$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer File: F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.cer (raw, json) Hash identifier: YgmHSr5qmHQoTtahAQcGY1h4edAgco8WXY34i7ZRGcc= Subject key identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 663DC0B8E58DCF3D479CA1F92C470E1DD956AED5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft caRepository: rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 13 Mar 2026 01:28:04 +0000 Certificate not after: Fri 12 Mar 2027 01:33:04 +0000 Subordinate resources: IP: 103.189.116.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:3d:c0:b8:e5:8d:cf:3d:47:9c:a1:f9:2c:47:0e:1d:d9:56:ae:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 13 01:28:04 2026 GMT Not After : Mar 12 01:33:04 2027 GMT Subject: CN=F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:33:96:5a:c9:7a:4f:04:32:e8:77:f3:a0:57: 26:38:d6:f0:f0:2d:10:63:b6:db:6b:48:1e:f5:c0: 1e:f9:7c:cf:a6:1b:87:43:81:4a:61:2e:8f:37:23: 15:df:55:48:aa:6a:15:ca:4c:ca:2b:c0:0c:bf:52: a0:bb:45:77:14:5a:d0:76:d1:22:ef:3d:1c:af:98: 16:42:71:98:1b:57:81:e5:05:c1:b2:66:08:e0:53: ab:a0:a6:5a:3a:42:52:8d:8f:90:bb:c7:85:98:4e: a8:f4:9f:c3:71:fc:2d:6a:b5:0e:4d:10:2f:ed:bf: ec:6c:3e:62:b2:1f:7c:df:70:01:6c:bc:18:0c:d9: 9a:28:b1:a7:85:f8:b5:52:eb:b4:ed:2f:7a:24:c4: 4b:25:f6:6d:e2:f2:3a:5f:94:39:2f:4d:93:f5:2a: b3:7b:c4:b4:49:a0:10:f1:0b:c8:6b:a3:34:3d:6f: 9f:62:ea:a5:a9:1e:a0:d5:fd:ea:41:f7:68:8b:06: ef:c3:e0:9c:eb:9c:47:22:4d:bd:4b:aa:b0:05:5c: 7f:e1:8a:b4:f9:0e:e3:df:ca:12:a6:2a:b3:35:3a: 05:c5:5a:2f:32:0c:59:67:be:ae:06:64:bd:ef:b4: d4:b5:48:80:e0:ed:5b:d0:bd:f5:01:1e:44:f1:3f: 57:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:B7:C8:E5:DD:BD:D0:36:51:3F:10:B8:7F:39:A9:4B:E1:DB:3D:CA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/F8B7C8E5DDBDD036513F10B87F39A94BE1DB3DCA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.116.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:e3:3d:b6:bf:fa:52:ba:8e:55:34:d1:d3:d2:33:e4:67:94: b6:0e:01:b5:bb:14:66:96:19:bd:ed:11:c5:85:88:a0:f1:99: bb:c9:21:d0:6d:bb:dd:12:c6:3b:a4:e8:85:62:56:ed:85:34: f2:25:2f:f9:f6:d0:0b:3f:4b:86:67:0b:e5:b2:2b:0b:e8:23: 3c:26:49:30:f0:c5:6c:66:91:79:ea:ec:2b:b9:87:cd:ea:7c: fe:5b:39:a6:6b:67:34:aa:1a:fe:87:c7:66:eb:5b:91:ef:da: bd:c3:5e:b6:04:8f:81:48:6d:f2:e1:0a:09:fd:c5:07:ec:4c: 90:d5:bd:ae:27:47:1a:6c:4d:a0:d2:b1:8d:81:31:1e:0c:f7: 85:53:6f:29:e1:8d:10:14:b1:e5:aa:a5:87:77:30:68:42:00: f3:f7:ae:f5:2a:50:16:ab:df:c1:91:60:5d:8d:e7:96:4a:59: 11:39:de:c6:40:43:65:6d:9e:5e:f0:72:e3:bf:ac:cb:66:2d: 93:77:84:be:a5:12:ea:b3:b3:df:d6:f1:8e:84:e4:6a:72:ed: 46:36:20:d7:8d:a6:65:cb:1c:2a:ee:bf:92:fe:ff:3f:1f:1f: 6d:27:d8:0c:e6:b4:b1:40:e8:c2:a2:0d:37:67:d8:22:89:94: b7:6f:f6:6f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZj3AuOWNzz1HnKH5LEcOHdlWrtUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxMzAxMjgwNFoX DTI3MDMxMjAxMzMwNFowMzExMC8GA1UEAxMoRjhCN0M4RTVEREJERDAzNjUxM0Yx MEI4N0YzOUE5NEJFMURCM0RDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4zllrJek8EMuh386BXJjjW8PAtEGO222tIHvXAHvl8z6Ybh0OBSmEujzcj Fd9VSKpqFcpMyivADL9SoLtFdxRa0HbRIu89HK+YFkJxmBtXgeUFwbJmCOBTq6Cm WjpCUo2PkLvHhZhOqPSfw3H8LWq1Dk0QL+2/7Gw+YrIffN9wAWy8GAzZmiixp4X4 tVLrtO0veiTESyX2beLyOl+UOS9Nk/Uqs3vEtEmgEPELyGujND1vn2LqpakeoNX9 6kH3aIsG78PgnOucRyJNvUuqsAVcf+GKtPkO49/KEqYqszU6BcVaLzIMWWe+rgZk ve+01LVIgODtW9C99QEeRPE/V7MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPi3yOXdvdA2UT8QuH85qUvh2z3KMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83MzA1YWIzMC01NjUzLTQyYmMtOWMzZi1hYWY1NjdlYWU3MDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczMDVhYjMw LTU2NTMtNDJiYy05YzNmLWFhZjU2N2VhZTcwMS8wL0Y4QjdDOEU1RERCREQwMzY1 MTNGMTBCODdGMzlBOTRCRTFEQjNEQ0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvXQwDQYJKoZIhvcNAQELBQADggEBAH3jPba/+lK6jlU00dPSM+RnlLYOAbW7 FGaWGb3tEcWFiKDxmbvJIdBtu90Sxjuk6IViVu2FNPIlL/n20As/S4ZnC+WyKwvo IzwmSTDwxWxmkXnq7Cu5h83qfP5bOaZrZzSqGv6Hx2brW5Hv2r3DXrYEj4FIbfLh Cgn9xQfsTJDVva4nRxpsTaDSsY2BMR4M94VTbynhjRAUseWqpYd3MGhCAPP3rvUq UBar38GRYF2N55ZKWRE53sZAQ2Vtnl7wcuO/rMtmLZN3hL6lEuqzs9/W8Y6E5Gpy 7UY2INeNpmXLHCruv5L+/z8fH20n2AzmtLFA6MKiDTdn2CKJlLdv9m8= -----END CERTIFICATE-----Generated at Thu Mar 26 04:04:34 2026 by rpki-client