$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer File: 01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.cer (raw, json) Hash identifier: ZqyVjg6Q5vz33BqGw5BSSPcus8mrx4nfXMkEcgtQj4A= Subject key identifier: 01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 558FB6C5370C9C4A16DD7D070BDFB2941AB911E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft caRepository: rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 09 Apr 2026 12:08:31 +0000 Certificate not after: Thu 08 Apr 2027 12:13:31 +0000 Subordinate resources: IP: 103.250.128.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:8f:b6:c5:37:0c:9c:4a:16:dd:7d:07:0b:df:b2:94:1a:b9:11:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 9 12:08:31 2026 GMT Not After : Apr 8 12:13:31 2027 GMT Subject: CN=01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c4:2a:56:b8:64:67:36:cb:0a:09:08:5a:a5: 2a:89:7b:b1:8c:13:a3:3e:39:5c:b5:57:46:36:72: e8:c9:eb:7b:59:17:b3:81:df:ee:e2:60:c5:d0:2c: 3a:ed:92:fe:07:27:0a:80:9f:78:bb:64:5e:b2:44: 96:98:e9:b2:0e:2c:ed:35:52:ab:5c:54:96:85:03: df:ed:12:29:ab:b4:e1:7e:50:a1:9a:50:a9:f4:38: 38:29:e8:fa:0b:49:c9:2d:a5:0b:88:17:7a:f5:4e: ea:2e:0e:37:62:7f:fa:f1:42:ba:1d:db:8b:59:24: ae:c5:ff:31:76:29:1d:41:f9:fb:0a:d4:f4:7c:49: 66:52:ae:71:25:06:a8:cf:d1:0e:07:0e:03:c3:a6: da:c7:9e:d7:b5:10:99:e7:e6:ff:e2:cc:6c:fd:10: fe:d3:98:09:2e:73:26:fa:4a:c6:11:c7:df:b7:eb: 07:a0:70:73:b9:86:f3:8f:4b:32:12:18:b6:ea:04: d7:2f:8d:8a:67:13:4a:02:8d:f0:fe:24:a7:8f:fd: e2:82:6a:68:81:b9:f1:7e:c2:ee:e2:3a:fa:fa:bc: 82:e1:6f:b8:bb:a9:38:a1:01:de:b2:6d:f2:d1:a8: 21:ca:36:db:bf:1b:de:69:e0:1f:d9:b8:0e:d2:bb: 09:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 01:E8:7E:DC:BE:90:1A:9A:E8:6C:F5:E4:1C:BA:8B:24:83:E9:B6:AC X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/816b599d-7fbb-4498-86ef-18645ae98e3d/0/01E87EDCBE901A9AE86CF5E41CBA8B2483E9B6AC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.250.128.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:89:d8:55:06:81:2c:24:d4:3d:52:d7:33:19:1c:e7:b9:8b: 33:92:b7:37:fe:d4:ad:d6:b1:6f:1b:f8:cb:6b:e4:93:28:4a: 14:64:4c:3d:82:51:b7:e8:73:eb:72:4b:f3:7c:ff:6b:8d:0a: 31:ed:15:8e:c1:4a:80:f0:63:8c:41:f7:56:3b:15:a9:b0:df: 3b:67:e6:22:c2:73:81:bb:4c:88:ba:81:f9:dd:5e:7f:cc:1c: f5:3f:16:0d:32:1f:94:db:d4:b5:d9:35:9e:0d:a5:fc:2a:3a: 8b:19:0e:1c:90:7e:3d:ba:88:62:98:1f:3f:11:28:ad:f1:6d: 90:5b:10:34:f2:c2:58:b2:18:d7:07:bc:bd:c9:89:94:5d:11: 8c:da:da:d6:d9:6f:68:bc:39:59:1a:a6:12:38:14:96:a9:9b: 28:1e:ee:5d:2a:96:b6:08:bd:6d:ef:84:1f:ec:44:19:cb:61: c5:af:9b:44:f2:32:e4:ab:10:86:7a:e6:11:c6:3f:9b:b4:39: c8:75:f8:33:da:73:88:5f:44:c4:bc:a2:bc:22:30:33:ef:77: 9f:d4:f1:f7:7a:b4:e0:03:da:b8:3e:43:ab:d7:37:d9:1c:b8: cb:e7:71:9e:81:5f:a2:03:6d:19:ed:91:83:66:22:ce:b3:74: 48:41:84:90 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVY+2xTcMnEoW3X0HC9+ylBq5EeMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwOTEyMDgzMVoX DTI3MDQwODEyMTMzMVowMzExMC8GA1UEAxMoMDFFODdFRENCRTkwMUE5QUU4NkNG NUU0MUNCQThCMjQ4M0U5QjZBQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANrEKla4ZGc2ywoJCFqlKol7sYwToz45XLVXRjZy6Mnre1kXs4Hf7uJgxdAs Ou2S/gcnCoCfeLtkXrJElpjpsg4s7TVSq1xUloUD3+0SKau04X5QoZpQqfQ4OCno +gtJyS2lC4gXevVO6i4ON2J/+vFCuh3bi1kkrsX/MXYpHUH5+wrU9HxJZlKucSUG qM/RDgcOA8Om2see17UQmefm/+LMbP0Q/tOYCS5zJvpKxhHH37frB6Bwc7mG849L MhIYtuoE1y+NimcTSgKN8P4kp4/94oJqaIG58X7C7uI6+vq8guFvuLupOKEB3rJt 8tGoIco2278b3mngH9m4DtK7CVcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAHofty+kBqa6Gz15By6iySD6basMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84MTZiNTk5ZC03ZmJiLTQ0OTgtODZlZi0xODY0NWFlOThlM2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxNmI1OTlk LTdmYmItNDQ5OC04NmVmLTE4NjQ1YWU5OGUzZC8wLzAxRTg3RURDQkU5MDFBOUFF ODZDRjVFNDFDQkE4QjI0ODNFOUI2QUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABn+oAwDQYJKoZIhvcNAQELBQADggEBAC2J2FUGgSwk1D1S1zMZHOe5izOStzf+ 1K3WsW8b+Mtr5JMoShRkTD2CUbfoc+tyS/N8/2uNCjHtFY7BSoDwY4xB91Y7Famw 3ztn5iLCc4G7TIi6gfndXn/MHPU/Fg0yH5Tb1LXZNZ4NpfwqOosZDhyQfj26iGKY Hz8RKK3xbZBbEDTywliyGNcHvL3JiZRdEYza2tbZb2i8OVkaphI4FJapmyge7l0q lrYIvW3vhB/sRBnLYcWvm0TyMuSrEIZ65hHGP5u0Och1+DPac4hfRMS8orwiMDPv d5/U8fd6tOAD2rg+Q6vXN9kcuMvncZ6BX6IDbRntkYNmIs6zdEhBhJA= -----END CERTIFICATE-----Generated at Fri Apr 17 11:35:54 2026 by rpki-client