$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer File: 1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer (raw, json) Hash identifier: WCnncYQJ5SMcOhqQb18QxCHT0yrcU03gcmZUJSRvhRE= Subject key identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3544827CEF6838B78C696A2DBF5397C1C553095D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft caRepository: rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 02 Feb 2026 13:48:43 +0000 Certificate not after: Mon 01 Feb 2027 13:53:43 +0000 Subordinate resources: IP: 103.165.252.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:44:82:7c:ef:68:38:b7:8c:69:6a:2d:bf:53:97:c1:c5:53:09:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 2 13:48:43 2026 GMT Not After : Feb 1 13:53:43 2027 GMT Subject: CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4f:4c:ef:50:17:23:08:f7:b5:84:28:de:73: 2d:dd:a8:95:d6:8d:06:60:47:0a:aa:89:2b:ee:a0: 28:06:c0:ce:7b:fc:51:f7:f3:6a:51:63:94:09:ed: b7:09:83:24:85:f6:e8:8e:61:d2:b1:c9:2a:9e:10: b8:62:67:2d:f6:13:fb:22:6c:03:79:bf:b5:cd:2e: bc:03:8c:64:29:a9:28:c9:65:d9:98:82:64:a2:57: 77:35:eb:61:81:3a:a0:6f:04:f6:85:58:81:03:3a: fe:de:9d:f7:ac:19:03:24:35:04:58:6e:0f:c2:13: d8:a8:3c:47:64:19:d0:7f:bc:50:ea:0a:25:c1:60: 5c:0b:f5:b1:8b:ca:eb:6d:20:e0:2d:84:ff:df:7e: 10:01:c5:0e:67:db:3c:ae:c4:2c:5d:24:cc:2d:86: 19:ff:24:c0:7e:44:9e:e3:44:05:a2:93:fb:8e:6a: 57:61:1c:43:e8:74:95:48:5f:1f:9f:03:b8:8a:12: db:20:05:6b:cb:54:49:dd:25:c7:1b:52:60:d2:dd: 28:f0:09:42:87:35:1d:39:3f:5b:37:a8:95:5c:a2: a1:4b:79:cf:85:8a:e3:c4:cb:2a:5b:cf:c0:8b:03: c7:ca:7e:1f:ef:70:cf:a3:a0:c2:52:20:c7:f9:16: f9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.165.252.0/24 Signature Algorithm: sha256WithRSAEncryption 33:36:f4:5e:ea:87:91:d1:bd:05:e6:d3:97:68:b5:43:a0:c0: cf:c3:3a:88:de:a0:62:93:68:d3:20:92:2a:0a:03:d0:91:06: 82:1f:58:f4:35:4b:51:dc:4b:b0:45:3a:cf:80:62:22:8b:c8: fd:09:2b:40:0b:47:f0:fb:7c:59:3b:bc:4f:39:b1:7b:75:8f: 1d:3b:c5:b8:50:cc:25:a5:4f:b7:ea:e6:2b:07:14:00:2a:1b: 4f:03:ba:29:1f:c2:18:a8:1f:5f:3b:32:7b:7b:1f:70:f1:9f: af:20:c0:c6:c1:d5:e8:71:fe:01:9e:37:2f:69:6e:8a:04:7f: a5:44:6e:02:54:f3:1e:d8:e8:aa:26:48:91:05:05:49:8b:2d: 0e:93:38:4b:a2:0d:08:f4:20:0b:24:b1:d6:15:9d:6e:2c:e7: 4b:70:b4:67:d0:4e:1e:b0:51:17:9e:13:f0:60:d1:5a:01:31: ff:b9:81:41:c5:82:0c:93:ae:3b:4f:4b:7f:8b:2c:9a:11:73: c9:24:46:3e:c4:bd:d0:a5:44:1e:81:ce:ed:77:5d:76:40:60: 95:e8:ea:40:f4:4e:bf:39:4a:b8:0b:a9:07:5d:b9:7d:6a:ab: 68:60:4c:03:64:7a:6b:81:37:3f:31:92:37:39:0a:12:ed:b3: d6:db:23:a8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNUSCfO9oOLeMaWotv1OXwcVTCV0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwMjEzNDg0M1oX DTI3MDIwMTEzNTM0M1owMzExMC8GA1UEAxMoMUU4RTg1M0JEMEIwRUM4QjJDMDIw Qjk3NUIyMDVBNTU2QzE0RThFOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAM9PTO9QFyMI97WEKN5zLd2oldaNBmBHCqqJK+6gKAbAznv8UffzalFjlAnt twmDJIX26I5h0rHJKp4QuGJnLfYT+yJsA3m/tc0uvAOMZCmpKMll2ZiCZKJXdzXr YYE6oG8E9oVYgQM6/t6d96wZAyQ1BFhuD8IT2Kg8R2QZ0H+8UOoKJcFgXAv1sYvK 620g4C2E/99+EAHFDmfbPK7ELF0kzC2GGf8kwH5EnuNEBaKT+45qV2EcQ+h0lUhf H58DuIoS2yAFa8tUSd0lxxtSYNLdKPAJQoc1HTk/WzeolVyioUt5z4WK48TLKlvP wIsDx8p+H+9wz6OgwlIgx/kW+asCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB6OhTvQsOyLLAILl1sgWlVsFOjpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lYTBiZGNjNS00Y2Q5LTQ2YjAtOWQ3Yi1kMjMxYTllNTdiNTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhMGJkY2M1 LTRjZDktNDZiMC05ZDdiLWQyMzFhOWU1N2I1MC8wLzFFOEU4NTNCRDBCMEVDOEIy QzAyMEI5NzVCMjA1QTU1NkMxNEU4RTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnpfwwDQYJKoZIhvcNAQELBQADggEBADM29F7qh5HRvQXm05dotUOgwM/DOoje oGKTaNMgkioKA9CRBoIfWPQ1S1HcS7BFOs+AYiKLyP0JK0ALR/D7fFk7vE85sXt1 jx07xbhQzCWlT7fq5isHFAAqG08DuikfwhioH187Mnt7H3Dxn68gwMbB1ehx/gGe Ny9pbooEf6VEbgJU8x7Y6KomSJEFBUmLLQ6TOEuiDQj0IAsksdYVnW4s50twtGfQ Th6wUReeE/Bg0VoBMf+5gUHFggyTrjtPS3+LLJoRc8kkRj7EvdClRB6Bzu13XXZA YJXo6kD0Tr85SrgLqQdduX1qq2hgTANkemuBNz8xkjc5ChLts9bbI6g= -----END CERTIFICATE-----Generated at Mon Mar 2 15:31:58 2026 by rpki-client