$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer File: 07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer (raw, json) Hash identifier: 3HEHjXjEh1TlboSM08l1faHguWfEaLkT+G7xZ4Pthc0= Subject key identifier: 07:47:94:45:AC:FB:50:44:B3:A1:BC:AA:D6:26:07:2C:AB:EA:5C:10 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5E30F6797EBDF886D54331E7B2F547B1C6685898 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft caRepository: rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 08 Feb 2026 22:10:33 +0000 Certificate not after: Sun 07 Feb 2027 22:15:33 +0000 Subordinate resources: IP: 103.160.136.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:30:f6:79:7e:bd:f8:86:d5:43:31:e7:b2:f5:47:b1:c6:68:58:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 8 22:10:33 2026 GMT Not After : Feb 7 22:15:33 2027 GMT Subject: CN=07479445ACFB5044B3A1BCAAD626072CABEA5C10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b0:b2:2b:ee:05:d0:ff:69:70:ab:a8:08:e4: 39:1a:8e:3a:f8:aa:31:9c:bf:8c:41:49:48:b8:95: 2f:60:fa:03:ba:76:6f:e8:b1:cf:42:59:d1:39:d4: 3e:9d:5b:36:9b:cb:5a:84:4d:f5:91:fb:f1:e8:aa: e7:de:9f:33:37:26:aa:98:8d:3d:75:b6:40:de:a4: 49:cc:c7:cc:23:d7:77:95:f4:f1:48:e7:f5:4a:19: 95:e4:fa:91:17:df:ae:c8:b5:b9:ce:a1:a5:8f:15: 70:d0:a3:b6:81:9d:97:1e:dc:dc:dd:6d:9e:71:a1: 38:68:e2:e3:94:ae:07:fe:d7:b1:21:b1:2a:c2:5f: ee:90:ad:13:45:b3:ae:78:a1:fe:a5:54:61:ea:bf: dd:7d:c2:95:d5:38:be:18:eb:32:90:55:c0:8c:4d: d9:1c:1e:0d:30:94:4b:84:a1:36:3b:ed:a9:ec:e1: 1a:1e:3d:35:a0:d8:ab:c0:28:4a:12:45:db:4e:3b: 8b:8e:98:43:a6:45:a3:08:49:74:fe:5d:b7:1f:4a: 51:6b:33:a5:3b:cb:4a:0c:67:f8:f9:19:b1:55:c2: d7:c3:0d:98:cb:5e:a2:7f:2a:ee:1f:49:37:65:32: 84:67:38:8a:f9:71:79:5d:bd:08:92:16:83:b6:6e: f2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 07:47:94:45:AC:FB:50:44:B3:A1:BC:AA:D6:26:07:2C:AB:EA:5C:10 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.160.136.0/24 Signature Algorithm: sha256WithRSAEncryption 34:92:7b:71:0c:28:95:fd:1b:64:a6:ab:2a:c6:2e:99:ec:eb: 7e:5e:00:18:81:b3:16:39:44:24:04:7c:fc:5a:ba:3b:46:71: 53:9e:a8:d3:c7:6a:67:fd:fa:77:30:37:24:36:04:31:39:66: e2:78:ef:0a:12:47:34:b1:25:ef:9d:91:66:ba:37:a8:75:dc: 03:56:e8:b7:cf:5a:2a:52:3b:3c:a2:a0:b8:a4:63:cb:2f:a8: eb:38:eb:f0:d5:5b:c8:88:f0:f5:3e:4c:22:ec:7c:5e:6e:0d: 7b:e9:47:1a:bb:75:a0:32:1f:e1:0c:7e:20:4f:e0:0a:06:bb: 4f:62:b9:ec:2d:a0:d3:71:5a:c9:d7:72:2e:86:7a:f7:74:8d: 6c:2e:f7:fb:b6:37:26:b9:4d:c2:20:5b:9e:a9:c2:d2:40:e1: df:ae:4b:6a:a0:3a:bb:bb:11:15:ba:a5:c4:af:c0:99:7a:1d: 94:6f:b7:a2:00:90:dd:f0:1d:17:b6:4b:46:82:44:a4:a7:7e: 13:ea:bf:59:f9:13:45:18:88:2c:27:b1:c2:81:67:2f:d7:2d: 70:d2:13:8a:cc:23:49:73:21:7a:9c:33:a0:50:b2:ad:8c:45: 0b:06:03:a8:fd:cc:3b:20:14:97:84:fc:a5:2f:61:7b:20:8a: c2:f9:06:fd -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXjD2eX69+IbVQzHnsvVHscZoWJgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwODIyMTAzM1oX DTI3MDIwNzIyMTUzM1owMzExMC8GA1UEAxMoMDc0Nzk0NDVBQ0ZCNTA0NEIzQTFC Q0FBRDYyNjA3MkNBQkVBNUMxMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMWwsivuBdD/aXCrqAjkORqOOviqMZy/jEFJSLiVL2D6A7p2b+ixz0JZ0TnU Pp1bNpvLWoRN9ZH78eiq596fMzcmqpiNPXW2QN6kSczHzCPXd5X08Ujn9UoZleT6 kRffrsi1uc6hpY8VcNCjtoGdlx7c3N1tnnGhOGji45SuB/7XsSGxKsJf7pCtE0Wz rnih/qVUYeq/3X3CldU4vhjrMpBVwIxN2RweDTCUS4ShNjvtqezhGh49NaDYq8Ao ShJF2047i46YQ6ZFowhJdP5dtx9KUWszpTvLSgxn+PkZsVXC18MNmMteon8q7h9J N2UyhGc4ivlxeV29CJIWg7Zu8scCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAdHlEWs+1BEs6G8qtYmByyr6lwQMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMWVlZDA5Yy02MDY4LTQwN2EtYjBhNi01OWI3ZDBiODc4NTUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YxZWVkMDlj LTYwNjgtNDA3YS1iMGE2LTU5YjdkMGI4Nzg1NS8wLzA3NDc5NDQ1QUNGQjUwNDRC M0ExQkNBQUQ2MjYwNzJDQUJFQTVDMTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnoIgwDQYJKoZIhvcNAQELBQADggEBADSSe3EMKJX9G2SmqyrGLpns635eABiB sxY5RCQEfPxaujtGcVOeqNPHamf9+ncwNyQ2BDE5ZuJ47woSRzSxJe+dkWa6N6h1 3ANW6LfPWipSOzyioLikY8svqOs46/DVW8iI8PU+TCLsfF5uDXvpRxq7daAyH+EM fiBP4AoGu09iuewtoNNxWsnXci6Gevd0jWwu9/u2Nya5TcIgW56pwtJA4d+uS2qg Oru7ERW6pcSvwJl6HZRvt6IAkN3wHRe2S0aCRKSnfhPqv1n5E0UYiCwnscKBZy/X LXDSE4rMI0lzIXqcM6BQsq2MRQsGA6j9zDsgFJeE/KUvYXsgisL5Bv0= -----END CERTIFICATE-----Generated at Sun Mar 1 23:24:05 2026 by rpki-client