$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer File: 8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.cer (raw, json) Hash identifier: qmgbBMADAE5Mx0LOFzZYxYAL4NRo9/9Dks62bQZYj9E= Subject key identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 66E0F600DF217DB0A8DBA2D026B19F66DB8E6571 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft caRepository: rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 10 Mar 2026 18:28:15 +0000 Certificate not after: Tue 09 Mar 2027 18:33:15 +0000 Subordinate resources: IP: 103.184.56.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e0:f6:00:df:21:7d:b0:a8:db:a2:d0:26:b1:9f:66:db:8e:65:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 10 18:28:15 2026 GMT Not After : Mar 9 18:33:15 2027 GMT Subject: CN=8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a4:9f:dc:49:37:06:e8:3c:47:cb:d6:8a:14: bb:ee:18:b6:15:00:b7:e8:23:f4:6f:03:e4:7e:11: a4:dd:55:5c:d2:b6:5a:fc:3e:66:d5:b4:4b:2f:21: 3a:bb:5f:1a:28:b0:ff:a7:c9:a1:4c:43:6c:5e:ae: f3:9e:69:7d:25:6b:d7:82:61:0a:2c:29:de:ac:32: bb:8a:db:b8:3d:12:a7:40:42:66:5d:60:1c:aa:93: 3d:20:ce:d6:ae:ad:82:64:83:86:11:53:77:ac:18: c1:be:c7:d1:4b:4d:77:8c:84:aa:1f:a4:9d:a4:6d: f3:5c:42:b2:84:08:b6:aa:8a:ff:9d:44:1c:f1:4b: 9e:e8:e2:07:62:84:44:52:15:a8:85:68:92:d3:7f: dc:0f:b4:88:ee:91:4c:4f:a3:30:6f:d9:7e:8d:37: 05:68:52:4f:df:0c:18:22:c9:6f:e7:69:c0:22:21: 36:14:59:91:2a:22:38:8e:4d:56:0d:ed:ad:0e:3b: 97:f6:36:4a:a5:83:31:49:ea:6b:01:b1:c5:13:42: f5:81:44:de:f1:74:eb:d4:6b:be:79:fc:66:2a:0b: f5:f0:f9:8e:9d:e2:1c:5d:6d:0a:72:f2:55:b2:19: 39:cf:09:71:9c:e0:02:2d:58:48:8f:1b:1a:9f:fa: 80:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8B:0D:E1:41:AC:B8:11:E0:FE:65:08:5C:F2:33:9E:E4:C7:EE:05:A2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/de6a57c5-df73-43f5-865d-6bd248c22fba/0/8B0DE141ACB811E0FE65085CF2339EE4C7EE05A2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.184.56.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:6e:d6:1d:d4:a2:20:c6:90:7b:96:3a:d1:31:6e:0c:f9:c1: 72:f5:5d:5e:67:7a:ca:3c:63:b8:10:f1:c3:fb:59:37:86:22: e6:0f:0c:71:8b:d7:d0:3d:5e:66:c8:8b:34:99:e4:02:2e:96: e4:94:39:6e:b7:73:05:1a:e2:c2:c7:9a:40:b0:f4:bd:b3:2f: ce:11:47:ed:3e:52:39:ec:b8:be:3b:d0:15:a4:f2:ba:37:57: 5d:83:4c:d7:ce:28:1d:8f:f5:b0:0a:fb:e3:71:e4:71:89:f5: 2f:9b:ec:bf:fa:f6:56:74:c2:a9:d4:e1:c2:a0:02:83:9a:83: fd:37:07:c1:dd:b0:4f:e3:f3:02:1a:8d:57:70:a8:f2:a8:e6: 9a:f1:33:a4:e1:27:be:f8:c6:f6:71:1a:7d:a1:62:8d:e4:15: 4c:9a:2d:54:ee:1d:2a:e2:0a:c7:ec:18:c3:ce:8c:8e:2a:51: 78:ef:b4:23:f9:46:8e:dc:07:8d:74:a3:bc:76:9f:41:f0:c9: df:ad:9c:33:80:b6:08:63:ec:5b:e4:b7:c3:75:0a:31:6f:d0: 2a:27:65:91:61:4d:d6:9c:cd:e2:43:40:6e:2b:c0:b2:27:12: 0f:44:af:96:56:fd:b6:27:72:44:ea:62:0d:f6:94:32:5f:56: c1:ca:4e:b1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZuD2AN8hfbCo26LQJrGfZtuOZXEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxMDE4MjgxNVoX DTI3MDMwOTE4MzMxNVowMzExMC8GA1UEAxMoOEIwREUxNDFBQ0I4MTFFMEZFNjUw ODVDRjIzMzlFRTRDN0VFMDVBMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANKkn9xJNwboPEfL1ooUu+4YthUAt+gj9G8D5H4RpN1VXNK2Wvw+ZtW0Sy8h OrtfGiiw/6fJoUxDbF6u855pfSVr14JhCiwp3qwyu4rbuD0Sp0BCZl1gHKqTPSDO 1q6tgmSDhhFTd6wYwb7H0UtNd4yEqh+knaRt81xCsoQItqqK/51EHPFLnujiB2KE RFIVqIVoktN/3A+0iO6RTE+jMG/Zfo03BWhST98MGCLJb+dpwCIhNhRZkSoiOI5N Vg3trQ47l/Y2SqWDMUnqawGxxRNC9YFE3vF069Rrvnn8ZioL9fD5jp3iHF1tCnLy VbIZOc8JcZzgAi1YSI8bGp/6gMcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIsN4UGsuBHg/mUIXPIznuTH7gWiMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZTZhNTdjNS1kZjczLTQzZjUtODY1ZC02YmQyNDhjMjJmYmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlNmE1N2M1 LWRmNzMtNDNmNS04NjVkLTZiZDI0OGMyMmZiYS8wLzhCMERFMTQxQUNCODExRTBG RTY1MDg1Q0YyMzM5RUU0QzdFRTA1QTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnuDgwDQYJKoZIhvcNAQELBQADggEBAH5u1h3UoiDGkHuWOtExbgz5wXL1XV5n eso8Y7gQ8cP7WTeGIuYPDHGL19A9XmbIizSZ5AIuluSUOW63cwUa4sLHmkCw9L2z L84RR+0+UjnsuL470BWk8ro3V12DTNfOKB2P9bAK++Nx5HGJ9S+b7L/69lZ0wqnU 4cKgAoOag/03B8HdsE/j8wIajVdwqPKo5prxM6ThJ774xvZxGn2hYo3kFUyaLVTu HSriCsfsGMPOjI4qUXjvtCP5Ro7cB410o7x2n0Hwyd+tnDOAtghj7Fvkt8N1CjFv 0ConZZFhTdaczeJDQG4rwLInEg9Er5ZW/bYnckTqYg32lDJfVsHKTrE= -----END CERTIFICATE-----Generated at Thu Mar 26 07:25:56 2026 by rpki-client