$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer File: 1CA9E40710262DA751A67E932477D6E12B4B2DED.cer (raw, json) Hash identifier: 40CehLONUJiR8Hkmu3eMJ2LWRL/465zylM3PtLv9ywQ= Subject key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 16AD0EE809289AA91135A63B60D383ED3243E7EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft caRepository: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Jun 2025 04:53:44 +0000 Certificate not after: Tue 02 Jun 2026 04:58:44 +0000 Subordinate resources: IP: 103.123.104.0/22 IP: 2403:9fc0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 18:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ad:0e:e8:09:28:9a:a9:11:35:a6:3b:60:d3:83:ed:32:43:e7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jun 3 04:53:44 2025 GMT Not After : Jun 2 04:58:44 2026 GMT Subject: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5e:1d:24:30:bd:e4:06:6e:06:b3:c9:b5:38: 2e:00:21:82:c1:36:53:aa:2b:cb:8f:fd:7e:00:32: 00:41:30:52:ec:a2:d6:c6:1a:22:4d:16:da:71:73: bd:a7:76:b4:7e:a1:5b:bc:f8:4a:c5:45:ca:26:0f: 5c:c5:d9:f9:ff:3c:48:57:80:f2:ae:eb:02:5d:d0: 5b:75:6f:be:2a:16:bd:3a:b6:0a:8b:2b:3b:a8:f6: 4c:23:fc:21:11:0e:46:76:6a:ae:13:2c:71:08:bb: 95:68:f1:3f:24:8d:a9:20:e5:64:cf:84:1d:e2:6c: 3b:28:d3:bb:5d:36:74:09:fa:5e:1b:5f:46:54:d7: 0f:91:2a:7f:55:21:cc:43:a5:38:79:c0:6e:36:58: 3e:a8:66:bc:36:07:50:87:6b:6c:fb:5c:05:b4:01: 2e:d9:0d:99:cd:2b:32:b0:62:26:92:d7:a9:22:ad: 93:61:20:9e:72:38:fe:05:9f:ec:86:a2:8b:2f:85: c4:7e:b1:af:fb:2b:dc:6e:b1:25:6a:03:52:a9:46: c9:d7:7f:81:0b:24:47:d8:95:25:a3:07:69:20:de: cb:dc:cb:b4:db:50:6b:de:f4:07:ee:54:6a:74:2b: e4:ed:90:c5:8f:61:8b:4b:de:64:d1:ee:2f:b3:c8: 43:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.104.0/22 IPv6: 2403:9fc0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:22:16:31:06:a6:c0:dc:9d:3a:bd:0d:0d:62:cf:77:96:fc: 15:06:c9:55:1e:ef:c4:09:5c:6a:ae:02:df:dc:47:2f:24:ac: 6e:9c:13:78:a5:e4:66:44:48:21:f1:a7:9d:07:7f:7d:55:58: 39:ec:98:7e:b0:f5:3a:9c:24:2d:a8:ef:c2:e2:93:5a:c1:bb: 2d:d3:d1:30:b1:4b:63:ab:98:3f:4b:e2:63:ca:9f:76:bb:e3: 66:63:79:f7:1b:94:b7:cc:3c:22:a1:e1:09:69:bd:7f:98:03: e8:03:d7:17:3a:9d:98:86:e6:1b:47:fe:e7:ff:c4:a6:a5:33: 8a:fb:9d:40:53:2f:42:08:9e:5f:3c:19:a0:31:e5:0b:85:60: c0:0d:48:9c:23:d8:90:17:73:05:ec:1e:16:b3:63:0b:b6:3e: 41:ab:1f:b2:7a:80:f0:40:c2:63:90:96:f6:65:79:1e:71:fb: f2:76:83:f2:8b:be:4e:77:a7:d7:29:93:fa:06:b5:b5:c3:a2: 55:e9:c9:bd:a8:95:0b:5d:28:03:ba:23:7d:d7:5e:47:a5:f6: 8b:62:71:ce:b7:af:71:56:24:aa:76:f8:d7:71:92:de:f3:d0: e3:e4:03:7b:cf:86:30:d5:0a:b4:be:c3:f5:73:8f:37:9a:f5: d1:a0:bb:4b -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUFq0O6AkomqkRNaY7YNOD7TJD5+8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MDYwMzA0NTM0NFoX DTI2MDYwMjA0NTg0NFowMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3 RTkzMjQ3N0Q2RTEyQjRCMkRFRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKReHSQwveQGbgazybU4LgAhgsE2U6ory4/9fgAyAEEwUuyi1sYaIk0W2nFz vad2tH6hW7z4SsVFyiYPXMXZ+f88SFeA8q7rAl3QW3VvvioWvTq2CosrO6j2TCP8 IREORnZqrhMscQi7lWjxPySNqSDlZM+EHeJsOyjTu102dAn6XhtfRlTXD5Eqf1Uh zEOlOHnAbjZYPqhmvDYHUIdrbPtcBbQBLtkNmc0rMrBiJpLXqSKtk2EgnnI4/gWf 7Iaiiy+FxH6xr/sr3G6xJWoDUqlGydd/gQskR9iVJaMHaSDey9zLtNtQa970B+5U anQr5O2QxY9hi0veZNHuL7PIQ88CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFByp5AcQJi2nUaZ+kyR31uErSy3tMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhZDY3ZDVm LTU3MTMtNDE1My04NzFiLTFiMDA4ZjdmZmRkMi8wLzFDQTlFNDA3MTAyNjJEQTc1 MUE2N0U5MzI0NzdENkUxMkI0QjJERUQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAJne2gwDQQCAAIwBwMFACQDn8AwDQYJKoZIhvcNAQELBQADggEBAA4iFjEGpsDc nTq9DQ1iz3eW/BUGyVUe78QJXGquAt/cRy8krG6cE3il5GZESCHxp50Hf31VWDns mH6w9TqcJC2o78Lik1rBuy3T0TCxS2OrmD9L4mPKn3a742ZjefcblLfMPCKh4Qlp vX+YA+gD1xc6nZiG5htH/uf/xKalM4r7nUBTL0IInl88GaAx5QuFYMANSJwj2JAX cwXsHhazYwu2PkGrH7J6gPBAwmOQlvZleR5x+/J2g/KLvk53p9cpk/oGtbXDolXp yb2olQtdKAO6I33XXkel9oticc63r3FWJKp2+Ndxkt7z0OPkA3vPhjDVCrS+w/Vz jzea9dGgu0s= -----END CERTIFICATE-----Generated at Mon Jun 30 17:17:42 2025 by rpki-client