$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer File: 034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.cer (raw, json) Hash identifier: f+MiAcCuma3u8Vuw11XkR5sEClgULAZVu7GxEqr6ook= Subject key identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6E23B859DB064B8CB650E8C73B10CCA575E53A25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft caRepository: rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 11 Mar 2026 03:04:17 +0000 Certificate not after: Wed 10 Mar 2027 03:09:17 +0000 Subordinate resources: IP: 103.150.32.0/23 IP: 2405:fa40::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:23:b8:59:db:06:4b:8c:b6:50:e8:c7:3b:10:cc:a5:75:e5:3a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 11 03:04:17 2026 GMT Not After : Mar 10 03:09:17 2027 GMT Subject: CN=034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:93:3a:c3:75:28:81:e0:ab:fe:6a:81:c2:62: 81:be:10:ad:d3:a5:5c:65:5c:6f:8f:8a:26:f0:5a: 15:dc:36:3d:91:ff:ac:09:d0:14:c4:cc:9a:30:60: dd:1a:a6:f4:8d:3b:e9:e8:fa:59:6f:e7:d0:77:82: 8c:58:34:d4:fc:b7:51:15:43:86:ab:fc:c5:31:45: 71:f4:27:c6:20:dd:f4:73:05:15:ee:e1:57:ac:e3: 02:05:d4:8f:7c:27:dc:43:55:86:71:2a:4a:96:35: 83:45:86:12:5a:f5:97:97:a1:50:e3:dc:66:5b:d1: 90:e1:c4:89:16:97:d0:b1:4f:df:2f:34:51:34:78: de:dd:7e:2f:74:44:2c:86:29:e5:10:0a:6c:6a:bd: 74:86:aa:d0:4b:20:1b:07:62:99:ac:73:d0:36:71: 92:61:98:96:03:02:68:d5:81:13:a6:b6:3c:55:78: e1:ec:70:6d:84:33:f3:68:c8:f3:3a:e2:de:20:91: bc:93:cc:bb:40:03:47:1f:da:0e:68:4f:da:ff:f2: 6c:27:fb:46:e3:10:d0:a4:f9:27:dd:14:28:77:ad: 0f:be:4d:31:06:b0:a0:99:b0:a5:f8:d7:18:15:da: 51:8e:ef:e5:26:58:10:02:ac:d5:44:a5:6a:22:0f: e6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:4E:0F:A5:B6:C1:B4:E1:56:49:24:CE:E0:DC:B6:A1:63:52:DF:F9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/caf50383-7d04-47c8-aaeb-f7e766937731/0/034E0FA5B6C1B4E1564924CEE0DCB6A16352DFF9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.32.0/23 IPv6: 2405:fa40::/32 Signature Algorithm: sha256WithRSAEncryption 5f:eb:37:00:c1:3d:41:d3:ce:ed:f6:5b:56:b5:67:54:d9:7f: fd:55:e9:fe:54:95:77:a6:74:95:00:9d:81:2d:3b:b0:d4:66: 11:7b:88:3e:88:62:00:1d:49:76:88:f7:63:d9:e4:4a:62:a4: d0:cb:30:71:4f:48:a2:f1:51:e6:ba:c6:8d:89:0c:d2:f9:a4: 5e:42:69:df:3b:c9:7a:7c:33:cf:00:12:ac:63:fc:72:29:b2: 22:71:bb:e3:94:5b:2f:c1:15:bf:89:71:89:51:4e:6b:4d:b7: 6b:7d:0f:70:85:9a:fe:98:a4:ab:e5:ec:60:67:de:23:22:61: 02:2c:8a:dd:24:61:02:76:ab:ea:c2:64:80:46:6b:84:03:7e: 2a:c7:7d:78:38:03:bd:72:c0:94:18:37:21:b7:fd:b7:fa:b6: c1:8f:f5:fb:8b:c6:11:9e:2c:64:59:cf:93:6c:94:96:c4:d0: f3:88:55:43:79:c1:4e:dc:df:a9:29:b3:30:82:31:3c:fa:d0: 33:4e:09:96:bf:e0:58:89:a4:c3:6b:63:93:a3:21:3c:27:3c: 7e:a3:aa:a2:94:77:a5:d9:7b:b2:f3:94:dc:2d:4e:fd:47:96: d4:3a:e2:cf:37:f2:0d:57:75:fa:79:1a:a7:ab:fb:c6:19:e5: d8:6f:ba:e5 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUbiO4WdsGS4y2UOjHOxDMpXXlOiUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxMTAzMDQxN1oX DTI3MDMxMDAzMDkxN1owMzExMC8GA1UEAxMoMDM0RTBGQTVCNkMxQjRFMTU2NDky NENFRTBEQ0I2QTE2MzUyREZGOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANGTOsN1KIHgq/5qgcJigb4QrdOlXGVcb4+KJvBaFdw2PZH/rAnQFMTMmjBg 3Rqm9I076ej6WW/n0HeCjFg01Py3URVDhqv8xTFFcfQnxiDd9HMFFe7hV6zjAgXU j3wn3ENVhnEqSpY1g0WGElr1l5ehUOPcZlvRkOHEiRaX0LFP3y80UTR43t1+L3RE LIYp5RAKbGq9dIaq0EsgGwdimaxz0DZxkmGYlgMCaNWBE6a2PFV44exwbYQz82jI 8zri3iCRvJPMu0ADRx/aDmhP2v/ybCf7RuMQ0KT5J90UKHetD75NMQawoJmwpfjX GBXaUY7v5SZYEAKs1USlaiIP5tsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFANOD6W2wbThVkkkzuDctqFjUt/5MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYWY1MDM4My03ZDA0LTQ3YzgtYWFlYi1mN2U3NjY5Mzc3MzEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NhZjUwMzgz LTdkMDQtNDdjOC1hYWViLWY3ZTc2NjkzNzczMS8wLzAzNEUwRkE1QjZDMUI0RTE1 NjQ5MjRDRUUwRENCNkExNjM1MkRGRjkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnliAwDQQCAAIwBwMFACQF+kAwDQYJKoZIhvcNAQELBQADggEBAF/rNwDBPUHT zu32W1a1Z1TZf/1V6f5UlXemdJUAnYEtO7DUZhF7iD6IYgAdSXaI92PZ5EpipNDL MHFPSKLxUea6xo2JDNL5pF5Cad87yXp8M88AEqxj/HIpsiJxu+OUWy/BFb+JcYlR TmtNt2t9D3CFmv6YpKvl7GBn3iMiYQIsit0kYQJ2q+rCZIBGa4QDfirHfXg4A71y wJQYNyG3/bf6tsGP9fuLxhGeLGRZz5NslJbE0POIVUN5wU7c36kpszCCMTz60DNO CZa/4FiJpMNrY5OjITwnPH6jqqKUd6XZe7LzlNwtTv1HltQ64s838g1Xdfp5Gqer +8YZ5dhvuuU= -----END CERTIFICATE-----Generated at Thu Mar 26 06:20:55 2026 by rpki-client