$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer File: 09884E2A3DACA82285AA33105FFA136D63B6B89E.cer (raw, json) Hash identifier: ErPJVOpV+wbQ1ObPgWWNEuys1F6g128FlOkhPgAEAcc= Subject key identifier: 09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2E2ECC72241779104645B4CC7DEE6EC32276014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft caRepository: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 09 Oct 2025 09:38:58 +0000 Certificate not after: Thu 08 Oct 2026 09:43:58 +0000 Subordinate resources: IP: 103.41.208.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:2e:cc:72:24:17:79:10:46:45:b4:cc:7d:ee:6e:c3:22:76:01:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 9 09:38:58 2025 GMT Not After : Oct 8 09:43:58 2026 GMT Subject: CN=09884E2A3DACA82285AA33105FFA136D63B6B89E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0b:2d:db:88:7c:c8:f8:1b:d3:2f:3c:7e:ee: 82:25:0a:eb:ab:09:26:06:7d:f5:1a:73:77:7d:ef: 19:04:bd:e9:57:ff:26:05:e9:85:bd:cb:f9:43:95: eb:08:72:12:be:07:8c:d4:28:89:ac:1b:7a:8a:92: bc:4e:e0:f4:7a:83:3d:c6:ba:b8:97:37:70:61:82: 33:1d:d0:cb:99:f2:94:c8:f1:18:95:9f:80:18:f4: 30:b2:a5:b5:51:ac:71:d9:1f:73:4b:4c:10:71:b5: df:52:f8:e9:cd:23:fb:c1:59:e9:a5:3a:c9:93:b3: ee:0d:13:9a:9c:ed:c9:21:62:be:74:88:fa:58:50: 27:4f:b5:de:59:b8:e4:ce:1b:e3:57:2e:3d:5f:12: 0d:f7:28:c2:dc:d1:e0:54:b4:50:e8:6b:e6:d1:7e: 6d:20:28:4b:bd:9c:21:fb:78:1f:97:fa:bc:71:b9: a6:50:e4:d0:15:14:9f:29:8e:fa:1e:01:1c:1c:2c: 8b:30:69:41:e9:db:8c:07:14:e2:8d:9d:79:08:2e: bd:f4:1b:a8:ce:6b:51:8c:1f:4a:23:99:f5:98:52: 7b:4f:6b:cb:8d:31:a5:f0:fa:89:4a:31:ce:10:db: 2b:ae:c3:20:bf:e3:8e:7a:5c:74:7c:e7:fc:4a:26: 14:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.41.208.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:69:a2:d7:38:8a:1a:65:ae:06:8a:80:ae:59:d6:47:42:d9: de:88:9e:b0:14:9a:41:7a:51:f0:c4:87:ca:ed:dd:a5:35:de: eb:5c:ca:0a:4f:c1:43:12:8f:a4:5a:f6:a9:6b:d4:13:45:6e: ab:65:e6:63:c7:be:30:71:d0:48:c8:ad:69:e7:b6:93:48:d9: 1e:6b:76:6f:04:6e:59:c8:e9:ae:1e:4d:08:10:41:a3:86:a2: 1c:ec:68:47:5d:d7:1e:cb:e4:e6:ef:ae:57:6c:69:6f:92:df: 57:e0:1e:1d:0a:aa:8d:27:d5:93:92:73:bc:b8:41:81:65:0e: 85:34:ee:eb:55:9e:e3:d3:42:5b:ee:88:b3:e3:76:a2:70:44: 11:22:9d:b6:f8:11:38:a6:6a:7d:2d:a0:55:d1:c9:67:3f:2a: 77:b2:89:4e:8d:27:5c:df:9c:75:98:3d:4b:6d:32:03:b9:cd: d8:5d:87:25:20:1a:ce:c4:4e:05:0f:ac:9a:62:ba:10:49:e4: 26:fc:c6:1d:b4:7e:4d:34:88:cb:8d:f2:92:f3:47:38:64:e2: 73:ba:f8:c0:5a:f6:8b:6b:61:91:8b:fb:f0:b8:02:e7:29:67: 82:a1:a8:e3:94:0d:97:14:dc:63:8b:1c:9c:e4:da:27:f6:dd: 76:ad:29:4b -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULi7MciQXeRBGRbTMfe5uwyJ2AUswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAwOTA5Mzg1OFoX DTI2MTAwODA5NDM1OFowMzExMC8GA1UEAxMoMDk4ODRFMkEzREFDQTgyMjg1QUEz MzEwNUZGQTEzNkQ2M0I2Qjg5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK8LLduIfMj4G9MvPH7ugiUK66sJJgZ99Rpzd33vGQS96Vf/JgXphb3L+UOV 6whyEr4HjNQoiawbeoqSvE7g9HqDPca6uJc3cGGCMx3Qy5nylMjxGJWfgBj0MLKl tVGscdkfc0tMEHG131L46c0j+8FZ6aU6yZOz7g0TmpztySFivnSI+lhQJ0+13lm4 5M4b41cuPV8SDfcowtzR4FS0UOhr5tF+bSAoS72cIft4H5f6vHG5plDk0BUUnymO +h4BHBwsizBpQenbjAcU4o2deQguvfQbqM5rUYwfSiOZ9ZhSe09ry40xpfD6iUox zhDbK67DIL/jjnpcdHzn/EomFHUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAmITio9rKgihaozEF/6E21jtrieMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80YjZhZDJiNC1lYmU1LTRjYzItOWQwNS1lZmRkMTFkNjBlMmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiNmFkMmI0 LWViZTUtNGNjMi05ZDA1LWVmZGQxMWQ2MGUyYS8wLzA5ODg0RTJBM0RBQ0E4MjI4 NUFBMzMxMDVGRkExMzZENjNCNkI4OUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnKdAwDQYJKoZIhvcNAQELBQADggEBAEppotc4ihplrgaKgK5Z1kdC2d6InrAU mkF6UfDEh8rt3aU13utcygpPwUMSj6Ra9qlr1BNFbqtl5mPHvjBx0EjIrWnntpNI 2R5rdm8EblnI6a4eTQgQQaOGohzsaEdd1x7L5ObvrldsaW+S31fgHh0Kqo0n1ZOS c7y4QYFlDoU07utVnuPTQlvuiLPjdqJwRBEinbb4ETiman0toFXRyWc/KneyiU6N J1zfnHWYPUttMgO5zdhdhyUgGs7ETgUPrJpiuhBJ5Cb8xh20fk00iMuN8pLzRzhk 4nO6+MBa9otrYZGL+/C4AucpZ4KhqOOUDZcU3GOLHJzk2if23XatKUs= -----END CERTIFICATE-----Generated at Sun Oct 19 12:51:09 2025 by rpki-client