$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer File: FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.cer (raw, json) Hash identifier: 31aI7Qn0x8m+iqOHYvwyNJ8CFltqdWWYWg/lVmpQFJA= Subject key identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5946A9C4DC5E39C72C7A43B2405003F451EC4A44 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft caRepository: rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 21 Mar 2026 10:59:48 +0000 Certificate not after: Sat 20 Mar 2027 11:04:48 +0000 Subordinate resources: IP: 103.177.14.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:46:a9:c4:dc:5e:39:c7:2c:7a:43:b2:40:50:03:f4:51:ec:4a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 21 10:59:48 2026 GMT Not After : Mar 20 11:04:48 2027 GMT Subject: CN=FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:be:74:c0:5e:fb:e7:66:4a:a1:09:31:c0:96: 29:4d:3e:d2:6e:74:73:89:2b:8e:8f:79:a8:ec:0c: 2f:8f:a5:e7:ef:c9:25:2c:27:75:75:9a:bd:cf:1e: 53:ef:9a:ca:d5:a3:ae:84:6b:82:f3:1d:64:fb:a4: b0:01:12:2d:60:6c:21:13:e5:e3:a5:a6:6d:57:45: 7f:75:80:fe:97:45:61:d3:22:db:b6:c4:3e:e8:56: b9:a6:15:1c:69:58:03:3f:49:ce:77:29:e1:1d:e9: 80:a2:c6:34:4b:67:9e:49:1a:2f:4a:ea:8e:80:8f: 53:30:a6:ce:06:41:df:69:52:b4:b4:a0:46:6f:c4: 62:cb:83:44:c8:70:f0:0f:9b:a1:fe:3a:d2:89:35: cd:b2:46:09:3b:84:4b:47:d7:f4:bd:55:fc:d8:6e: 40:e6:9e:ab:fb:42:3c:cf:69:49:b1:3d:71:4e:30: dd:e0:81:69:f9:ba:83:49:cc:52:43:e1:2b:33:1c: 73:69:2e:03:56:2c:32:2f:7f:9b:99:c2:d8:25:c9: fc:e0:8a:5e:49:90:4e:21:d6:b9:8f:ea:23:f3:9e: 2f:0f:d5:c3:75:71:53:16:83:42:a0:11:79:e3:9d: 42:94:30:5c:a9:d9:35:c2:46:f3:f0:a6:13:a1:f3: 0b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FF:77:50:7E:6D:1F:0E:0B:6E:B0:11:2E:9C:FB:D1:AF:1C:1F:6D:D4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fbe04038-a1b6-432c-854b-cc6e8cf32e06/0/FF77507E6D1F0E0B6EB0112E9CFBD1AF1C1F6DD4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.177.14.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:6b:68:be:85:df:99:84:77:7b:98:eb:42:ed:c5:75:7d:f6: d9:01:7d:df:99:e7:cf:db:09:73:e3:2f:6b:24:25:8e:d6:c4: ac:94:6c:21:ee:0a:fe:97:0d:2c:8a:82:b0:fb:ea:fc:17:86: 6a:ab:cc:14:11:4e:e8:ff:0f:ba:83:27:9f:8c:0d:4e:82:88: ca:1e:1b:09:24:2a:95:87:52:da:14:91:0b:a2:3e:a0:cc:c8: 81:64:f5:07:6d:bb:56:d0:4d:bd:c0:c3:b4:dd:d7:aa:d0:7e: db:ad:51:9e:3c:e3:87:d5:dd:6c:c1:ed:7e:68:58:7c:1f:d4: 5d:07:a9:40:aa:21:2b:30:03:85:88:7e:3f:b6:1b:3e:63:1d: 6d:3b:3f:59:a5:27:51:9c:26:86:f2:a1:1b:5d:02:7d:75:14: 25:e6:42:f9:d4:3f:75:f2:47:b1:e2:ae:10:f2:a5:da:19:f9: ce:07:a2:08:47:23:9b:c1:7b:80:8a:17:48:69:13:e5:8e:ee: 51:c5:ec:0b:95:90:55:11:11:69:83:5c:1d:bc:f4:b9:6e:43: b5:1a:d8:a1:88:43:73:22:54:16:1f:c5:ca:a7:46:1d:a8:77: 8e:cc:49:70:15:2b:f1:25:f3:f3:45:32:9e:b5:d9:ab:43:c1: f0:d7:5e:6a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUWUapxNxeOccsekOyQFAD9FHsSkQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyMTEwNTk0OFoX DTI3MDMyMDExMDQ0OFowMzExMC8GA1UEAxMoRkY3NzUwN0U2RDFGMEUwQjZFQjAx MTJFOUNGQkQxQUYxQzFGNkRENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMu+dMBe++dmSqEJMcCWKU0+0m50c4krjo95qOwML4+l5+/JJSwndXWavc8e U++aytWjroRrgvMdZPuksAESLWBsIRPl46WmbVdFf3WA/pdFYdMi27bEPuhWuaYV HGlYAz9Jzncp4R3pgKLGNEtnnkkaL0rqjoCPUzCmzgZB32lStLSgRm/EYsuDRMhw 8A+bof460ok1zbJGCTuES0fX9L1V/NhuQOaeq/tCPM9pSbE9cU4w3eCBafm6g0nM UkPhKzMcc2kuA1YsMi9/m5nC2CXJ/OCKXkmQTiHWuY/qI/OeLw/Vw3VxUxaDQqAR eeOdQpQwXKnZNcJG8/CmE6HzC0UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFP93UH5tHw4LbrARLpz70a8cH23UMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mYmUwNDAzOC1hMWI2LTQzMmMtODU0Yi1jYzZlOGNmMzJlMDYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiZTA0MDM4 LWExYjYtNDMyYy04NTRiLWNjNmU4Y2YzMmUwNi8wL0ZGNzc1MDdFNkQxRjBFMEI2 RUIwMTEyRTlDRkJEMUFGMUMxRjZERDQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnsQ4wDQYJKoZIhvcNAQELBQADggEBAHxraL6F35mEd3uY60LtxXV99tkBfd+Z 58/bCXPjL2skJY7WxKyUbCHuCv6XDSyKgrD76vwXhmqrzBQRTuj/D7qDJ5+MDU6C iMoeGwkkKpWHUtoUkQuiPqDMyIFk9Qdtu1bQTb3Aw7Td16rQftutUZ4844fV3WzB 7X5oWHwf1F0HqUCqISswA4WIfj+2Gz5jHW07P1mlJ1GcJobyoRtdAn11FCXmQvnU P3XyR7HirhDypdoZ+c4HoghHI5vBe4CKF0hpE+WO7lHF7AuVkFUREWmDXB289Llu Q7Ua2KGIQ3MiVBYfxcqnRh2od47MSXAVK/El8/NFMp612atDwfDXXmo= -----END CERTIFICATE-----Generated at Thu Mar 26 11:59:52 2026 by rpki-client