$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer File: 03EF4149C5DB07AC348E58E4DA39BDDD971426FE.cer (raw, json) Hash identifier: YlMKJnCcJBneYCPzwNwLJo5lJzHS9EWUgT6U7UvAw6c= Subject key identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6402E52AFADA181C6FC7F7A40550B949D3DA0E5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft caRepository: rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 28 Feb 2026 13:25:34 +0000 Certificate not after: Sat 27 Feb 2027 13:30:34 +0000 Subordinate resources: IP: 103.166.66.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:02:e5:2a:fa:da:18:1c:6f:c7:f7:a4:05:50:b9:49:d3:da:0e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 28 13:25:34 2026 GMT Not After : Feb 27 13:30:34 2027 GMT Subject: CN=03EF4149C5DB07AC348E58E4DA39BDDD971426FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:27:98:cd:15:96:de:e3:0c:9a:20:c8:61:88: 08:ef:22:10:3b:1c:5a:17:3f:ff:3f:59:92:be:e9: 24:d9:2d:d1:b0:0c:8a:69:b1:a5:18:5b:f4:5f:61: 77:ff:87:a1:bd:5f:5e:2f:aa:3c:6a:ee:1c:af:7e: 3f:56:dd:19:e8:ec:d5:92:43:02:ee:a9:6d:f0:d3: a4:7e:59:93:d9:e9:41:85:04:c5:60:b6:3c:81:8f: ff:b6:3c:0f:44:2b:bc:ef:94:de:87:0f:92:c0:bf: 1f:14:ba:0c:34:63:6a:93:58:d4:b9:d8:3a:e1:40: 62:ee:d0:4c:a5:96:bb:a1:56:b5:5d:bf:f7:d5:e4: 3c:21:3c:65:c4:6f:55:81:6b:c7:24:b2:90:24:48: 6d:61:57:3f:c5:49:2d:60:9f:71:2d:70:89:3d:fe: b4:d6:7a:aa:af:c1:27:06:bf:98:ed:d3:7c:91:fe: d4:43:09:cc:37:1b:60:7b:8d:b3:93:86:03:ea:fa: 68:2a:94:02:f5:ee:ed:6e:53:e6:b3:56:62:14:33: a0:9c:d7:d7:9b:d2:9f:d2:c0:e7:63:2f:3a:63:de: 9d:b3:14:75:57:77:69:a3:f5:1e:2a:c3:37:d2:3e: 56:83:83:79:85:04:f9:0b:37:48:d9:94:97:37:5a: a6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 03:EF:41:49:C5:DB:07:AC:34:8E:58:E4:DA:39:BD:DD:97:14:26:FE X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a57e5b0e-5964-463f-8041-337f8055643c/0/03EF4149C5DB07AC348E58E4DA39BDDD971426FE.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.66.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:ef:32:fe:98:37:47:ca:34:8c:7a:02:b2:e1:5e:f2:d2:9b: eb:85:f9:be:5c:d9:94:2a:2b:8b:aa:b4:b4:99:79:2b:25:d9: 50:48:42:1c:eb:4e:05:cc:aa:d9:3e:7e:ef:c7:56:eb:da:5f: 0d:54:c4:d3:b2:ec:ba:bb:5b:e9:02:fd:b6:88:cb:6b:37:ae: a0:fc:67:7b:61:cf:58:14:54:db:c6:8b:a7:d3:31:f7:5e:35: d6:f3:e1:ec:11:73:e3:cf:8f:f1:62:a4:b5:83:86:ca:39:92: 2a:6c:46:04:4b:41:f0:22:23:c2:e2:8e:0e:34:0a:0d:b3:a0: db:81:91:e1:d1:d7:a2:63:81:50:f6:b6:53:a8:c9:da:de:f6: 5e:fb:54:17:fe:d7:6d:81:5b:06:3b:f9:9c:2c:35:22:d9:e8: 4a:77:19:07:ab:e8:5e:ed:6e:e3:58:23:b4:69:cf:15:92:10: f6:84:76:48:82:f1:92:1c:f7:85:72:55:4b:2a:6e:39:5a:4b: 0e:cc:f2:13:44:93:ed:2f:85:e6:9f:99:98:7b:bd:9e:4f:e6: fb:1b:37:a4:99:5e:46:08:be:68:3d:e8:0b:41:41:5d:89:1b: e5:c2:47:d9:6f:7c:dc:fd:5a:4e:2f:c8:99:ba:28:44:3a:88: bf:98:3b:58 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUZALlKvraGBxvx/ekBVC5SdPaDlwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyODEzMjUzNFoX DTI3MDIyNzEzMzAzNFowMzExMC8GA1UEAxMoMDNFRjQxNDlDNURCMDdBQzM0OEU1 OEU0REEzOUJEREQ5NzE0MjZGRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALwnmM0Vlt7jDJogyGGICO8iEDscWhc//z9Zkr7pJNkt0bAMimmxpRhb9F9h d/+Hob1fXi+qPGruHK9+P1bdGejs1ZJDAu6pbfDTpH5Zk9npQYUExWC2PIGP/7Y8 D0QrvO+U3ocPksC/HxS6DDRjapNY1LnYOuFAYu7QTKWWu6FWtV2/99XkPCE8ZcRv VYFrxySykCRIbWFXP8VJLWCfcS1wiT3+tNZ6qq/BJwa/mO3TfJH+1EMJzDcbYHuN s5OGA+r6aCqUAvXu7W5T5rNWYhQzoJzX15vSn9LA52MvOmPenbMUdVd3aaP1HirD N9I+VoODeYUE+Qs3SNmUlzdaphECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAPvQUnF2wesNI5Y5No5vd2XFCb+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hNTdlNWIwZS01OTY0LTQ2M2YtODA0MS0zMzdmODA1NTY0M2MvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E1N2U1YjBl LTU5NjQtNDYzZi04MDQxLTMzN2Y4MDU1NjQzYy8wLzAzRUY0MTQ5QzVEQjA3QUMz NDhFNThFNERBMzlCREREOTcxNDI2RkUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnpkIwDQYJKoZIhvcNAQELBQADggEBACvvMv6YN0fKNIx6ArLhXvLSm+uF+b5c 2ZQqK4uqtLSZeSsl2VBIQhzrTgXMqtk+fu/HVuvaXw1UxNOy7Lq7W+kC/baIy2s3 rqD8Z3thz1gUVNvGi6fTMfdeNdbz4ewRc+PPj/FipLWDhso5kipsRgRLQfAiI8Li jg40Cg2zoNuBkeHR16JjgVD2tlOoydre9l77VBf+122BWwY7+ZwsNSLZ6Ep3GQer 6F7tbuNYI7RpzxWSEPaEdkiC8ZIc94VyVUsqbjlaSw7M8hNEk+0vheafmZh7vZ5P 5vsbN6SZXkYIvmg96AtBQV2JG+XCR9lvfNz9Wk4vyJm6KEQ6iL+YO1g= -----END CERTIFICATE-----Generated at Mon Mar 2 00:13:40 2026 by rpki-client