$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/C45A558750D6CF5BE02532DDE80326AEF5012912.cer File: C45A558750D6CF5BE02532DDE80326AEF5012912.cer (raw, json) Hash identifier: Y3hKwV/uOvzc+IJiQnLCpZet6JoECZEG96yPhAdX3Iw= Subject key identifier: C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0E113048F448392C2D65AF8CB62B5CB89921EBD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft caRepository: rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 09 Mar 2026 00:17:20 +0000 Certificate not after: Mon 08 Mar 2027 00:22:20 +0000 Subordinate resources: IP: 103.170.115.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:11:30:48:f4:48:39:2c:2d:65:af:8c:b6:2b:5c:b8:99:21:eb:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 9 00:17:20 2026 GMT Not After : Mar 8 00:22:20 2027 GMT Subject: CN=C45A558750D6CF5BE02532DDE80326AEF5012912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d1:a4:2d:5a:02:87:31:85:9a:64:6a:74:4e: 54:1f:4f:78:62:57:d0:63:66:55:e4:6f:d0:1a:34: 79:a2:57:96:15:27:ef:3f:84:d7:69:5d:30:61:40: c9:29:79:a1:15:25:59:3c:15:36:fc:f4:8d:b9:bd: 7f:39:98:9b:49:1e:ed:ab:9f:5d:3c:9d:af:94:61: e7:9f:fa:1f:b5:04:7a:89:dd:9b:83:43:1d:39:7f: ba:7d:09:83:99:7f:20:b5:c0:65:0a:9e:dd:ce:04: 25:8e:d4:7f:07:75:bb:b0:2c:50:21:a6:bc:c3:cf: a6:ac:cb:51:ec:86:13:8a:56:2a:47:3a:5c:6f:0c: b0:ea:f9:d8:ad:e1:cc:3a:1f:7e:8d:1c:c2:e3:6b: fa:ed:07:16:07:56:24:7d:55:57:07:5a:e6:1e:c1: 2c:fb:b3:bf:db:ad:73:cd:c5:b0:b5:29:92:e7:13: 84:4c:51:42:82:c6:af:52:2f:3c:3d:1a:b4:29:5f: bc:95:e9:f2:7a:7d:57:95:80:1d:8b:43:c0:b0:86: b2:06:e9:6a:63:4d:46:72:5b:c1:72:be:11:36:10: 1e:b6:20:49:05:8d:21:95:7d:76:23:bf:88:33:52: 0b:bc:67:bc:94:6e:e6:87:45:e9:bb:bd:62:5a:68: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:5A:55:87:50:D6:CF:5B:E0:25:32:DD:E8:03:26:AE:F5:01:29:12 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c1bc3f29-6f9d-47d3-9e77-c289e5fee78e/0/C45A558750D6CF5BE02532DDE80326AEF5012912.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.115.0/24 Signature Algorithm: sha256WithRSAEncryption 94:d7:5b:7f:db:55:5a:f9:d6:dd:98:b6:72:65:a8:0a:81:67: 29:39:3a:08:52:2a:51:a3:1f:4a:51:f1:b5:cb:f7:a2:be:c9: 16:67:dd:8f:b8:19:67:40:89:0f:ca:7f:4e:09:f6:12:5c:77: 69:68:07:a8:d4:50:0c:03:17:f0:b9:85:27:6b:3d:7e:df:21: e0:46:6c:1b:3d:d2:85:a6:a0:e9:b9:9e:93:80:4d:7f:bd:ed: a4:bf:09:d3:cd:15:ef:6c:1e:e7:5c:89:4d:23:72:b6:5d:1a: 9e:62:7b:04:2a:33:e7:19:2b:82:96:05:a2:79:cd:4b:7e:3f: 2c:a3:c8:d2:e2:bc:8c:74:b8:e4:3b:69:46:97:69:e2:64:7c: 26:14:e9:a9:d7:13:a7:b2:e0:ca:bb:86:fe:6b:34:20:24:63: db:f7:63:0a:86:d2:c6:fd:b1:68:00:54:d6:d3:bc:e7:a8:f0: 5b:ce:61:51:9a:0d:70:de:4c:03:7d:fb:c0:4e:24:7e:48:5b: 2a:33:bd:17:eb:22:1e:51:80:95:2d:b7:71:11:09:62:8a:a2: 53:e7:c6:b3:4e:2c:55:f3:65:a5:9d:ae:d4:32:16:ce:89:5c: 79:83:dd:5c:4e:48:05:05:aa:5b:9d:9c:59:49:94:07:52:e5: d9:bd:59:91 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDhEwSPRIOSwtZa+MtitcuJkh69MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwOTAwMTcyMFoX DTI3MDMwODAwMjIyMFowMzExMC8GA1UEAxMoQzQ1QTU1ODc1MEQ2Q0Y1QkUwMjUz MkRERTgwMzI2QUVGNTAxMjkxMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMfRpC1aAocxhZpkanROVB9PeGJX0GNmVeRv0Bo0eaJXlhUn7z+E12ldMGFA ySl5oRUlWTwVNvz0jbm9fzmYm0ke7aufXTydr5Rh55/6H7UEeondm4NDHTl/un0J g5l/ILXAZQqe3c4EJY7Ufwd1u7AsUCGmvMPPpqzLUeyGE4pWKkc6XG8MsOr52K3h zDoffo0cwuNr+u0HFgdWJH1VVwda5h7BLPuzv9utc83FsLUpkucThExRQoLGr1Iv PD0atClfvJXp8np9V5WAHYtDwLCGsgbpamNNRnJbwXK+ETYQHrYgSQWNIZV9diO/ iDNSC7xnvJRu5odF6bu9Ylpo29kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMRaVYdQ1s9b4CUy3egDJq71ASkSMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMWJjM2YyOS02ZjlkLTQ3ZDMtOWU3Ny1jMjg5ZTVmZWU3OGUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MxYmMzZjI5 LTZmOWQtNDdkMy05ZTc3LWMyODllNWZlZTc4ZS8wL0M0NUE1NTg3NTBENkNGNUJF MDI1MzJEREU4MDMyNkFFRjUwMTI5MTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnqnMwDQYJKoZIhvcNAQELBQADggEBAJTXW3/bVVr51t2YtnJlqAqBZyk5OghS KlGjH0pR8bXL96K+yRZn3Y+4GWdAiQ/Kf04J9hJcd2loB6jUUAwDF/C5hSdrPX7f IeBGbBs90oWmoOm5npOATX+97aS/CdPNFe9sHudciU0jcrZdGp5iewQqM+cZK4KW BaJ5zUt+PyyjyNLivIx0uOQ7aUaXaeJkfCYU6anXE6ey4Mq7hv5rNCAkY9v3YwqG 0sb9sWgAVNbTvOeo8FvOYVGaDXDeTAN9+8BOJH5IWyozvRfrIh5RgJUtt3ERCWKK olPnxrNOLFXzZaWdrtQyFs6JXHmD3VxOSAUFqludnFlJlAdS5dm9WZE= -----END CERTIFICATE-----Generated at Thu Mar 26 15:00:12 2026 by rpki-client