$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer File: 19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.cer (raw, json) Hash identifier: zM/ZwyNHvZ5DKVfDhvdaOaZNPMT0NnthmdmuwKQFYdM= Subject key identifier: 19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7F0DA9BB3AF8B765B8F2BD40D959E4B107E77642 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft caRepository: rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 03 May 2025 08:16:37 +0000 Certificate not after: Sat 02 May 2026 08:21:37 +0000 Subordinate resources: IP: 103.180.196.0/23 IP: 2001:df0:60c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 10:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:0d:a9:bb:3a:f8:b7:65:b8:f2:bd:40:d9:59:e4:b1:07:e7:76:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: May 3 08:16:37 2025 GMT Not After : May 2 08:21:37 2026 GMT Subject: CN=19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:d9:0c:38:ae:f8:6d:35:6f:e3:42:fa:e0: 39:f5:82:d6:9f:05:b1:31:45:57:bc:0d:b5:01:59: 91:80:17:0c:4e:d9:34:72:51:7a:3e:91:58:41:b6: a5:ff:6f:16:ca:8d:b1:f0:2d:97:f6:5e:e3:29:53: 2c:05:00:4a:9f:d3:54:74:82:84:7c:54:55:1f:3c: 4c:ab:a5:90:0c:e1:fa:2f:6b:02:25:a8:08:02:f3: cf:a2:f9:ed:c1:1c:29:7d:09:84:c2:fa:9f:8a:d5: 1d:e2:7d:88:e6:d1:51:d8:e8:f9:8b:6b:e4:f2:eb: 41:0c:e3:02:b7:f4:3d:9b:33:00:92:a8:eb:cb:24: 05:6d:10:a0:e4:c6:e6:45:f2:0f:7a:7b:f7:76:cc: aa:cc:cc:24:2f:65:5f:f5:5c:1b:a1:ae:d4:63:fc: a8:fb:a8:32:3b:12:2e:20:ea:23:b0:51:4c:2e:14: 4f:2f:97:0c:09:f1:8d:ab:48:70:7b:9f:74:06:a0: c5:8c:d9:e7:84:54:04:5c:df:c1:04:14:ed:48:2a: 7e:b6:9f:c6:7e:eb:5d:c3:ae:82:2c:1d:f0:03:7f: 91:52:a2:0e:d7:e8:f0:fb:cb:90:21:81:e2:81:cb: d8:19:d2:60:a5:a9:27:b4:06:1c:5c:b9:ab:d2:08: c1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 19:ED:79:7A:DB:B8:D0:A3:18:4D:2B:02:D7:D1:C2:36:2A:6F:F8:7E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f51d6c9c-ead7-45fe-a19a-42235fc53780/0/19ED797ADBB8D0A3184D2B02D7D1C2362A6FF87E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.180.196.0/23 IPv6: 2001:df0:60c0::/48 Signature Algorithm: sha256WithRSAEncryption 49:66:0e:8a:2c:8e:f9:f7:54:19:f4:fb:fa:91:64:71:ce:f7: 30:4e:00:a8:84:ae:4a:c7:79:b4:b6:2e:d2:e5:dd:39:e6:0e: 2d:14:b1:0a:d6:75:47:09:d4:07:90:01:7c:8a:11:d7:19:8a: 61:86:39:9b:08:ff:6f:3a:75:d6:21:20:c5:21:89:91:ce:76: 7c:61:cf:c0:a6:8c:5f:c3:e9:a3:ea:51:5a:0c:af:8e:82:fc: 62:6b:c0:59:25:3c:9e:c6:69:c1:4d:fb:b2:10:9c:79:2a:f4: aa:db:de:8c:71:bc:d3:e3:fe:b5:79:f6:23:cf:8c:6b:4f:fe: 61:58:7f:dc:d6:11:98:ed:19:ba:36:c1:24:fc:c6:46:1c:57: 00:1f:cc:ce:97:4f:b4:02:93:94:31:a3:fe:29:33:3d:61:6f: ee:81:80:eb:40:ec:b4:9e:6f:a7:6b:a0:0e:fb:13:b0:61:0b: 6b:c9:14:84:82:a1:f4:44:fa:d3:10:90:27:59:cf:82:c4:c0: d2:ae:3e:4e:7a:30:ac:f9:ee:56:00:d2:e1:e0:0a:0b:0b:be: 54:3a:ac:3f:f8:68:d6:7a:90:87:50:1d:05:dc:32:97:48:05: 8b:04:af:bb:d2:f7:a3:ce:ef:15:39:66:fa:1d:1e:7f:0c:29: 91:38:d4:b2 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUfw2puzr4t2W48r1A2VnksQfndkIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDUwMzA4MTYzN1oX DTI2MDUwMjA4MjEzN1owMzExMC8GA1UEAxMoMTlFRDc5N0FEQkI4RDBBMzE4NEQy QjAyRDdEMUMyMzYyQTZGRjg3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALMw2Qw4rvhtNW/jQvrgOfWC1p8FsTFFV7wNtQFZkYAXDE7ZNHJRej6RWEG2 pf9vFsqNsfAtl/Ze4ylTLAUASp/TVHSChHxUVR88TKulkAzh+i9rAiWoCALzz6L5 7cEcKX0JhML6n4rVHeJ9iObRUdjo+Ytr5PLrQQzjArf0PZszAJKo68skBW0QoOTG 5kXyD3p793bMqszMJC9lX/VcG6Gu1GP8qPuoMjsSLiDqI7BRTC4UTy+XDAnxjatI cHufdAagxYzZ54RUBFzfwQQU7Ugqfrafxn7rXcOugiwd8AN/kVKiDtfo8PvLkCGB 4oHL2BnSYKWpJ7QGHFy5q9IIwUECAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBnteXrbuNCjGE0rAtfRwjYqb/h+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mNTFkNmM5Yy1lYWQ3LTQ1ZmUtYTE5YS00MjIzNWZjNTM3ODAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y1MWQ2Yzlj LWVhZDctNDVmZS1hMTlhLTQyMjM1ZmM1Mzc4MC8wLzE5RUQ3OTdBREJCOEQwQTMx ODREMkIwMkQ3RDFDMjM2MkE2RkY4N0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFntMQwDwQCAAIwCQMHACABDfBgwDANBgkqhkiG9w0BAQsFAAOCAQEASWYOiiyO +fdUGfT7+pFkcc73ME4AqISuSsd5tLYu0uXdOeYOLRSxCtZ1RwnUB5ABfIoR1xmK YYY5mwj/bzp11iEgxSGJkc52fGHPwKaMX8Ppo+pRWgyvjoL8YmvAWSU8nsZpwU37 shCceSr0qtvejHG80+P+tXn2I8+Ma0/+YVh/3NYRmO0ZujbBJPzGRhxXAB/MzpdP tAKTlDGj/ikzPWFv7oGA60DstJ5vp2ugDvsTsGELa8kUhIKh9ET60xCQJ1nPgsTA 0q4+TnowrPnuVgDS4eAKCwu+VDqsP/ho1nqQh1AdBdwyl0gFiwSvu9L3o87vFTlm +h0efwwpkTjUsg== -----END CERTIFICATE-----Generated at Mon May 12 18:18:53 2025 by rpki-client