$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer File: A5D12164B9484E51D4BE4B03823526989B147558.cer (raw, json) Hash identifier: EUCT5MNsEShoqB4nqzQzfgrjMmQMh3W8OnZULe6AwhQ= Subject key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5DBB205B1D590F0832D628496FEFA8A3845AB06C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft caRepository: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Mar 2026 09:33:29 +0000 Certificate not after: Tue 16 Mar 2027 09:38:29 +0000 Subordinate resources: IP: 103.190.76.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:bb:20:5b:1d:59:0f:08:32:d6:28:49:6f:ef:a8:a3:84:5a:b0:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 17 09:33:29 2026 GMT Not After : Mar 16 09:38:29 2027 GMT Subject: CN=A5D12164B9484E51D4BE4B03823526989B147558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b5:18:89:aa:07:5f:c7:59:79:65:05:2c:96: 12:85:5c:51:79:50:dd:48:77:f6:49:e4:eb:ef:42: 5f:59:bc:e5:cf:3c:23:0d:5a:60:a9:8f:60:20:3b: ea:91:68:52:a4:99:51:dd:a3:31:06:0e:9d:b5:3c: 94:49:3c:0d:ed:20:c7:de:0b:db:5d:fd:f9:12:35: 5d:05:ea:c9:87:ae:62:bf:88:a8:eb:2a:62:06:b8: 96:c9:02:1a:22:58:ea:0c:2a:61:04:e9:84:5c:5d: 22:b7:d7:b0:9e:62:0b:06:5a:c0:0c:42:f1:9e:d6: 0b:93:58:28:f0:fb:70:0c:13:4d:89:5b:49:ab:5b: a5:6e:10:f9:33:9a:e1:33:d1:5f:d8:f0:c5:69:d1: 15:fc:85:cd:65:f0:9f:fc:39:40:1a:51:24:3b:87: 09:f4:ef:b4:c4:98:93:1c:38:08:ae:44:f9:45:37: 6b:22:8c:2f:37:aa:9c:c0:49:05:63:fb:e7:4a:b3: 53:ae:2d:f4:09:e5:2b:8f:69:2a:aa:18:e5:b1:1a: af:47:6f:ba:82:e0:55:ca:4d:1b:d1:95:9d:50:8f: f6:f0:50:41:16:40:0c:d5:15:a1:0a:9f:9b:7c:4b: d1:59:03:86:9f:df:3f:bf:b0:dd:c9:22:e6:60:03: 77:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.190.76.0/23 Signature Algorithm: sha256WithRSAEncryption 71:06:66:b6:06:a7:ca:cb:0d:5b:95:c1:32:60:e0:21:b4:49: 0b:68:9d:4e:6f:db:32:15:e0:c6:b2:dd:78:4d:57:3e:46:d2: 25:43:d5:25:c2:81:18:d5:a5:4e:8e:fc:15:2c:95:c8:2c:90: 5a:cc:e0:8e:65:7c:03:af:41:fc:2c:ad:23:1f:12:f3:0b:ec: b8:8a:90:c0:7d:be:08:6f:3f:72:b7:4b:5d:cb:d5:47:b0:ea: 6d:d2:2f:6f:24:ca:65:eb:38:eb:81:38:17:87:03:5c:08:59: 60:ee:fa:88:d5:ca:1d:e1:1a:ec:81:7b:52:e6:cc:a4:dd:e7: ab:60:44:62:fa:f9:f8:c4:44:78:87:5e:7c:e3:4c:74:7c:1c: e2:df:1d:33:bf:24:d4:e6:85:17:32:70:af:ea:8e:4f:80:0b: 26:c6:83:b1:2a:a7:a3:1c:9c:db:b5:00:39:ae:fb:e1:72:ef: 81:b1:00:f3:2c:46:f1:28:17:6c:ee:a7:04:ac:d1:2b:b8:66: 28:f0:e9:ec:44:bc:7b:39:a4:64:b3:ae:6c:ed:84:ae:2a:fd: ca:33:65:de:48:9b:02:95:07:54:b6:32:53:ef:0c:37:d8:e9: 92:ad:ac:66:17:5c:7a:41:97:92:e4:16:0e:bf:32:e6:b8:dd: 59:a5:43:89 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXbsgWx1ZDwgy1ihJb++oo4RasGwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxNzA5MzMyOVoX DTI3MDMxNjA5MzgyOVowMzExMC8GA1UEAxMoQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0 QjAzODIzNTI2OTg5QjE0NzU1ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMG1GImqB1/HWXllBSyWEoVcUXlQ3Uh39knk6+9CX1m85c88Iw1aYKmPYCA7 6pFoUqSZUd2jMQYOnbU8lEk8De0gx94L2139+RI1XQXqyYeuYr+IqOsqYga4lskC GiJY6gwqYQTphFxdIrfXsJ5iCwZawAxC8Z7WC5NYKPD7cAwTTYlbSatbpW4Q+TOa 4TPRX9jwxWnRFfyFzWXwn/w5QBpRJDuHCfTvtMSYkxw4CK5E+UU3ayKMLzeqnMBJ BWP750qzU64t9AnlK49pKqoY5bEar0dvuoLgVcpNG9GVnVCP9vBQQRZADNUVoQqf m3xL0VkDhp/fP7+w3cki5mADd9MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKXRIWS5SE5R1L5LA4I1JpibFHVYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZTJjYWNjZi0zMjdlLTQyYmQtOWIzMS0wYTg3M2QyZTY2OTIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzllMmNhY2Nm LTMyN2UtNDJiZC05YjMxLTBhODczZDJlNjY5Mi8wL0E1RDEyMTY0Qjk0ODRFNTFE NEJFNEIwMzgyMzUyNjk4OUIxNDc1NTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvkwwDQYJKoZIhvcNAQELBQADggEBAHEGZrYGp8rLDVuVwTJg4CG0SQtonU5v 2zIV4May3XhNVz5G0iVD1SXCgRjVpU6O/BUslcgskFrM4I5lfAOvQfwsrSMfEvML 7LiKkMB9vghvP3K3S13L1Uew6m3SL28kymXrOOuBOBeHA1wIWWDu+ojVyh3hGuyB e1LmzKTd56tgRGL6+fjERHiHXnzjTHR8HOLfHTO/JNTmhRcycK/qjk+ACybGg7Eq p6McnNu1ADmu++Fy74GxAPMsRvEoF2zupwSs0Su4Zijw6exEvHs5pGSzrmzthK4q /cozZd5ImwKVB1S2MlPvDDfY6ZKtrGYXXHpBl5LkFg6/Mua43VmlQ4k= -----END CERTIFICATE-----Generated at Thu Mar 26 08:08:28 2026 by rpki-client