$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer File: 2E55483B906244D2DA357F014F9AFA606D95C345.cer (raw, json) Hash identifier: qjoUIQNt090pyBAa6qolgotMHL4/Obiu0DFs8pFCqxY= Subject key identifier: 2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 24E3D96D7354359018F98796CE7944C96B534090 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft caRepository: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 21 Mar 2026 15:18:35 +0000 Certificate not after: Sat 20 Mar 2027 15:23:35 +0000 Subordinate resources: IP: 202.52.58.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e3:d9:6d:73:54:35:90:18:f9:87:96:ce:79:44:c9:6b:53:40:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 21 15:18:35 2026 GMT Not After : Mar 20 15:23:35 2027 GMT Subject: CN=2E55483B906244D2DA357F014F9AFA606D95C345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:d3:04:a9:af:e6:0e:92:53:9e:6f:ab:e4: c7:b4:94:37:43:3f:5c:f0:dc:fb:3e:4f:a0:1f:b4: 3f:cd:0e:27:7d:4a:6c:20:33:44:78:cb:34:8c:a7: ba:0a:fb:8c:90:1c:b3:eb:62:3f:bc:bf:1f:7f:77: 8b:c4:61:9e:58:91:43:ce:98:71:f8:e2:71:e7:a7: f4:e2:3c:db:0b:19:ef:69:18:5a:22:0e:9a:d9:37: ce:7b:d8:0b:02:07:a6:94:f9:be:9f:e0:b6:5e:27: 56:22:c4:b8:d6:74:a9:18:64:0f:ab:d9:fb:d0:78: ba:f5:2a:68:1c:c7:03:a4:6a:4c:6f:9f:0b:f2:32: 44:45:d8:37:21:c6:74:bc:c2:bc:85:76:b1:0a:44: e4:d4:df:cd:70:ab:ec:65:22:ba:1a:51:50:01:1e: 94:7c:52:51:8e:ec:64:13:4e:91:d9:4d:49:0b:90: 3a:7b:92:f2:80:46:df:24:86:86:8c:53:2f:95:cf: 66:c8:ac:1d:bc:6e:ba:7a:e9:59:e9:f7:4f:12:01: a7:b3:4b:f8:57:7d:d5:b0:9a:1b:63:ee:10:18:79: 8e:0b:92:af:5e:b0:97:64:99:2f:d6:75:8e:8e:4d: a0:31:9d:b9:38:15:e1:4d:48:45:fe:93:f1:2a:91: c9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.52.58.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:ad:d8:c9:83:6c:c4:a1:c0:19:b7:e1:1c:54:4e:16:8c:11: 9d:6a:f5:e1:66:8f:cb:61:36:09:c7:9d:b4:21:ed:8f:c0:46: 01:2b:db:7f:99:c8:ff:12:0b:40:44:0e:1f:c1:51:3b:fd:8c: 52:5d:03:9b:cf:42:79:54:f7:ac:d8:5e:f7:52:16:3b:d3:66: 99:59:a6:bf:3c:74:b6:ae:b1:21:39:5e:a8:e3:2f:0e:95:75: e1:59:f9:7c:86:55:8b:a8:41:35:82:d7:47:9c:49:ec:38:ad: b9:f2:38:e7:83:02:f6:bb:0a:df:96:8c:69:5d:1d:7a:28:63: ec:e1:97:3c:29:e9:c2:8d:62:3f:1b:3d:43:e8:e1:d7:9e:60: 22:3d:fd:3b:d7:54:a3:44:fb:42:fb:99:61:25:d6:90:90:56: 04:71:5b:18:c9:22:97:17:8c:ab:85:0a:ac:b5:3b:cd:03:53: 74:13:54:7d:89:e6:42:3d:7a:1a:f2:6c:fc:ca:08:36:81:06: 49:92:68:1e:6c:b5:79:7b:74:c5:e4:45:aa:92:57:42:f0:58: 88:c2:0c:f6:e3:93:78:80:18:e1:69:1c:2b:4c:69:9f:31:d1: df:5a:90:fe:86:70:64:bf:e8:4e:32:55:73:b1:d2:b3:f9:76: 62:fa:69:42 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJOPZbXNUNZAY+YeWznlEyWtTQJAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyMTE1MTgzNVoX DTI3MDMyMDE1MjMzNVowMzExMC8GA1UEAxMoMkU1NTQ4M0I5MDYyNDREMkRBMzU3 RjAxNEY5QUZBNjA2RDk1QzM0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKiM0wSpr+YOklOeb6vkx7SUN0M/XPDc+z5PoB+0P80OJ31KbCAzRHjLNIyn ugr7jJAcs+tiP7y/H393i8RhnliRQ86Ycfjiceen9OI82wsZ72kYWiIOmtk3znvY CwIHppT5vp/gtl4nViLEuNZ0qRhkD6vZ+9B4uvUqaBzHA6RqTG+fC/IyREXYNyHG dLzCvIV2sQpE5NTfzXCr7GUiuhpRUAEelHxSUY7sZBNOkdlNSQuQOnuS8oBG3ySG hoxTL5XPZsisHbxuunrpWen3TxIBp7NL+Fd91bCaG2PuEBh5jguSr16wl2SZL9Z1 jo5NoDGduTgV4U1IRf6T8SqRyd0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC5VSDuQYkTS2jV/AU+a+mBtlcNFMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hMmUyM2RjNC00ZmQ1LTQzZTItYmI2YS00ZmRjMzg3ZWJjNTgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EyZTIzZGM0 LTRmZDUtNDNlMi1iYjZhLTRmZGMzODdlYmM1OC8wLzJFNTU0ODNCOTA2MjQ0RDJE QTM1N0YwMTRGOUFGQTYwNkQ5NUMzNDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAHKNDowDQYJKoZIhvcNAQELBQADggEBAEut2MmDbMShwBm34RxUThaMEZ1q9eFm j8thNgnHnbQh7Y/ARgEr23+ZyP8SC0BEDh/BUTv9jFJdA5vPQnlU96zYXvdSFjvT ZplZpr88dLausSE5XqjjLw6VdeFZ+XyGVYuoQTWC10ecSew4rbnyOOeDAva7Ct+W jGldHXooY+zhlzwp6cKNYj8bPUPo4deeYCI9/TvXVKNE+0L7mWEl1pCQVgRxWxjJ IpcXjKuFCqy1O80DU3QTVH2J5kI9ehrybPzKCDaBBkmSaB5stXl7dMXkRaqSV0Lw WIjCDPbjk3iAGOFpHCtMaZ8x0d9akP6GcGS/6E4yVXOx0rP5dmL6aUI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:09 2026 by rpki-client