$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer File: CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer (raw, json) Hash identifier: nf/vTHkEy4FxtYPrNCdBoORan7mtpkELe5ZavDREJOE= Subject key identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1F6855671BEABE8FB0B3EE83A1C5452C6FD10DE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft caRepository: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 26 Mar 2026 06:33:01 +0000 Certificate not after: Thu 25 Mar 2027 06:38:01 +0000 Subordinate resources: IP: 103.144.146.0/23 IP: 2001:df1:c680::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:68:55:67:1b:ea:be:8f:b0:b3:ee:83:a1:c5:45:2c:6f:d1:0d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 26 06:33:01 2026 GMT Not After : Mar 25 06:38:01 2027 GMT Subject: CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:95:bb:76:64:35:a3:4d:bc:10:ac:0c:ba:f0: da:15:dc:ce:7a:25:0f:28:a1:33:0a:66:10:44:e8: db:b1:59:c8:ad:95:41:09:49:b8:55:66:0e:8c:f1: 5b:11:b2:22:07:87:15:18:36:5e:77:1e:a6:98:b8: bc:9a:c6:24:51:2c:78:2a:b0:68:f6:c1:68:97:c5: e0:42:02:a6:92:a2:d2:dc:7b:f7:45:a8:8b:44:d3: 73:01:89:ef:59:e1:17:e6:27:15:57:bd:2b:b2:ad: e0:a1:17:70:8d:a6:10:f2:d9:28:ad:56:d4:56:bd: cd:dc:ee:bb:12:50:bc:c2:e0:76:93:96:48:33:ce: 07:ee:c7:06:f9:54:ab:41:9b:27:4c:43:40:d0:1c: 0c:20:8d:db:04:b9:5f:da:7f:7c:c5:0b:b9:96:c0: 88:1b:94:b4:fe:dc:d4:15:c1:e6:6f:78:5b:99:d6: 41:ec:96:90:1e:18:39:76:89:ca:fb:3f:cc:63:0a: a0:41:96:6e:56:1b:d4:b7:44:1c:2e:bc:f4:7c:92: 88:e2:20:07:cc:0f:94:0c:37:85:26:03:e0:52:34: 3d:7c:72:2b:d0:10:02:71:7d:de:56:84:07:a3:bc: 00:36:4f:30:07:7b:24:69:03:c6:37:16:6f:58:93: cf:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.144.146.0/23 IPv6: 2001:df1:c680::/48 Signature Algorithm: sha256WithRSAEncryption 0a:bc:86:97:67:f3:e3:f5:cf:d1:b2:24:1e:84:55:eb:53:9c: 21:68:be:d1:2c:b1:47:38:a6:38:44:23:59:b5:c9:4f:3f:12: 86:da:70:89:94:05:0b:7b:2c:5e:0c:47:98:20:01:d3:e6:20: f2:d0:55:8f:cc:dc:42:99:b1:5b:03:51:39:6d:72:a8:ca:33: 77:8a:fb:61:80:68:cf:4b:5c:84:59:5a:25:d0:fe:7a:eb:2a: 98:f0:44:46:34:d8:69:75:ac:ef:ea:28:63:8e:07:df:99:f8: 54:37:de:8f:50:87:b3:d3:6c:59:63:f9:78:dc:51:ce:a1:51: 01:d7:9e:28:74:80:3f:30:dc:b6:1f:5b:e4:54:7b:91:bd:48: 72:7c:09:91:cb:a4:ca:04:f6:f4:ee:98:ca:5a:75:15:ef:79: 61:12:bc:5b:6a:1b:54:bd:13:69:0f:e3:9c:75:e1:3e:bb:7f: 98:41:df:81:01:ef:99:5e:50:92:b5:b9:25:2d:48:61:8f:23: 12:fc:ce:35:75:e7:7a:e3:44:23:3b:5a:e2:34:12:5b:a0:96: a3:5d:43:d8:af:17:2d:a0:75:1f:6f:6e:97:aa:6b:e6:0e:07: 03:9c:11:7b:7a:ae:39:cc:c1:74:46:0b:0b:c7:0f:5f:81:da: 59:19:82:30 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUH2hVZxvqvo+ws+6DocVFLG/RDeEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyNjA2MzMwMVoX DTI3MDMyNTA2MzgwMVowMzExMC8GA1UEAxMoQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5 QzRBQTJCQzZGNUUyNjg4OTQ2QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqVu3ZkNaNNvBCsDLrw2hXcznolDyihMwpmEETo27FZyK2VQQlJuFVmDozx WxGyIgeHFRg2Xnceppi4vJrGJFEseCqwaPbBaJfF4EICppKi0tx790Woi0TTcwGJ 71nhF+YnFVe9K7Kt4KEXcI2mEPLZKK1W1Fa9zdzuuxJQvMLgdpOWSDPOB+7HBvlU q0GbJ0xDQNAcDCCN2wS5X9p/fMULuZbAiBuUtP7c1BXB5m94W5nWQeyWkB4YOXaJ yvs/zGMKoEGWblYb1LdEHC689HySiOIgB8wPlAw3hSYD4FI0PXxyK9AQAnF93laE B6O8ADZPMAd7JGkDxjcWb1iTz7cCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM3+Ez933FYgE5GcSqK8b14miJRrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jNWJmODljNy01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1YmY4OWM3 LTUwNzEtNGMxMi04YzNjLTkyYWViNmRjM2JiYy8wL0NERkUxMzNGNzdEQzU2MjAx MzkxOUM0QUEyQkM2RjVFMjY4ODk0NkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnkJIwDwQCAAIwCQMHACABDfHGgDANBgkqhkiG9w0BAQsFAAOCAQEACryGl2fz 4/XP0bIkHoRV61OcIWi+0SyxRzimOEQjWbXJTz8ShtpwiZQFC3ssXgxHmCAB0+Yg 8tBVj8zcQpmxWwNROW1yqMozd4r7YYBoz0tchFlaJdD+eusqmPBERjTYaXWs7+oo Y44H35n4VDfej1CHs9NsWWP5eNxRzqFRAdeeKHSAPzDcth9b5FR7kb1IcnwJkcuk ygT29O6Yylp1Fe95YRK8W2obVL0TaQ/jnHXhPrt/mEHfgQHvmV5QkrW5JS1IYY8j EvzONXXneuNEIzta4jQSW6CWo11D2K8XLaB1H29ul6pr5g4HA5wRe3quOczBdEYL C8cPX4HaWRmCMA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:35 2026 by rpki-client