$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer File: 7AD0DDB5789DE529C8697A033978C381FFE40D83.cer (raw, json) Hash identifier: JWgBRqYshGytRn8C5Ul1FdvJOVf2LRPHjahUYMqSr+A= Subject key identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 701A0A1C4D79BE424089947F87B58EC575187E25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft caRepository: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Mar 2026 11:53:53 +0000 Certificate not after: Tue 16 Mar 2027 11:58:53 +0000 Subordinate resources: IP: 103.175.179.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1a:0a:1c:4d:79:be:42:40:89:94:7f:87:b5:8e:c5:75:18:7e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 17 11:53:53 2026 GMT Not After : Mar 16 11:58:53 2027 GMT Subject: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cb:57:70:20:69:02:88:4a:5e:57:9c:aa:66: 9d:42:ea:70:56:38:57:20:ac:6a:41:07:09:95:a7: 49:2b:a0:fb:b4:7f:af:14:0b:dc:2d:16:b5:84:51: 54:54:1b:cb:e0:e8:db:4e:a0:ca:ef:a5:21:e1:c1: ff:b1:41:df:15:12:70:cb:2e:98:b7:9b:e0:24:a2: b8:a2:81:c8:44:54:e0:eb:6e:53:e4:64:5b:88:79: 68:90:7b:83:c9:e5:74:bc:a6:7f:47:ba:d1:69:8c: 62:f1:68:85:91:7f:ad:f3:04:97:b6:68:1a:a7:d5: b3:c9:bb:6b:9d:1a:2c:2c:5c:ee:5a:61:d0:8c:fa: 81:45:40:f1:58:ca:99:d0:77:9c:07:62:88:4a:81: 4e:07:e6:33:11:d4:25:66:9d:64:dc:7d:13:2a:8f: 8d:5c:1d:78:5e:41:53:bb:e3:70:35:9d:d9:23:ac: 7e:25:eb:84:4d:45:70:30:bb:21:cc:fc:58:3e:30: bb:04:eb:a8:6f:ef:10:53:6a:f0:35:52:21:19:1a: 2a:01:61:4f:36:c5:ae:76:83:de:71:2f:a3:bc:bf: 7a:d1:fd:fa:c1:18:b3:b0:b4:37:a5:c6:d2:2e:5a: 86:68:0d:05:e4:d1:94:e8:98:78:03:8b:ca:df:4f: f7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.179.0/24 Signature Algorithm: sha256WithRSAEncryption 93:42:58:29:3e:c4:c8:c4:12:20:2d:11:8f:2e:1a:18:33:fe: c7:21:4f:ac:e1:c1:8d:fa:0d:d0:a3:97:55:a4:17:bb:05:9c: 7a:a4:8f:aa:e8:8f:8d:2b:71:b7:6a:de:70:49:9a:d2:6c:be: 3f:bb:03:54:1e:51:a8:07:8d:2b:9b:11:7e:2d:a5:0f:54:0a: cd:3d:6b:9e:db:a0:fd:e3:b4:54:3f:13:c5:23:65:32:32:a8: d5:de:48:ba:4f:3a:1b:66:5d:11:ac:55:75:d9:16:eb:66:25: a8:db:b5:cd:a2:59:23:9d:52:1c:8d:8e:49:5b:62:eb:49:40: ea:c0:b9:a6:9b:f1:69:64:68:b6:00:34:93:5a:f2:f0:42:bb: 61:d5:82:c7:30:6c:e2:32:85:25:55:53:2d:8d:28:5b:e3:f3: 6c:13:b2:3e:59:a6:87:60:47:fb:e2:f8:90:fa:d0:0b:19:46: cf:be:a2:68:af:48:c7:80:0e:e6:15:33:e5:08:4b:1a:70:e7: 37:b1:7f:77:58:cf:95:11:4f:0d:2f:25:3f:63:58:30:55:42: 75:8a:5f:3d:84:60:3d:a4:87:cd:05:69:2f:db:89:b2:33:71: 75:c8:d4:33:43:29:56:d2:f7:5d:4e:9e:65:08:b2:19:ec:c1: 0a:41:9f:a1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcBoKHE15vkJAiZR/h7WOxXUYfiUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxNzExNTM1M1oX DTI3MDMxNjExNTg1M1owMzExMC8GA1UEAxMoN0FEMEREQjU3ODlERTUyOUM4Njk3 QTAzMzk3OEMzODFGRkU0MEQ4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANbLV3AgaQKISl5XnKpmnULqcFY4VyCsakEHCZWnSSug+7R/rxQL3C0WtYRR VFQby+Do206gyu+lIeHB/7FB3xUScMsumLeb4CSiuKKByERU4OtuU+RkW4h5aJB7 g8nldLymf0e60WmMYvFohZF/rfMEl7ZoGqfVs8m7a50aLCxc7lph0Iz6gUVA8VjK mdB3nAdiiEqBTgfmMxHUJWadZNx9EyqPjVwdeF5BU7vjcDWd2SOsfiXrhE1FcDC7 Icz8WD4wuwTrqG/vEFNq8DVSIRkaKgFhTzbFrnaD3nEvo7y/etH9+sEYs7C0N6XG 0i5ahmgNBeTRlOiYeAOLyt9P9wMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHrQ3bV4neUpyGl6Azl4w4H/5A2DMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZjJiMTc4Ni0xODMzLTRkMGEtYTEzOS00NjQ0MzMzOTNkNzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FmMmIxNzg2 LTE4MzMtNGQwYS1hMTM5LTQ2NDQzMzM5M2Q3OC8wLzdBRDBEREI1Nzg5REU1MjlD ODY5N0EwMzM5NzhDMzgxRkZFNDBEODMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnr7MwDQYJKoZIhvcNAQELBQADggEBAJNCWCk+xMjEEiAtEY8uGhgz/schT6zh wY36DdCjl1WkF7sFnHqkj6roj40rcbdq3nBJmtJsvj+7A1QeUagHjSubEX4tpQ9U Cs09a57boP3jtFQ/E8UjZTIyqNXeSLpPOhtmXRGsVXXZFutmJajbtc2iWSOdUhyN jklbYutJQOrAuaab8WlkaLYANJNa8vBCu2HVgscwbOIyhSVVUy2NKFvj82wTsj5Z podgR/vi+JD60AsZRs++omivSMeADuYVM+UISxpw5zexf3dYz5URTw0vJT9jWDBV QnWKXz2EYD2kh80FaS/bibIzcXXI1DNDKVbS911OnmUIshnswQpBn6E= -----END CERTIFICATE-----Generated at Thu Mar 26 05:41:24 2026 by rpki-client