$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer File: 782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer (raw, json) Hash identifier: mhQ9t5muaN7aW8ZPEwdQjg0SqTEjIrq1Au7fKmiw+Xc= Subject key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 11239155F989579E3A35B9D313096D4662C109E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft caRepository: rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 21 Feb 2026 08:48:13 +0000 Certificate not after: Sat 20 Feb 2027 08:53:13 +0000 Subordinate resources: IP: 103.21.216.0/22 IP: 202.77.96.0/19 IP: 202.137.0.0 -- 202.137.23.255 IP: 2405:100::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:23:91:55:f9:89:57:9e:3a:35:b9:d3:13:09:6d:46:62:c1:09:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 21 08:48:13 2026 GMT Not After : Feb 20 08:53:13 2027 GMT Subject: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:34:28:3f:64:39:f9:48:46:97:ea:20:93:0e: f5:bf:37:88:04:33:f1:89:62:e2:51:cb:c8:05:53: 64:0d:bb:85:77:b9:e8:eb:fd:7b:29:72:8a:70:f5: e7:b3:49:b2:73:c7:2d:2a:78:d4:37:14:b8:26:17: 3e:eb:93:95:f1:4f:d9:6c:a7:6d:0c:0a:12:74:d1: b3:c1:a7:da:7e:2c:ff:86:36:17:1b:9d:58:e3:08: 9c:c8:e9:31:2e:26:9e:b0:d0:d2:7c:3e:3d:ab:ff: 39:d7:f0:23:22:3d:e8:ec:34:4b:92:d8:93:66:47: 01:a3:db:d2:dc:72:63:32:91:a6:9b:f2:45:19:d3: 79:20:5e:5d:d5:9c:ff:27:5d:40:04:48:6f:89:19: 77:8f:40:c2:35:37:70:1e:cd:b0:02:3f:9b:8e:29: 48:f1:58:36:74:9c:ec:98:1c:6b:0b:6b:63:c6:38: 26:cd:d2:79:97:58:4c:64:7b:b6:5a:15:91:ab:dc: af:5a:ca:e2:20:26:17:d2:7f:58:d9:2e:a6:18:04: 7a:dc:0d:d7:d7:4c:df:30:66:ef:ee:02:2b:05:7e: b5:d7:d9:41:a2:af:f6:b9:c8:45:3e:b0:99:ed:ec: e4:4b:14:b3:5a:68:f2:69:a9:86:86:9a:bf:e6:88: ab:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.216.0/22 202.77.96.0/19 202.137.0.0-202.137.23.255 IPv6: 2405:100::/32 Signature Algorithm: sha256WithRSAEncryption 4a:6c:7d:d0:d0:5c:3b:0d:9b:fa:9f:2e:89:a5:cb:5a:4e:4b: 2f:d6:bc:d9:ad:49:cd:75:a6:cb:ce:87:fa:18:dd:b7:08:d3: e7:ea:d5:f3:84:90:40:0e:9d:bf:1b:81:48:7f:61:ea:f2:bc: 6f:0c:05:9a:3f:01:bb:16:4a:36:78:4e:19:06:0e:eb:15:f4: e5:32:70:76:f9:b3:d1:69:53:e1:11:9e:07:d8:e3:4b:96:28: 32:37:63:74:6a:87:6f:82:73:65:21:8c:86:f5:d4:c7:f7:1b: d0:06:69:f9:db:f0:a9:65:ef:29:c7:d8:97:c2:48:1b:9e:6e: ff:33:b0:ad:96:db:87:c2:60:88:e1:84:d6:a8:88:5f:a7:47: 35:38:46:fc:33:44:23:21:06:34:68:8a:8f:47:af:98:65:92: 6a:c9:c5:f1:68:76:f5:28:fd:e2:f6:c0:e1:39:67:37:8a:ce: d0:3f:cb:15:94:8d:32:a3:36:dc:55:53:07:9f:44:27:75:c1: 27:f2:8a:bb:fb:b2:68:46:f9:75:e5:8a:16:95:92:79:b6:28: 8d:b0:cc:e2:08:46:18:4a:5d:91:ed:61:37:de:8a:1f:e0:bf: b4:a1:de:56:11:fa:2b:db:a0:85:3a:32:13:fc:e8:52:9d:c7: 57:3c:a1:0c -----BEGIN CERTIFICATE----- MIIF5zCCBM+gAwIBAgIUESORVfmJV546NbnTEwltRmLBCeEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyMTA4NDgxM1oX DTI3MDIyMDA4NTMxM1owMzExMC8GA1UEAxMoNzgyNjM3QjU4QjhFMDdFQzY0QTBG QUFFMTc2OUFGMTdBRjA5OTlFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK80KD9kOflIRpfqIJMO9b83iAQz8Yli4lHLyAVTZA27hXe56Ov9eylyinD1 57NJsnPHLSp41DcUuCYXPuuTlfFP2WynbQwKEnTRs8Gn2n4s/4Y2FxudWOMInMjp MS4mnrDQ0nw+Pav/OdfwIyI96Ow0S5LYk2ZHAaPb0txyYzKRppvyRRnTeSBeXdWc /yddQARIb4kZd49AwjU3cB7NsAI/m44pSPFYNnSc7JgcawtrY8Y4Js3SeZdYTGR7 tloVkavcr1rK4iAmF9J/WNkuphgEetwN19dM3zBm7+4CKwV+tdfZQaKv9rnIRT6w me3s5EsUs1po8mmphoaav+aIqyUCAwEAAaOCAtowggLWMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHgmN7WLjgfsZKD6rhdprxevCZnnMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83OWMwNWVlMy03ZmM4LTQ0MDctYjJjMC1jYjQwYmZjZmI4NjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5YzA1ZWUz LTdmYzgtNDQwNy1iMmMwLWNiNDBiZmNmYjg2Ni8wLzc4MjYzN0I1OEI4RTA3RUM2 NEEwRkFBRTE3NjlBRjE3QUYwOTk5RTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQQYIKwYBBQUHAQcBAf8EMjAwMB8EAgABMBkD BAJnFdgDBAXKTWAwCwMDAMqJAwQDyokQMA0EAgACMAcDBQAkBQEAMA0GCSqGSIb3 DQEBCwUAA4IBAQBKbH3Q0Fw7DZv6ny6JpctaTksv1rzZrUnNdabLzof6GN23CNPn 6tXzhJBADp2/G4FIf2Hq8rxvDAWaPwG7Fko2eE4ZBg7rFfTlMnB2+bPRaVPhEZ4H 2ONLligyN2N0aodvgnNlIYyG9dTH9xvQBmn52/CpZe8px9iXwkgbnm7/M7CtltuH wmCI4YTWqIhfp0c1OEb8M0QjIQY0aIqPR6+YZZJqycXxaHb1KP3i9sDhOWc3is7Q P8sVlI0yozbcVVMHn0QndcEn8oq7+7JoRvl15YoWlZJ5tiiNsMziCEYYSl2R7WE3 3oof4L+0od5WEfor26CFOjIT/OhSncdXPKEM -----END CERTIFICATE-----Generated at Mon Mar 2 11:00:00 2026 by rpki-client