$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0110A7C2C5E7B74C89B036FFF78974619577D31C.cer File: 0110A7C2C5E7B74C89B036FFF78974619577D31C.cer (raw, json) Hash identifier: CYQz+n6Ds3RLfpB/Neo0n8ViNTpsH0VW4MV/FWC6tPk= Subject key identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0FC3D7587450B2D0C1FF4DF529F170B6D9FA1406 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft caRepository: rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 19 Mar 2026 01:58:28 +0000 Certificate not after: Thu 18 Mar 2027 02:03:28 +0000 Subordinate resources: IP: 103.170.30.0/23 IP: 2407:b4c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c3:d7:58:74:50:b2:d0:c1:ff:4d:f5:29:f1:70:b6:d9:fa:14:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 19 01:58:28 2026 GMT Not After : Mar 18 02:03:28 2027 GMT Subject: CN=0110A7C2C5E7B74C89B036FFF78974619577D31C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d5:1b:03:3a:df:9e:24:3b:86:f4:db:61:2d: 09:ed:9d:93:db:2c:2e:92:40:2c:f8:9f:3b:fb:c0: d0:63:f8:5e:fd:ea:4a:a1:da:41:61:63:77:c9:f8: ea:06:65:e9:cc:f9:79:cc:7a:98:8a:df:b0:d5:66: 58:5e:8c:bf:29:b9:b3:90:93:bf:1b:b6:81:9f:2a: 50:58:6b:58:e5:29:a1:6d:9f:e7:07:44:54:42:b2: eb:07:ab:52:04:b9:7f:1d:bf:0f:06:f1:d9:30:e4: f0:d5:a9:70:f0:b7:83:e1:ce:19:e8:56:11:8c:22: b1:cc:aa:fc:02:46:23:b1:9c:b9:67:4f:1c:ef:f2: a0:5b:ef:a4:a2:85:09:31:c3:db:10:a9:2d:98:2c: ef:29:71:b3:6e:a0:db:8b:4a:17:51:dd:5f:5b:bb: 96:cc:df:0c:ed:38:a7:1f:20:6b:c9:da:fa:9f:d0: f6:fb:6d:22:8f:6d:cf:e5:60:a9:77:33:f0:0a:b3: dc:0f:c9:0f:72:97:0f:81:64:b2:07:c2:b3:41:7c: d7:86:d8:49:b7:bc:e5:60:3e:f4:5f:3c:eb:69:40: 9c:d3:46:0b:e7:a0:d4:32:51:88:dc:54:fd:19:e9: c8:9f:c7:0b:f2:61:14:94:f8:97:bb:e1:9c:db:9b: 32:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:10:A7:C2:C5:E7:B7:4C:89:B0:36:FF:F7:89:74:61:95:77:D3:1C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a70dfb5a-845e-4ddf-aca7-a9b31c31dff4/0/0110A7C2C5E7B74C89B036FFF78974619577D31C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.30.0/23 IPv6: 2407:b4c0::/32 Signature Algorithm: sha256WithRSAEncryption 69:0a:bd:5d:86:c1:4a:f1:55:e5:f3:fd:7b:23:20:83:82:e3: a0:13:cc:35:ed:b4:e7:be:d9:d1:42:8e:a6:e9:43:ab:fc:07: 11:98:2c:bb:ff:29:68:9b:a3:41:74:99:c2:f1:e2:ba:1d:f4: 45:46:aa:f0:a7:03:a1:c3:a0:c1:b9:88:34:de:96:76:17:dc: a5:1a:aa:54:1a:e0:3b:b9:fc:24:6b:e1:f0:1a:12:97:1b:0f: e1:8b:cf:f5:3a:91:f0:14:c9:5e:d7:1e:e2:e0:47:51:4f:92: 60:00:d3:41:66:84:a9:fc:35:48:76:39:81:98:a6:dc:a5:0e: 2d:aa:b8:2c:31:15:d9:06:cf:5e:b8:fc:d9:9d:db:71:07:65: 36:e8:04:d0:17:56:22:d7:17:6a:41:1f:3c:3a:76:3b:22:9d: 7a:f9:14:46:f4:61:dd:de:2c:74:77:32:3a:6b:dc:78:db:b4: 57:f1:46:d7:10:13:58:8b:3d:37:d0:ee:8f:af:8b:3b:1a:93: f3:5c:88:19:c4:a7:e1:57:a6:9d:13:66:49:87:1c:48:31:b0: f5:25:be:94:73:2e:31:32:5c:14:dd:35:7d:dc:f1:66:5a:f6: 8a:95:33:a6:d3:4e:44:73:fc:f4:bd:78:d4:b5:4c:b0:0c:14: d7:f2:b2:a3 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUD8PXWHRQstDB/031KfFwttn6FAYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxOTAxNTgyOFoX DTI3MDMxODAyMDMyOFowMzExMC8GA1UEAxMoMDExMEE3QzJDNUU3Qjc0Qzg5QjAz NkZGRjc4OTc0NjE5NTc3RDMxQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANHVGwM6354kO4b022EtCe2dk9ssLpJALPifO/vA0GP4Xv3qSqHaQWFjd8n4 6gZl6cz5ecx6mIrfsNVmWF6Mvym5s5CTvxu2gZ8qUFhrWOUpoW2f5wdEVEKy6wer UgS5fx2/Dwbx2TDk8NWpcPC3g+HOGehWEYwiscyq/AJGI7GcuWdPHO/yoFvvpKKF CTHD2xCpLZgs7ylxs26g24tKF1HdX1u7lszfDO04px8ga8na+p/Q9vttIo9tz+Vg qXcz8Aqz3A/JD3KXD4FksgfCs0F814bYSbe85WA+9F8862lAnNNGC+eg1DJRiNxU /RnpyJ/HC/JhFJT4l7vhnNubMhMCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAEQp8LF57dMibA2//eJdGGVd9McMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hNzBkZmI1YS04NDVlLTRkZGYtYWNhNy1hOWIzMWMzMWRmZjQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3MGRmYjVh LTg0NWUtNGRkZi1hY2E3LWE5YjMxYzMxZGZmNC8wLzAxMTBBN0MyQzVFN0I3NEM4 OUIwMzZGRkY3ODk3NDYxOTU3N0QzMUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnqh4wDQQCAAIwBwMFACQHtMAwDQYJKoZIhvcNAQELBQADggEBAGkKvV2GwUrx VeXz/XsjIIOC46ATzDXttOe+2dFCjqbpQ6v8BxGYLLv/KWibo0F0mcLx4rod9EVG qvCnA6HDoMG5iDTelnYX3KUaqlQa4Du5/CRr4fAaEpcbD+GLz/U6kfAUyV7XHuLg R1FPkmAA00FmhKn8NUh2OYGYptylDi2quCwxFdkGz164/Nmd23EHZTboBNAXViLX F2pBHzw6djsinXr5FEb0Yd3eLHR3Mjpr3HjbtFfxRtcQE1iLPTfQ7o+vizsak/Nc iBnEp+FXpp0TZkmHHEgxsPUlvpRzLjEyXBTdNX3c8WZa9oqVM6bTTkRz/PS9eNS1 TLAMFNfysqM= -----END CERTIFICATE-----Generated at Thu Mar 26 07:14:58 2026 by rpki-client