$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/4F40845626DE4E373F550B654EA4E833B6EB4D27.cer File: 4F40845626DE4E373F550B654EA4E833B6EB4D27.cer (raw, json) Hash identifier: BV6OLQUHQB8aBT93GQqL+Vd98Asffqfo/ZtGvfBFb/4= Subject key identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 506C2EF527D95FF6C6D643F7C9928A8D5AE36F02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft caRepository: rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 30 Jan 2026 18:17:18 +0000 Certificate not after: Fri 29 Jan 2027 18:22:18 +0000 Subordinate resources: IP: 103.168.146.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:6c:2e:f5:27:d9:5f:f6:c6:d6:43:f7:c9:92:8a:8d:5a:e3:6f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 30 18:17:18 2026 GMT Not After : Jan 29 18:22:18 2027 GMT Subject: CN=4F40845626DE4E373F550B654EA4E833B6EB4D27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:7a:62:7e:a4:a4:56:78:5c:62:8f:09:b2: cd:7e:42:85:0f:b9:d5:02:04:71:aa:b0:71:e4:50: c0:bb:de:39:88:32:1c:68:e0:a1:1c:30:02:a3:2e: 41:02:a7:1f:68:8a:5d:c4:6d:73:5d:30:31:b2:f6: e1:63:ad:fd:25:73:68:a8:f1:92:0d:fb:2d:f6:b8: 28:bb:17:4e:fd:98:bf:2f:ea:64:6a:6a:6a:db:48: 87:ce:6e:98:7c:ef:48:61:32:5e:82:ba:c4:36:3f: a0:88:94:77:58:d5:18:1f:fc:f4:39:95:a6:38:64: 70:01:0c:cf:ac:93:d7:73:ca:b9:f8:bd:f8:35:d9: 71:46:6d:3d:49:df:a7:b2:af:4f:22:b8:7b:90:93: 92:c1:0a:07:e0:37:4d:af:97:eb:58:ba:ca:fd:5c: 1c:ca:9b:99:b4:85:2e:3a:f2:59:24:47:e0:a6:a3: 17:60:0a:ea:e9:4a:8d:b1:d1:d0:be:6a:03:ab:ac: 5c:bb:90:31:f8:a5:cd:c5:32:23:19:24:7d:82:52: 6a:af:d6:58:f6:92:fd:bd:14:9e:97:85:0c:5f:a7: 41:5a:ed:f8:4d:2d:9a:50:60:c3:c8:ef:15:7e:8f: 61:11:b1:e6:fd:0a:e3:f9:b5:34:44:84:a8:e1:fb: c1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4F:40:84:56:26:DE:4E:37:3F:55:0B:65:4E:A4:E8:33:B6:EB:4D:27 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3a46360d-662b-4f7d-bb17-d86082152471/0/4F40845626DE4E373F550B654EA4E833B6EB4D27.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.146.0/23 Signature Algorithm: sha256WithRSAEncryption 23:8b:ef:55:32:0f:60:d8:b0:b6:59:36:a9:74:3f:74:2b:bd: c4:96:4e:41:86:b8:13:61:26:8a:71:e8:b0:3c:da:c6:ba:c5: bf:cf:a4:d5:c0:43:f9:ff:e3:e1:68:46:40:c5:32:8e:67:c7: 60:e3:0f:0b:4e:20:12:32:35:7e:97:5e:17:68:b1:59:dd:56: 33:2f:ba:cb:47:9f:bd:15:da:9a:77:8f:96:81:12:6b:40:ab: fd:25:a4:51:ae:89:72:a2:87:6c:62:fe:c8:c8:a6:ba:c9:ea: 2c:f9:8f:57:63:48:5c:c0:4f:4d:01:88:81:f1:0d:4a:e8:92: 90:75:a1:10:66:93:b6:fa:9e:9c:ca:d7:b3:cc:f0:b0:1c:4c: 1f:b6:59:6c:1e:dc:03:20:60:43:93:ca:d9:b1:3e:21:38:5b: 59:ac:66:1a:69:09:ef:cb:41:c6:41:37:53:d7:28:91:c1:64: ca:16:a5:ac:15:1f:8c:9f:7c:07:a1:d1:9f:24:a7:d0:5b:11: 91:91:3a:0e:f2:0b:50:49:99:f7:66:18:1a:7b:9b:dc:b2:3b: ee:15:35:4e:1a:cd:49:0e:77:26:a4:b1:e2:e2:56:40:42:f2: 6f:e7:c2:c0:03:1e:a8:6d:82:e9:37:4c:1f:c1:14:4e:1c:55: 22:6a:eb:7d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUGwu9SfZX/bG1kP3yZKKjVrjbwIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEzMDE4MTcxOFoX DTI3MDEyOTE4MjIxOFowMzExMC8GA1UEAxMoNEY0MDg0NTYyNkRFNEUzNzNGNTUw QjY1NEVBNEU4MzNCNkVCNEQyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL0demJ+pKRWeFxijwmyzX5ChQ+51QIEcaqwceRQwLveOYgyHGjgoRwwAqMu QQKnH2iKXcRtc10wMbL24WOt/SVzaKjxkg37Lfa4KLsXTv2Yvy/qZGpqattIh85u mHzvSGEyXoK6xDY/oIiUd1jVGB/89DmVpjhkcAEMz6yT13PKufi9+DXZcUZtPUnf p7KvTyK4e5CTksEKB+A3Ta+X61i6yv1cHMqbmbSFLjryWSRH4KajF2AK6ulKjbHR 0L5qA6usXLuQMfilzcUyIxkkfYJSaq/WWPaS/b0UnpeFDF+nQVrt+E0tmlBgw8jv FX6PYRGx5v0K4/m1NESEqOH7wVECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE9AhFYm3k43P1ULZU6k6DO2600nMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zYTQ2MzYwZC02NjJiLTRmN2QtYmIxNy1kODYwODIxNTI0NzEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNhNDYzNjBk LTY2MmItNGY3ZC1iYjE3LWQ4NjA4MjE1MjQ3MS8wLzRGNDA4NDU2MjZERTRFMzcz RjU1MEI2NTRFQTRFODMzQjZFQjREMjcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqJIwDQYJKoZIhvcNAQELBQADggEBACOL71UyD2DYsLZZNql0P3QrvcSWTkGG uBNhJopx6LA82sa6xb/PpNXAQ/n/4+FoRkDFMo5nx2DjDwtOIBIyNX6XXhdosVnd VjMvustHn70V2pp3j5aBEmtAq/0lpFGuiXKih2xi/sjIprrJ6iz5j1djSFzAT00B iIHxDUrokpB1oRBmk7b6npzK17PM8LAcTB+2WWwe3AMgYEOTytmxPiE4W1msZhpp Ce/LQcZBN1PXKJHBZMoWpawVH4yffAeh0Z8kp9BbEZGROg7yC1BJmfdmGBp7m9yy O+4VNU4azUkOdyakseLiVkBC8m/nwsADHqhtguk3TB/BFE4cVSJq630= -----END CERTIFICATE-----Generated at Mon Mar 2 11:11:36 2026 by rpki-client