$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer (raw, json) Hash identifier: 9v5OSFe7FC/DQclNgm9vNDxpD+D6lUMkOxbtqPx2XXA= Subject key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 78830B977C481D2A8353AE949ECC2815D36E22F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft caRepository: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 28 Feb 2026 03:30:25 +0000 Certificate not after: Sat 27 Feb 2027 03:35:25 +0000 Subordinate resources: IP: 103.173.128.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:83:0b:97:7c:48:1d:2a:83:53:ae:94:9e:cc:28:15:d3:6e:22:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 28 03:30:25 2026 GMT Not After : Feb 27 03:35:25 2027 GMT Subject: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:5d:44:a1:53:10:32:24:bc:c1:ff:59:70: e2:af:01:fd:8e:b7:62:7c:3e:4a:44:bb:b5:81:1c: 4c:b7:c0:98:9f:f3:4d:e4:a7:08:44:0a:2b:75:df: 5e:b0:be:b2:ec:67:82:16:c7:cc:c3:1a:8c:a5:74: 34:74:f6:6a:e3:dd:54:77:2e:07:ea:3f:e3:68:77: 57:d9:3f:6a:e0:1f:be:50:f4:74:6a:be:14:55:4a: bd:32:4f:a8:6e:12:98:49:43:d9:02:eb:cb:fb:45: 06:f3:d4:c3:90:33:bf:11:b3:bc:d1:40:87:95:16: b8:cb:33:92:ea:a6:91:c7:f8:a2:22:8b:f2:cc:b7: 40:23:37:64:07:44:07:53:dd:19:5d:10:5a:53:91: f1:b5:05:8c:dd:08:a5:b5:c1:42:f2:20:9a:09:b9: 0c:3b:c0:49:ce:b3:63:61:30:a0:65:17:90:c0:c4: f3:bb:24:17:34:11:c0:f2:dc:6e:07:b2:24:33:45: 30:96:f7:99:3b:a2:26:42:ba:5d:66:4d:db:b8:db: 1c:6f:5e:3b:2b:dd:a4:14:df:b9:7f:53:54:a5:7c: cb:a5:bc:b9:72:43:88:b2:9e:21:9b:48:99:7e:80: 98:da:08:00:f4:bb:af:0c:e7:e0:d4:25:64:e7:eb: 6d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.173.128.0/23 Signature Algorithm: sha256WithRSAEncryption 18:69:ce:6d:f2:c4:72:f5:ae:bf:dc:7f:c0:96:20:10:06:45: 39:c4:0e:3d:d8:b3:28:ec:22:2a:f8:e8:39:22:0f:3e:2d:06: 8c:22:72:37:2d:9a:50:bc:81:aa:2f:e0:5a:90:e7:fd:77:fa: 7d:69:0d:32:c2:5d:12:cc:35:df:05:bb:ed:52:9f:f7:1f:e5: 53:27:80:6d:81:32:bf:db:a2:67:e7:ad:75:9b:ea:50:f0:53: f0:ad:0d:51:67:eb:5d:48:79:58:b8:33:0a:b9:55:96:b1:9c: 68:4a:42:f5:0d:49:c1:99:fb:52:b0:81:05:e7:55:c2:f6:18: f2:83:f5:6f:af:88:1d:5f:48:c0:88:c9:a0:ab:46:76:42:8d: b2:7f:8e:00:18:65:4e:2e:7f:19:cd:ec:8c:80:78:68:76:7d: fc:18:6c:71:d7:cc:59:1c:95:8e:d4:65:9f:f4:c0:43:f4:1b: 06:60:98:53:a5:79:7d:89:ae:24:a3:21:5d:ca:e3:41:f3:d5: 74:a2:43:d5:c0:85:df:c4:d8:f4:bf:4b:0c:c8:53:28:59:a7: c6:6c:69:5f:b2:cc:ea:c7:03:61:68:61:d7:45:62:3c:56:fd: 33:3e:2a:e3:a7:b1:86:05:a2:ce:52:e5:02:13:d5:16:20:71: 2d:70:ba:66 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUeIMLl3xIHSqDU66UnswoFdNuIvkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyODAzMzAyNVoX DTI3MDIyNzAzMzUyNVowMzExMC8GA1UEAxMoNEE4QjZBMzM5NTYxMkNEMzNEQThC M0MzODFENkVEQ0ZBNEE0NUExRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMRrXUShUxAyJLzB/1lw4q8B/Y63Ynw+SkS7tYEcTLfAmJ/zTeSnCEQKK3Xf XrC+suxnghbHzMMajKV0NHT2auPdVHcuB+o/42h3V9k/auAfvlD0dGq+FFVKvTJP qG4SmElD2QLry/tFBvPUw5AzvxGzvNFAh5UWuMszkuqmkcf4oiKL8sy3QCM3ZAdE B1PdGV0QWlOR8bUFjN0IpbXBQvIgmgm5DDvASc6zY2EwoGUXkMDE87skFzQRwPLc bgeyJDNFMJb3mTuiJkK6XWZN27jbHG9eOyvdpBTfuX9TVKV8y6W8uXJDiLKeIZtI mX6AmNoIAPS7rwzn4NQlZOfrbYcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEqLajOVYSzTPaizw4HW7c+kpFofMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81OWEzN2FlYy02M2MyLTQ1ZDEtOTZhZS1kYTE2ZDEwMThiMGYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU5YTM3YWVj LTYzYzItNDVkMS05NmFlLWRhMTZkMTAxOGIwZi8wLzRBOEI2QTMzOTU2MTJDRDMz REE4QjNDMzgxRDZFRENGQTRBNDVBMUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnrYAwDQYJKoZIhvcNAQELBQADggEBABhpzm3yxHL1rr/cf8CWIBAGRTnEDj3Y syjsIir46DkiDz4tBowicjctmlC8gaov4FqQ5/13+n1pDTLCXRLMNd8Fu+1Sn/cf 5VMngG2BMr/bomfnrXWb6lDwU/CtDVFn611IeVi4Mwq5VZaxnGhKQvUNScGZ+1Kw gQXnVcL2GPKD9W+viB1fSMCIyaCrRnZCjbJ/jgAYZU4ufxnN7IyAeGh2ffwYbHHX zFkclY7UZZ/0wEP0GwZgmFOleX2JriSjIV3K40Hz1XSiQ9XAhd/E2PS/SwzIUyhZ p8ZsaV+yzOrHA2FoYddFYjxW/TM+KuOnsYYFos5S5QIT1RYgcS1wumY= -----END CERTIFICATE-----Generated at Mon Mar 2 00:15:39 2026 by rpki-client