$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer File: 19D983F92968E71520E086B32ACAFEFB5BF04943.cer (raw, json) Hash identifier: d7wKsVMBc1PvEbe/KS+Y6hZXfj4f/8bgZpSX3//WXsA= Subject key identifier: 19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 031AF3BA130FB5C23084F1828BBA14325E57D359 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft caRepository: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 14:03:09 +0000 Certificate not after: Tue 02 Jun 2026 14:08:09 +0000 Subordinate resources: IP: 103.18.144.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 22:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:1a:f3:ba:13:0f:b5:c2:30:84:f1:82:8b:ba:14:32:5e:57:d3:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 14:03:09 2025 GMT Not After : Jun 2 14:08:09 2026 GMT Subject: CN=19D983F92968E71520E086B32ACAFEFB5BF04943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a4:19:dc:c2:02:28:6c:6d:c5:e3:7a:50:cd: 87:9d:40:c9:ce:ff:16:9f:24:25:b9:a1:fe:b0:37: 00:48:f9:ae:ec:ce:f3:f4:28:c9:0d:eb:4b:4c:7c: 95:41:7c:d2:b2:56:c6:9c:09:4e:65:9b:dd:86:71: 61:2a:81:10:5b:5d:bf:b6:6b:0c:bf:13:48:77:ee: c0:87:d0:41:da:8a:05:71:c3:a7:45:fc:76:2f:c9: 73:f5:48:8c:30:4e:fd:71:ab:73:13:68:e1:22:2c: 08:8b:b2:c1:80:11:91:cb:81:db:19:3c:f7:e9:32: 1b:7e:a0:86:5c:6c:74:35:cf:ed:1c:ff:96:51:99: 3d:05:ae:0a:a4:f0:75:8d:6e:06:5b:3e:4f:0d:01: 66:86:ba:4a:22:c8:5f:e2:f0:2b:b6:68:59:6a:59: ec:53:d4:31:c7:68:95:42:8a:39:da:0a:80:16:a7: 11:91:bc:ad:54:95:50:11:0f:e2:5a:e1:b7:bd:2a: 43:e1:8d:75:ae:d2:64:50:2b:b0:8d:74:26:e9:4f: b2:50:c8:9a:69:c8:3c:fa:24:f4:a5:f7:b0:e2:1c: 28:b7:9d:d1:10:70:21:21:db:b1:a1:42:e2:a0:cc: 99:e0:2b:97:50:cf:09:91:6c:ae:53:de:48:c2:bf: 9f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.18.144.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:dc:6e:73:8b:fd:40:31:ce:31:e5:fa:88:48:1b:b2:1f:4d: a0:82:f0:0d:fa:de:ad:d0:cc:b6:b6:da:97:23:bc:fb:5c:41: 10:01:cd:ed:f3:f3:6f:43:fa:f1:7d:c2:f6:a1:e4:32:26:4d: 50:3d:ea:81:31:c2:e4:9f:ae:06:c2:95:05:6a:60:4c:5b:99: e8:c1:0d:c9:8b:55:9b:7b:a1:14:81:6b:26:be:f0:b0:b7:27: 09:a0:0e:af:b9:8b:9b:5b:31:80:4b:e1:b2:d5:79:e4:3e:6f: b0:58:d9:2b:cb:cb:2c:80:ca:8f:ae:66:ae:3f:27:0f:8a:3c: 27:95:35:ee:4e:90:92:5a:dc:01:4a:4d:76:cf:24:75:7d:7c: 4d:1f:42:5f:ec:a0:14:a0:97:0d:56:f5:0a:e2:f2:09:94:62: 6d:0b:e7:e9:8f:74:39:95:a2:cf:7b:be:5a:11:ca:5d:cd:8f: 35:b6:00:f5:34:99:87:69:7d:5c:42:1f:41:de:5c:7b:15:03: 61:39:00:1b:f3:46:65:44:4a:0a:4f:da:13:f5:c2:50:d9:2b: 70:81:fa:ca:93:78:d9:1c:6a:e1:cc:40:a0:59:83:c4:fd:08: 2f:df:f0:29:d8:89:dd:3d:92:87:67:ef:39:b3:29:5f:aa:68: f9:65:db:83 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAxrzuhMPtcIwhPGCi7oUMl5X01kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzE0MDMwOVoX DTI2MDYwMjE0MDgwOVowMzExMC8GA1UEAxMoMTlEOTgzRjkyOTY4RTcxNTIwRTA4 NkIzMkFDQUZFRkI1QkYwNDk0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO2kGdzCAihsbcXjelDNh51Ayc7/Fp8kJbmh/rA3AEj5ruzO8/QoyQ3rS0x8 lUF80rJWxpwJTmWb3YZxYSqBEFtdv7ZrDL8TSHfuwIfQQdqKBXHDp0X8di/Jc/VI jDBO/XGrcxNo4SIsCIuywYARkcuB2xk89+kyG36ghlxsdDXP7Rz/llGZPQWuCqTw dY1uBls+Tw0BZoa6SiLIX+LwK7ZoWWpZ7FPUMcdolUKKOdoKgBanEZG8rVSVUBEP 4lrht70qQ+GNda7SZFArsI10JulPslDImmnIPPok9KX3sOIcKLed0RBwISHbsaFC 4qDMmeArl1DPCZFsrlPeSMK/n9cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBnZg/kpaOcVIOCGsyrK/vtb8ElDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yY2IxZjEwOS1iOWZlLTQzMjMtODRlMy1iNjBiYjRkYzFlY2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjYjFmMTA5 LWI5ZmUtNDMyMy04NGUzLWI2MGJiNGRjMWVjYy8wLzE5RDk4M0Y5Mjk2OEU3MTUy MEUwODZCMzJBQ0FGRUZCNUJGMDQ5NDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnEpAwDQYJKoZIhvcNAQELBQADggEBAB3cbnOL/UAxzjHl+ohIG7IfTaCC8A36 3q3QzLa22pcjvPtcQRABze3z829D+vF9wvah5DImTVA96oExwuSfrgbClQVqYExb mejBDcmLVZt7oRSBaya+8LC3JwmgDq+5i5tbMYBL4bLVeeQ+b7BY2SvLyyyAyo+u Zq4/Jw+KPCeVNe5OkJJa3AFKTXbPJHV9fE0fQl/soBSglw1W9Qri8gmUYm0L5+mP dDmVos97vloRyl3NjzW2APU0mYdpfVxCH0HeXHsVA2E5ABvzRmVESgpP2hP1wlDZ K3CB+sqTeNkcauHMQKBZg8T9CC/f8CnYid09kodn7zmzKV+qaPll24M= -----END CERTIFICATE-----Generated at Sun Oct 26 20:49:57 2025 by rpki-client