$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer (raw, json) Hash identifier: UoRp7YkJ0b16yXLdv/dwnacxkmvvZC094rkAgIIAlw4= Subject key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 4FBCA33DCD1A13F92A74EB9A1C4768A08431102E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft caRepository: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 07 Feb 2026 03:53:38 +0000 Certificate not after: Sat 06 Feb 2027 03:58:38 +0000 Subordinate resources: IP: 103.54.225.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:bc:a3:3d:cd:1a:13:f9:2a:74:eb:9a:1c:47:68:a0:84:31:10:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 7 03:53:38 2026 GMT Not After : Feb 6 03:58:38 2027 GMT Subject: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:61:ee:be:a9:52:db:b1:1f:86:2c:a2:08:96: 9e:d7:eb:a8:f0:d9:c4:12:0c:b8:b6:1e:8d:03:37: e0:3a:5b:fc:0d:da:c8:fb:b5:23:10:32:5e:73:a5: c8:ad:cc:18:b9:90:e5:c8:17:63:fd:05:09:07:99: af:32:ba:14:2e:9b:5f:ca:b8:db:2f:d1:2e:bd:c0: 75:61:b0:39:cb:68:02:22:4c:41:66:a1:db:ad:26: 92:e0:a5:6a:ee:35:92:fa:50:aa:de:9c:2a:4f:52: 82:08:8c:23:25:81:83:9f:18:10:49:44:d8:fe:fd: ec:70:62:55:9a:75:15:90:68:1e:eb:fd:9e:20:4f: 29:88:d7:4a:aa:79:d5:fc:6e:c0:16:6a:33:f6:42: 3b:76:ed:bd:c0:43:cc:ab:c6:0a:bb:b2:1e:06:6c: f5:d5:29:93:2b:f6:6c:f8:f8:10:9f:99:86:f5:5b: 91:2b:ef:f0:8a:a4:17:00:14:82:cd:be:5f:a6:45: 56:e2:6b:2b:e6:ab:3f:2d:77:a6:b2:a5:f0:8f:32: 6e:f9:a4:f6:82:fb:43:6d:57:4c:46:72:a2:6f:01: 7d:dc:03:95:52:d4:56:ca:53:30:64:59:c4:b2:74: eb:c4:58:80:15:64:8a:5b:2c:f1:b0:75:68:69:d1: 7c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.54.225.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:5a:99:f2:70:f0:ef:86:40:1c:a0:6e:7f:e0:b1:83:40:fe: e4:98:65:67:dc:88:35:66:0f:6f:ef:90:fe:79:67:15:f6:6f: 48:da:d6:40:68:8c:5c:91:58:5a:6b:d4:ee:f1:75:f5:92:1c: 5e:30:e1:a2:b3:4a:ba:5d:54:9e:20:c1:eb:98:89:d6:2b:16: 5a:d7:f4:2a:3c:bd:52:36:fe:a4:5f:57:cf:32:50:9d:b6:e5: d4:6c:7b:31:15:c7:eb:d7:58:54:7b:70:42:dc:bb:54:dc:3d: 80:3f:9b:89:f1:d1:08:17:7b:d6:93:3e:7d:83:ed:b4:93:96: 9d:0f:f7:1a:71:92:d9:91:c5:1e:d8:3d:fb:dc:c4:d3:22:c4: fc:d5:fb:27:8a:98:99:9e:a2:f6:cc:86:bf:74:ca:bb:06:6a: 91:de:bb:07:b2:44:07:39:bb:ac:bb:ab:05:a2:1f:5d:5c:a4: d7:91:5c:1b:b7:c2:47:7e:aa:8d:1d:d4:5c:45:9e:46:fd:4b: d8:e3:68:d2:2a:d6:e4:f2:a2:8b:f4:08:d5:c7:9a:4f:9a:d1: 29:6d:e2:9c:be:29:1e:f7:7c:3e:39:30:60:93:bd:1d:14:d0: 3a:39:8d:cc:e5:72:fc:e3:58:f9:82:70:d8:e7:79:3d:ee:d3: 0f:8d:04:a7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUT7yjPc0aE/kqdOuaHEdooIQxEC4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwNzAzNTMzOFoX DTI3MDIwNjAzNTgzOFowMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2 NzE1MUM1MDk4QUJERkE1NUY0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALRh7r6pUtuxH4YsogiWntfrqPDZxBIMuLYejQM34Dpb/A3ayPu1IxAyXnOl yK3MGLmQ5cgXY/0FCQeZrzK6FC6bX8q42y/RLr3AdWGwOctoAiJMQWah260mkuCl au41kvpQqt6cKk9SggiMIyWBg58YEElE2P797HBiVZp1FZBoHuv9niBPKYjXSqp5 1fxuwBZqM/ZCO3btvcBDzKvGCruyHgZs9dUpkyv2bPj4EJ+ZhvVbkSvv8IqkFwAU gs2+X6ZFVuJrK+arPy13prKl8I8ybvmk9oL7Q21XTEZyom8BfdwDlVLUVspTMGRZ xLJ068RYgBVkilss8bB1aGnRfO8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBoyCZAj3TKxw+5nFRxQmKvfpV9JMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mMmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyZTA1ZmNm LTVmMmEtNGQ1ZS1hM2YyLWQ4NDAzMmYwYzhmNy8wLzFBMzIwOTkwMjNERDMyQjFD M0VFNjcxNTFDNTA5OEFCREZBNTVGNDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnNuEwDQYJKoZIhvcNAQELBQADggEBAHpamfJw8O+GQBygbn/gsYNA/uSYZWfc iDVmD2/vkP55ZxX2b0ja1kBojFyRWFpr1O7xdfWSHF4w4aKzSrpdVJ4gweuYidYr FlrX9Co8vVI2/qRfV88yUJ225dRsezEVx+vXWFR7cELcu1TcPYA/m4nx0QgXe9aT Pn2D7bSTlp0P9xpxktmRxR7YPfvcxNMixPzV+yeKmJmeovbMhr90yrsGapHeuwey RAc5u6y7qwWiH11cpNeRXBu3wkd+qo0d1FxFnkb9S9jjaNIq1uTyoov0CNXHmk+a 0Slt4py+KR73fD45MGCTvR0U0Do5jczlcvzjWPmCcNjneT3u0w+NBKc= -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:46 2026 by rpki-client