$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/10FC4D9D2403FC433C19BB76131325B776505E51.cer File: 10FC4D9D2403FC433C19BB76131325B776505E51.cer (raw, json) Hash identifier: u62hKN/CVBRV9Z2KEvlo51mCn86vEt8LfHJvl1CISQ8= Subject key identifier: 10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1F3748126477A7D8994CB44C9C04C5FFC0C082C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft caRepository: rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 14 Aug 2025 05:38:02 +0000 Certificate not after: Thu 13 Aug 2026 05:43:02 +0000 Subordinate resources: IP: 103.109.210.0/24 IP: 2001:df4:4b00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:37:48:12:64:77:a7:d8:99:4c:b4:4c:9c:04:c5:ff:c0:c0:82:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Aug 14 05:38:02 2025 GMT Not After : Aug 13 05:43:02 2026 GMT Subject: CN=10FC4D9D2403FC433C19BB76131325B776505E51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2d:48:fb:52:78:9e:6c:00:1a:65:22:61:b9: e1:56:f1:0e:48:5b:6d:99:bd:99:37:32:15:11:83: e6:13:02:d5:b0:a1:54:6c:7b:b2:31:7d:e7:99:2e: 23:d3:26:77:5f:e8:fd:56:cc:88:69:9b:35:d3:09: 4e:3b:41:6f:5b:8f:44:f4:7f:82:b4:f4:7c:81:21: cb:8a:4e:8b:2e:56:ee:25:8c:9e:d6:6a:80:5a:f7: 40:78:e9:5d:00:2b:bb:e9:1c:31:10:83:52:b8:b7: de:99:1e:86:72:48:2d:97:6b:8e:38:88:48:4a:21: 67:6c:ac:74:4a:6b:bd:b4:36:c6:c5:d1:2c:f9:61: 04:4e:3c:63:3b:b8:8c:c7:f9:40:1c:45:c8:8b:c5: be:14:bf:d8:d9:b5:ae:17:04:54:f2:20:d4:88:4d: 3a:ad:ec:0c:90:e4:4d:4c:5d:fc:15:6a:59:42:48: 4b:53:5d:bf:48:af:71:94:92:ce:a9:6d:99:9a:85: ea:72:33:6c:87:20:42:58:65:60:11:52:92:53:0e: 9f:05:b7:66:16:cc:3b:24:98:d1:37:63:f8:80:61: 30:d2:fa:b3:64:d0:63:d3:de:2b:3d:a1:09:79:53: bd:7d:85:37:de:b4:27:66:54:02:da:eb:a8:63:6f: 8d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 10:FC:4D:9D:24:03:FC:43:3C:19:BB:76:13:13:25:B7:76:50:5E:51 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3df068bd-8e3a-4695-89ed-3b3250f875c9/0/10FC4D9D2403FC433C19BB76131325B776505E51.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.109.210.0/24 IPv6: 2001:df4:4b00::/48 Signature Algorithm: sha256WithRSAEncryption 5c:34:77:6b:64:f7:71:3f:1f:75:f7:39:51:15:50:74:37:7a: d5:fa:70:92:57:5e:76:aa:d5:03:bb:7d:44:84:06:07:41:43: 4c:0d:94:08:e8:ae:08:3a:bc:c4:27:61:b1:f3:37:66:81:a9: 85:15:f2:57:f5:a6:10:ca:29:31:f9:91:91:83:b4:a2:a5:3b: d7:96:eb:61:b5:fb:cd:fb:71:83:2f:9d:c1:8d:ca:3f:e3:94: 48:8b:5c:3d:b4:6f:54:3e:41:db:4f:0a:fe:89:59:59:ce:32: 16:09:d6:f9:d7:be:3c:c7:8c:c8:44:2b:a7:0a:ec:a4:40:99: 93:bb:f7:46:25:09:bd:4e:93:b1:84:3d:2b:bf:21:b5:9c:10: 39:c4:67:0e:bb:18:8a:f0:5f:b4:ae:1c:e0:12:c5:21:cc:55: 6e:0e:07:d0:18:92:e6:6f:4d:8b:a3:ee:c1:e2:89:55:d2:86: 1e:af:3c:2c:85:04:db:aa:fe:56:bf:de:52:4c:fa:a3:7d:6e: be:f5:0c:cb:58:21:b4:e8:75:88:a0:eb:d7:70:da:ac:ea:b6: d2:60:75:77:eb:7e:91:3c:fb:ec:32:31:41:95:de:f8:e0:30: 6c:20:66:b9:7b:d4:40:92:90:de:e9:79:89:dc:a4:24:c1:bc: a8:4e:c6:41 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUHzdIEmR3p9iZTLRMnATF/8DAgscwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDgxNDA1MzgwMloX DTI2MDgxMzA1NDMwMlowMzExMC8GA1UEAxMoMTBGQzREOUQyNDAzRkM0MzNDMTlC Qjc2MTMxMzI1Qjc3NjUwNUU1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ4tSPtSeJ5sABplImG54VbxDkhbbZm9mTcyFRGD5hMC1bChVGx7sjF955ku I9Mmd1/o/VbMiGmbNdMJTjtBb1uPRPR/grT0fIEhy4pOiy5W7iWMntZqgFr3QHjp XQAru+kcMRCDUri33pkehnJILZdrjjiISEohZ2ysdEprvbQ2xsXRLPlhBE48Yzu4 jMf5QBxFyIvFvhS/2Nm1rhcEVPIg1IhNOq3sDJDkTUxd/BVqWUJIS1Ndv0ivcZSS zqltmZqF6nIzbIcgQlhlYBFSklMOnwW3ZhbMOySY0Tdj+IBhMNL6s2TQY9PeKz2h CXlTvX2FN960J2ZUAtrrqGNvjbcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBD8TZ0kA/xDPBm7dhMTJbd2UF5RMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zZGYwNjhiZC04ZTNhLTQ2OTUtODllZC0zYjMyNTBmODc1YzkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNkZjA2OGJk LThlM2EtNDY5NS04OWVkLTNiMzI1MGY4NzVjOS8wLzEwRkM0RDlEMjQwM0ZDNDMz QzE5QkI3NjEzMTMyNUI3NzY1MDVFNTEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnbdIwDwQCAAIwCQMHACABDfRLADANBgkqhkiG9w0BAQsFAAOCAQEAXDR3a2T3 cT8fdfc5URVQdDd61fpwkldedqrVA7t9RIQGB0FDTA2UCOiuCDq8xCdhsfM3ZoGp hRXyV/WmEMopMfmRkYO0oqU715brYbX7zftxgy+dwY3KP+OUSItcPbRvVD5B208K /olZWc4yFgnW+de+PMeMyEQrpwrspECZk7v3RiUJvU6TsYQ9K78htZwQOcRnDrsY ivBftK4c4BLFIcxVbg4H0BiS5m9Ni6PuweKJVdKGHq88LIUE26r+Vr/eUkz6o31u vvUMy1ghtOh1iKDr13DarOq20mB1d+t+kTz77DIxQZXe+OAwbCBmuXvUQJKQ3ul5 idykJMG8qE7GQQ== -----END CERTIFICATE-----Generated at Sat Aug 23 08:56:01 2025 by rpki-client