$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/665ACFA171591B851B0550143E7029498F238AF0.cer File: 665ACFA171591B851B0550143E7029498F238AF0.cer (raw, json) Hash identifier: RNh+83FIveJQ/tB3GGboaGfEfvJV0ru+p5/pbZGkbA4= Subject key identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 76823FDA94DC53712F1F92D1B0D1E311E62119F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft caRepository: rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 19 Mar 2026 08:04:12 +0000 Certificate not after: Thu 18 Mar 2027 08:09:12 +0000 Subordinate resources: IP: 103.190.32.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:82:3f:da:94:dc:53:71:2f:1f:92:d1:b0:d1:e3:11:e6:21:19:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 19 08:04:12 2026 GMT Not After : Mar 18 08:09:12 2027 GMT Subject: CN=665ACFA171591B851B0550143E7029498F238AF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2b:9c:30:00:c4:52:7f:31:d9:39:f0:9b:93: 94:82:a0:63:bb:df:1f:d2:ca:46:fc:ba:97:32:c2: 2b:9d:e2:d0:27:90:91:33:7a:3e:89:b0:bf:4d:06: d2:2e:a2:50:77:76:b7:74:8f:6e:46:0c:41:f8:74: 58:ae:7b:2b:da:98:fd:48:5d:91:58:06:d7:29:68: 30:c4:ba:9e:70:32:95:ea:a2:7d:bc:31:e9:b0:20: 58:7f:ca:80:f8:08:02:d5:3c:f0:88:81:10:df:46: 58:d2:a9:17:1c:b8:a4:a9:56:0c:1a:c8:42:3a:92: c2:dd:77:56:ab:96:c5:c3:fc:53:96:11:ae:ac:37: 3e:34:11:b3:f1:82:69:0a:5a:71:8c:72:11:dc:dc: c9:0d:86:b9:24:8f:b6:c5:6e:f8:e4:30:7a:91:01: 08:40:34:24:a2:bf:98:a5:b7:48:76:ce:cf:c6:95: 8f:74:44:d8:b6:47:f1:ac:f9:df:6d:f7:f5:21:dd: cc:d2:97:18:95:33:23:fc:dd:7d:81:24:13:19:75: 6e:9a:d3:78:04:19:93:d3:82:16:67:2a:dd:7e:bb: 24:3c:7c:e0:b9:f6:6f:52:6c:fb:b4:20:66:5f:aa: 29:86:f6:8f:c0:2c:72:04:14:9b:e5:31:df:b8:e8: 63:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:5A:CF:A1:71:59:1B:85:1B:05:50:14:3E:70:29:49:8F:23:8A:F0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7bef6e8d-1ab0-41c4-b3ae-a200d17a821c/0/665ACFA171591B851B0550143E7029498F238AF0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.32.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:91:50:cb:7a:77:2f:88:39:7d:c5:9a:44:3c:4c:b5:2f:f8: b6:8f:e2:9f:36:cf:ef:ec:6a:2f:17:a1:92:d5:c6:50:32:1f: 44:0f:44:de:8a:a6:5f:b0:28:84:2d:da:b4:f3:d4:0c:08:1f: fc:06:f6:d9:0b:3b:f9:ed:c3:67:7e:1e:7d:2e:de:80:90:c7: b1:ef:68:46:f7:ea:7c:8b:1e:2a:c8:36:15:09:fc:4d:35:f1: dd:24:50:b5:85:10:bf:aa:4e:b6:1f:3e:7f:a8:cb:fc:04:d6: ea:41:b0:fa:98:9e:44:08:83:ba:62:ab:36:67:9d:17:1b:d1: 30:c7:07:52:8e:9f:47:27:d7:73:68:05:06:87:c8:7c:3c:86: 4e:0d:3d:2a:be:d1:9c:c4:61:13:d0:61:4f:ac:4b:51:de:6f: 72:dc:40:5e:12:e7:d3:88:44:4f:af:63:7e:74:59:2d:5d:94: b9:76:08:75:2f:ba:18:8c:ce:9c:94:29:b1:01:fb:ac:11:92: ba:a5:fd:5e:84:eb:2c:97:88:37:82:20:c5:19:54:0a:ee:c2: 01:58:84:33:70:6b:b9:72:9c:8f:74:00:5f:9c:bd:2b:58:28: 3f:02:0f:09:13:81:86:ec:44:65:78:75:f2:4d:9c:a0:fa:bc: 6d:d4:59:e8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdoI/2pTcU3EvH5LRsNHjEeYhGfEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxOTA4MDQxMloX DTI3MDMxODA4MDkxMlowMzExMC8GA1UEAxMoNjY1QUNGQTE3MTU5MUI4NTFCMDU1 MDE0M0U3MDI5NDk4RjIzOEFGMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN0rnDAAxFJ/Mdk58JuTlIKgY7vfH9LKRvy6lzLCK53i0CeQkTN6Pomwv00G 0i6iUHd2t3SPbkYMQfh0WK57K9qY/UhdkVgG1yloMMS6nnAyleqifbwx6bAgWH/K gPgIAtU88IiBEN9GWNKpFxy4pKlWDBrIQjqSwt13VquWxcP8U5YRrqw3PjQRs/GC aQpacYxyEdzcyQ2GuSSPtsVu+OQwepEBCEA0JKK/mKW3SHbOz8aVj3RE2LZH8az5 32339SHdzNKXGJUzI/zdfYEkExl1bprTeAQZk9OCFmcq3X67JDx84Ln2b1Js+7Qg Zl+qKYb2j8AscgQUm+Ux37joY08CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGZaz6FxWRuFGwVQFD5wKUmPI4rwMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YmVmNmU4ZC0xYWIwLTQxYzQtYjNhZS1hMjAwZDE3YTgyMWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiZWY2ZThk LTFhYjAtNDFjNC1iM2FlLWEyMDBkMTdhODIxYy8wLzY2NUFDRkExNzE1OTFCODUx QjA1NTAxNDNFNzAyOTQ5OEYyMzhBRjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnviAwDQYJKoZIhvcNAQELBQADggEBAA2RUMt6dy+IOX3FmkQ8TLUv+LaP4p82 z+/sai8XoZLVxlAyH0QPRN6Kpl+wKIQt2rTz1AwIH/wG9tkLO/ntw2d+Hn0u3oCQ x7HvaEb36nyLHirINhUJ/E018d0kULWFEL+qTrYfPn+oy/wE1upBsPqYnkQIg7pi qzZnnRcb0TDHB1KOn0cn13NoBQaHyHw8hk4NPSq+0ZzEYRPQYU+sS1Heb3LcQF4S 59OIRE+vY350WS1dlLl2CHUvuhiMzpyUKbEB+6wRkrql/V6E6yyXiDeCIMUZVAru wgFYhDNwa7lynI90AF+cvStYKD8CDwkTgYbsRGV4dfJNnKD6vG3UWeg= -----END CERTIFICATE-----Generated at Thu Mar 26 07:34:38 2026 by rpki-client