$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer File: 528A271B82B6185862B06F250499140113F6FE20.cer (raw, json) Hash identifier: FqjSViqYwXDY1s4Z4i5jwsyH7djCqy3+RmZDKHVIsj0= Subject key identifier: 52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 52CD2094106206717CC830AA99F3940FB97831E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft caRepository: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 14 Feb 2026 09:58:19 +0000 Certificate not after: Sat 13 Feb 2027 10:03:19 +0000 Subordinate resources: IP: 103.189.60.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:cd:20:94:10:62:06:71:7c:c8:30:aa:99:f3:94:0f:b9:78:31:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 14 09:58:19 2026 GMT Not After : Feb 13 10:03:19 2027 GMT Subject: CN=528A271B82B6185862B06F250499140113F6FE20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fc:db:1a:ef:96:31:21:7e:d9:c2:e0:31:e0: c6:37:09:99:13:b5:40:c8:5f:32:c8:bb:ce:71:e4: 93:fe:a5:15:1f:7e:ee:42:f5:58:48:7b:2f:8a:67: f4:df:bd:ca:b2:ea:d0:a4:f8:e9:7d:1a:f4:f5:43: df:ba:0f:43:77:f3:76:aa:88:3a:25:0d:9e:e9:f2: 2e:d4:4c:20:a5:2c:ef:86:0e:ea:53:84:88:db:f9: 1b:ea:0e:ed:db:5c:7c:ac:e0:45:e1:e5:72:13:e4: 49:d6:09:b8:db:2d:c8:ac:bb:b1:63:15:ac:d3:5f: a8:ae:25:2c:19:df:6b:6b:99:59:b7:05:82:c6:91: 43:da:8a:bf:d8:74:6c:0c:44:73:c6:54:25:0b:f7: de:1c:a2:1c:d4:93:34:e8:e0:17:f1:02:43:90:8b: 60:8a:d8:90:b5:7a:d5:be:47:c1:39:cc:a0:6a:4c: e8:a9:59:71:0a:e7:1c:c9:b3:3b:69:7c:dc:b4:94: 52:0a:49:8a:5d:26:ea:3e:6d:24:65:d1:9a:08:81: d3:ab:7f:f0:92:6b:9f:92:78:df:77:23:4e:fa:43: a2:56:4a:ea:4f:e8:8f:76:e7:2c:4a:c0:41:07:7b: e7:51:47:95:b2:40:36:97:2e:c5:00:4c:98:60:e8: f7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.60.0/23 Signature Algorithm: sha256WithRSAEncryption 20:65:c1:8c:89:ff:28:fd:7e:34:78:7c:82:84:78:1e:ff:f6: 8b:27:93:16:9f:6a:23:90:3e:fd:81:93:19:bb:82:8e:12:06: cf:67:81:41:3b:6a:79:97:bf:7b:6e:8a:e6:e4:4c:af:91:2e: da:d2:8b:db:47:68:ae:ba:99:23:da:08:5f:76:06:db:2d:bf: 58:7b:05:51:c7:e0:42:42:a9:79:ed:4f:11:3f:ef:b3:c8:7b: 35:a2:2f:aa:88:04:99:ff:64:66:12:d1:4b:cd:85:5c:a4:af: f7:00:5f:c5:af:64:d0:f8:c2:a0:d1:d4:08:87:4e:b9:3f:b5: 52:05:9a:9d:6c:65:95:35:3c:b2:e7:fd:50:15:8c:e6:ce:6a: d6:bf:34:f1:19:ff:fb:f9:ec:ed:75:86:ec:1b:5d:04:d0:96: 4b:b3:ef:52:4b:60:60:c9:3f:dc:42:c3:18:e4:70:96:61:46: c3:c5:34:a9:3d:c5:f8:0e:6d:07:ba:69:c1:cc:de:6d:d2:e2: f7:dc:41:33:49:1a:10:27:b9:6a:62:01:9e:da:b9:d2:d6:d3: 54:ed:7e:ff:9e:48:71:17:e8:a7:b4:35:20:3a:ae:a4:65:bd: d2:04:bd:90:99:63:15:77:9f:61:5f:1a:4a:bc:ad:f3:09:d9: 3e:cd:6d:04 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUs0glBBiBnF8yDCqmfOUD7l4MecwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxNDA5NTgxOVoX DTI3MDIxMzEwMDMxOVowMzExMC8GA1UEAxMoNTI4QTI3MUI4MkI2MTg1ODYyQjA2 RjI1MDQ5OTE0MDExM0Y2RkUyMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMj82xrvljEhftnC4DHgxjcJmRO1QMhfMsi7znHkk/6lFR9+7kL1WEh7L4pn 9N+9yrLq0KT46X0a9PVD37oPQ3fzdqqIOiUNnunyLtRMIKUs74YO6lOEiNv5G+oO 7dtcfKzgReHlchPkSdYJuNstyKy7sWMVrNNfqK4lLBnfa2uZWbcFgsaRQ9qKv9h0 bAxEc8ZUJQv33hyiHNSTNOjgF/ECQ5CLYIrYkLV61b5HwTnMoGpM6KlZcQrnHMmz O2l83LSUUgpJil0m6j5tJGXRmgiB06t/8JJrn5J433cjTvpDolZK6k/oj3bnLErA QQd751FHlbJANpcuxQBMmGDo9ysCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFKKJxuCthhYYrBvJQSZFAET9v4gMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wYWQzY2M4YS05NzM4LTQ1MWItYTc5OC03Yjc2YjA5NDBiNGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhZDNjYzhh LTk3MzgtNDUxYi1hNzk4LTdiNzZiMDk0MGI0Yi8wLzUyOEEyNzFCODJCNjE4NTg2 MkIwNkYyNTA0OTkxNDAxMTNGNkZFMjAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvTwwDQYJKoZIhvcNAQELBQADggEBACBlwYyJ/yj9fjR4fIKEeB7/9osnkxaf aiOQPv2Bkxm7go4SBs9ngUE7anmXv3tuiubkTK+RLtrSi9tHaK66mSPaCF92Btst v1h7BVHH4EJCqXntTxE/77PIezWiL6qIBJn/ZGYS0UvNhVykr/cAX8WvZND4wqDR 1AiHTrk/tVIFmp1sZZU1PLLn/VAVjObOata/NPEZ//v57O11huwbXQTQlkuz71JL YGDJP9xCwxjkcJZhRsPFNKk9xfgObQe6acHM3m3S4vfcQTNJGhAnuWpiAZ7audLW 01Ttfv+eSHEX6Ke0NSA6rqRlvdIEvZCZYxV3n2FfGkq8rfMJ2T7NbQQ= -----END CERTIFICATE-----Generated at Sun Mar 1 23:13:23 2026 by rpki-client