$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer File: 381455361E726B6ECCDAF271673BD59B1555336E.cer (raw, json) Hash identifier: +YnVqFkthh9LgbIXxkFAIg1ud+K1gKlii29Q3kZERgU= Subject key identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 19FD274EA3A1205E6F151872731BF06CA4D13AAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft caRepository: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 09 Mar 2026 16:58:04 +0000 Certificate not after: Mon 08 Mar 2027 17:03:04 +0000 Subordinate resources: IP: 103.151.162.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:fd:27:4e:a3:a1:20:5e:6f:15:18:72:73:1b:f0:6c:a4:d1:3a:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 9 16:58:04 2026 GMT Not After : Mar 8 17:03:04 2027 GMT Subject: CN=381455361E726B6ECCDAF271673BD59B1555336E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:63:af:65:a1:af:8b:c4:6c:4c:3f:b0:c2:ac: d6:86:aa:d8:07:1d:2b:78:7d:6f:37:84:bc:0e:44: 86:01:53:04:db:36:6d:d0:fc:62:25:09:0b:96:72: 81:83:7c:aa:13:85:dc:39:1f:d1:5b:22:bb:72:47: bb:a1:23:2e:78:8c:6a:18:1f:5a:c5:ef:d2:96:35: eb:a4:84:fa:b5:6c:fd:7b:24:eb:7f:20:9f:29:8c: 16:f8:7d:3b:00:12:04:7a:0d:f0:3e:48:8f:1d:9a: 13:fd:bf:6e:5a:d7:9a:dc:c2:87:62:ed:9b:47:30: fe:43:36:88:ef:6e:a1:24:88:bd:fc:f9:52:ae:e7: 10:85:ff:51:ec:72:15:bf:6b:2a:f1:d5:63:a7:f0: 4d:77:4c:ae:30:89:09:1f:94:35:d8:63:bc:63:16: 97:12:2f:c3:5f:53:f8:ce:f6:6e:9d:92:74:3e:26: c1:72:08:b5:d3:81:0b:a7:d1:ae:21:ac:47:36:c6: 1b:4e:a6:d9:aa:01:8a:db:5c:a4:3e:f2:ea:05:c4: c5:a1:d2:e9:fa:ed:d5:1e:6b:7f:96:95:6b:92:a8: 1e:07:af:1a:25:12:4e:e1:5c:f5:a1:08:a5:aa:09: 33:50:58:d7:bc:75:5c:5c:fa:15:ad:08:de:15:1f: 17:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.151.162.0/23 Signature Algorithm: sha256WithRSAEncryption 28:13:aa:74:04:bf:71:5d:2a:b3:a3:cf:ae:3b:ec:3e:90:e3: 48:a3:c6:be:cd:f0:53:0b:7f:3b:6b:54:90:ba:43:79:c0:2b: 34:96:84:d2:a1:e4:01:4f:60:b0:48:c5:e9:b2:1a:35:b6:31: 1c:c3:e6:5a:76:20:0f:82:83:cc:62:1a:c2:8b:4e:47:f5:58: ee:2e:32:b8:7e:dd:6c:ac:20:ae:f3:8f:45:33:07:fc:ef:f1: 6e:ec:84:3d:38:66:ec:c2:cd:c0:e1:53:bf:da:ee:50:64:29: a7:4c:12:68:9a:71:22:aa:4d:ab:9a:a6:8a:c7:65:d3:13:f6: 5b:65:85:77:41:12:4b:a5:9c:42:b7:fd:b8:c5:53:f6:74:59: 83:fc:f5:26:24:f8:af:13:af:bd:da:bb:65:be:28:01:5c:db: 20:81:7f:64:ca:d9:fb:e9:45:94:1e:4e:ff:36:4e:b2:03:cd: d7:0b:e5:bc:79:67:ec:1d:0a:e3:12:b1:10:75:e0:cc:f8:82: 55:0b:b9:c6:67:bc:d5:e4:77:a1:91:3b:75:7f:ab:26:01:1e: 56:40:0f:6d:df:05:79:e3:cd:88:5d:1f:6b:b8:f9:fd:f6:c5: 3d:39:14:94:42:1e:38:61:89:fa:7c:fd:39:88:84:b7:ef:1b: 0d:50:e7:e4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGf0nTqOhIF5vFRhycxvwbKTROqswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwOTE2NTgwNFoX DTI3MDMwODE3MDMwNFowMzExMC8GA1UEAxMoMzgxNDU1MzYxRTcyNkI2RUNDREFG MjcxNjczQkQ1OUIxNTU1MzM2RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJpjr2Whr4vEbEw/sMKs1oaq2AcdK3h9bzeEvA5EhgFTBNs2bdD8YiUJC5Zy gYN8qhOF3Dkf0Vsiu3JHu6EjLniMahgfWsXv0pY166SE+rVs/Xsk638gnymMFvh9 OwASBHoN8D5Ijx2aE/2/blrXmtzCh2Ltm0cw/kM2iO9uoSSIvfz5Uq7nEIX/Uexy Fb9rKvHVY6fwTXdMrjCJCR+UNdhjvGMWlxIvw19T+M72bp2SdD4mwXIItdOBC6fR riGsRzbGG06m2aoBittcpD7y6gXExaHS6frt1R5rf5aVa5KoHgevGiUSTuFc9aEI paoJM1BY17x1XFz6Fa0I3hUfF08CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDgUVTYecmtuzNrycWc71ZsVVTNuMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYzE5ODc0Yy1hNmIyLTRiMGItOWNjNi01NTlhNGU3Y2Q5NWEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJjMTk4NzRj LWE2YjItNGIwYi05Y2M2LTU1OWE0ZTdjZDk1YS8wLzM4MTQ1NTM2MUU3MjZCNkVD Q0RBRjI3MTY3M0JENTlCMTU1NTMzNkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnl6IwDQYJKoZIhvcNAQELBQADggEBACgTqnQEv3FdKrOjz6477D6Q40ijxr7N 8FMLfztrVJC6Q3nAKzSWhNKh5AFPYLBIxemyGjW2MRzD5lp2IA+Cg8xiGsKLTkf1 WO4uMrh+3WysIK7zj0UzB/zv8W7shD04ZuzCzcDhU7/a7lBkKadMEmiacSKqTaua porHZdMT9ltlhXdBEkulnEK3/bjFU/Z0WYP89SYk+K8Tr73au2W+KAFc2yCBf2TK 2fvpRZQeTv82TrIDzdcL5bx5Z+wdCuMSsRB14Mz4glULucZnvNXkd6GRO3V/qyYB HlZAD23fBXnjzYhdH2u4+f32xT05FJRCHjhhifp8/TmIhLfvGw1Q5+Q= -----END CERTIFICATE-----Generated at Thu Mar 26 04:17:16 2026 by rpki-client