$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0121B523CA474B24830F641FAFB3BBF25D84D66F.cer File: 0121B523CA474B24830F641FAFB3BBF25D84D66F.cer (raw, json) Hash identifier: RQCK0nNlt+dHYwWlxoR2JLZNr3cIQZzGbP45NKloIoo= Subject key identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 44AEBFEB741EFA36E835A33E90DDBB7139B1EEA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft caRepository: rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 11 Apr 2026 18:33:31 +0000 Certificate not after: Sat 10 Apr 2027 18:38:31 +0000 Subordinate resources: IP: 103.166.164.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ae:bf:eb:74:1e:fa:36:e8:35:a3:3e:90:dd:bb:71:39:b1:ee:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 11 18:33:31 2026 GMT Not After : Apr 10 18:38:31 2027 GMT Subject: CN=0121B523CA474B24830F641FAFB3BBF25D84D66F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:fd:b7:46:4b:bd:ec:53:be:25:56:a3:a0: ff:f4:f5:63:3d:85:b0:c9:0f:4e:d9:b2:a6:14:f5: 3c:bf:ef:cd:55:ed:32:71:a1:f0:2f:fe:99:74:78: 4b:51:23:89:d8:88:f3:da:42:af:be:7c:8e:95:b5: c8:a5:32:f4:e0:13:86:75:4c:b2:9b:d7:15:87:31: 55:4e:47:eb:d4:7c:fd:e4:59:d5:c8:8f:51:be:95: 78:0d:42:b5:55:3e:37:06:87:c0:c3:91:b1:25:e5: cd:7f:ca:ee:25:eb:8e:87:21:e9:cb:cb:09:db:fa: 31:06:07:8f:74:70:c9:68:9b:51:1d:2f:12:42:cd: 4b:8d:5d:53:c4:28:e1:dd:04:f7:69:a6:5b:00:9e: 59:e4:cf:f8:14:da:c6:d7:bf:d1:ed:15:4f:07:af: 1e:fd:f1:dc:b4:e2:88:99:96:82:76:75:f2:91:6b: b3:96:01:1b:75:04:c5:8f:6e:c7:64:09:84:cc:1c: 42:db:ee:b7:01:02:d4:87:78:de:32:30:93:e3:34: c8:f5:28:00:a2:f8:65:88:47:23:cf:34:5e:72:9b: d0:85:25:2e:fd:0f:f0:de:eb:11:db:5a:4f:87:aa: de:30:e3:38:8e:74:2a:e5:b4:c3:e0:f3:4f:2e:a1: 46:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:21:B5:23:CA:47:4B:24:83:0F:64:1F:AF:B3:BB:F2:5D:84:D6:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ea9b822a-8b91-48d2-9bc1-ae0d900bf9c7/0/0121B523CA474B24830F641FAFB3BBF25D84D66F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.164.0/24 Signature Algorithm: sha256WithRSAEncryption 37:90:76:a3:d9:55:cb:89:a5:2d:23:c0:ab:ea:2c:dd:81:52: 63:fd:ff:35:0c:2e:af:b4:f9:ae:91:d8:7f:f5:02:79:b1:12: 60:90:66:2b:ba:b5:00:dc:38:92:c4:57:87:1e:fe:ef:83:f2: 60:46:4f:6f:d2:6e:c0:00:71:86:11:ed:c2:71:6a:0d:5c:77: 35:ff:5b:8e:d9:66:97:72:d9:89:c9:08:58:9c:da:fb:38:22: f6:b2:01:eb:ed:60:05:79:6d:20:9b:d7:2e:81:6c:0e:c0:d6: 18:7b:69:3e:1b:be:ca:8c:1c:aa:fc:c3:a1:ed:cf:a3:40:09: 2e:b8:aa:5a:10:ca:d4:f8:11:19:55:c3:c4:40:34:52:55:1c: 4d:7e:7c:a5:80:6d:76:13:48:88:6e:db:1f:28:a2:4d:0e:a1: 38:d8:27:03:66:5b:ba:a9:0b:89:23:9d:e1:5b:91:ba:4b:cf: 6e:cf:c2:4b:b8:bc:70:ed:1a:b1:59:06:4e:71:65:fc:a9:dc: d7:db:23:a6:64:b7:5d:85:88:44:17:2b:ec:40:15:66:54:99: c4:22:5d:52:60:5c:ce:31:04:db:55:8a:75:da:ea:16:8f:25: 98:63:dc:9c:96:c9:2a:91:d3:9a:1b:3e:04:0e:6c:ff:94:a0: 71:8a:a1:07 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURK6/63Qe+jboNaM+kN27cTmx7qEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxMTE4MzMzMVoX DTI3MDQxMDE4MzgzMVowMzExMC8GA1UEAxMoMDEyMUI1MjNDQTQ3NEIyNDgzMEY2 NDFGQUZCM0JCRjI1RDg0RDY2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM6c/bdGS73sU74lVqOg//T1Yz2FsMkPTtmyphT1PL/vzVXtMnGh8C/+mXR4 S1EjidiI89pCr758jpW1yKUy9OAThnVMspvXFYcxVU5H69R8/eRZ1ciPUb6VeA1C tVU+NwaHwMORsSXlzX/K7iXrjoch6cvLCdv6MQYHj3RwyWibUR0vEkLNS41dU8Qo 4d0E92mmWwCeWeTP+BTaxte/0e0VTwevHv3x3LTiiJmWgnZ18pFrs5YBG3UExY9u x2QJhMwcQtvutwEC1Id43jIwk+M0yPUoAKL4ZYhHI880XnKb0IUlLv0P8N7rEdta T4eq3jDjOI50KuW0w+DzTy6hRmUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAEhtSPKR0skgw9kH6+zu/JdhNZvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYTliODIyYS04YjkxLTQ4ZDItOWJjMS1hZTBkOTAwYmY5YzcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhOWI4MjJh LThiOTEtNDhkMi05YmMxLWFlMGQ5MDBiZjljNy8wLzAxMjFCNTIzQ0E0NzRCMjQ4 MzBGNjQxRkFGQjNCQkYyNUQ4NEQ2NkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnpqQwDQYJKoZIhvcNAQELBQADggEBADeQdqPZVcuJpS0jwKvqLN2BUmP9/zUM Lq+0+a6R2H/1AnmxEmCQZiu6tQDcOJLEV4ce/u+D8mBGT2/SbsAAcYYR7cJxag1c dzX/W47ZZpdy2YnJCFic2vs4IvayAevtYAV5bSCb1y6BbA7A1hh7aT4bvsqMHKr8 w6Htz6NACS64qloQytT4ERlVw8RANFJVHE1+fKWAbXYTSIhu2x8ook0OoTjYJwNm W7qpC4kjneFbkbpLz27Pwku4vHDtGrFZBk5xZfyp3NfbI6Zkt12FiEQXK+xAFWZU mcQiXVJgXM4xBNtVinXa6haPJZhj3JyWySqR05obPgQObP+UoHGKoQc= -----END CERTIFICATE-----Generated at Fri Apr 17 19:02:17 2026 by rpki-client