$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer File: 5C413D56294D9D20E64978B7296A9DA893C32CAB.cer (raw, json) Hash identifier: eq2OOj10cGgU3FQbFQpoaZPGc5KvWYeuLoU8P58xYPg= Subject key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 0104403B67866F86CA7DB3CD97F64A2406E4A1ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft caRepository: rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 15 Feb 2026 04:01:33 +0000 Certificate not after: Sun 14 Feb 2027 04:06:33 +0000 Subordinate resources: IP: 103.150.60.0/23 IP: 2001:df3:5b80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:04:40:3b:67:86:6f:86:ca:7d:b3:cd:97:f6:4a:24:06:e4:a1:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 15 04:01:33 2026 GMT Not After : Feb 14 04:06:33 2027 GMT Subject: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:07:d1:91:87:8e:f3:8b:34:b9:71:88:b9:14: b9:84:e6:84:9e:29:cf:da:e3:39:48:53:7b:37:6a: 2c:f2:a4:93:26:30:e5:a9:c9:a6:35:22:fd:a2:b7: b3:9f:89:a5:c4:c0:47:a3:67:e4:4b:ea:55:be:d4: 77:73:b5:10:47:4a:1b:a3:b3:54:c8:ba:17:0c:f6: a8:f0:a7:9a:c3:b6:09:b2:b8:e5:44:4c:4f:36:e3: 05:44:72:28:9b:f8:16:a6:9e:6a:a6:18:54:04:8e: c1:f0:11:f9:4b:fe:31:5b:88:77:2e:05:17:39:b4: 2a:40:4e:25:86:3f:a6:8d:5c:76:37:71:55:96:4b: d1:94:4c:37:18:e3:7c:69:ca:10:35:69:ec:85:be: 0e:10:f7:6a:78:93:32:05:5a:f7:9b:c9:24:09:28: da:ed:a2:c5:f9:92:f9:9d:4a:5e:4f:21:58:1f:2e: e6:6c:49:6d:e1:83:c5:52:26:49:65:bf:b9:e9:28: 1b:84:da:cd:13:18:c1:cd:2c:95:45:17:a9:4c:b2: 0d:2d:17:8c:41:a6:a7:42:48:91:74:b2:65:aa:57: d1:32:35:08:3a:63:b7:22:17:78:19:df:34:e6:22: 28:e4:f0:b0:69:fa:5f:e9:1e:04:0d:90:c2:fd:a2: b7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.60.0/23 IPv6: 2001:df3:5b80::/48 Signature Algorithm: sha256WithRSAEncryption 3e:91:5f:a8:16:79:e0:61:04:e5:27:14:3e:4c:71:8e:d3:76: 88:11:19:27:9c:e1:96:99:54:e2:a2:96:d5:8a:3c:f6:f6:d7: 19:19:5d:9a:20:73:b0:7c:0f:11:9f:2b:ce:c5:f7:6a:41:67: b5:a9:c1:44:5e:ed:c0:99:c5:ce:d2:e6:3b:09:fa:c3:aa:86: da:ec:7a:b2:1d:02:5a:20:c2:88:5c:a6:4c:26:e4:a0:b6:7c: 6a:ad:b6:e6:f8:f6:d1:51:bc:61:aa:a8:fb:73:49:9d:f1:89: ae:6c:1f:6d:1f:a2:6c:6b:02:e8:4b:8f:cc:91:18:43:8f:04: 15:58:1c:39:d7:c2:d3:7e:c2:2d:94:b7:c2:f2:a3:e7:d0:c5: 14:b4:0c:de:66:f9:1c:19:ff:c8:a1:31:bc:6f:96:08:21:ba: 15:93:89:38:84:3a:8a:93:a5:0a:f8:0f:e2:54:43:af:8c:4d: 97:93:b9:33:1a:29:b6:8c:f4:95:e8:00:c9:94:87:45:f9:cd: 3c:72:a1:90:81:2f:78:4b:4a:ba:2c:4b:eb:cb:dd:67:7c:e5: f1:09:9a:27:cb:6d:21:aa:7e:14:84:ed:fb:76:b5:1b:fa:0c: 73:a6:bc:3c:c9:ce:15:a9:9f:e9:d4:ee:68:44:5f:51:47:e2: f3:ce:56:74 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUAQRAO2eGb4bKfbPNl/ZKJAbkoe0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxNTA0MDEzM1oX DTI3MDIxNDA0MDYzM1owMzExMC8GA1UEAxMoNUM0MTNENTYyOTREOUQyMEU2NDk3 OEI3Mjk2QTlEQTg5M0MzMkNBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMUH0ZGHjvOLNLlxiLkUuYTmhJ4pz9rjOUhTezdqLPKkkyYw5anJpjUi/aK3 s5+JpcTAR6Nn5EvqVb7Ud3O1EEdKG6OzVMi6Fwz2qPCnmsO2CbK45URMTzbjBURy KJv4FqaeaqYYVASOwfAR+Uv+MVuIdy4FFzm0KkBOJYY/po1cdjdxVZZL0ZRMNxjj fGnKEDVp7IW+DhD3aniTMgVa95vJJAko2u2ixfmS+Z1KXk8hWB8u5mxJbeGDxVIm SWW/uekoG4TazRMYwc0slUUXqUyyDS0XjEGmp0JIkXSyZapX0TI1CDpjtyIXeBnf NOYiKOTwsGn6X+keBA2Qwv2itwcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFFxBPVYpTZ0g5kl4tylqnaiTwyyrMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YjNlYWJiNC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiM2VhYmI0 LTRkYjMtNDM3My1hMzQ4LWZiMWVkNzA1NTY1MS8wLzVDNDEzRDU2Mjk0RDlEMjBF NjQ5NzhCNzI5NkE5REE4OTNDMzJDQUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFnljwwDwQCAAIwCQMHACABDfNbgDANBgkqhkiG9w0BAQsFAAOCAQEAPpFfqBZ5 4GEE5ScUPkxxjtN2iBEZJ5zhlplU4qKW1Yo89vbXGRldmiBzsHwPEZ8rzsX3akFn tanBRF7twJnFztLmOwn6w6qG2ux6sh0CWiDCiFymTCbkoLZ8aq225vj20VG8Yaqo +3NJnfGJrmwfbR+ibGsC6EuPzJEYQ48EFVgcOdfC037CLZS3wvKj59DFFLQM3mb5 HBn/yKExvG+WCCG6FZOJOIQ6ipOlCvgP4lRDr4xNl5O5Mxoptoz0legAyZSHRfnN PHKhkIEveEtKuixL68vdZ3zl8QmaJ8ttIap+FITt+3a1G/oMc6a8PMnOFamf6dTu aERfUUfi885WdA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:46 2026 by rpki-client