$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer File: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer (raw, json) Hash identifier: KqJMK10DOLLNN3j9hjDkWgnFosVHf49cH43ingCt1jk= Subject key identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3C8BEC5138AC0022E261BD04584FD0FECE03B73C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft caRepository: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 06 Mar 2026 08:38:25 +0000 Certificate not after: Fri 05 Mar 2027 08:43:25 +0000 Subordinate resources: IP: 103.170.198.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8b:ec:51:38:ac:00:22:e2:61:bd:04:58:4f:d0:fe:ce:03:b7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 6 08:38:25 2026 GMT Not After : Mar 5 08:43:25 2027 GMT Subject: CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8d:e9:51:e5:2f:7c:af:ba:e1:eb:4a:96:fd: 50:8b:bb:b6:2c:39:4d:a1:6b:54:41:ca:be:df:9d: c6:4c:41:3a:d0:0a:4b:cb:69:41:3f:e7:18:e9:b0: 42:5c:51:d7:ca:19:cd:4f:c9:4c:35:17:26:ab:df: a7:48:81:15:2b:4a:c7:3c:f6:86:72:f2:00:7c:fb: 5e:4f:94:4a:67:38:85:35:ba:55:22:6d:3b:bf:55: 49:28:06:62:97:5d:ab:c5:ff:e1:8b:cc:8c:00:77: 98:da:7b:a3:14:ab:dd:48:c0:d0:7b:e7:15:30:ea: b8:6b:a5:1e:9b:92:3d:7a:ae:b9:dc:74:4f:ab:86: ba:81:14:81:86:df:70:75:85:89:d6:9d:d2:89:0a: f2:8e:3c:e7:94:66:3b:32:37:46:72:1f:c1:19:da: 55:59:62:8b:a4:cf:bf:30:fd:b8:b9:fd:b4:af:3d: ae:10:51:cf:73:02:d8:92:e4:3d:50:68:b2:70:57: c2:1a:b6:d8:34:b1:66:a3:d4:76:eb:69:35:93:a3: 4f:80:fe:98:aa:e5:bd:0c:22:c3:4e:71:21:37:57: 93:65:f4:22:31:25:66:2c:dc:96:ee:d2:aa:05:3c: 2b:c0:dc:73:8d:dd:94:d4:7c:f0:39:e6:30:75:d2: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.198.0/24 Signature Algorithm: sha256WithRSAEncryption 97:e9:15:10:95:30:cc:e2:6c:21:75:06:36:65:30:fb:f6:27: 2a:88:bd:52:b4:a6:17:27:fe:6c:11:d7:25:4d:47:ec:10:37: a9:31:fb:11:d5:f4:30:40:c8:51:0e:2e:c9:b7:3f:2d:37:1e: 12:b3:8d:ac:03:fb:a9:56:46:a2:a8:c2:c2:6f:5a:61:a4:df: 1a:51:4e:1d:88:bb:d5:8c:92:c4:08:a8:2f:1f:a6:9a:46:76: 5b:0b:f6:71:89:7c:2e:37:75:52:55:89:3f:25:4e:27:80:91: c4:ee:25:80:91:cd:8f:89:82:cb:40:28:7f:d4:99:77:05:85: ae:05:24:0d:f9:2b:42:bf:41:80:f4:65:51:e9:08:9b:3a:05: 20:37:e6:d4:ee:1f:42:9d:20:d4:11:48:8e:27:3e:0a:94:9e: e3:b7:c4:d8:13:4b:d9:a7:54:dc:b1:ac:fa:fc:0a:90:06:7f: 34:fa:6a:c3:86:41:67:86:e6:23:3f:d1:e6:78:3b:7b:82:c9: fd:ba:b7:0d:eb:35:1f:49:d7:74:ef:53:ef:2a:84:1d:09:e5: d1:ee:0a:9a:90:80:7a:ed:86:21:b4:75:54:5e:6b:42:7d:92: 4b:90:99:ca:4f:fd:f2:f0:53:13:c8:e0:cc:9f:dd:1b:67:f7: 5f:4e:ef:bd -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPIvsUTisACLiYb0EWE/Q/s4DtzwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwNjA4MzgyNVoX DTI3MDMwNTA4NDMyNVowMzExMC8GA1UEAxMoNTk3NzM0QTI2MTU4RDc3QTZFRDAy MjIyREY5M0QxQ0UyQkQ2RUEwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOWN6VHlL3yvuuHrSpb9UIu7tiw5TaFrVEHKvt+dxkxBOtAKS8tpQT/nGOmw QlxR18oZzU/JTDUXJqvfp0iBFStKxzz2hnLyAHz7Xk+USmc4hTW6VSJtO79VSSgG Ypddq8X/4YvMjAB3mNp7oxSr3UjA0HvnFTDquGulHpuSPXquudx0T6uGuoEUgYbf cHWFidad0okK8o4855RmOzI3RnIfwRnaVVlii6TPvzD9uLn9tK89rhBRz3MC2JLk PVBosnBXwhq22DSxZqPUdutpNZOjT4D+mKrlvQwiw05xITdXk2X0IjElZizclu7S qgU8K8Dcc43dlNR88DnmMHXS+UUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFl3NKJhWNd6btAiIt+T0c4r1uoDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MGRhNTg4Mi1iODA0LTQxNTQtOTU5Yi02MzM2YjI0ZTE4YjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwZGE1ODgy LWI4MDQtNDE1NC05NTliLTYzMzZiMjRlMThiMi8wLzU5NzczNEEyNjE1OEQ3N0E2 RUQwMjIyMkRGOTNEMUNFMkJENkVBMDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnqsYwDQYJKoZIhvcNAQELBQADggEBAJfpFRCVMMzibCF1BjZlMPv2JyqIvVK0 phcn/mwR1yVNR+wQN6kx+xHV9DBAyFEOLsm3Py03HhKzjawD+6lWRqKowsJvWmGk 3xpRTh2Iu9WMksQIqC8fpppGdlsL9nGJfC43dVJViT8lTieAkcTuJYCRzY+JgstA KH/UmXcFha4FJA35K0K/QYD0ZVHpCJs6BSA35tTuH0KdINQRSI4nPgqUnuO3xNgT S9mnVNyxrPr8CpAGfzT6asOGQWeG5iM/0eZ4O3uCyf26tw3rNR9J13TvU+8qhB0J 5dHuCpqQgHrthiG0dVRea0J9kkuQmcpP/fLwUxPI4Myf3Rtn919O770= -----END CERTIFICATE-----Generated at Thu Mar 26 09:57:34 2026 by rpki-client