$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer File: 9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.cer (raw, json) Hash identifier: ttNjxoylU/uYrIHHboUPdqhkQMiNAIbVN/YXwfgX6gA= Subject key identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4A02C0FE253BA1979617571F847A73AE53BFF1D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft caRepository: rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 13 Mar 2026 19:39:00 +0000 Certificate not after: Fri 12 Mar 2027 19:44:00 +0000 Subordinate resources: IP: 103.170.236.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:02:c0:fe:25:3b:a1:97:96:17:57:1f:84:7a:73:ae:53:bf:f1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 13 19:39:00 2026 GMT Not After : Mar 12 19:44:00 2027 GMT Subject: CN=9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:61:2c:22:2b:de:95:9c:75:65:39:6a:ae:30: c1:f5:a8:2b:33:ed:96:6f:7e:5f:89:84:45:81:67: 30:1c:e1:db:ef:2f:9e:9c:fd:94:0d:03:d8:fd:99: d1:e9:29:63:b6:84:e1:48:19:5f:f4:ce:17:4a:87: 5c:e0:62:0a:c3:1b:3f:14:d3:22:89:31:d5:29:16: d3:3e:13:1c:f5:bd:6d:6f:3c:76:5e:0e:ca:75:7f: 92:51:3e:df:19:59:72:96:b2:a3:d2:88:83:7e:ad: e5:e0:f3:6d:c6:d2:f8:5f:a8:7c:64:bf:29:d3:0b: d8:97:76:ff:5d:04:87:5a:24:cb:49:62:eb:6f:b2: 3b:c3:cb:35:b5:27:d0:5b:ee:b8:db:2a:10:e2:a6: 54:05:dc:f2:8c:3b:aa:26:a0:40:ae:94:3e:1d:2d: cb:4a:1b:fc:01:96:0b:d5:01:11:31:55:52:1e:18: c2:ee:45:51:8f:cf:60:03:4c:30:f6:af:bb:aa:80: a4:b5:34:50:99:39:e6:45:ce:9e:ce:a5:20:17:f1: 72:4e:a7:c3:79:b5:60:7b:be:a4:a7:8c:24:21:10: eb:3b:54:24:c5:61:09:b6:80:04:43:b7:b7:c3:0f: dc:0a:1e:14:8b:ef:29:e5:d4:d2:e3:a0:ec:bc:ff: cc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:02:A9:B8:7C:C5:F8:1A:22:E8:E5:8D:2E:C1:2E:6E:06:58:8A:03 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6bfa4265-bb58-46e2-8309-3ad3981a3516/0/9F02A9B87CC5F81A22E8E58D2EC12E6E06588A03.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.236.0/23 Signature Algorithm: sha256WithRSAEncryption 88:3e:63:21:5f:00:16:72:3a:be:7c:78:c3:97:b2:e4:7e:0d: c3:1f:a7:63:40:ac:a7:bd:9a:09:68:f2:2e:53:e2:f8:6d:2b: 7b:d1:18:83:04:b9:1b:e7:c3:67:60:8e:14:38:82:1e:94:73: fc:bf:90:c6:49:81:f3:67:9d:bc:5f:1b:e8:70:a4:eb:d4:5f: 33:00:0d:ed:f0:4c:98:f1:ef:75:9d:55:eb:15:6e:9d:b2:ec: 0e:26:90:78:13:97:11:b3:10:6c:f0:da:bf:06:5a:1f:c7:e4: 02:64:56:22:a9:5b:a6:18:99:1a:13:6c:9b:29:a2:c2:7d:b2: bb:a3:a9:fb:86:f2:44:5a:7c:9c:fb:10:de:76:5f:e2:61:f5: 9a:4f:f1:dc:9d:5f:b2:98:77:a7:93:bc:77:68:53:29:00:83: a1:bd:86:da:88:c7:ae:44:4f:1e:d1:8c:b5:0e:df:29:02:dd: 6a:e3:53:39:a1:b6:29:a9:78:2b:58:d4:f0:c1:1c:00:8d:1a: bd:85:7f:23:40:9f:2e:73:80:fc:f0:59:0c:2c:b3:13:af:20: 8f:55:51:06:c1:68:58:17:86:a1:76:1f:50:2b:e0:4c:eb:c7: 94:89:0c:1e:cf:e0:e9:cc:de:03:66:97:5e:2e:be:b8:70:a4: 5f:ce:f2:a4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUSgLA/iU7oZeWF1cfhHpzrlO/8dAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxMzE5MzkwMFoX DTI3MDMxMjE5NDQwMFowMzExMC8GA1UEAxMoOUYwMkE5Qjg3Q0M1RjgxQTIyRThF NThEMkVDMTJFNkUwNjU4OEEwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOBhLCIr3pWcdWU5aq4wwfWoKzPtlm9+X4mERYFnMBzh2+8vnpz9lA0D2P2Z 0ekpY7aE4UgZX/TOF0qHXOBiCsMbPxTTIokx1SkW0z4THPW9bW88dl4OynV/klE+ 3xlZcpayo9KIg36t5eDzbcbS+F+ofGS/KdML2Jd2/10Eh1oky0li62+yO8PLNbUn 0FvuuNsqEOKmVAXc8ow7qiagQK6UPh0ty0ob/AGWC9UBETFVUh4Ywu5FUY/PYANM MPavu6qApLU0UJk55kXOns6lIBfxck6nw3m1YHu+pKeMJCEQ6ztUJMVhCbaABEO3 t8MP3AoeFIvvKeXU0uOg7Lz/zDkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ8Cqbh8xfgaIujljS7BLm4GWIoDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82YmZhNDI2NS1iYjU4LTQ2ZTItODMwOS0zYWQzOTgxYTM1MTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZiZmE0MjY1 LWJiNTgtNDZlMi04MzA5LTNhZDM5ODFhMzUxNi8wLzlGMDJBOUI4N0NDNUY4MUEy MkU4RTU4RDJFQzEyRTZFMDY1ODhBMDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnquwwDQYJKoZIhvcNAQELBQADggEBAIg+YyFfABZyOr58eMOXsuR+DcMfp2NA rKe9mglo8i5T4vhtK3vRGIMEuRvnw2dgjhQ4gh6Uc/y/kMZJgfNnnbxfG+hwpOvU XzMADe3wTJjx73WdVesVbp2y7A4mkHgTlxGzEGzw2r8GWh/H5AJkViKpW6YYmRoT bJsposJ9srujqfuG8kRafJz7EN52X+Jh9ZpP8dydX7KYd6eTvHdoUykAg6G9htqI x65ETx7RjLUO3ykC3WrjUzmhtimpeCtY1PDBHACNGr2FfyNAny5zgPzwWQwssxOv II9VUQbBaFgXhqF2H1Ar4Ezrx5SJDB7P4OnM3gNml14uvrhwpF/O8qQ= -----END CERTIFICATE-----Generated at Thu Mar 26 04:11:47 2026 by rpki-client