$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/754AE571E3432B20E78045BE7B2C99E39E0F1873.cer File: 754AE571E3432B20E78045BE7B2C99E39E0F1873.cer (raw, json) Hash identifier: xr7aIf3/lDBadZXIfHS6Q3jm2tlYpaYOGFSWxA0xvrk= Subject key identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2B1F4A59605E01A5764294C4D91FBD7A9AA9771F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft caRepository: rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 18 Feb 2026 22:03:07 +0000 Certificate not after: Wed 17 Feb 2027 22:08:07 +0000 Subordinate resources: IP: 103.7.226.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:1f:4a:59:60:5e:01:a5:76:42:94:c4:d9:1f:bd:7a:9a:a9:77:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 18 22:03:07 2026 GMT Not After : Feb 17 22:08:07 2027 GMT Subject: CN=754AE571E3432B20E78045BE7B2C99E39E0F1873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:03:6a:04:eb:e4:87:25:90:fd:10:a5:e8:5d: 40:e5:df:01:88:7c:41:fa:05:2c:44:84:a4:a6:24: d3:9d:8f:b6:15:3c:e4:7f:fe:14:d0:69:0f:7b:98: 84:69:b1:c9:06:b8:9a:90:fa:68:22:a8:da:d7:74: 5e:55:e9:aa:19:cd:c3:c1:bd:ff:d8:e3:20:cc:5d: 1d:5d:af:cd:d1:39:9b:5f:40:ba:28:22:73:31:19: b6:ad:60:98:27:d2:a0:d8:51:1f:1a:30:54:36:ac: 66:fb:5c:1e:6c:22:7c:0c:24:e0:72:d5:12:82:ad: e1:3c:94:21:13:1f:8c:82:43:9f:11:2a:99:36:b5: 05:47:f8:e6:ca:f9:2c:91:2e:40:5a:dd:21:82:62: f9:33:03:3f:b7:6f:e2:de:a7:39:34:7b:56:23:03: ba:ad:e8:0a:1f:fb:1c:eb:9d:91:6b:66:7d:57:f5: 53:d0:48:7d:5f:22:12:93:90:23:30:c3:e5:95:45: b4:6a:5e:5d:20:83:15:c6:88:96:84:ec:53:7a:5b: 0e:b9:42:7e:c0:ca:4c:a2:55:29:b3:4a:11:e3:a1: 5a:6f:b7:1d:4f:6e:94:78:dd:e5:91:51:c5:58:65: 71:7c:e6:8d:c2:7a:98:fc:49:d5:e2:c5:40:5c:8d: 9c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 75:4A:E5:71:E3:43:2B:20:E7:80:45:BE:7B:2C:99:E3:9E:0F:18:73 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/a6358dda-0ff1-4f6a-bb66-60f4ca04c490/0/754AE571E3432B20E78045BE7B2C99E39E0F1873.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.7.226.0/23 Signature Algorithm: sha256WithRSAEncryption 09:b1:70:dd:5f:1b:94:6e:a3:1c:47:f1:21:61:b4:53:a3:e1: b3:01:d5:48:94:d2:07:fd:33:10:2c:7d:5b:69:90:ef:48:98: 02:6e:ce:75:80:6e:40:4b:12:bc:ea:94:29:50:16:16:4a:db: 45:ff:c4:55:9d:40:3b:67:9e:7c:f2:55:a8:3d:6f:96:bc:07: c0:ca:6a:87:fd:af:e6:4c:d6:d3:87:0b:09:32:c3:92:e8:bd: d3:1e:31:ff:f8:5d:71:2e:4f:e2:e5:df:21:59:35:e0:ef:7d: e6:4f:9d:a0:46:04:c8:ce:cf:e6:45:6f:3d:2f:9c:09:8c:d0: 7b:8f:85:83:4a:9a:0e:0c:e0:ac:23:a5:26:82:ad:f1:14:8f: 90:ea:c4:36:8f:86:4d:2e:70:07:0e:7b:ff:be:dc:bb:45:04: 6f:f9:2e:14:80:9e:75:80:45:0e:64:d2:88:f1:fa:eb:71:44: 62:52:d3:9d:b6:4e:d7:d7:a5:2a:ab:6f:15:3b:56:2c:f4:5a: 63:ab:b2:cb:00:fa:94:f7:cd:72:ff:ba:d2:9a:17:53:2c:e0: bb:04:5a:ec:d3:ce:fd:8b:cb:d9:6c:d0:81:c3:ed:7f:c1:56: b5:96:b2:52:f9:a6:21:ae:11:13:94:ed:f2:0e:c1:dc:dc:c6: e6:1f:e0:44 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKx9KWWBeAaV2QpTE2R+9epqpdx8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxODIyMDMwN1oX DTI3MDIxNzIyMDgwN1owMzExMC8GA1UEAxMoNzU0QUU1NzFFMzQzMkIyMEU3ODA0 NUJFN0IyQzk5RTM5RTBGMTg3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUDagTr5IclkP0QpehdQOXfAYh8QfoFLESEpKYk052PthU85H/+FNBpD3uY hGmxyQa4mpD6aCKo2td0XlXpqhnNw8G9/9jjIMxdHV2vzdE5m19AuigiczEZtq1g mCfSoNhRHxowVDasZvtcHmwifAwk4HLVEoKt4TyUIRMfjIJDnxEqmTa1BUf45sr5 LJEuQFrdIYJi+TMDP7dv4t6nOTR7ViMDuq3oCh/7HOudkWtmfVf1U9BIfV8iEpOQ IzDD5ZVFtGpeXSCDFcaIloTsU3pbDrlCfsDKTKJVKbNKEeOhWm+3HU9ulHjd5ZFR xVhlcXzmjcJ6mPxJ1eLFQFyNnAMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHVK5XHjQysg54BFvnssmeOeDxhzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hNjM1OGRkYS0wZmYxLTRmNmEtYmI2Ni02MGY0Y2EwNGM0OTAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2MzU4ZGRh LTBmZjEtNGY2YS1iYjY2LTYwZjRjYTA0YzQ5MC8wLzc1NEFFNTcxRTM0MzJCMjBF NzgwNDVCRTdCMkM5OUUzOUUwRjE4NzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnB+IwDQYJKoZIhvcNAQELBQADggEBAAmxcN1fG5RuoxxH8SFhtFOj4bMB1UiU 0gf9MxAsfVtpkO9ImAJuznWAbkBLErzqlClQFhZK20X/xFWdQDtnnnzyVag9b5a8 B8DKaof9r+ZM1tOHCwkyw5LovdMeMf/4XXEuT+Ll3yFZNeDvfeZPnaBGBMjOz+ZF bz0vnAmM0HuPhYNKmg4M4KwjpSaCrfEUj5DqxDaPhk0ucAcOe/++3LtFBG/5LhSA nnWARQ5k0ojx+utxRGJS0522TtfXpSqrbxU7Viz0WmOrsssA+pT3zXL/utKaF1Ms 4LsEWuzTzv2Ly9ls0IHD7X/BVrWWslL5piGuEROU7fIOwdzcxuYf4EQ= -----END CERTIFICATE-----Generated at Mon Mar 2 07:52:33 2026 by rpki-client