$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/21F8D88DCD7D814618247F203F04126E51C2D65E.cer File: 21F8D88DCD7D814618247F203F04126E51C2D65E.cer (raw, json) Hash identifier: qfHBIHazkR/PDR4ZR/it0lJYr4CwZyx+llZsqRr7p6I= Subject key identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 603D15E420819684A89C92BAB05725861ED87B45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft caRepository: rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 20 Feb 2026 21:38:45 +0000 Certificate not after: Fri 19 Feb 2027 21:43:45 +0000 Subordinate resources: IP: 103.4.240.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:3d:15:e4:20:81:96:84:a8:9c:92:ba:b0:57:25:86:1e:d8:7b:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 20 21:38:45 2026 GMT Not After : Feb 19 21:43:45 2027 GMT Subject: CN=21F8D88DCD7D814618247F203F04126E51C2D65E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a5:59:cc:ae:01:3e:e4:86:79:9c:6c:b6:58: 36:65:40:00:ed:01:21:85:d8:46:10:3e:81:3b:2b: 95:b3:0c:bd:2b:fe:91:a2:69:67:21:30:d3:f7:ca: f9:8f:08:32:45:92:41:0b:74:85:fd:bb:36:58:ea: 6c:5b:35:92:39:42:f0:be:4e:1a:4c:86:8c:f5:08: 12:34:3b:9c:63:2a:ed:73:46:73:69:94:30:f1:b8: 82:e3:cd:7d:4f:a2:72:66:a1:15:32:91:47:6f:d2: 7f:28:28:2c:97:f9:ef:b4:0a:9b:16:a7:92:11:94: 9b:a1:07:ce:24:bd:4a:ad:77:b4:8a:3e:2e:9a:a6: b2:60:b7:8b:c2:df:2f:e5:09:1b:25:a8:94:a1:ad: 4d:cb:1d:74:38:29:bd:57:bd:3e:5c:00:61:40:7f: b2:22:c9:6e:99:01:25:47:dc:24:16:12:d2:f0:9c: c7:b4:56:e4:e0:0e:cd:34:f1:30:2d:bd:80:b9:e7: c4:e2:1a:d4:23:16:e2:46:6c:df:f6:b6:b2:bf:a6: 28:65:6f:f4:db:25:ca:2c:6a:29:23:f9:76:de:74: ea:f7:c1:0d:1b:df:46:f5:81:74:1c:39:0c:fb:0d: 76:f4:3c:73:90:6e:e0:9b:66:5b:e8:3b:cb:4c:24: 14:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 21:F8:D8:8D:CD:7D:81:46:18:24:7F:20:3F:04:12:6E:51:C2:D6:5E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/17e8dd40-bb94-4d43-b889-8a098d7f45ac/0/21F8D88DCD7D814618247F203F04126E51C2D65E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.240.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:86:dd:eb:13:7d:75:42:c3:a5:58:3b:97:c6:18:42:ab:bd: 4b:dd:53:cb:50:77:75:e6:72:db:59:9e:88:58:03:ed:32:e1: d0:b0:d1:b0:4f:a3:ad:19:1b:37:93:56:4d:4a:95:a0:e1:39: e2:e9:68:c1:94:99:d7:5f:79:aa:6a:56:a0:96:5e:a1:f9:1e: ea:c6:6b:51:f6:45:20:d0:45:77:2e:d3:8e:3a:5f:e9:ef:d7: f5:f7:bc:fe:09:80:d6:0b:11:ab:f0:76:2e:8b:91:33:c6:09: 4a:fc:54:e2:b5:f2:2a:4d:87:c0:60:75:b3:e8:1b:d2:3b:49: 8c:ae:4c:f6:2a:ee:31:4c:be:48:a5:1f:f1:93:9f:37:30:59: 34:ea:b6:88:1a:e6:ce:58:c5:b9:2e:73:ad:fb:b8:49:71:3a: 80:a9:69:df:0f:3e:00:bc:87:09:34:31:69:57:71:c8:e0:4d: 5b:ef:df:a0:eb:59:04:b8:d6:4a:6a:4e:37:fe:15:6c:fd:a9: 0f:8a:39:bb:ef:91:82:e7:0e:cd:f8:84:35:e1:02:34:9c:91: ea:d3:64:2c:57:c1:3a:2f:c1:b8:ff:5b:53:70:ce:39:4a:17: 9a:e4:54:40:9b:f7:0a:29:39:f9:c1:48:4c:9a:86:63:15:37: 67:3c:92:bd -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUYD0V5CCBloSonJK6sFclhh7Ye0UwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyMDIxMzg0NVoX DTI3MDIxOTIxNDM0NVowMzExMC8GA1UEAxMoMjFGOEQ4OERDRDdEODE0NjE4MjQ3 RjIwM0YwNDEyNkU1MUMyRDY1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALWlWcyuAT7khnmcbLZYNmVAAO0BIYXYRhA+gTsrlbMMvSv+kaJpZyEw0/fK +Y8IMkWSQQt0hf27NljqbFs1kjlC8L5OGkyGjPUIEjQ7nGMq7XNGc2mUMPG4guPN fU+icmahFTKRR2/SfygoLJf577QKmxankhGUm6EHziS9Sq13tIo+LpqmsmC3i8Lf L+UJGyWolKGtTcsddDgpvVe9PlwAYUB/siLJbpkBJUfcJBYS0vCcx7RW5OAOzTTx MC29gLnnxOIa1CMW4kZs3/a2sr+mKGVv9NslyixqKSP5dt506vfBDRvfRvWBdBw5 DPsNdvQ8c5Bu4JtmW+g7y0wkFM8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFCH42I3NfYFGGCR/ID8EEm5RwtZeMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xN2U4ZGQ0MC1iYjk0LTRkNDMtYjg4OS04YTA5OGQ3ZjQ1YWMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3ZThkZDQw LWJiOTQtNGQ0My1iODg5LThhMDk4ZDdmNDVhYy8wLzIxRjhEODhEQ0Q3RDgxNDYx ODI0N0YyMDNGMDQxMjZFNTFDMkQ2NUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnBPAwDQYJKoZIhvcNAQELBQADggEBABuG3esTfXVCw6VYO5fGGEKrvUvdU8tQ d3XmcttZnohYA+0y4dCw0bBPo60ZGzeTVk1KlaDhOeLpaMGUmddfeapqVqCWXqH5 HurGa1H2RSDQRXcu0446X+nv1/X3vP4JgNYLEavwdi6LkTPGCUr8VOK18ipNh8Bg dbPoG9I7SYyuTPYq7jFMvkilH/GTnzcwWTTqtoga5s5Yxbkuc637uElxOoCpad8P PgC8hwk0MWlXccjgTVvv36DrWQS41kpqTjf+FWz9qQ+KObvvkYLnDs34hDXhAjSc kerTZCxXwTovwbj/W1NwzjlKF5rkVECb9wopOfnBSEyahmMVN2c8kr0= -----END CERTIFICATE-----Generated at Mon Mar 2 02:06:28 2026 by rpki-client