$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/35603F2919BB405970CB4BAB181C2B63764E0771.cer File: 35603F2919BB405970CB4BAB181C2B63764E0771.cer (raw, json) Hash identifier: QjD8i0DgcfNzYpc4U+BU5cD3rflCSyng00gVYvCkIVw= Subject key identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 37C9794D7D6ED59746F726C7D64406F45148888C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft caRepository: rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 06 Mar 2026 20:29:04 +0000 Certificate not after: Fri 05 Mar 2027 20:34:04 +0000 Subordinate resources: IP: 103.67.84.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c9:79:4d:7d:6e:d5:97:46:f7:26:c7:d6:44:06:f4:51:48:88:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 6 20:29:04 2026 GMT Not After : Mar 5 20:34:04 2027 GMT Subject: CN=35603F2919BB405970CB4BAB181C2B63764E0771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8a:79:f4:ab:6e:29:be:32:70:84:86:a8:46: e9:dd:66:14:c7:25:b7:f6:5d:c7:28:25:8e:0f:41: f5:b9:67:01:36:98:02:c0:f9:d2:49:2b:3b:1e:14: 6b:60:57:d9:48:76:e5:fb:98:f7:1e:1f:33:9f:4a: cc:29:a2:8f:f4:80:11:f3:29:de:24:d5:e5:83:46: 2f:9b:ab:42:5f:07:a3:e1:96:dd:ea:01:70:14:f1: 19:81:19:ca:fd:6d:96:2c:cf:3a:28:4e:08:a0:ef: 4b:bc:ad:c3:a8:e2:a3:c2:9a:f4:a3:cd:c0:05:b1: f4:bd:04:54:2e:d9:f3:17:ca:ce:f4:e4:fb:9b:73: d3:b5:6d:73:f0:d0:da:6c:88:5b:81:1a:89:31:f1: db:ca:12:7b:d5:a8:23:07:3a:df:ab:5e:ff:14:8b: 3f:61:85:f4:e0:95:25:ce:84:cf:7e:0c:25:06:ce: 5a:e7:31:63:13:92:66:b4:bd:f7:0c:1a:6a:fe:98: 0b:48:12:e7:b3:4d:06:a3:90:8e:0c:5b:bc:76:25: 2b:a5:b0:62:5c:c6:5f:bd:1c:0c:9a:9f:c7:d5:d5: cd:c5:83:8a:e0:62:15:04:a3:e0:bb:74:36:81:eb: bb:36:48:9f:90:95:c7:22:f6:b8:0a:c9:48:e9:ee: 30:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:60:3F:29:19:BB:40:59:70:CB:4B:AB:18:1C:2B:63:76:4E:07:71 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1ad39450-4584-4882-b5a7-2cbc0e577474/0/35603F2919BB405970CB4BAB181C2B63764E0771.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.67.84.0/23 Signature Algorithm: sha256WithRSAEncryption 21:09:8c:71:90:b7:c0:1b:c8:75:55:2b:8a:2c:2e:d1:26:80: dd:75:53:b5:79:ad:37:4a:fc:ea:2d:bb:7e:0a:72:5c:4c:90: fd:3f:7b:26:9d:d2:ff:e8:47:47:36:e8:b4:04:ab:df:b5:db: 5e:cf:a4:5a:45:43:f0:52:78:f2:f9:f0:88:fd:cd:da:df:38: 9c:18:7b:21:65:87:12:d2:96:d2:84:ce:53:19:9b:3f:e8:a3: a4:62:b0:7f:e4:2e:d4:63:db:cd:9f:28:aa:06:90:f7:be:20: 6c:59:f1:c1:a8:3f:c9:85:1f:65:c0:40:a3:e1:34:2e:36:b1: ee:32:2c:8c:df:14:c1:29:50:21:f8:84:a6:87:3e:a2:dd:f6: 0c:8b:cf:12:0a:46:e9:58:9d:73:7b:90:7a:9b:f3:85:10:7b: 88:f0:35:6f:aa:10:ab:99:3c:e9:9f:55:f4:34:62:4f:f5:af: 8a:3b:8b:cc:8c:44:8b:a5:23:31:9e:b2:1c:63:f7:a1:2a:b6: 6e:be:de:be:ab:46:91:c5:ab:d3:fb:42:f1:b8:72:69:17:ce: 76:fc:77:29:a8:b2:bf:84:1c:f7:69:27:c2:8f:19:95:7a:44: 08:71:2c:7a:fc:d5:e0:a0:59:8c:a9:c9:63:04:a0:e4:dd:26: e2:1c:5e:83 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUN8l5TX1u1ZdG9ybH1kQG9FFIiIwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwNjIwMjkwNFoX DTI3MDMwNTIwMzQwNFowMzExMC8GA1UEAxMoMzU2MDNGMjkxOUJCNDA1OTcwQ0I0 QkFCMTgxQzJCNjM3NjRFMDc3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGKefSrbim+MnCEhqhG6d1mFMclt/Zdxygljg9B9blnATaYAsD50kkrOx4U a2BX2Uh25fuY9x4fM59KzCmij/SAEfMp3iTV5YNGL5urQl8Ho+GW3eoBcBTxGYEZ yv1tlizPOihOCKDvS7ytw6jio8Ka9KPNwAWx9L0EVC7Z8xfKzvTk+5tz07Vtc/DQ 2myIW4EaiTHx28oSe9WoIwc636te/xSLP2GF9OCVJc6Ez34MJQbOWucxYxOSZrS9 9wwaav6YC0gS57NNBqOQjgxbvHYlK6WwYlzGX70cDJqfx9XVzcWDiuBiFQSj4Lt0 NoHruzZIn5CVxyL2uArJSOnuMD8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDVgPykZu0BZcMtLqxgcK2N2TgdxMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xYWQzOTQ1MC00NTg0LTQ4ODItYjVhNy0yY2JjMGU1Nzc0NzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFhZDM5NDUw LTQ1ODQtNDg4Mi1iNWE3LTJjYmMwZTU3NzQ3NC8wLzM1NjAzRjI5MTlCQjQwNTk3 MENCNEJBQjE4MUMyQjYzNzY0RTA3NzEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnQ1QwDQYJKoZIhvcNAQELBQADggEBACEJjHGQt8AbyHVVK4osLtEmgN11U7V5 rTdK/Ootu34KclxMkP0/eyad0v/oR0c26LQEq9+1217PpFpFQ/BSePL58Ij9zdrf OJwYeyFlhxLSltKEzlMZmz/oo6RisH/kLtRj282fKKoGkPe+IGxZ8cGoP8mFH2XA QKPhNC42se4yLIzfFMEpUCH4hKaHPqLd9gyLzxIKRulYnXN7kHqb84UQe4jwNW+q EKuZPOmfVfQ0Yk/1r4o7i8yMRIulIzGeshxj96Eqtm6+3r6rRpHFq9P7QvG4cmkX znb8dymosr+EHPdpJ8KPGZV6RAhxLHr81eCgWYypyWMEoOTdJuIcXoM= -----END CERTIFICATE-----Generated at Thu Mar 26 07:30:32 2026 by rpki-client