$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer File: 14043163A8BFF50600F16410DE27B7A0DEEC1E61.cer (raw, json) Hash identifier: V2PvMzRIoaMrbVn9qy6vkvHjDcsxGdeJ/CDmB2nLGrI= Subject key identifier: 14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0659E67952927B093779245BD19D7394BABE27 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft caRepository: rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Mar 2026 12:58:26 +0000 Certificate not after: Thu 04 Mar 2027 13:03:26 +0000 Subordinate resources: IP: 103.162.150.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 20:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:59:e6:79:52:92:7b:09:37:79:24:5b:d1:9d:73:94:ba:be:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 5 12:58:26 2026 GMT Not After : Mar 4 13:03:26 2027 GMT Subject: CN=14043163A8BFF50600F16410DE27B7A0DEEC1E61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:53:ae:17:55:bf:d0:fd:95:63:5e:e3:75:a6: 52:44:21:47:83:5f:00:4c:5f:34:b8:44:0e:d1:50: 07:ed:63:2f:a3:66:44:d2:be:54:4d:b5:e9:dd:c2: 03:76:7d:14:30:55:22:f4:40:8b:24:ee:f2:5f:f6: 3a:c3:d2:aa:47:be:69:00:0b:4f:af:18:5d:7b:10: 06:d9:0d:9d:75:1c:64:33:d6:d6:16:be:4c:78:b2: e9:5e:c8:d4:80:36:4b:63:41:1a:00:43:e7:9e:37: 20:c9:e4:d1:f7:f4:51:98:4e:e7:9f:d7:c2:0e:78: 27:eb:1f:77:33:0e:1d:e1:77:53:dd:f7:09:12:8b: 9d:d2:52:77:c2:76:3b:9e:07:b0:09:e3:92:5b:09: d8:db:0a:af:dc:f3:6e:b2:d4:76:76:c8:2f:6d:4d: cd:78:7e:7f:2d:a6:98:ef:48:df:d1:51:d6:5c:8b: 49:ba:40:96:e9:de:bd:17:0a:40:61:54:a1:11:dc: 18:a8:d4:ab:47:ee:55:4d:81:bc:bb:0c:ec:56:dc: 3c:b5:b3:fa:cc:13:f4:72:7f:3f:2d:e4:2c:62:2b: 50:76:a8:45:f5:17:b8:12:e2:af:46:23:e1:27:64: 52:e2:13:6f:c7:51:d7:56:9c:9a:3c:93:b3:3c:3f: 3c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 14:04:31:63:A8:BF:F5:06:00:F1:64:10:DE:27:B7:A0:DE:EC:1E:61 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/aed9ea20-343d-4acb-9581-81f9d7ea92fe/0/14043163A8BFF50600F16410DE27B7A0DEEC1E61.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.162.150.0/23 Signature Algorithm: sha256WithRSAEncryption 83:11:3e:26:89:a3:a4:31:6c:65:63:f8:18:d1:1a:8b:d6:a0: bc:72:d0:7a:a6:1d:34:75:96:82:37:a8:e6:0b:14:c3:08:8e: 59:b8:d7:09:d7:c7:7a:21:72:99:28:62:ea:55:d5:ca:69:e9: d8:48:a7:6c:53:b9:cd:9e:19:63:79:2b:36:ae:b9:00:53:e0: c9:de:77:ed:68:67:66:c3:ae:16:e5:fb:c4:32:fd:0d:b5:20: 96:ca:78:70:f6:35:1d:c4:00:f2:74:bd:2a:0b:27:44:78:5f: b5:9e:b8:0c:50:55:df:e4:30:2e:f9:8d:c2:46:26:d3:62:04: c2:16:ba:bb:1e:86:16:9b:46:14:cb:89:70:18:e3:8d:0a:37: 98:c4:0e:4e:02:59:54:95:86:f1:97:44:83:10:97:d7:81:d9: d3:46:2c:82:d6:f7:e8:45:9d:1f:85:0b:1c:aa:41:b7:72:c8: 26:e3:6b:e8:a2:04:11:68:9b:7a:0e:2e:e8:46:3b:3e:99:d6: e5:23:e7:6a:85:94:f4:e3:a4:02:51:43:de:f1:14:8d:01:05: d6:36:eb:8b:4e:0f:ef:ac:28:71:e0:a3:14:44:da:47:4b:04: 46:c0:5e:28:d1:b2:52:d3:90:5a:f1:f4:8d:90:94:e7:ee:80: 31:ba:80:12 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgITBlnmeVKSewk3eSRb0Z1zlLq+JzANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjYwMzA1MTI1ODI2WhcN MjcwMzA0MTMwMzI2WjAzMTEwLwYDVQQDEygxNDA0MzE2M0E4QkZGNTA2MDBGMTY0 MTBERTI3QjdBMERFRUMxRTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1OuF1W/0P2VY17jdaZSRCFHg18ATF80uEQO0VAH7WMvo2ZE0r5UTbXp3cID dn0UMFUi9ECLJO7yX/Y6w9KqR75pAAtPrxhdexAG2Q2ddRxkM9bWFr5MeLLpXsjU gDZLY0EaAEPnnjcgyeTR9/RRmE7nn9fCDngn6x93Mw4d4XdT3fcJEoud0lJ3wnY7 ngewCeOSWwnY2wqv3PNustR2dsgvbU3NeH5/LaaY70jf0VHWXItJukCW6d69FwpA YVShEdwYqNSrR+5VTYG8uwzsVtw8tbP6zBP0cn8/LeQsYitQdqhF9Re4EuKvRiPh J2RS4hNvx1HXVpyaPJOzPD88FQIDAQABo4ICuDCCArQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUFAQxY6i/9QYA8WQQ3ie3oN7sHmEwHwYDVR0jBBgwFoAUuo93 0h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIv QkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgzMzc2Qi5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvdW85 MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L2FlZDllYTIwLTM0M2QtNGFjYi05NTgxLTgxZjlkN2VhOTJmZS8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWVkOWVhMjAt MzQzZC00YWNiLTk1ODEtODFmOWQ3ZWE5MmZlLzAvMTQwNDMxNjNBOEJGRjUwNjAw RjE2NDEwREUyN0I3QTBERUVDMUU2MS5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AWeiljANBgkqhkiG9w0BAQsFAAOCAQEAgxE+JomjpDFsZWP4GNEai9agvHLQeqYd NHWWgjeo5gsUwwiOWbjXCdfHeiFymShi6lXVymnp2EinbFO5zZ4ZY3krNq65AFPg yd537WhnZsOuFuX7xDL9DbUglsp4cPY1HcQA8nS9KgsnRHhftZ64DFBV3+QwLvmN wkYm02IEwha6ux6GFptGFMuJcBjjjQo3mMQOTgJZVJWG8ZdEgxCX14HZ00Ysgtb3 6EWdH4ULHKpBt3LIJuNr6KIEEWibeg4u6EY7PpnW5SPnaoWU9OOkAlFD3vEUjQEF 1jbri04P76woceCjFETaR0sERsBeKNGyUtOQWvH0jZCU5+6AMbqAEg== -----END CERTIFICATE-----Generated at Thu Mar 26 19:58:54 2026 by rpki-client