$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer File: 19960F4C3FEEC60D5A59281148061FB21094449A.cer (raw, json) Hash identifier: Pny4AH3qmL5VATyHi3Z+gQmkiLWg9NB08PzcEv188lY= Subject key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 169DF4F4D1F13AAC75EEC9E22B89CD93889D7466 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft caRepository: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 11 Jul 2025 07:03:38 +0000 Certificate not after: Fri 10 Jul 2026 07:08:38 +0000 Subordinate resources: IP: 103.16.116.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9d:f4:f4:d1:f1:3a:ac:75:ee:c9:e2:2b:89:cd:93:88:9d:74:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jul 11 07:03:38 2025 GMT Not After : Jul 10 07:08:38 2026 GMT Subject: CN=19960F4C3FEEC60D5A59281148061FB21094449A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:7c:82:6a:84:59:03:c1:ab:dc:91:8e:26: 94:03:33:5e:d9:ff:52:5e:e4:0e:17:f9:87:e3:18: bc:40:8f:fe:82:17:93:b4:3b:10:e4:2f:95:37:2b: 1c:b5:9d:c1:25:f0:2e:8b:a7:fa:98:9d:bc:6c:4f: 60:d9:b7:45:64:76:fd:99:77:56:ae:6e:0e:71:e8: 23:d8:b1:fa:a5:42:19:a9:a2:d7:77:9a:f8:e1:31: 73:ef:f9:01:6b:fd:5d:8f:11:79:b6:03:08:cd:ce: 76:c8:a6:0c:13:b1:b7:ce:6b:d8:9e:4f:57:98:42: 77:35:f8:03:da:e5:af:39:76:1e:12:07:08:5c:ba: 7b:ad:73:88:22:70:17:9f:18:33:b0:08:60:d8:00: 69:ec:96:16:d8:65:25:3a:e3:ef:54:d1:3a:4c:07: e8:62:1c:e7:66:24:7d:05:ea:79:cb:b8:c4:0d:44: 8c:51:95:ba:6d:e0:06:02:e1:2b:c7:7d:d4:7c:de: 52:9d:5f:d7:49:0f:7f:61:c7:45:81:ff:00:88:5b: a6:53:be:f7:81:dd:3c:9d:5d:e0:63:d7:69:ff:20: 53:ef:98:4d:92:82:a1:07:fe:a5:cb:14:31:d5:e9: c7:b9:d9:31:a1:c8:b4:57:60:f0:db:10:84:2d:6e: 92:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.16.116.0/23 Signature Algorithm: sha256WithRSAEncryption 3b:36:5a:16:aa:99:c2:4f:00:89:80:11:bc:54:5a:86:1b:d8: b5:14:f0:c7:31:3f:1c:67:7f:65:6c:4a:37:da:b9:92:db:c1: d5:0a:e8:47:29:07:0f:89:50:61:e1:80:13:60:7a:8f:76:55: 08:99:f4:c7:b4:be:52:7d:74:21:7d:3e:68:5a:2d:a7:2f:27: 09:47:0a:e0:1c:9b:34:11:2f:0b:f5:0d:74:ba:a8:b4:3a:34: c3:ea:b9:02:84:41:32:03:0b:a2:bb:7e:68:10:98:22:bd:20: bc:5d:7c:bf:54:74:07:b8:9a:05:5e:2b:91:19:99:45:da:4d: f8:8b:cf:f3:da:9e:84:4b:e9:35:43:7a:da:33:d7:d7:88:ba: 0c:58:ad:7f:97:db:94:79:c3:74:d8:05:43:1e:f3:b1:8e:dd: b6:2d:a4:d5:07:7d:3f:d9:9e:5e:34:63:37:f7:3a:49:ff:c2: 6f:c7:e2:8b:77:2e:d5:9e:c5:20:e8:7d:a2:50:3c:6f:31:2d: 82:c4:43:3b:e9:62:60:3b:80:26:3c:a5:67:6c:99:e9:69:3e: 38:75:c9:96:7a:d8:66:dc:c1:eb:78:67:78:6c:13:47:bb:6e: ea:c6:a8:44:03:35:79:23:94:e4:af:05:31:48:99:88:95:cd: c1:dc:86:b1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUFp309NHxOqx17sniK4nNk4iddGYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDcxMTA3MDMzOFoX DTI2MDcxMDA3MDgzOFowMzExMC8GA1UEAxMoMTk5NjBGNEMzRkVFQzYwRDVBNTky ODExNDgwNjFGQjIxMDk0NDQ5QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKjofIJqhFkDwavckY4mlAMzXtn/Ul7kDhf5h+MYvECP/oIXk7Q7EOQvlTcr HLWdwSXwLoun+pidvGxPYNm3RWR2/Zl3Vq5uDnHoI9ix+qVCGami13ea+OExc+/5 AWv9XY8RebYDCM3OdsimDBOxt85r2J5PV5hCdzX4A9rlrzl2HhIHCFy6e61ziCJw F58YM7AIYNgAaeyWFthlJTrj71TROkwH6GIc52YkfQXqecu4xA1EjFGVum3gBgLh K8d91HzeUp1f10kPf2HHRYH/AIhbplO+94HdPJ1d4GPXaf8gU++YTZKCoQf+pcsU MdXpx7nZMaHItFdg8NsQhC1uknkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBmWD0w/7sYNWlkoEUgGH7IQlESaMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mYWU4YmNjOS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZhZThiY2M5 LTQzYTEtNGJhYi1iNmQ4LTFhOTdkMGQzYzIxZC8wLzE5OTYwRjRDM0ZFRUM2MEQ1 QTU5MjgxMTQ4MDYxRkIyMTA5NDQ0OUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnEHQwDQYJKoZIhvcNAQELBQADggEBADs2WhaqmcJPAImAEbxUWoYb2LUU8Mcx Pxxnf2VsSjfauZLbwdUK6EcpBw+JUGHhgBNgeo92VQiZ9Me0vlJ9dCF9PmhaLacv JwlHCuAcmzQRLwv1DXS6qLQ6NMPquQKEQTIDC6K7fmgQmCK9ILxdfL9UdAe4mgVe K5EZmUXaTfiLz/PanoRL6TVDetoz19eIugxYrX+X25R5w3TYBUMe87GO3bYtpNUH fT/Znl40Yzf3Okn/wm/H4ot3LtWexSDofaJQPG8xLYLEQzvpYmA7gCY8pWdsmelp Pjh1yZZ62Gbcwet4Z3hsE0e7burGqEQDNXkjlOSvBTFImYiVzcHchrE= -----END CERTIFICATE-----Generated at Mon Jul 21 07:36:38 2025 by rpki-client