$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer File: B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.cer (raw, json) Hash identifier: LKsrMnRxQZsVIa+84Ap609ZJioyEA/cuP1I50IxRXtE= Subject key identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1AFC8E9DA2A57A2BCEDAE1E268983C65F6F5F81C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft caRepository: rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 08 Mar 2026 16:00:14 +0000 Certificate not after: Sun 07 Mar 2027 16:05:14 +0000 Subordinate resources: IP: 103.155.156.0/23 IP: 2406:70c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:fc:8e:9d:a2:a5:7a:2b:ce:da:e1:e2:68:98:3c:65:f6:f5:f8:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 8 16:00:14 2026 GMT Not After : Mar 7 16:05:14 2027 GMT Subject: CN=B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dd:4f:9e:af:26:01:2d:9d:39:74:de:88:20: be:e8:d8:95:ca:1c:64:fb:0c:a3:84:4f:74:bd:25: 8d:9c:04:db:2a:7d:0a:1f:df:ca:5f:7c:cb:82:62: 39:18:e3:9f:49:20:5a:e1:c3:f6:b6:35:73:19:0b: 2c:78:d6:59:2e:d9:35:82:68:28:bb:ef:c0:d6:e9: 53:13:85:6d:bb:5e:db:ec:16:1e:c4:6d:2b:6e:4a: c3:6f:c5:ba:37:17:0c:52:d4:c5:57:72:75:b4:7a: c9:88:e0:70:db:29:59:84:b1:62:5d:15:91:0f:26: f4:8a:2d:98:4a:df:b3:8f:5a:0b:d0:71:57:aa:c2: e7:e5:44:05:41:9b:34:54:03:6a:cf:6e:46:1b:af: 64:a8:ef:fd:75:4d:a2:ba:2d:86:4f:bd:70:eb:65: a5:e8:46:63:fe:6c:46:8c:ce:bb:54:1b:e8:81:9e: f2:35:ea:3d:06:8e:d5:bd:9c:ea:a0:f7:0a:07:41: 2e:4c:4a:87:ce:5b:d6:98:4f:5a:87:35:4d:a9:69: 51:ff:13:50:86:f2:40:5e:6f:37:f9:b1:f8:c0:bb: c7:57:0b:97:ef:69:1c:06:f4:a6:a5:df:65:66:5f: 9b:e4:dd:50:e9:ae:b1:cd:4e:01:4f:bf:24:9c:56: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:72:F0:73:B8:AF:26:B8:53:3E:97:AA:FB:AE:C1:7F:CE:FD:6F:8C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9d1619cb-c01c-4614-863e-ce288d7ba765/0/B972F073B8AF26B8533E97AAFBAEC17FCEFD6F8C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.155.156.0/23 IPv6: 2406:70c0::/32 Signature Algorithm: sha256WithRSAEncryption 82:e8:c1:e5:f2:16:99:bd:c0:47:41:d1:62:8a:a6:9f:65:5b: 82:4f:d6:f9:00:76:d4:4c:d9:5e:ad:b8:6c:a2:e0:b4:66:6f: a8:f2:e2:60:90:c4:50:77:8e:f9:05:ad:bf:84:f5:39:fe:02: ae:e4:19:67:a0:f1:48:c2:0f:59:9d:16:7f:ed:14:d8:18:df: 24:9f:63:07:c1:f1:7a:ca:e8:39:8a:50:1a:41:8e:0a:7d:43: 2e:a2:e6:2b:6b:99:ec:c2:32:5d:cd:8c:a8:be:20:89:5d:8f: 0d:49:5a:c6:7f:90:14:ea:8b:cf:6c:bf:ed:3b:a9:f9:1e:15: 2e:8d:95:b7:8a:e4:10:76:76:30:35:5b:6f:1f:9d:84:e1:60: f0:f6:a0:17:27:09:2c:34:d7:57:03:41:89:74:d3:c5:9d:46: d1:95:f2:b0:4d:4f:6f:8d:47:62:b3:7d:4b:ae:4d:89:28:40: f6:d0:68:4f:a6:6a:b0:c3:03:aa:c6:3c:7a:52:57:2e:5c:ca: cd:54:64:9d:ff:37:3e:cd:28:ed:c2:b1:da:e3:25:1c:a6:f0: 33:4d:62:f3:5f:74:09:d3:1e:aa:eb:54:7b:2a:da:0d:dc:7d: 7a:a8:79:18:a2:95:c1:11:d1:bb:e4:ca:f8:9b:7d:8e:3e:25: 99:c4:6a:7a -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUGvyOnaKleivO2uHiaJg8Zfb1+BwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwODE2MDAxNFoX DTI3MDMwNzE2MDUxNFowMzExMC8GA1UEAxMoQjk3MkYwNzNCOEFGMjZCODUzM0U5 N0FBRkJBRUMxN0ZDRUZENkY4QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANfdT56vJgEtnTl03oggvujYlcocZPsMo4RPdL0ljZwE2yp9Ch/fyl98y4Ji ORjjn0kgWuHD9rY1cxkLLHjWWS7ZNYJoKLvvwNbpUxOFbbte2+wWHsRtK25Kw2/F ujcXDFLUxVdydbR6yYjgcNspWYSxYl0VkQ8m9IotmErfs49aC9BxV6rC5+VEBUGb NFQDas9uRhuvZKjv/XVNorothk+9cOtlpehGY/5sRozOu1Qb6IGe8jXqPQaO1b2c 6qD3CgdBLkxKh85b1phPWoc1TalpUf8TUIbyQF5vN/mx+MC7x1cLl+9pHAb0pqXf ZWZfm+TdUOmusc1OAU+/JJxWjmUCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLly8HO4rya4Uz6XqvuuwX/O/W+MMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZDE2MTljYi1jMDFjLTQ2MTQtODYzZS1jZTI4OGQ3YmE3NjUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkMTYxOWNi LWMwMWMtNDYxNC04NjNlLWNlMjg4ZDdiYTc2NS8wL0I5NzJGMDczQjhBRjI2Qjg1 MzNFOTdBQUZCQUVDMTdGQ0VGRDZGOEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnm5wwDQQCAAIwBwMFACQGcMAwDQYJKoZIhvcNAQELBQADggEBAILoweXyFpm9 wEdB0WKKpp9lW4JP1vkAdtRM2V6tuGyi4LRmb6jy4mCQxFB3jvkFrb+E9Tn+Aq7k GWeg8UjCD1mdFn/tFNgY3ySfYwfB8XrK6DmKUBpBjgp9Qy6i5itrmezCMl3NjKi+ IIldjw1JWsZ/kBTqi89sv+07qfkeFS6NlbeK5BB2djA1W28fnYThYPD2oBcnCSw0 11cDQYl008WdRtGV8rBNT2+NR2KzfUuuTYkoQPbQaE+marDDA6rGPHpSVy5cys1U ZJ3/Nz7NKO3CsdrjJRym8DNNYvNfdAnTHqrrVHsq2g3cfXqoeRiilcER0bvkyvib fY4+JZnEano= -----END CERTIFICATE-----Generated at Thu Mar 26 05:33:21 2026 by rpki-client