$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3053FFA7A0123B032FC9458281063C89F007FA98.cer File: 3053FFA7A0123B032FC9458281063C89F007FA98.cer (raw, json) Hash identifier: ognWMQPSbUdp7UvuuFzIHwm18+2or08zogEoL/TB16c= Subject key identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 43B4DBB49086967C59708D02E4C36263B38850CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft caRepository: rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 01 Mar 2026 05:58:27 +0000 Certificate not after: Sun 28 Feb 2027 06:03:27 +0000 Subordinate resources: IP: 103.168.188.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b4:db:b4:90:86:96:7c:59:70:8d:02:e4:c3:62:63:b3:88:50:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 1 05:58:27 2026 GMT Not After : Feb 28 06:03:27 2027 GMT Subject: CN=3053FFA7A0123B032FC9458281063C89F007FA98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cf:52:b6:24:51:1a:e4:67:a0:36:e4:6a:a8: c2:d2:0a:21:6a:1e:57:a4:04:e7:38:dc:a6:07:73: a0:ab:bc:dd:bf:45:d1:4c:7a:61:ec:54:94:d4:07: a8:ac:18:e1:9b:a6:85:21:ca:1c:c6:d7:d3:9d:0a: 76:3e:f3:12:56:ec:ac:e5:05:39:59:5c:36:51:44: e4:2c:5b:19:7b:29:c6:9a:cd:63:70:9a:db:00:5b: cf:df:ad:11:b6:66:93:52:2d:7f:c0:3d:7a:ae:a0: a8:ef:11:40:a9:f4:51:93:dd:91:72:b0:82:64:e7: f0:80:ed:71:4b:e6:28:fb:6b:93:04:5b:83:99:1a: c0:e9:35:b5:0f:2b:0e:4b:eb:3a:30:46:34:c7:66: 34:b2:8f:6f:26:58:9f:af:00:d6:7d:c9:96:b2:1c: 76:b6:3f:01:95:d2:97:e7:cc:1e:ae:25:97:a5:77: 66:98:d4:26:29:03:75:4a:6b:31:43:0e:4a:a7:ba: 38:82:2a:82:43:b5:58:72:9a:0d:2a:7d:a7:6b:e5: 78:21:30:d4:a2:a9:7a:72:28:c3:21:49:7b:91:33: af:a7:eb:c0:e4:e9:c8:91:8b:3e:b9:b9:ed:c7:27: 87:50:dd:fc:57:a2:18:48:c3:83:0a:83:46:b3:39: 24:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:53:FF:A7:A0:12:3B:03:2F:C9:45:82:81:06:3C:89:F0:07:FA:98 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/76db4cb8-faea-4530-b29e-0b7a4affc316/0/3053FFA7A0123B032FC9458281063C89F007FA98.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.188.0/23 Signature Algorithm: sha256WithRSAEncryption 75:13:2d:96:e2:de:e9:ea:98:b3:4a:2b:50:03:80:f9:51:9d: 9a:27:f5:8d:93:29:0b:f2:f0:1b:74:a9:ec:2e:74:f8:2a:12: 27:52:23:59:57:72:e5:08:55:9f:75:58:b3:9b:45:7d:5d:0f: 71:a7:e6:88:6a:57:3f:91:cb:69:8b:ab:0d:c9:27:d1:42:95: 34:44:ef:b9:6c:ac:0e:06:86:db:b6:72:05:73:f0:8e:90:1d: df:80:ee:0b:66:65:d5:b4:ed:68:31:cd:17:8c:90:04:cd:63: fd:af:b4:8a:de:06:d6:4d:d7:cf:e4:c5:3c:5f:fb:03:9f:f4: 0f:be:3f:74:4a:3d:7f:7b:74:06:8b:ee:fb:1a:31:b7:8b:97: 27:bd:dd:d0:1f:69:46:16:3a:52:2b:af:22:f4:98:23:7a:0d: 81:69:4b:9c:d2:35:35:cb:98:5b:3d:06:c7:85:f0:a5:ec:b8: dc:c0:dd:d4:d0:e4:b1:a7:ae:5c:5b:a1:de:04:b4:1d:02:86: 8c:57:6e:1d:08:af:b1:09:9f:b7:52:60:9e:91:f2:e0:6c:dc: fb:6f:49:8f:94:fd:fd:fc:2f:d5:30:35:13:f0:6f:38:c7:12: 60:47:33:62:b9:c1:37:44:32:e8:bc:51:c6:8b:ea:f7:ac:68: 77:70:1a:d2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUQ7TbtJCGlnxZcI0C5MNiY7OIUMowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwMTA1NTgyN1oX DTI3MDIyODA2MDMyN1owMzExMC8GA1UEAxMoMzA1M0ZGQTdBMDEyM0IwMzJGQzk0 NTgyODEwNjNDODlGMDA3RkE5ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/PUrYkURrkZ6A25GqowtIKIWoeV6QE5zjcpgdzoKu83b9F0Ux6YexUlNQH qKwY4ZumhSHKHMbX050Kdj7zElbsrOUFOVlcNlFE5CxbGXspxprNY3Ca2wBbz9+t EbZmk1Itf8A9eq6gqO8RQKn0UZPdkXKwgmTn8IDtcUvmKPtrkwRbg5kawOk1tQ8r DkvrOjBGNMdmNLKPbyZYn68A1n3JlrIcdrY/AZXSl+fMHq4ll6V3ZpjUJikDdUpr MUMOSqe6OIIqgkO1WHKaDSp9p2vleCEw1KKpenIowyFJe5Ezr6frwOTpyJGLPrm5 7ccnh1Dd/FeiGEjDgwqDRrM5JCcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDBT/6egEjsDL8lFgoEGPInwB/qYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83NmRiNGNiOC1mYWVhLTQ1MzAtYjI5ZS0wYjdhNGFmZmMzMTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2ZGI0Y2I4 LWZhZWEtNDUzMC1iMjllLTBiN2E0YWZmYzMxNi8wLzMwNTNGRkE3QTAxMjNCMDMy RkM5NDU4MjgxMDYzQzg5RjAwN0ZBOTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqLwwDQYJKoZIhvcNAQELBQADggEBAHUTLZbi3unqmLNKK1ADgPlRnZon9Y2T KQvy8Bt0qewudPgqEidSI1lXcuUIVZ91WLObRX1dD3Gn5ohqVz+Ry2mLqw3JJ9FC lTRE77lsrA4Ghtu2cgVz8I6QHd+A7gtmZdW07WgxzReMkATNY/2vtIreBtZN18/k xTxf+wOf9A++P3RKPX97dAaL7vsaMbeLlye93dAfaUYWOlIrryL0mCN6DYFpS5zS NTXLmFs9BseF8KXsuNzA3dTQ5LGnrlxbod4EtB0ChoxXbh0Ir7EJn7dSYJ6R8uBs 3PtvSY+U/f38L9UwNRPwbzjHEmBHM2K5wTdEMui8UcaL6vesaHdwGtI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:31 2026 by rpki-client