$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D84954514E2FF8171F1DC8D8C911A96481911DBB.cer File: D84954514E2FF8171F1DC8D8C911A96481911DBB.cer (raw, json) Hash identifier: jCzrFd03fVOmLNYHl7E7ODpUYiE8skUKlPhw67gED74= Subject key identifier: D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 582FFAD7ACC1DA5B0CA4C0300E9A668639D2E367 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft caRepository: rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Mar 2026 01:41:16 +0000 Certificate not after: Tue 16 Mar 2027 01:46:16 +0000 Subordinate resources: IP: 103.175.87.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:2f:fa:d7:ac:c1:da:5b:0c:a4:c0:30:0e:9a:66:86:39:d2:e3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 17 01:41:16 2026 GMT Not After : Mar 16 01:46:16 2027 GMT Subject: CN=D84954514E2FF8171F1DC8D8C911A96481911DBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:e6:49:8a:c4:9d:b7:3f:e4:cf:cc:c7:71: 7a:b4:42:3c:ce:23:2c:8c:dc:a1:b1:19:df:04:93: 3e:b7:66:63:24:65:86:4f:61:78:d7:95:41:4c:f4: 1c:02:b9:20:cd:1c:d1:57:9a:88:19:e6:b2:c3:5e: ca:b6:82:be:28:c9:bd:4a:cf:0d:c3:2d:4a:35:fb: 70:2d:54:4e:7e:e0:a2:1c:7a:67:3e:e8:74:a8:4f: 28:b1:77:dc:8c:1f:13:83:ae:e2:61:db:64:3b:df: b8:a9:c6:e9:c5:17:1e:cf:f4:82:33:34:70:57:df: a0:94:44:2b:c8:42:87:27:1d:7c:76:4d:df:25:21: 3b:ef:ac:3b:9d:f2:fb:a0:08:8a:ed:5a:53:75:59: fa:84:41:4a:79:c3:4a:71:14:d6:b6:99:6e:8d:a3: 7a:7a:13:5c:00:63:04:86:1b:a8:4f:de:e7:94:63: 50:1b:a3:93:19:b9:a0:c1:ec:b5:e2:36:22:77:a0: 93:f5:12:fb:1a:92:46:23:d4:43:76:6e:34:76:14: d4:8d:be:79:c5:c9:af:18:1a:24:a3:64:43:86:b4: b9:3d:5d:1f:1d:fa:a2:b6:1a:55:a8:86:ee:b4:99: 44:e5:2c:a4:87:a0:82:e0:f3:71:c3:18:ce:a2:50: e8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D8:49:54:51:4E:2F:F8:17:1F:1D:C8:D8:C9:11:A9:64:81:91:1D:BB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f5b8459a-e351-4c8d-bc29-5fd08c4c5941/0/D84954514E2FF8171F1DC8D8C911A96481911DBB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.175.87.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:39:4a:31:f9:ef:1c:cc:df:01:85:80:dc:f0:57:3a:6c:15: e0:35:e7:46:10:04:e3:72:ac:d9:f6:6e:98:cb:7e:e0:8c:af: 8f:54:a9:a1:50:5b:b3:0d:b8:53:29:26:bd:03:f8:26:b6:66: 21:76:be:1e:12:43:17:75:0f:f8:c8:27:c8:98:a8:23:33:df: ed:3d:2f:ff:df:7d:ce:2e:8b:b5:75:9c:51:8b:5e:a0:64:98: 25:e5:09:2e:6f:8a:58:8a:e2:09:30:93:87:64:6a:5c:22:8f: 79:89:6c:55:a0:1d:4c:dc:3a:f5:7b:cf:48:37:40:6b:ce:2d: a2:a0:c7:9d:5e:68:19:98:ce:15:11:55:bd:b2:64:5a:ff:13: b4:a7:36:b5:a1:6c:8a:36:4e:eb:c1:52:63:a8:b5:09:cc:55: fd:49:7c:53:da:42:4f:87:12:69:85:d5:50:8e:58:9e:c4:bc: eb:23:58:f5:64:79:99:1c:35:96:fb:89:74:a3:15:d2:2e:63: 2b:e6:da:40:0b:0d:5d:bc:8c:9c:f0:a0:80:d6:04:17:c3:4e: 44:38:5e:1d:42:7e:a1:c5:11:3b:2e:21:7f:24:64:11:02:6d: 16:3d:a2:5b:3c:a5:f1:cb:2e:ae:c4:61:32:d7:f4:e9:f5:f2: e8:86:aa:1a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUWC/616zB2lsMpMAwDppmhjnS42cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxNzAxNDExNloX DTI3MDMxNjAxNDYxNlowMzExMC8GA1UEAxMoRDg0OTU0NTE0RTJGRjgxNzFGMURD OEQ4QzkxMUE5NjQ4MTkxMURCQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMM+5kmKxJ23P+TPzMdxerRCPM4jLIzcobEZ3wSTPrdmYyRlhk9heNeVQUz0 HAK5IM0c0VeaiBnmssNeyraCvijJvUrPDcMtSjX7cC1UTn7gohx6Zz7odKhPKLF3 3IwfE4Ou4mHbZDvfuKnG6cUXHs/0gjM0cFffoJREK8hChycdfHZN3yUhO++sO53y +6AIiu1aU3VZ+oRBSnnDSnEU1raZbo2jenoTXABjBIYbqE/e55RjUBujkxm5oMHs teI2Inegk/US+xqSRiPUQ3ZuNHYU1I2+ecXJrxgaJKNkQ4a0uT1dHx36orYaVaiG 7rSZROUspIegguDzccMYzqJQ6DkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNhJVFFOL/gXHx3I2MkRqWSBkR27MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mNWI4NDU5YS1lMzUxLTRjOGQtYmMyOS01ZmQwOGM0YzU5NDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y1Yjg0NTlh LWUzNTEtNGM4ZC1iYzI5LTVmZDA4YzRjNTk0MS8wL0Q4NDk1NDUxNEUyRkY4MTcx RjFEQzhEOEM5MTFBOTY0ODE5MTFEQkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnr1cwDQYJKoZIhvcNAQELBQADggEBAHw5SjH57xzM3wGFgNzwVzpsFeA150YQ BONyrNn2bpjLfuCMr49UqaFQW7MNuFMpJr0D+Ca2ZiF2vh4SQxd1D/jIJ8iYqCMz 3+09L//ffc4ui7V1nFGLXqBkmCXlCS5viliK4gkwk4dkalwij3mJbFWgHUzcOvV7 z0g3QGvOLaKgx51eaBmYzhURVb2yZFr/E7SnNrWhbIo2TuvBUmOotQnMVf1JfFPa Qk+HEmmF1VCOWJ7EvOsjWPVkeZkcNZb7iXSjFdIuYyvm2kALDV28jJzwoIDWBBfD TkQ4Xh1CfqHFETsuIX8kZBECbRY9ols8pfHLLq7EYTLX9On18uiGqho= -----END CERTIFICATE-----Generated at Thu Mar 26 04:04:40 2026 by rpki-client