$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer File: B0AAB728B88975526C1741CCA8673CBC88F7697C.cer (raw, json) Hash identifier: YFe1B241w9r/xM/p9gSq8K3S8QYN9HBBKCNOxjyb6qo= Subject key identifier: B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 22618515C5122BF6B07807D0D686BF765660B6F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft caRepository: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Mar 2026 17:48:24 +0000 Certificate not after: Thu 04 Mar 2027 17:53:24 +0000 Subordinate resources: IP: 103.170.100.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:51:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:61:85:15:c5:12:2b:f6:b0:78:07:d0:d6:86:bf:76:56:60:b6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 5 17:48:24 2026 GMT Not After : Mar 4 17:53:24 2027 GMT Subject: CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:61:e0:04:0d:f7:92:a9:7f:aa:0e:d5:4e: 8c:e9:e4:04:a7:76:f5:69:e7:35:21:ad:2f:ad:a1: 6c:20:a2:22:83:9e:c5:4f:e5:b3:e8:e5:57:8a:92: d5:08:c5:99:dc:ee:b3:5c:68:f1:6c:8c:bc:04:5d: dd:a5:f9:ac:37:5f:10:c2:8d:91:c3:72:f5:cc:bc: c6:57:ee:91:31:17:b0:47:a0:b6:8d:ff:5c:fe:6d: aa:f1:50:b5:ce:d0:60:48:25:67:cc:e3:a4:d6:f9: 8b:ea:67:e3:57:94:8b:1b:79:57:c4:83:38:7a:78: 60:4a:a9:ad:aa:ef:cc:1a:8f:09:f8:b4:36:79:34: f9:40:97:bf:1d:07:b9:4a:54:ae:c6:fb:d9:35:1c: 1d:52:f9:48:45:69:50:96:4b:36:85:f2:e2:a8:b6: a4:79:d1:fe:0b:e4:91:2a:a5:85:af:79:2b:1f:78: 91:e9:93:8e:7e:71:e5:64:38:33:b8:4c:b8:bc:9a: ba:5f:6b:43:32:c8:70:fa:49:be:83:c5:9c:1e:f2: 6d:9c:5c:fc:fc:9a:31:9b:c2:f4:90:f5:01:15:25: 53:89:53:c8:80:d9:55:d5:43:f9:3d:d4:1b:75:89: ad:ee:78:6b:01:da:2b:83:06:67:7a:e0:9d:e6:27: 9f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.100.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:43:10:7c:48:d4:50:9a:5d:3f:e8:a3:b6:32:a2:18:2a:0b: b5:90:6b:26:25:a8:9f:40:cb:2f:a6:e8:66:85:2f:db:ee:23: 61:43:4a:54:79:2d:32:70:e4:1f:ed:0b:0b:e8:bc:da:2b:8b: 3e:1b:48:cd:7e:d6:d0:3b:88:2e:de:b5:b1:db:65:e9:23:a9: b9:e1:78:ce:42:97:1f:42:a3:68:68:6e:8d:4c:fd:7e:f8:3f: fc:29:e4:55:70:c8:b1:10:e8:08:f8:56:c0:0a:a7:ac:a6:54: a7:4c:71:c2:09:74:4e:2a:1b:4d:f3:20:3e:1e:2f:a3:ee:7e: 5a:83:ab:34:40:ce:74:1f:2a:b2:4b:d4:3e:87:e0:27:21:f1: 29:e7:d9:ae:2b:56:8a:5e:f8:1d:c4:be:f5:3e:61:4b:80:be: 0a:2a:cb:0e:78:4a:ee:06:60:3d:5d:18:1c:33:2d:c7:e3:40: 5d:cd:29:a9:51:72:45:a6:6f:48:bf:94:86:db:b4:46:6e:40: 6e:8e:d8:4a:9c:4e:0f:ec:87:a5:c7:58:f3:d1:d6:b0:5b:35: 50:f0:b9:a3:d8:ee:13:06:34:be:76:ad:08:63:db:d6:f3:af: d4:76:a3:dc:25:dd:ad:c8:b1:19:71:a1:69:b3:71:7f:b5:de: 4c:40:6e:d7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUImGFFcUSK/aweAfQ1oa/dlZgtvgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwNTE3NDgyNFoX DTI3MDMwNDE3NTMyNFowMzExMC8GA1UEAxMoQjBBQUI3MjhCODg5NzU1MjZDMTc0 MUNDQTg2NzNDQkM4OEY3Njk3QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALKNYeAEDfeSqX+qDtVOjOnkBKd29WnnNSGtL62hbCCiIoOexU/ls+jlV4qS 1QjFmdzus1xo8WyMvARd3aX5rDdfEMKNkcNy9cy8xlfukTEXsEegto3/XP5tqvFQ tc7QYEglZ8zjpNb5i+pn41eUixt5V8SDOHp4YEqprarvzBqPCfi0Nnk0+UCXvx0H uUpUrsb72TUcHVL5SEVpUJZLNoXy4qi2pHnR/gvkkSqlha95Kx94kemTjn5x5WQ4 M7hMuLyaul9rQzLIcPpJvoPFnB7ybZxc/PyaMZvC9JD1ARUlU4lTyIDZVdVD+T3U G3WJre54awHaK4MGZ3rgneYnn0sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLCqtyi4iXVSbBdBzKhnPLyI92l8MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZTA1YTFjZS04NDlmLTQxN2MtYjY3My1mZGQzM2YwZDc0NDcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlMDVhMWNl LTg0OWYtNDE3Yy1iNjczLWZkZDMzZjBkNzQ0Ny8wL0IwQUFCNzI4Qjg4OTc1NTI2 QzE3NDFDQ0E4NjczQ0JDODhGNzY5N0MubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqmQwDQYJKoZIhvcNAQELBQADggEBAB1DEHxI1FCaXT/oo7YyohgqC7WQayYl qJ9Ayy+m6GaFL9vuI2FDSlR5LTJw5B/tCwvovNoriz4bSM1+1tA7iC7etbHbZekj qbnheM5Clx9Co2hobo1M/X74P/wp5FVwyLEQ6Aj4VsAKp6ymVKdMccIJdE4qG03z ID4eL6PuflqDqzRAznQfKrJL1D6H4Cch8Snn2a4rVope+B3EvvU+YUuAvgoqyw54 Su4GYD1dGBwzLcfjQF3NKalRckWmb0i/lIbbtEZuQG6O2EqcTg/sh6XHWPPR1rBb NVDwuaPY7hMGNL52rQhj29bzr9R2o9wl3a3IsRlxoWmzcX+13kxAbtc= -----END CERTIFICATE-----Generated at Thu Mar 26 07:21:35 2026 by rpki-client