$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer File: FF1246B1AF5B158EA26E75654D7B7A6DED645787.cer (raw, json) Hash identifier: xIKLlAj1PQ8PmVjcn9mSYu7fss2wIxeN1u9RR7/TJSU= Subject key identifier: FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 14C7D03114E14DE40DB043044EF57EF7B2917935 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft caRepository: rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 20 Mar 2026 04:28:47 +0000 Certificate not after: Fri 19 Mar 2027 04:33:47 +0000 Subordinate resources: IP: 103.161.108.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:c7:d0:31:14:e1:4d:e4:0d:b0:43:04:4e:f5:7e:f7:b2:91:79:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 20 04:28:47 2026 GMT Not After : Mar 19 04:33:47 2027 GMT Subject: CN=FF1246B1AF5B158EA26E75654D7B7A6DED645787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:91:c7:04:cb:95:ee:ab:b8:e5:36:af:7c:05: 4f:c7:76:01:dc:b1:8a:01:39:f3:b1:9d:1f:ef:e0: 70:a0:74:59:0a:48:96:04:39:64:8d:40:73:29:83: 74:c7:7d:bb:21:d5:21:e8:be:38:5e:fc:3f:18:52: 3a:da:7b:92:60:86:2f:0b:64:91:04:db:b9:1f:e8: d8:cb:bc:35:e7:7b:e6:a4:ca:bd:99:a4:ab:0c:67: fd:fa:ef:95:51:d1:41:9f:5d:4e:c1:da:14:18:fe: 20:48:6a:0c:02:5a:ce:4a:01:4e:8e:f8:47:ac:7e: 83:39:d7:b2:3f:d3:cd:86:8e:55:3d:2a:a7:6a:8e: 88:e7:80:c8:65:49:8d:06:89:db:c5:25:99:7b:11: a7:12:4a:01:96:02:b6:d5:65:ac:1f:6b:2e:79:b8: 2d:59:95:f2:3f:47:26:a0:bb:de:0f:20:f8:37:15: 41:da:fc:66:8d:9e:4c:16:f9:b0:a4:72:1b:7a:be: 14:1e:e3:ed:82:59:cb:3c:35:e4:59:01:c4:d3:c5: 02:3c:97:58:e5:c7:3a:6e:24:60:da:81:8c:17:ed: f9:a3:a4:dd:98:82:fd:74:f3:9a:f0:3e:41:bb:b2: a3:1d:2e:3f:86:d3:db:ff:64:a5:9c:3f:fe:b0:60: cc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:12:46:B1:AF:5B:15:8E:A2:6E:75:65:4D:7B:7A:6D:ED:64:57:87 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a89a0661-31ee-49a2-ae9f-f6d573a17df7/0/FF1246B1AF5B158EA26E75654D7B7A6DED645787.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.108.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:1c:fe:66:95:e1:df:d6:6d:fa:d3:ea:65:ea:81:d8:61:32: a8:51:89:7d:90:ef:0a:28:1f:35:2f:7c:1b:02:5b:85:d3:e1: de:48:45:4f:47:fc:5a:0c:0f:80:55:92:b2:ab:1e:a2:5b:e1: 9f:5c:18:5a:38:0e:77:fa:1c:8b:a2:2f:b3:23:4b:9f:96:16: d0:c9:a7:b2:e1:a0:a8:48:cd:ae:57:97:99:e6:80:9e:da:41: c0:b6:0e:29:94:f3:61:77:9f:bb:6b:66:2f:49:8e:4b:79:27: 20:13:ad:84:14:d3:d4:f3:b5:39:bd:07:4d:a1:e7:41:5f:46: 60:e1:8f:d1:dd:85:57:0b:81:de:6f:ec:36:18:29:a2:bc:72: d2:ad:7f:65:b6:0f:f7:19:99:00:df:81:04:44:3b:af:f3:e8: 46:07:20:78:1c:da:4e:9f:3b:09:c3:be:ce:53:d2:d2:6b:b6: 25:d3:57:31:b9:1a:e8:ad:23:6d:cb:3e:ac:0d:c2:d8:2b:12: a7:18:15:25:24:9b:28:e6:0c:18:2b:8a:15:33:ac:96:5c:3d: a0:b4:01:07:4b:ff:75:99:50:cd:d3:87:32:c1:12:cb:74:5e: 97:7f:38:c1:fc:a6:a3:ed:2d:ae:4a:9b:22:44:37:e1:5b:c7: f5:f9:73:e3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUFMfQMRThTeQNsEMETvV+97KReTUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyMDA0Mjg0N1oX DTI3MDMxOTA0MzM0N1owMzExMC8GA1UEAxMoRkYxMjQ2QjFBRjVCMTU4RUEyNkU3 NTY1NEQ3QjdBNkRFRDY0NTc4NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL+RxwTLle6ruOU2r3wFT8d2AdyxigE587GdH+/gcKB0WQpIlgQ5ZI1AcymD dMd9uyHVIei+OF78PxhSOtp7kmCGLwtkkQTbuR/o2Mu8Ned75qTKvZmkqwxn/frv lVHRQZ9dTsHaFBj+IEhqDAJazkoBTo74R6x+gznXsj/TzYaOVT0qp2qOiOeAyGVJ jQaJ28UlmXsRpxJKAZYCttVlrB9rLnm4LVmV8j9HJqC73g8g+DcVQdr8Zo2eTBb5 sKRyG3q+FB7j7YJZyzw15FkBxNPFAjyXWOXHOm4kYNqBjBft+aOk3ZiC/XTzmvA+ Qbuyox0uP4bT2/9kpZw//rBgzP0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP8SRrGvWxWOom51ZU17em3tZFeHMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hODlhMDY2MS0zMWVlLTQ5YTItYWU5Zi1mNmQ1NzNhMTdkZjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4OWEwNjYx LTMxZWUtNDlhMi1hZTlmLWY2ZDU3M2ExN2RmNy8wL0ZGMTI0NkIxQUY1QjE1OEVB MjZFNzU2NTREN0I3QTZERUQ2NDU3ODcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnoWwwDQYJKoZIhvcNAQELBQADggEBAFwc/maV4d/WbfrT6mXqgdhhMqhRiX2Q 7wooHzUvfBsCW4XT4d5IRU9H/FoMD4BVkrKrHqJb4Z9cGFo4Dnf6HIuiL7MjS5+W FtDJp7LhoKhIza5Xl5nmgJ7aQcC2DimU82F3n7trZi9Jjkt5JyATrYQU09TztTm9 B02h50FfRmDhj9HdhVcLgd5v7DYYKaK8ctKtf2W2D/cZmQDfgQREO6/z6EYHIHgc 2k6fOwnDvs5T0tJrtiXTVzG5GuitI23LPqwNwtgrEqcYFSUkmyjmDBgrihUzrJZc PaC0AQdL/3WZUM3ThzLBEst0Xpd/OMH8pqPtLa5KmyJEN+Fbx/X5c+M= -----END CERTIFICATE-----Generated at Thu Mar 26 04:17:01 2026 by rpki-client