$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer File: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer (raw, json) Hash identifier: EQni+kt41N7dSJTx1tp9cfmMY0Q0rd+SwWO2BxiVm5Y= Subject key identifier: 7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6AB6B57AB973D28CF01A98C0E8D1EAD3BADDA717 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft caRepository: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 27 Mar 2026 14:38:36 +0000 Certificate not after: Fri 26 Mar 2027 14:43:36 +0000 Subordinate resources: IP: 103.148.2.0/23 IP: 2405:c640::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b6:b5:7a:b9:73:d2:8c:f0:1a:98:c0:e8:d1:ea:d3:ba:dd:a7:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 27 14:38:36 2026 GMT Not After : Mar 26 14:43:36 2027 GMT Subject: CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:85:e3:48:7f:09:f0:83:e2:a6:ee:e9:06:4e: 8b:ca:06:a0:1d:74:be:c5:f8:0a:dc:80:cb:ca:9d: c1:9d:12:e1:33:77:ea:f5:df:99:ef:49:68:a5:40: 17:cd:58:8f:73:4f:28:7b:c1:96:3a:ac:27:10:c6: 77:f0:49:91:ef:7e:a1:05:fc:a7:30:3e:5e:47:31: c4:e6:0f:cf:87:38:19:ec:6f:b0:31:f5:64:1c:dd: 61:6c:c7:b5:c0:2f:78:f7:4b:f6:b7:a0:bf:c8:8b: f6:d5:bd:76:a2:fa:f9:6f:4e:ec:27:3d:08:60:a6: 68:8b:18:de:98:5f:6f:ff:f4:a9:6e:37:ea:58:14: 18:07:77:4e:46:27:90:d7:25:45:12:9c:7f:23:c9: bc:07:59:da:18:26:82:f2:b6:ad:4c:12:bd:23:62: cd:d5:32:ac:3c:87:7d:3b:62:87:3d:b4:58:10:a3: 29:4b:83:4e:fe:c0:81:ef:36:a0:eb:e5:d3:27:f9: b6:a3:b6:78:61:63:9b:8d:f7:9d:95:72:d3:6d:eb: 65:5d:af:56:06:0f:2d:03:2f:d6:43:aa:c5:c4:99: 70:2b:5f:bb:1a:ba:bc:ba:37:99:13:ab:6f:28:d7: 53:8f:4f:d3:22:53:6d:3f:5c:a4:5b:c0:20:be:6a: 00:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.148.2.0/23 IPv6: 2405:c640::/32 Signature Algorithm: sha256WithRSAEncryption 5e:d3:f4:f2:63:34:4f:3f:f0:ef:5f:2d:72:f2:ef:d5:ec:af: 13:75:48:ba:92:60:04:8f:36:da:74:e8:ac:ea:f6:66:04:d6: a2:de:ad:e1:94:0e:02:f4:51:dd:84:98:53:30:d8:22:53:2a: 06:31:cb:ea:2f:53:90:97:fc:53:b9:cb:c3:c7:5e:a4:13:06: f2:a8:36:5c:22:42:a8:d4:c3:68:cc:b3:cc:9a:6b:11:0b:4a: bc:8d:57:c5:41:9c:9e:5d:69:46:b2:03:d4:d3:a7:a9:2b:d0: 68:87:40:1a:42:d9:a0:b0:65:a9:a7:93:ff:f1:d1:52:af:31: 7f:5d:1e:76:9d:a3:c9:78:23:d8:91:3c:1d:fc:51:e6:d1:3e: dc:5d:42:12:29:ca:80:f7:43:9c:17:a7:51:9a:ee:53:a5:61: f3:93:95:61:26:9d:2c:68:c3:9f:0f:33:34:16:73:e2:64:0b: 4b:08:53:34:0b:da:23:30:80:24:be:d5:16:20:ac:4a:7a:c1: 24:86:cf:8a:20:a3:a5:c7:e7:6c:08:eb:dc:03:cb:02:6c:c2: 04:5b:73:75:0f:49:79:ac:5f:a3:28:d9:b0:17:05:27:a6:20: 0d:1f:c5:db:be:0f:b7:a2:cd:ad:5a:09:71:ff:07:34:75:4d: 25:5b:b3:33 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUara1erlz0ozwGpjA6NHq07rdpxcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyNzE0MzgzNloX DTI3MDMyNjE0NDMzNlowMzExMC8GA1UEAxMoN0VFQkVGRDFBRTcyNTE5OUU0QjAy M0NEQTIyQTMwMDVFRkJGNERFODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPWF40h/CfCD4qbu6QZOi8oGoB10vsX4CtyAy8qdwZ0S4TN36vXfme9JaKVA F81Yj3NPKHvBljqsJxDGd/BJke9+oQX8pzA+XkcxxOYPz4c4GexvsDH1ZBzdYWzH tcAvePdL9regv8iL9tW9dqL6+W9O7Cc9CGCmaIsY3phfb//0qW436lgUGAd3TkYn kNclRRKcfyPJvAdZ2hgmgvK2rUwSvSNizdUyrDyHfTtihz20WBCjKUuDTv7Age82 oOvl0yf5tqO2eGFjm433nZVy023rZV2vVgYPLQMv1kOqxcSZcCtfuxq6vLo3mROr byjXU49P0yJTbT9cpFvAIL5qADsCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFH7r79GuclGZ5LAjzaIqMAXvv03oMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZTIwZTgwMC0yNWJiLTRjNzgtYThiMy1mMGViMjVjMmU4MmEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlMjBlODAw LTI1YmItNGM3OC1hOGIzLWYwZWIyNWMyZTgyYS8wLzdFRUJFRkQxQUU3MjUxOTlF NEIwMjNDREEyMkEzMDA1RUZCRjRERTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnlAIwDQQCAAIwBwMFACQFxkAwDQYJKoZIhvcNAQELBQADggEBAF7T9PJjNE8/ 8O9fLXLy79XsrxN1SLqSYASPNtp06Kzq9mYE1qLereGUDgL0Ud2EmFMw2CJTKgYx y+ovU5CX/FO5y8PHXqQTBvKoNlwiQqjUw2jMs8yaaxELSryNV8VBnJ5daUayA9TT p6kr0GiHQBpC2aCwZamnk//x0VKvMX9dHnado8l4I9iRPB38UebRPtxdQhIpyoD3 Q5wXp1Ga7lOlYfOTlWEmnSxow58PMzQWc+JkC0sIUzQL2iMwgCS+1RYgrEp6wSSG z4ogo6XH52wI69wDywJswgRbc3UPSXmsX6Mo2bAXBSemIA0fxdu+D7eiza1aCXH/ BzR1TSVbszM= -----END CERTIFICATE-----Generated at Fri Apr 17 10:33:28 2026 by rpki-client