$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.cer (raw, json) Hash identifier: MgF+S0H12ZVveDZXfp9vXlBI4L2NLzxF2TD7JycGcHk= Subject key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 46D4D18490A6AF53631F3BBAE68F6F46FA4FCD9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft caRepository: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 07 Feb 2026 17:55:43 +0000 Certificate not after: Sat 06 Feb 2027 18:00:43 +0000 Subordinate resources: IP: 103.122.121.0/24 IP: 2001:df6:af00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d4:d1:84:90:a6:af:53:63:1f:3b:ba:e6:8f:6f:46:fa:4f:cd:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 7 17:55:43 2026 GMT Not After : Feb 6 18:00:43 2027 GMT Subject: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d5:16:10:45:1f:7d:00:f2:d9:17:da:91:30: 69:d6:ce:dd:ed:c1:d5:a8:9d:41:c6:ce:9c:b0:8b: 01:85:dc:29:0b:68:ff:d7:df:17:64:68:b4:a0:26: 15:72:d3:36:50:78:0f:e7:7d:e8:57:58:0e:65:a2: df:7b:05:5f:5e:e8:c3:4f:06:62:65:a2:97:c6:33: ce:10:06:9a:2c:fe:df:11:59:ec:69:a5:26:ae:79: 67:a4:b6:4b:f1:05:ea:c6:e9:c3:fb:d5:7e:0b:ca: 21:ae:82:53:a3:d0:91:e5:fb:fd:db:8d:97:6c:c6: 37:74:9b:c2:19:46:2b:a8:18:96:2c:d3:d5:e6:24: 93:30:43:95:db:a4:a3:23:77:c9:10:e9:10:7b:2c: 1e:73:38:67:5a:ea:4c:87:5d:d3:d5:1d:f6:63:46: be:42:a9:a8:59:32:6b:3a:b7:f9:06:90:8d:b5:11: 99:b5:e2:95:8d:32:ae:8d:6c:81:ba:10:18:2e:cb: b9:26:2f:1d:7a:a4:1b:be:82:77:ee:0a:41:18:89: 79:ac:90:c0:53:68:ac:37:f4:78:34:d9:bc:75:d9: 6b:6a:ef:bf:ec:26:d7:72:55:80:3d:8d:54:85:da: 2d:91:82:4b:42:bd:42:48:06:42:a4:fd:0d:60:2e: 1a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.121.0/24 IPv6: 2001:df6:af00::/48 Signature Algorithm: sha256WithRSAEncryption 3b:46:34:ee:57:09:31:43:2b:5a:b1:da:a6:bc:24:b6:1c:27: 0c:df:e1:2e:63:6d:6b:a4:10:88:fa:67:68:8a:83:22:b1:96: 26:8c:2a:b4:e2:7e:fa:75:e6:6f:4a:82:12:fe:48:b9:c6:8c: 3a:31:15:8a:08:de:34:be:2a:31:8d:87:1c:76:a9:e6:68:41: 8a:5e:45:c3:33:c0:e1:29:b1:ba:ed:eb:2a:70:96:5f:40:a1: c4:bd:97:45:35:33:3b:5a:4c:63:0b:44:25:4a:21:5d:fe:da: c7:e4:ec:53:2c:ea:f3:3b:6f:5d:82:7a:ba:d5:17:ab:9e:b5: a0:48:6e:17:3e:70:39:69:20:88:6d:25:0d:d2:15:02:ea:87: a0:e4:bc:49:63:36:a7:99:65:05:98:df:42:d3:05:fa:9c:ff: e6:16:82:cf:b1:16:d5:28:c1:52:45:c3:36:77:f5:28:2a:31: b7:b2:f7:fa:cd:7d:99:81:f7:29:3d:4e:bd:f5:fb:71:f3:2c: e4:7b:1d:90:19:94:ca:a8:aa:c6:32:e4:99:4f:ca:0f:c9:e8: 32:b3:13:79:00:91:d6:28:4b:9f:51:41:ed:36:88:bc:e5:45: f0:ba:68:06:41:c9:40:5c:51:fe:9f:83:1c:55:60:b7:58:9e: 97:31:02:e0 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIURtTRhJCmr1NjHzu65o9vRvpPzZ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwNzE3NTU0M1oX DTI3MDIwNjE4MDA0M1owMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQy NEU5QkVEQzNCOTE0MTFDMjI3NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALXVFhBFH30A8tkX2pEwadbO3e3B1aidQcbOnLCLAYXcKQto/9ffF2RotKAm FXLTNlB4D+d96FdYDmWi33sFX17ow08GYmWil8YzzhAGmiz+3xFZ7GmlJq55Z6S2 S/EF6sbpw/vVfgvKIa6CU6PQkeX7/duNl2zGN3SbwhlGK6gYlizT1eYkkzBDlduk oyN3yRDpEHssHnM4Z1rqTIdd09Ud9mNGvkKpqFkyazq3+QaQjbURmbXilY0yro1s gboQGC7LuSYvHXqkG76Cd+4KQRiJeayQwFNorDf0eDTZvHXZa2rvv+wm13JVgD2N VIXaLZGCS0K9QkgGQqT9DWAuGosCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFECFhcHWKk9hjAQk6b7cO5FBHCJ2MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iN2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I3ZTI2Yzgz LTVlZDItNGM4Yi04YTAzLTZjYjAwZDFlZDMzOC8wLzQwODU4NUMxRDYyQTRGNjE4 QzA0MjRFOUJFREMzQjkxNDExQzIyNzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnenkwDwQCAAIwCQMHACABDfavADANBgkqhkiG9w0BAQsFAAOCAQEAO0Y07lcJ MUMrWrHaprwkthwnDN/hLmNta6QQiPpnaIqDIrGWJowqtOJ++nXmb0qCEv5IucaM OjEVigjeNL4qMY2HHHap5mhBil5FwzPA4Smxuu3rKnCWX0ChxL2XRTUzO1pMYwtE JUohXf7ax+TsUyzq8ztvXYJ6utUXq561oEhuFz5wOWkgiG0lDdIVAuqHoOS8SWM2 p5llBZjfQtMF+pz/5haCz7EW1SjBUkXDNnf1KCoxt7L3+s19mYH3KT1OvfX7cfMs 5HsdkBmUyqiqxjLkmU/KD8noMrMTeQCR1ihLn1FB7TaIvOVF8LpoBkHJQFxR/p+D HFVgt1ielzEC4A== -----END CERTIFICATE-----Generated at Sun Mar 1 22:38:37 2026 by rpki-client