$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer File: 3B2608378F03DCAD9A64B7DF68B52F2CBC643525.cer (raw, json) Hash identifier: eenRPunUNIUxDxnOYQ0ULxlBzRXlufVyya0R2y/ZEII= Subject key identifier: 3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 586D53B3B66AFF7B9F9D7706F295CAEAF5CA4EF6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft caRepository: rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Feb 2026 10:10:34 +0000 Certificate not after: Thu 04 Feb 2027 10:15:34 +0000 Subordinate resources: IP: 103.167.20.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:6d:53:b3:b6:6a:ff:7b:9f:9d:77:06:f2:95:ca:ea:f5:ca:4e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 5 10:10:34 2026 GMT Not After : Feb 4 10:15:34 2027 GMT Subject: CN=3B2608378F03DCAD9A64B7DF68B52F2CBC643525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:5b:21:ae:03:13:ae:ac:e2:6a:7e:a7:2e: d5:7f:71:1e:42:ef:7f:57:59:67:41:85:5b:22:a1: 77:fc:96:2a:31:ce:55:27:63:c5:78:7a:96:e2:78: 4a:2c:63:51:b6:92:65:cd:83:e5:36:91:91:53:64: 71:77:e6:e3:b0:0b:d3:58:98:c7:51:94:65:36:7c: 7d:71:1e:73:18:60:39:3f:c2:3d:af:9f:93:d6:04: a7:9d:31:69:9b:3b:be:1e:5d:88:bf:47:96:d2:a2: 23:49:bc:6f:d1:7e:a8:0a:8d:16:4f:ed:ed:9f:c5: 41:3a:ae:88:5e:e0:de:fd:11:fd:17:ac:63:8c:4f: 7d:a5:9f:c8:47:78:3a:0b:75:e1:7a:4e:11:93:9b: 9f:34:73:f2:ed:02:5b:db:52:ee:2d:1e:12:68:f1: 4f:91:4e:4d:68:33:b1:7f:d1:6f:61:af:0f:7e:28: 10:4a:63:96:03:ee:ad:9f:ea:cc:c9:7e:e5:d4:e0: a8:9e:35:27:ad:e8:87:1c:a7:ef:1d:3f:18:e3:6b: bd:29:6e:4f:b5:8c:01:cf:14:76:50:e0:c7:f5:0f: b8:5a:29:d2:df:b4:d3:06:06:73:36:88:89:f8:19: 98:fe:fa:e9:aa:10:da:36:d6:92:1f:36:46:cc:99: de:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:26:08:37:8F:03:DC:AD:9A:64:B7:DF:68:B5:2F:2C:BC:64:35:25 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ff76b773-405f-458f-9b88-852095173f16/0/3B2608378F03DCAD9A64B7DF68B52F2CBC643525.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.167.20.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:f4:57:72:63:87:59:5e:08:ab:6d:c0:71:97:66:27:d2:92: 6d:7f:6e:c1:22:99:8a:27:13:ee:9b:d5:f7:54:d4:73:e9:d0: 1f:2a:13:56:40:82:df:55:99:7d:5d:59:0c:84:c2:27:33:27: b5:c0:fc:15:73:ec:7c:e8:9b:9e:25:3f:54:09:37:d5:0c:86: e7:8a:2f:fa:7a:f7:e8:aa:cf:db:2e:86:6c:9f:e6:ec:f6:77: 3a:c1:ba:15:87:05:39:a0:c2:c8:e7:3e:99:89:70:6c:53:d6: 40:a7:bc:a2:e2:d8:81:8a:53:98:0a:85:da:40:9d:48:10:d1: 92:ef:b0:19:34:8e:e1:d0:06:fa:26:4c:15:ae:f4:60:14:6d: 39:20:d7:64:50:a0:0f:b1:43:68:fb:7f:ce:15:5f:be:be:82: c8:3a:6e:b5:ec:57:46:9d:d3:13:fe:23:47:97:fe:8e:90:eb: 5e:07:1c:59:5f:ce:6a:68:e1:7e:db:09:de:31:7d:e5:0e:17: a3:24:58:5a:c0:97:08:49:11:e7:90:37:0e:80:05:f7:1e:19: d6:0a:90:a6:99:e4:27:bd:8e:b5:79:a7:8d:ff:93:7e:59:71: 1f:b5:f8:61:6e:c9:2a:a5:df:4c:e6:74:65:36:1f:b6:56:d6: 50:a3:99:69 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUWG1Ts7Zq/3ufnXcG8pXK6vXKTvYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwNTEwMTAzNFoX DTI3MDIwNDEwMTUzNFowMzExMC8GA1UEAxMoM0IyNjA4Mzc4RjAzRENBRDlBNjRC N0RGNjhCNTJGMkNCQzY0MzUyNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMVpWyGuAxOurOJqfqcu1X9xHkLvf1dZZ0GFWyKhd/yWKjHOVSdjxXh6luJ4 SixjUbaSZc2D5TaRkVNkcXfm47AL01iYx1GUZTZ8fXEecxhgOT/CPa+fk9YEp50x aZs7vh5diL9HltKiI0m8b9F+qAqNFk/t7Z/FQTquiF7g3v0R/ResY4xPfaWfyEd4 Ogt14XpOEZObnzRz8u0CW9tS7i0eEmjxT5FOTWgzsX/Rb2GvD34oEEpjlgPurZ/q zMl+5dTgqJ41J63ohxyn7x0/GONrvSluT7WMAc8UdlDgx/UPuFop0t+00wYGczaI ifgZmP766aoQ2jbWkh82RsyZ3gkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDsmCDePA9ytmmS332i1Lyy8ZDUlMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mZjc2Yjc3My00MDVmLTQ1OGYtOWI4OC04NTIwOTUxNzNmMTYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZmNzZiNzcz LTQwNWYtNDU4Zi05Yjg4LTg1MjA5NTE3M2YxNi8wLzNCMjYwODM3OEYwM0RDQUQ5 QTY0QjdERjY4QjUyRjJDQkM2NDM1MjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnpxQwDQYJKoZIhvcNAQELBQADggEBAGz0V3Jjh1leCKttwHGXZifSkm1/bsEi mYonE+6b1fdU1HPp0B8qE1ZAgt9VmX1dWQyEwiczJ7XA/BVz7Hzom54lP1QJN9UM hueKL/p69+iqz9suhmyf5uz2dzrBuhWHBTmgwsjnPpmJcGxT1kCnvKLi2IGKU5gK hdpAnUgQ0ZLvsBk0juHQBvomTBWu9GAUbTkg12RQoA+xQ2j7f84VX76+gsg6brXs V0ad0xP+I0eX/o6Q614HHFlfzmpo4X7bCd4xfeUOF6MkWFrAlwhJEeeQNw6ABfce GdYKkKaZ5Ce9jrV5p43/k35ZcR+1+GFuySql30zmdGU2H7ZW1lCjmWk= -----END CERTIFICATE-----Generated at Sun Mar 1 22:24:57 2026 by rpki-client