$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer File: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer (raw, json) Hash identifier: /nGrRpFeTGXE7pzyvp2DPs9ebAjxyd0jlJ1wqPKFJAQ= Subject key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 686929011A5AA9482AAE8C2308F6A7E9D069BE50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft caRepository: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 19 Aug 2025 18:33:57 +0000 Certificate not after: Tue 18 Aug 2026 18:38:57 +0000 Subordinate resources: IP: 103.177.100.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Nov 2025 09:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:69:29:01:1a:5a:a9:48:2a:ae:8c:23:08:f6:a7:e9:d0:69:be:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 19 18:33:57 2025 GMT Not After : Aug 18 18:38:57 2026 GMT Subject: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:da:58:9b:bb:c6:b6:de:19:e3:38:aa:3f:6b: a3:0d:68:df:54:95:85:f1:27:28:50:5c:90:35:16: 93:d8:c5:27:b6:d3:0d:36:74:da:1f:67:e9:1d:4c: d4:83:51:6d:b0:9f:c4:a2:bf:1a:5d:bf:2a:5b:79: 6d:d9:97:40:8d:fa:00:49:c4:88:bb:e4:fc:96:54: 85:c6:2b:92:3c:bd:a3:e9:7c:b6:a1:30:a2:3e:67: 97:d0:2b:7f:1c:ca:2e:4c:20:40:7c:cb:12:d0:03: 3b:3b:c9:c2:cc:4b:c3:27:0b:b5:a6:20:ef:a0:f9: cd:05:1a:d0:fa:7f:f2:ff:d5:09:98:90:18:62:3c: c0:12:cc:f2:3e:91:6d:61:7c:86:7d:58:b7:95:f3: 7d:a8:cc:74:8a:a0:48:00:7d:f4:cb:f0:45:98:19: 86:44:3f:69:13:2e:9a:93:28:2c:ec:0f:03:0e:18: 73:98:c4:f9:df:3c:f4:4f:05:82:66:b2:10:52:e6: 05:7d:03:82:9a:28:de:15:68:66:74:c2:cc:6a:bb: a8:39:fd:06:54:0f:f3:2c:2a:81:75:3a:b5:13:d5: 91:47:8c:a9:6b:38:34:a3:7e:7a:71:f7:69:1e:fd: 34:d0:62:2d:02:16:14:a9:83:96:c1:43:53:d1:e1: 13:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.100.0/23 Signature Algorithm: sha256WithRSAEncryption 02:c1:3f:67:69:cf:ab:aa:99:77:58:28:27:72:7d:62:3a:4e: 38:3f:b3:8b:5f:fd:3e:9b:1d:78:a6:43:5c:a7:25:4e:ea:6c: 10:a9:ef:34:fc:f5:a9:df:b4:fd:13:ed:6b:04:17:30:3e:64: 89:d1:8d:72:fd:29:f6:93:b6:c2:ed:24:fe:cc:bd:ba:d4:85: 37:92:7a:ea:6b:91:4b:b2:bf:28:26:c6:4f:5e:44:f0:bc:d3: 95:73:61:15:aa:ef:ca:44:fa:02:c0:3e:63:7f:5a:f7:6f:e8: 69:3b:d2:84:7d:35:8f:f5:33:c0:d9:45:64:dd:93:b9:73:46: 1c:c8:33:59:ae:59:58:5d:47:27:d3:3e:e0:3b:35:06:90:81: f6:59:84:0b:c0:8d:22:68:fe:d8:0d:4e:1e:64:9d:ed:59:85: 37:33:6b:96:b5:5a:1c:d6:c8:a8:f8:1b:1e:da:a9:59:6d:5c: 72:45:fd:30:44:f9:94:be:ae:8d:af:bd:cb:7a:e6:5c:16:d1: 47:48:8f:3c:66:ae:7e:04:51:74:b6:1b:49:d6:33:07:4f:d1: 40:d8:2a:69:bb:ed:68:c1:75:4f:09:6c:03:12:f7:98:c9:aa: 22:0f:04:bc:c6:2f:37:bb:81:6c:93:73:cf:cd:39:c9:eb:c4: dc:c7:04:27 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUaGkpARpaqUgqrowjCPan6dBpvlAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxOTE4MzM1N1oX DTI2MDgxODE4Mzg1N1owMzExMC8GA1UEAxMoMUJGNzEyMTk2NjQ3MDdBN0I3NzZD RDk5QjlBNkQyQ0M2MENFMEJBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANfaWJu7xrbeGeM4qj9row1o31SVhfEnKFBckDUWk9jFJ7bTDTZ02h9n6R1M 1INRbbCfxKK/Gl2/Klt5bdmXQI36AEnEiLvk/JZUhcYrkjy9o+l8tqEwoj5nl9Ar fxzKLkwgQHzLEtADOzvJwsxLwycLtaYg76D5zQUa0Pp/8v/VCZiQGGI8wBLM8j6R bWF8hn1Yt5XzfajMdIqgSAB99MvwRZgZhkQ/aRMumpMoLOwPAw4Yc5jE+d889E8F gmayEFLmBX0Dgpoo3hVoZnTCzGq7qDn9BlQP8ywqgXU6tRPVkUeMqWs4NKN+enH3 aR79NNBiLQIWFKmDlsFDU9HhE20CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBv3EhlmRwent3bNmbmm0sxgzgurMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wODk4NWY1OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA4OTg1ZjU5 LTBlZTYtNDIwOC05YTkwLTI5YzEwODYwMGNmYy8wLzFCRjcxMjE5NjY0NzA3QTdC Nzc2Q0Q5OUI5QTZEMkNDNjBDRTBCQUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsWQwDQYJKoZIhvcNAQELBQADggEBAALBP2dpz6uqmXdYKCdyfWI6Tjg/s4tf /T6bHXimQ1ynJU7qbBCp7zT89anftP0T7WsEFzA+ZInRjXL9KfaTtsLtJP7MvbrU hTeSeuprkUuyvygmxk9eRPC805VzYRWq78pE+gLAPmN/Wvdv6Gk70oR9NY/1M8DZ RWTdk7lzRhzIM1muWVhdRyfTPuA7NQaQgfZZhAvAjSJo/tgNTh5kne1ZhTcza5a1 WhzWyKj4Gx7aqVltXHJF/TBE+ZS+ro2vvct65lwW0UdIjzxmrn4EUXS2G0nWMwdP 0UDYKmm77WjBdU8JbAMS95jJqiIPBLzGLze7gWyTc8/NOcnrxNzHBCc= -----END CERTIFICATE-----Generated at Sun Nov 2 05:05:12 2025 by rpki-client