$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer File: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer (raw, json) Hash identifier: dxB10No8NMOX2ICcQnLGlvM36DgBrTanGp7kFxuMLJk= Subject key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 68793DF42DCE36F6F4761C68B1823BA24FA431B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft caRepository: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 19 Mar 2026 03:56:50 +0000 Certificate not after: Thu 18 Mar 2027 04:01:50 +0000 Subordinate resources: IP: 103.205.56.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:79:3d:f4:2d:ce:36:f6:f4:76:1c:68:b1:82:3b:a2:4f:a4:31:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 19 03:56:50 2026 GMT Not After : Mar 18 04:01:50 2027 GMT Subject: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a4:fd:4a:63:16:3c:ac:a8:bc:1b:be:31:8d: 33:bb:3a:36:7e:60:1f:b4:fa:2e:03:7f:4a:96:db: f9:57:41:0d:63:9d:95:88:fc:67:24:28:35:df:67: 47:ce:81:a4:18:30:6e:bd:5a:d3:4f:1d:63:77:7a: b7:d6:66:14:0c:0a:05:04:90:4b:8b:e7:cb:77:8f: 59:e6:99:79:47:45:68:0c:20:cd:b7:78:29:f2:90: 8e:6b:54:02:33:e4:54:fd:56:5f:c2:ac:49:62:f6: be:43:72:52:b3:65:00:1b:a2:16:78:ee:9b:80:01: 19:e3:02:61:8d:8a:c5:99:e7:01:c4:e1:70:d1:a4: 6d:76:08:de:19:77:c5:ef:32:60:2a:86:32:c9:0a: 67:56:2e:f4:b8:17:20:e7:ec:64:0a:af:37:87:5d: d9:c7:28:c4:f5:ff:e7:10:c7:16:88:85:07:ad:9c: cc:77:88:6c:27:b3:82:ef:b3:63:fb:f2:ef:c5:2a: 3d:94:ea:1a:2d:21:1b:24:cd:15:b2:5b:43:26:94: 19:88:70:17:85:59:19:31:8d:91:57:a1:0a:69:91: 69:8c:0a:74:3f:cb:af:2c:9a:da:b3:39:fd:a9:3e: 33:6a:98:4c:15:a4:02:1f:9e:74:19:fe:4f:ac:78: 45:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.205.56.0/23 Signature Algorithm: sha256WithRSAEncryption 36:5e:7e:31:70:9e:c7:2a:6f:7b:b8:a8:6d:fc:fe:e2:a0:2f: 3c:7d:96:cc:11:a0:34:68:43:b6:06:d2:36:b7:43:6e:61:5e: 8a:e7:9e:62:06:89:7c:5c:59:60:ff:80:dc:fd:d0:b9:67:04: 1c:d7:48:22:51:58:a9:96:3b:df:31:9f:8f:6d:fa:4c:d7:8d: bf:5a:b0:27:1c:2a:7f:60:65:bc:ae:8b:c5:59:3b:39:f3:93: 0a:55:3b:0f:64:f6:75:72:67:ef:27:5a:68:21:9a:29:4d:15: 54:16:6a:be:95:1f:dd:ca:69:c5:44:33:ca:51:0b:75:63:aa: a8:c3:d8:b6:0d:d9:ac:f8:45:60:e0:e1:e3:a2:a6:a4:2e:c5: ad:5d:a2:6b:08:8a:62:1d:03:53:f4:a2:2f:a0:5a:d4:ab:08: 06:34:a9:f1:25:30:8c:b8:ab:db:c7:45:d5:e7:99:b6:ff:7f: 88:12:b1:c6:a4:e7:43:f1:47:04:34:e0:ae:ab:45:93:00:13: 2f:a6:7f:8a:3e:a5:ce:4b:47:bb:93:54:8e:fd:cd:0d:99:b1: f5:30:28:10:d2:b4:d4:4b:a2:1e:b8:c8:15:c4:bb:69:eb:9e: 9b:f8:5b:62:89:ae:09:b5:e1:10:55:75:af:ed:05:63:89:28: 7a:ca:91:d9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUaHk99C3ONvb0dhxosYI7ok+kMbYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxOTAzNTY1MFoX DTI3MDMxODA0MDE1MFowMzExMC8GA1UEAxMoMTVCOTZBM0JDRTRDMTBDMTdGNEJE Qjc3MDBBMzNGODg2QUNEODcxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKmk/UpjFjysqLwbvjGNM7s6Nn5gH7T6LgN/Spbb+VdBDWOdlYj8ZyQoNd9n R86BpBgwbr1a008dY3d6t9ZmFAwKBQSQS4vny3ePWeaZeUdFaAwgzbd4KfKQjmtU AjPkVP1WX8KsSWL2vkNyUrNlABuiFnjum4ABGeMCYY2KxZnnAcThcNGkbXYI3hl3 xe8yYCqGMskKZ1Yu9LgXIOfsZAqvN4dd2ccoxPX/5xDHFoiFB62czHeIbCezgu+z Y/vy78UqPZTqGi0hGyTNFbJbQyaUGYhwF4VZGTGNkVehCmmRaYwKdD/Lryya2rM5 /ak+M2qYTBWkAh+edBn+T6x4RXsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBW5ajvOTBDBf0vbdwCjP4hqzYcXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMzBjOGY4Ni1iY2Q1LTRiN2EtYTliMS00NjVlZjBjOWY4N2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMGM4Zjg2 LWJjZDUtNGI3YS1hOWIxLTQ2NWVmMGM5Zjg3YS8wLzE1Qjk2QTNCQ0U0QzEwQzE3 RjRCREI3NzAwQTMzRjg4NkFDRDg3MTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnzTgwDQYJKoZIhvcNAQELBQADggEBADZefjFwnscqb3u4qG38/uKgLzx9lswR oDRoQ7YG0ja3Q25hXornnmIGiXxcWWD/gNz90LlnBBzXSCJRWKmWO98xn49t+kzX jb9asCccKn9gZbyui8VZOznzkwpVOw9k9nVyZ+8nWmghmilNFVQWar6VH93KacVE M8pRC3VjqqjD2LYN2az4RWDg4eOipqQuxa1domsIimIdA1P0oi+gWtSrCAY0qfEl MIy4q9vHRdXnmbb/f4gSscak50PxRwQ04K6rRZMAEy+mf4o+pc5LR7uTVI79zQ2Z sfUwKBDStNRLoh64yBXEu2nrnpv4W2KJrgm14RBVda/tBWOJKHrKkdk= -----END CERTIFICATE-----Generated at Thu Mar 26 12:41:19 2026 by rpki-client