$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer File: 40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.cer (raw, json) Hash identifier: Vj5EQedhC3ezTSp5JRml2g/g768jMWVIn70ijUqXhPY= Subject key identifier: 40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7AE66EA768F89D62E93D6F514BEC0BA842735304 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft caRepository: rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 14 Apr 2026 09:58:21 +0000 Certificate not after: Tue 13 Apr 2027 10:03:21 +0000 Subordinate resources: IP: 103.14.231.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e6:6e:a7:68:f8:9d:62:e9:3d:6f:51:4b:ec:0b:a8:42:73:53:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 14 09:58:21 2026 GMT Not After : Apr 13 10:03:21 2027 GMT Subject: CN=40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:73:a1:53:f6:e9:58:da:7c:18:96:43:1c: 00:e6:50:8e:f1:00:ca:22:e9:b5:6d:2d:05:c0:f8: 9f:ad:b6:b3:b9:69:57:8b:60:b6:73:8e:89:60:3e: 71:26:75:4b:fc:c2:2f:de:12:81:21:f2:7a:91:32: 10:c7:e2:d4:38:54:2d:53:54:9c:81:7d:4a:41:2e: 3c:25:5b:6f:c4:35:5f:ed:a2:07:1a:86:6e:03:e0: 11:5b:02:aa:c4:1b:d3:a3:a9:51:5d:2a:98:26:02: bf:b3:dc:0f:f5:ff:d4:07:d0:f2:06:43:50:9e:ef: 3b:25:f4:54:95:f5:e1:4c:05:70:6b:7b:7b:8e:45: b1:62:36:57:64:47:2f:9d:1a:4b:f8:e4:2b:97:1d: 1e:e3:05:6f:18:94:e4:12:34:1e:74:21:20:ed:65: 24:83:fb:ac:54:53:32:1c:4f:b3:1f:29:31:85:4c: 9a:03:26:2f:2d:a5:4e:99:58:bd:4c:8f:87:c5:c1: 8e:02:83:dd:8d:96:b8:59:3b:0c:58:33:fc:60:cf: c7:9e:03:e3:d1:23:84:2c:f3:c1:e1:b0:59:7d:9a: f7:d2:27:a2:35:11:52:b5:90:92:aa:8f:42:65:e4: 61:a7:6e:fe:53:e5:ec:37:e1:e9:aa:22:25:a7:4b: 4d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:70:6A:5C:CF:A8:96:C8:EE:0C:1F:9A:5B:6D:CD:A1:91:5A:C7:6D X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4df4296f-1ca9-45fc-bb08-84135eb00fa7/0/40706A5CCFA896C8EE0C1F9A5B6DCDA1915AC76D.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.14.231.0/24 Signature Algorithm: sha256WithRSAEncryption 83:d8:d7:e2:94:27:a9:f3:13:69:cb:b4:50:dc:44:e7:02:ef: ea:f6:a4:ba:d9:3e:6f:a4:21:d2:7d:ed:fc:71:40:b8:2c:9e: 50:18:8a:ad:db:af:bd:17:e5:d1:93:11:f1:0b:ad:17:ad:57: da:e7:e0:ca:f6:a1:84:7b:71:9d:1e:4b:da:5e:2b:8b:47:39: d4:e1:6a:b0:f5:99:2e:ed:6c:37:78:bb:fd:65:82:1d:bb:e5: 16:e3:a9:12:a8:cc:91:6e:d3:f1:96:8c:c5:14:9e:ab:af:87: 47:17:11:59:83:e8:ab:80:e9:6e:63:27:6d:89:4d:95:34:7d: 57:91:70:8d:ad:4c:73:23:50:e6:72:5e:62:06:f7:71:cd:0f: b6:5a:67:30:6d:67:61:8e:d3:79:9f:55:61:45:c2:10:47:a9: 77:0f:cd:73:72:1b:e5:f4:30:0a:b4:f6:64:af:8b:c1:14:b7: 26:33:eb:93:37:49:3c:9f:b4:f8:1c:45:df:df:3c:da:02:9d: 84:f2:88:61:07:81:d8:c1:4a:3c:39:ef:5b:8f:21:1d:e7:52: d6:7f:24:be:55:fc:46:0a:19:97:e9:99:58:20:73:2c:1d:ce: 67:8c:f9:92:51:71:cf:81:75:f9:2c:21:4c:a1:0b:80:30:78: b1:e2:a0:37 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUeuZup2j4nWLpPW9RS+wLqEJzUwQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxNDA5NTgyMVoX DTI3MDQxMzEwMDMyMVowMzExMC8GA1UEAxMoNDA3MDZBNUNDRkE4OTZDOEVFMEMx RjlBNUI2RENEQTE5MTVBQzc2RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbbc6FT9ulY2nwYlkMcAOZQjvEAyiLptW0tBcD4n622s7lpV4tgtnOOiWA+ cSZ1S/zCL94SgSHyepEyEMfi1DhULVNUnIF9SkEuPCVbb8Q1X+2iBxqGbgPgEVsC qsQb06OpUV0qmCYCv7PcD/X/1AfQ8gZDUJ7vOyX0VJX14UwFcGt7e45FsWI2V2RH L50aS/jkK5cdHuMFbxiU5BI0HnQhIO1lJIP7rFRTMhxPsx8pMYVMmgMmLy2lTplY vUyPh8XBjgKD3Y2WuFk7DFgz/GDPx54D49EjhCzzweGwWX2a99InojURUrWQkqqP QmXkYadu/lPl7Dfh6aoiJadLTW0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEBwalzPqJbI7gwfmlttzaGRWsdtMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZGY0Mjk2Zi0xY2E5LTQ1ZmMtYmIwOC04NDEzNWViMDBmYTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkZjQyOTZm LTFjYTktNDVmYy1iYjA4LTg0MTM1ZWIwMGZhNy8wLzQwNzA2QTVDQ0ZBODk2QzhF RTBDMUY5QTVCNkRDREExOTE1QUM3NkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnDucwDQYJKoZIhvcNAQELBQADggEBAIPY1+KUJ6nzE2nLtFDcROcC7+r2pLrZ Pm+kIdJ97fxxQLgsnlAYiq3br70X5dGTEfELrRetV9rn4Mr2oYR7cZ0eS9peK4tH OdTharD1mS7tbDd4u/1lgh275RbjqRKozJFu0/GWjMUUnquvh0cXEVmD6KuA6W5j J22JTZU0fVeRcI2tTHMjUOZyXmIG93HND7ZaZzBtZ2GO03mfVWFFwhBHqXcPzXNy G+X0MAq09mSvi8EUtyYz65M3STyftPgcRd/fPNoCnYTyiGEHgdjBSjw571uPIR3n UtZ/JL5V/EYKGZfpmVggcywdzmeM+ZJRcc+BdfksIUyhC4AweLHioDc= -----END CERTIFICATE-----Generated at Sun Apr 19 08:28:11 2026 by rpki-client