$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer File: 473225269441779F80E443B1EA516CC99E4ED4DA.cer (raw, json) Hash identifier: c/jEQnkvNf1f9IFTewkLH18b0SXcuEiUIaS4oBHoVko= Subject key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5588EBBA4BBDBA7981F0BCEABD7E409011E35732 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft caRepository: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 24 Feb 2026 19:45:49 +0000 Certificate not after: Tue 23 Feb 2027 19:50:49 +0000 Subordinate resources: IP: 103.121.186.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:88:eb:ba:4b:bd:ba:79:81:f0:bc:ea:bd:7e:40:90:11:e3:57:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 24 19:45:49 2026 GMT Not After : Feb 23 19:50:49 2027 GMT Subject: CN=473225269441779F80E443B1EA516CC99E4ED4DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8e:d7:15:fd:04:2e:2b:ff:46:40:be:57:a4: 7a:a5:b9:a2:1c:32:1a:8f:d5:36:20:3e:bd:70:e4: 31:59:2b:84:45:f0:48:c9:41:cd:66:f5:7d:a1:18: 16:e0:f1:5a:dd:dd:34:7d:f6:4d:b7:b6:fc:1f:31: 97:dd:54:a2:ee:1b:7e:c7:2b:4f:ae:85:ea:83:e2: 1b:4e:81:db:65:d7:05:de:ea:03:44:1f:fe:e6:37: b2:0b:5d:ba:12:07:2e:6b:c1:11:8b:88:23:d7:a8: 66:39:c1:e2:cc:0e:4d:76:85:24:a2:18:b7:f7:b7: a8:b5:72:51:35:60:cc:86:f2:9f:f3:41:cd:a7:47: 93:1e:fe:22:39:66:7a:09:e7:9b:4d:01:1f:ec:c9: 2a:b7:58:92:2a:db:76:1f:b5:0a:dc:a3:4e:2a:84: df:fa:06:e3:fd:8f:ed:ad:e4:31:42:bd:05:44:47: 3f:b5:22:df:a9:65:a7:ee:6f:f5:92:d5:4f:d9:9e: 09:33:91:1b:98:bc:df:3c:54:57:89:cf:a7:88:d3: 12:c8:f6:f1:b4:47:f2:09:21:a4:2a:2c:b7:e6:8d: bb:fe:42:39:87:38:55:da:26:74:d3:33:3e:f1:dc: 72:ec:4c:22:d1:5e:6a:0a:d8:74:2b:f4:ab:b4:78: f6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.121.186.0/23 Signature Algorithm: sha256WithRSAEncryption 34:0c:05:29:e0:d1:cf:be:79:d3:32:24:90:9b:cb:e6:50:69: a7:59:d0:94:5b:11:32:fe:d3:0d:a6:23:0b:39:93:ef:47:ef: a6:c3:ef:00:b2:32:54:94:a8:bc:ab:75:30:08:f3:83:b4:28: b7:07:7a:3e:d0:96:ad:06:f2:45:74:cc:f1:26:6d:b6:1b:6a: b8:af:31:0f:0d:86:5e:2d:e5:ed:05:7e:5f:97:e3:9d:56:2a: 96:7e:5c:d9:dd:6e:64:78:5c:75:72:0f:4e:6c:9a:68:f1:c8: 2d:d8:08:8a:57:a6:8f:68:f6:78:65:35:0a:61:46:79:09:d0: db:98:2e:b3:0d:04:4f:e1:27:0e:95:9a:85:ab:4a:4e:5f:68: 7d:d1:33:a0:00:07:a3:12:bc:85:aa:ee:d1:27:62:cb:76:f5: 13:a2:90:0a:72:9d:31:8f:d8:0a:2d:54:43:61:72:43:6d:92: 67:b0:cc:5c:73:83:13:74:99:96:55:09:03:71:2a:aa:44:75: 69:e2:17:b4:35:69:0e:72:b6:cc:08:85:2b:1c:e1:5d:5d:d8: 3b:65:ee:b6:94:a7:dc:0b:81:e1:d7:03:ab:22:61:5c:ed:ae: f3:55:cc:82:06:4d:cc:ae:12:b9:eb:73:64:6b:be:1c:a2:24: 41:cd:45:36 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVYjruku9unmB8LzqvX5AkBHjVzIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNDE5NDU0OVoX DTI3MDIyMzE5NTA0OVowMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0 M0IxRUE1MTZDQzk5RTRFRDREQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMGO1xX9BC4r/0ZAvlekeqW5ohwyGo/VNiA+vXDkMVkrhEXwSMlBzWb1faEY FuDxWt3dNH32Tbe2/B8xl91Uou4bfscrT66F6oPiG06B22XXBd7qA0Qf/uY3sgtd uhIHLmvBEYuII9eoZjnB4swOTXaFJKIYt/e3qLVyUTVgzIbyn/NBzadHkx7+Ijlm egnnm00BH+zJKrdYkirbdh+1CtyjTiqE3/oG4/2P7a3kMUK9BURHP7Ui36llp+5v 9ZLVT9meCTORG5i83zxUV4nPp4jTEsj28bRH8gkhpCost+aNu/5COYc4VdomdNMz PvHccuxMItFeagrYdCv0q7R49okCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEcyJSaUQXefgORDsepRbMmeTtTaMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lMDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UwNjIwY2Zj LWI0NmMtNDU3Yy05ZmRlLTI5NzcxMGM1NDZhOS8wLzQ3MzIyNTI2OTQ0MTc3OUY4 MEU0NDNCMUVBNTE2Q0M5OUU0RUQ0REEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnebowDQYJKoZIhvcNAQELBQADggEBADQMBSng0c++edMyJJCby+ZQaadZ0JRb ETL+0w2mIws5k+9H76bD7wCyMlSUqLyrdTAI84O0KLcHej7Qlq0G8kV0zPEmbbYb arivMQ8Nhl4t5e0Ffl+X451WKpZ+XNndbmR4XHVyD05smmjxyC3YCIpXpo9o9nhl NQphRnkJ0NuYLrMNBE/hJw6VmoWrSk5faH3RM6AAB6MSvIWq7tEnYst29ROikApy nTGP2AotVENhckNtkmewzFxzgxN0mZZVCQNxKqpEdWniF7Q1aQ5ytswIhSsc4V1d 2Dtl7raUp9wLgeHXA6siYVztrvNVzIIGTcyuErnrc2RrvhyiJEHNRTY= -----END CERTIFICATE-----Generated at Mon Mar 2 04:15:59 2026 by rpki-client