END CERTIFICATE-----Generated at Sun Nov 2 05:04:31 2025 by rpki-client