$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer File: E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.cer (raw, json) Hash identifier: LAamCZG2vdkWoT6HdVlVXm7uvVQOaSdNhmUW4eUIq4Q= Subject key identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 12F76F3328016DB1B56DADCCCC05C27B7F4CF8C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft caRepository: rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 24 Mar 2026 20:26:50 +0000 Certificate not after: Tue 23 Mar 2027 20:31:50 +0000 Subordinate resources: IP: 103.60.88.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f7:6f:33:28:01:6d:b1:b5:6d:ad:cc:cc:05:c2:7b:7f:4c:f8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 24 20:26:50 2026 GMT Not After : Mar 23 20:31:50 2027 GMT Subject: CN=E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2c:bc:d7:cf:d9:eb:88:25:a4:ff:5a:d2:63: 3a:2b:ef:f7:13:0c:af:ad:27:06:4e:3d:eb:6b:f9: d9:bc:55:33:1d:d7:da:59:8b:98:5a:e1:3c:62:46: 27:6c:6f:56:d1:c3:0f:86:e6:c0:d9:8d:d6:79:09: a6:8e:fc:82:c1:d6:26:40:08:5b:95:51:6a:3e:5c: 27:08:8b:c4:b7:9e:94:47:2f:77:9f:8f:07:b3:bf: d8:5f:77:ed:98:50:72:a0:04:45:e1:a0:8f:ac:5c: 62:e5:90:10:31:cc:dc:d7:6d:6e:fb:09:cb:de:75: 40:55:8b:fd:dc:c7:d5:44:8e:3a:ff:a5:b8:bb:30: 3c:10:87:81:d6:0c:30:65:ab:61:8a:48:38:15:f7: 08:fe:2c:16:ee:d9:c0:56:aa:ec:77:73:12:c7:04: db:75:e9:7d:e3:20:dc:08:50:bb:ec:29:80:f6:73: 7f:59:e6:4c:db:2d:7b:bc:f6:b3:73:2c:55:5f:7e: 05:d7:29:ac:2a:8d:f9:3a:aa:8f:12:ba:e0:1b:2c: 80:49:75:62:b3:97:c6:43:98:da:1a:10:53:b2:6d: e3:b4:be:d7:5e:a7:dc:92:84:12:98:b3:66:6f:1a: 33:35:1c:74:c6:64:76:43:50:43:be:10:c3:29:f6: de:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E7:C9:E4:E5:C8:EA:98:9F:0F:F7:D6:FE:6D:BD:6A:4F:E8:21:2D:DE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5711aa46-f28e-4c55-b9ba-7d5bdc95b4f6/0/E7C9E4E5C8EA989F0FF7D6FE6DBD6A4FE8212DDE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.60.88.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:08:4a:f6:6b:18:20:0e:07:25:de:f5:bf:6f:ab:ab:19:54: 95:ab:fc:b7:9e:9c:d9:d6:9f:cf:98:b2:d4:7e:bd:39:21:c6: 8f:af:36:76:36:02:0a:b9:48:e9:79:b4:86:55:79:e4:6c:cd: 14:20:82:b5:6c:e6:97:52:16:20:0e:2e:67:47:dc:0d:2a:14: 9d:46:e7:e6:b6:1a:35:ed:1a:f1:8e:91:5a:85:83:39:f3:ba: 01:c3:05:d0:b9:0a:b4:6d:a4:9c:06:7d:76:17:ed:08:dd:a9: d0:a5:da:46:63:9b:de:ff:39:f9:6c:90:da:af:44:7c:41:70: b2:e6:9e:3f:b7:56:b7:cb:ce:19:6e:9f:71:57:90:08:47:5b: 4f:ec:80:8d:a3:a0:8c:30:05:20:7d:74:08:68:83:f5:73:f8: c6:0f:99:b4:12:e7:e9:25:b3:88:7c:a7:bc:09:6b:9a:a7:2e: 94:1d:a4:90:6e:f6:fb:eb:9b:66:dd:80:a1:20:1f:d4:8c:28: 25:ef:3b:ff:5f:f5:48:34:c7:8d:6e:b0:19:6a:01:e1:69:43: d8:3b:bf:14:29:b8:92:56:b5:10:e3:d9:f2:2a:ff:8b:7f:eb: 89:33:f2:9b:48:88:31:27:6c:6b:ea:eb:fe:5c:ab:e9:c9:00: 5f:a5:94:18 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUEvdvMygBbbG1ba3MzAXCe39M+MkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyNDIwMjY1MFoX DTI3MDMyMzIwMzE1MFowMzExMC8GA1UEAxMoRTdDOUU0RTVDOEVBOTg5RjBGRjdE NkZFNkRCRDZBNEZFODIxMkRERTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMAsvNfP2euIJaT/WtJjOivv9xMMr60nBk4962v52bxVMx3X2lmLmFrhPGJG J2xvVtHDD4bmwNmN1nkJpo78gsHWJkAIW5VRaj5cJwiLxLeelEcvd5+PB7O/2F93 7ZhQcqAEReGgj6xcYuWQEDHM3NdtbvsJy951QFWL/dzH1USOOv+luLswPBCHgdYM MGWrYYpIOBX3CP4sFu7ZwFaq7HdzEscE23XpfeMg3AhQu+wpgPZzf1nmTNste7z2 s3MsVV9+BdcprCqN+TqqjxK64BssgEl1YrOXxkOY2hoQU7Jt47S+116n3JKEEpiz Zm8aMzUcdMZkdkNQQ74Qwyn23l0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOfJ5OXI6pifD/fW/m29ak/oIS3eMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81NzExYWE0Ni1mMjhlLTRjNTUtYjliYS03ZDViZGM5NWI0ZjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3MTFhYTQ2 LWYyOGUtNGM1NS1iOWJhLTdkNWJkYzk1YjRmNi8wL0U3QzlFNEU1QzhFQTk4OUYw RkY3RDZGRTZEQkQ2QTRGRTgyMTJEREUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnPFgwDQYJKoZIhvcNAQELBQADggEBACsISvZrGCAOByXe9b9vq6sZVJWr/Lee nNnWn8+YstR+vTkhxo+vNnY2Agq5SOl5tIZVeeRszRQggrVs5pdSFiAOLmdH3A0q FJ1G5+a2GjXtGvGOkVqFgznzugHDBdC5CrRtpJwGfXYX7QjdqdCl2kZjm97/Ofls kNqvRHxBcLLmnj+3VrfLzhlun3FXkAhHW0/sgI2joIwwBSB9dAhog/Vz+MYPmbQS 5+kls4h8p7wJa5qnLpQdpJBu9vvrm2bdgKEgH9SMKCXvO/9f9Ug0x41usBlqAeFp Q9g7vxQpuJJWtRDj2fIq/4t/64kz8ptIiDEnbGvq6/5cq+nJAF+llBg= -----END CERTIFICATE-----Generated at Thu Mar 26 12:00:10 2026 by rpki-client