$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer (raw, json) Hash identifier: WnFkhDtMcdjGtukZNyRKgmqkt6zf6rM+2YoK+dRSFMk= Subject key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 530FB4EA124B70BA5C8CB3F6FC6AD6B6C0630596 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft caRepository: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 16 Jan 2026 20:13:44 +0000 Certificate not after: Fri 15 Jan 2027 20:18:44 +0000 Subordinate resources: IP: 103.152.242.0/23 IP: 2407:7240::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:0f:b4:ea:12:4b:70:ba:5c:8c:b3:f6:fc:6a:d6:b6:c0:63:05:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 16 20:13:44 2026 GMT Not After : Jan 15 20:18:44 2027 GMT Subject: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9f:b6:45:7a:30:96:ca:89:4e:95:84:09:34: 1d:a6:b6:3b:a0:d2:e4:52:8f:ba:ab:27:47:e8:74: f7:b1:3e:e0:e4:89:1c:c2:21:e0:b6:bc:48:84:42: 3c:6f:aa:c1:f7:af:fa:99:90:6b:53:9c:9f:3d:1e: 81:cf:4f:7c:b2:d1:41:77:17:15:63:40:ab:b9:c2: 32:43:a6:68:c4:b6:5f:4b:4c:a0:29:3c:99:12:15: 3a:6d:e0:f1:8b:50:92:db:af:4c:9e:94:58:79:8b: c8:f7:37:c4:63:58:d2:65:1d:1c:7f:52:55:31:4b: c5:ed:5b:a6:ea:e8:a3:4e:32:0b:51:87:3c:09:e3: ef:8b:30:56:0a:c8:6d:cc:78:45:5f:0d:f6:a4:8f: cf:a1:18:4a:2d:a9:a5:85:0c:cd:a9:4b:d9:e7:93: 9d:b2:a7:bf:fb:7b:e8:1a:68:a1:67:dd:89:53:63: 8d:c5:ee:02:3c:1e:a1:a3:62:70:b9:6b:c0:2f:40: 48:e4:a2:be:96:7a:01:fb:e2:31:e7:a3:85:90:ca: 61:7b:32:10:36:15:bd:3c:3f:a3:ac:b9:03:a0:3e: 98:da:ae:6c:0f:b9:a4:2d:7d:09:40:7b:97:7d:d6: 40:67:2d:3b:1f:96:26:4e:56:03:64:77:eb:2f:89: 3f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.152.242.0/23 IPv6: 2407:7240::/32 Signature Algorithm: sha256WithRSAEncryption 23:2a:4c:0f:4f:57:0e:4d:47:b4:2d:d3:e7:68:6c:6d:fe:fb: 54:c5:d3:f7:b8:10:3f:db:0a:fa:24:ae:ed:35:29:04:2a:62: 73:98:48:a9:1c:b3:9a:a9:67:6f:e3:6b:71:77:90:26:75:82: f3:d6:a1:46:22:96:57:14:ee:02:df:7f:24:4b:86:cf:1e:fe: 82:36:bc:d8:c0:2e:e4:65:33:26:03:ef:6e:fa:0e:23:03:99: ae:e7:ce:46:d6:9e:6f:59:8b:26:66:da:7b:84:68:22:5c:75: 3d:c1:7b:82:bc:b2:ac:5a:96:4e:23:4b:de:5a:0c:b1:1a:ab: 3e:cf:d4:44:60:65:e2:2e:7e:6b:f4:59:6b:a9:bd:4b:d2:d1: 44:a5:ca:3c:a4:96:cd:b1:fb:fb:f9:b1:b7:6d:88:d3:b7:ae: 91:a1:f2:5b:71:37:08:99:7b:f1:17:b3:f1:e6:9c:e6:f8:59: f0:ca:c6:73:ff:5a:dd:16:05:9f:2a:f5:74:44:f5:a3:0b:be: 2a:00:f7:44:bc:6c:5d:b8:92:ff:88:c6:cb:f6:e3:c4:d8:80: 12:c5:1e:29:64:6f:e6:d3:2e:51:88:ac:13:56:92:92:a1:f9: 44:31:7f:92:65:10:3f:27:01:36:f7:10:dc:d2:f9:a8:d9:33: f8:eb:e4:52 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUUw+06hJLcLpcjLP2/GrWtsBjBZYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDExNjIwMTM0NFoX DTI3MDExNTIwMTg0NFowMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFE NEFDOTlDNEFCREZEQ0RCQjQwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALmftkV6MJbKiU6VhAk0Haa2O6DS5FKPuqsnR+h097E+4OSJHMIh4La8SIRC PG+qwfev+pmQa1Ocnz0egc9PfLLRQXcXFWNAq7nCMkOmaMS2X0tMoCk8mRIVOm3g 8YtQktuvTJ6UWHmLyPc3xGNY0mUdHH9SVTFLxe1bpuroo04yC1GHPAnj74swVgrI bcx4RV8N9qSPz6EYSi2ppYUMzalL2eeTnbKnv/t76BpooWfdiVNjjcXuAjweoaNi cLlrwC9ASOSivpZ6AfviMeejhZDKYXsyEDYVvTw/o6y5A6A+mNqubA+5pC19CUB7 l33WQGctOx+WJk5WA2R36y+JP10CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDFJiKefKlItLtHUrJnEq9/c27QAMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0YmE2Nzc4 LWIxNmQtNGJhOC05ODRmLTM0ZTQxOWZjOWM0OS8wLzMxNDk4OEE3OUYyQTUyMkQy RUQxRDRBQzk5QzRBQkRGRENEQkI0MDAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnmPIwDQQCAAIwBwMFACQHckAwDQYJKoZIhvcNAQELBQADggEBACMqTA9PVw5N R7Qt0+dobG3++1TF0/e4ED/bCvokru01KQQqYnOYSKkcs5qpZ2/ja3F3kCZ1gvPW oUYillcU7gLffyRLhs8e/oI2vNjALuRlMyYD7276DiMDma7nzkbWnm9ZiyZm2nuE aCJcdT3Be4K8sqxalk4jS95aDLEaqz7P1ERgZeIufmv0WWupvUvS0USlyjykls2x +/v5sbdtiNO3rpGh8ltxNwiZe/EXs/HmnOb4WfDKxnP/Wt0WBZ8q9XRE9aMLvioA 90S8bF24kv+Ixsv248TYgBLFHilkb+bTLlGIrBNWkpKh+UQxf5JlED8nATb3ENzS +ajZM/jr5FI= -----END CERTIFICATE-----Generated at Sun Mar 1 22:18:30 2026 by rpki-client