$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/79FE7055A022B9483725E25688019B44DD3B94A7.cer File: 79FE7055A022B9483725E25688019B44DD3B94A7.cer (raw, json) Hash identifier: e9xscglrkHAgmn1n4idjxrCT0X3y7QevuOzEyshGiio= Subject key identifier: 79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3BD0A68383910934C5CFFE5A98FF8585929CCB31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.mft caRepository: rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 29 Jan 2026 23:04:15 +0000 Certificate not after: Thu 28 Jan 2027 23:09:15 +0000 Subordinate resources: IP: 103.166.64.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:d0:a6:83:83:91:09:34:c5:cf:fe:5a:98:ff:85:85:92:9c:cb:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Jan 29 23:04:15 2026 GMT Not After : Jan 28 23:09:15 2027 GMT Subject: CN=79FE7055A022B9483725E25688019B44DD3B94A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:f8:0b:8f:a3:9e:26:3b:15:cd:c2:0a:9e: 25:90:bc:f5:3f:b3:dd:74:b4:65:b1:6b:64:29:09: a6:6c:91:5c:87:5d:6e:19:e5:47:3a:03:c3:aa:a6: 4e:61:f3:fc:17:a5:70:02:4b:e9:e9:06:1b:1a:3c: c3:0d:bb:8f:a3:b0:d1:8d:f5:9c:69:d7:b5:09:52: bc:91:2d:81:8a:dc:e2:40:93:72:a6:d1:3b:25:c6: 09:dd:0b:f8:b9:49:2e:6a:2b:1a:95:51:83:13:9d: be:88:c5:4e:4a:f2:5b:89:78:65:67:05:62:22:78: 0b:0b:cb:db:b4:a9:f6:c1:95:6c:3e:2c:e2:ac:76: 81:31:12:4c:37:fb:5f:27:f3:3c:0f:79:61:07:0b: 26:3a:82:bf:ef:8c:07:e2:35:09:4f:1c:7e:64:72: d1:95:40:85:68:f5:46:a6:4c:f7:e8:0b:66:e7:b8: d7:54:8f:f2:28:77:03:16:48:44:83:14:8b:71:47: 4a:a4:c2:4b:6b:c6:19:ed:37:f1:df:71:bb:81:89: 89:f6:c7:4b:f6:6b:32:4d:69:15:44:d7:a2:66:2e: d5:88:e5:ae:71:5c:f7:0a:59:7e:5c:6f:d0:b8:c5: f7:7f:83:b3:ed:5b:17:80:a4:05:c4:61:98:8e:36: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:FE:70:55:A0:22:B9:48:37:25:E2:56:88:01:9B:44:DD:3B:94:A7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/010fef48-1ee8-4342-a541-2510fb15b96b/0/79FE7055A022B9483725E25688019B44DD3B94A7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.64.0/23 Signature Algorithm: sha256WithRSAEncryption 87:9c:b6:33:b4:aa:cb:41:58:c4:7d:3f:03:0c:8c:85:01:e4: 47:cd:c9:4e:46:7d:59:88:dc:57:23:95:08:03:0e:c0:6a:ea: dd:94:ea:16:6d:d5:9a:c4:03:25:0b:df:47:57:9c:5f:f8:93: 7c:65:d1:18:7f:b0:6c:34:3a:df:14:df:8a:93:22:5a:f6:bf: 35:df:73:86:ac:f5:75:3f:69:6a:dc:15:3a:35:7b:a1:37:4c: 4b:1a:a7:ca:15:7d:dd:1c:f5:fc:60:8b:af:a5:53:37:07:22: e3:a3:56:79:16:18:ff:9e:ab:59:2a:f8:a1:51:64:d1:cb:89: a3:32:96:4b:f0:19:e2:58:53:5c:1d:f4:19:77:06:22:93:31: 8a:47:9a:50:2a:45:f3:e3:c3:65:e2:20:2a:3b:00:92:58:8c: 3b:24:9c:26:67:0b:17:33:95:23:b0:49:ee:68:e3:f3:b9:b8: 0e:22:c8:81:4b:04:a1:3d:3e:76:03:7c:97:12:f3:1d:82:e7: 3d:92:9b:0f:d5:70:73:23:86:49:ac:87:65:67:d0:f7:6e:31: c0:1f:5d:f0:b3:d1:4c:da:36:d8:61:26:b1:8c:12:5d:3c:70: 18:dd:82:22:63:61:dd:3c:40:28:eb:a0:03:2c:9c:b9:9b:f5: cf:4a:d5:28 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUO9Cmg4ORCTTFz/5amP+FhZKcyzEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDEyOTIzMDQxNVoX DTI3MDEyODIzMDkxNVowMzExMC8GA1UEAxMoNzlGRTcwNTVBMDIyQjk0ODM3MjVF MjU2ODgwMTlCNDRERDNCOTRBNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL6z+AuPo54mOxXNwgqeJZC89T+z3XS0ZbFrZCkJpmyRXIddbhnlRzoDw6qm TmHz/BelcAJL6ekGGxo8ww27j6Ow0Y31nGnXtQlSvJEtgYrc4kCTcqbROyXGCd0L +LlJLmorGpVRgxOdvojFTkryW4l4ZWcFYiJ4CwvL27Sp9sGVbD4s4qx2gTESTDf7 XyfzPA95YQcLJjqCv++MB+I1CU8cfmRy0ZVAhWj1RqZM9+gLZue411SP8ih3AxZI RIMUi3FHSqTCS2vGGe038d9xu4GJifbHS/ZrMk1pFUTXomYu1YjlrnFc9wpZflxv 0LjF93+Ds+1bF4CkBcRhmI42qDUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHn+cFWgIrlINyXiVogBm0TdO5SnMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wMTBmZWY0OC0xZWU4LTQzNDItYTU0MS0yNTEwZmIxNWI5NmIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAxMGZlZjQ4 LTFlZTgtNDM0Mi1hNTQxLTI1MTBmYjE1Yjk2Yi8wLzc5RkU3MDU1QTAyMkI5NDgz NzI1RTI1Njg4MDE5QjQ0REQzQjk0QTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnpkAwDQYJKoZIhvcNAQELBQADggEBAIectjO0qstBWMR9PwMMjIUB5EfNyU5G fVmI3FcjlQgDDsBq6t2U6hZt1ZrEAyUL30dXnF/4k3xl0Rh/sGw0Ot8U34qTIlr2 vzXfc4as9XU/aWrcFTo1e6E3TEsap8oVfd0c9fxgi6+lUzcHIuOjVnkWGP+eq1kq +KFRZNHLiaMylkvwGeJYU1wd9Bl3BiKTMYpHmlAqRfPjw2XiICo7AJJYjDsknCZn CxczlSOwSe5o4/O5uA4iyIFLBKE9PnYDfJcS8x2C5z2Smw/VcHMjhkmsh2Vn0Pdu McAfXfCz0UzaNthhJrGMEl08cBjdgiJjYd08QCjroAMsnLmb9c9K1Sg= -----END CERTIFICATE-----Generated at Mon Mar 2 00:45:56 2026 by rpki-client