$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3B276288FD701E3EC497C2BCC17831BA188BAF79.cer File: 3B276288FD701E3EC497C2BCC17831BA188BAF79.cer (raw, json) Hash identifier: XHbGqCrvqWep6MxO9H2rdCGU6PeqfA9R7z+YPM+YlYY= Subject key identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 51B5325FC5C877DEDC4A6DB409D6A893D6C2E5E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft caRepository: rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 14 Feb 2026 10:50:04 +0000 Certificate not after: Sat 13 Feb 2027 10:55:04 +0000 Subordinate resources: IP: 103.181.138.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b5:32:5f:c5:c8:77:de:dc:4a:6d:b4:09:d6:a8:93:d6:c2:e5:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 14 10:50:04 2026 GMT Not After : Feb 13 10:55:04 2027 GMT Subject: CN=3B276288FD701E3EC497C2BCC17831BA188BAF79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9a:83:f2:73:e9:94:26:3c:34:23:98:8a:a9: e6:01:f8:3b:9c:b0:e1:30:db:ce:f8:9d:a7:d8:e9: 51:73:c5:43:a1:c8:b0:2f:d9:77:b6:17:12:01:3a: 74:37:1d:53:38:b1:cd:05:a6:fd:af:ed:3b:01:52: ac:06:a5:25:ce:35:22:6f:f0:3d:87:a2:b2:7f:12: d0:92:b4:e1:b8:22:7c:20:72:66:0a:c5:54:a7:50: 42:c9:d9:7c:c8:77:30:66:a7:3a:00:bd:b0:52:32: 97:59:e4:8a:43:50:02:95:eb:0d:db:34:cb:66:4b: 78:bc:50:09:27:fe:75:38:38:2c:de:d0:20:a6:d0: 4d:1d:08:f4:56:d8:dc:84:12:c0:fa:6a:19:63:fa: 79:af:75:21:77:c5:31:8d:3a:d3:fd:74:ba:b0:6d: f4:2e:0d:f7:5f:b6:79:3a:6e:5e:c5:8c:0c:37:a4: 2c:19:b2:3c:d5:2d:11:a8:a0:98:f5:fc:79:79:87: fb:c8:ba:50:90:38:3a:80:9d:e0:5c:20:36:bb:b3: a2:71:0b:07:74:bd:e2:21:c0:52:65:35:1b:90:fe: 84:68:3f:04:b7:9b:cb:62:12:3c:e3:59:59:82:cd: 5c:32:d2:04:68:35:0a:3b:1c:a6:e6:c7:7b:1b:45: 82:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3B:27:62:88:FD:70:1E:3E:C4:97:C2:BC:C1:78:31:BA:18:8B:AF:79 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f7a110e8-b8c2-4277-beb3-92aa5b3690f0/0/3B276288FD701E3EC497C2BCC17831BA188BAF79.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.181.138.0/23 Signature Algorithm: sha256WithRSAEncryption 27:15:29:c6:e5:e8:e6:f3:5e:8a:c1:91:74:d4:57:e5:07:8d: ee:2d:a6:bb:b7:b8:c9:66:a7:f2:fa:f1:24:9a:3e:ec:15:de: 93:a1:5c:b7:31:97:55:4e:f9:af:54:77:9a:f6:0a:43:df:29: 5d:21:ce:7d:04:1a:fb:e6:2f:a1:c9:79:d7:e7:6f:9e:55:4d: 0d:5b:c0:2f:8c:4c:f6:ff:61:27:9a:9c:42:92:b8:1e:98:9a: 15:9a:e4:1f:2f:ca:24:c7:9a:4d:ca:be:e8:50:d0:c1:9e:03: eb:81:7f:7d:1b:bc:a2:51:df:64:8a:1a:f1:7c:3f:05:a5:bd: 7b:0d:5a:f3:1e:d6:57:47:7e:a5:69:3a:34:50:06:8a:96:6b: 5f:d8:39:3b:c3:cc:bd:18:9c:9c:7d:d1:f4:16:3a:4e:ba:f8: f4:82:be:6d:65:3d:d2:b7:55:b5:c3:05:6b:63:22:79:46:20: 9a:dd:fb:c6:45:11:ba:d2:ee:75:2f:9f:c1:3a:fa:50:b0:f0: 32:ea:6b:31:ed:e7:1c:05:89:59:7c:fe:5c:1d:e3:a2:a3:ed: 03:42:e1:d3:b0:62:12:8b:26:5a:86:e0:ee:75:67:f3:3e:c5: e3:05:fb:2d:7b:6b:e0:44:f8:00:da:72:47:67:f7:a7:dc:68: 35:3f:bd:33 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUbUyX8XId97cSm20Cdaok9bC5ekwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxNDEwNTAwNFoX DTI3MDIxMzEwNTUwNFowMzExMC8GA1UEAxMoM0IyNzYyODhGRDcwMUUzRUM0OTdD MkJDQzE3ODMxQkExODhCQUY3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK6ag/Jz6ZQmPDQjmIqp5gH4O5yw4TDbzvidp9jpUXPFQ6HIsC/Zd7YXEgE6 dDcdUzixzQWm/a/tOwFSrAalJc41Im/wPYeisn8S0JK04bgifCByZgrFVKdQQsnZ fMh3MGanOgC9sFIyl1nkikNQApXrDds0y2ZLeLxQCSf+dTg4LN7QIKbQTR0I9FbY 3IQSwPpqGWP6ea91IXfFMY060/10urBt9C4N91+2eTpuXsWMDDekLBmyPNUtEaig mPX8eXmH+8i6UJA4OoCd4FwgNruzonELB3S94iHAUmU1G5D+hGg/BLeby2ISPONZ WYLNXDLSBGg1CjscpubHextFgq8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDsnYoj9cB4+xJfCvMF4MboYi695MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mN2ExMTBlOC1iOGMyLTQyNzctYmViMy05MmFhNWIzNjkwZjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3YTExMGU4 LWI4YzItNDI3Ny1iZWIzLTkyYWE1YjM2OTBmMC8wLzNCMjc2Mjg4RkQ3MDFFM0VD NDk3QzJCQ0MxNzgzMUJBMTg4QkFGNzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFntYowDQYJKoZIhvcNAQELBQADggEBACcVKcbl6ObzXorBkXTUV+UHje4tpru3 uMlmp/L68SSaPuwV3pOhXLcxl1VO+a9Ud5r2CkPfKV0hzn0EGvvmL6HJedfnb55V TQ1bwC+MTPb/YSeanEKSuB6YmhWa5B8vyiTHmk3KvuhQ0MGeA+uBf30bvKJR32SK GvF8PwWlvXsNWvMe1ldHfqVpOjRQBoqWa1/YOTvDzL0YnJx90fQWOk66+PSCvm1l PdK3VbXDBWtjInlGIJrd+8ZFEbrS7nUvn8E6+lCw8DLqazHt5xwFiVl8/lwd46Kj 7QNC4dOwYhKLJlqG4O51Z/M+xeMF+y17a+BE+ADackdn96fcaDU/vTM= -----END CERTIFICATE-----Generated at Mon Mar 2 10:51:46 2026 by rpki-client