$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer File: 82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer (raw, json) Hash identifier: T/4MJMeKPFSX4LOkDQGsaHDm7GZn+B6mWGtt9a5ZR7g= Subject key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3C095D5A72635847ECBF6C2489099CFA8612DF62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft caRepository: rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 12 Feb 2026 03:31:40 +0000 Certificate not after: Thu 11 Feb 2027 03:36:40 +0000 Subordinate resources: IP: 103.4.0.0/22 IP: 116.90.160.0/20 IP: 122.128.24.0/21 IP: 150.107.108.0/22 IP: 202.43.160.0/20 IP: 202.78.192.0/20 IP: 203.134.232.0/21 IP: 203.173.92.0/22 IP: 2404:1b0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:09:5d:5a:72:63:58:47:ec:bf:6c:24:89:09:9c:fa:86:12:df:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 12 03:31:40 2026 GMT Not After : Feb 11 03:36:40 2027 GMT Subject: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:78:e4:1f:26:81:37:3b:3f:5f:5e:35:2f: 30:95:f2:ba:31:fb:59:a0:c0:f9:72:c7:b9:3c:a1: 14:b6:ca:83:2f:cc:a8:0f:2b:c5:02:ad:62:3c:6c: 46:f1:7a:79:14:86:63:5a:4e:76:25:cb:bf:0d:89: 2f:69:41:65:e3:9e:09:15:35:20:0d:e7:6a:8f:5b: f6:05:db:11:14:7b:67:09:c2:43:f6:b9:21:d8:06: 06:62:de:a8:f2:96:cc:ff:cb:dd:c3:e7:2e:36:6b: 6a:91:2b:c5:f1:6b:8f:ce:e1:b2:eb:e5:d1:4b:77: 78:98:de:30:85:9f:5d:7b:a5:69:b4:46:a0:3f:9d: c9:9b:d7:28:a9:a6:ec:9c:05:2a:86:ab:eb:d1:c2: 0e:b3:da:7f:38:5b:b6:e0:5f:08:cd:91:26:3f:81: ad:89:b2:47:f6:dd:39:72:54:a3:a5:fc:f6:46:79: df:b3:ab:f2:76:67:07:d3:91:f4:4b:bc:80:85:58: 1a:8d:79:69:9b:51:57:e7:35:cb:2f:3d:97:e0:e2: fe:e2:28:fb:33:01:8a:80:04:52:37:84:34:ba:2c: 49:fa:d8:71:57:66:5a:11:e2:3d:aa:60:12:b9:19: 4e:40:50:25:0c:f8:e3:6f:ba:1d:df:d9:a4:44:23: 97:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.4.0.0/22 116.90.160.0/20 122.128.24.0/21 150.107.108.0/22 202.43.160.0/20 202.78.192.0/20 203.134.232.0/21 203.173.92.0/22 IPv6: 2404:1b0::/32 Signature Algorithm: sha256WithRSAEncryption 17:55:46:97:6c:89:d3:bc:80:a6:18:94:0d:82:57:50:ea:2e: 70:fb:d5:f9:9d:e2:85:ef:62:ac:c0:b8:58:66:b3:6c:23:78: 2b:ee:2e:3e:2d:6a:75:f8:9b:d3:26:6b:9d:0d:dd:8e:e7:b3: e9:8f:b7:92:19:81:e5:1e:95:45:2c:cb:ff:04:03:97:f4:c0: 9d:6a:59:51:03:e5:36:fe:4f:6c:8c:d8:74:25:9d:7c:aa:ac: 67:ae:71:93:9f:2a:f8:ee:fa:f0:01:73:a9:94:2e:85:85:a5: e0:f2:96:d0:4e:54:d6:0e:74:95:c1:20:7f:56:f8:e4:97:0a: 01:d3:01:9a:3b:a0:77:13:81:3b:51:b7:c8:d3:75:76:b2:55: 5a:05:62:60:3e:b0:d5:02:d0:5c:87:6d:03:32:d9:80:fe:f7: 2f:10:56:ed:86:67:22:ec:7f:fb:7f:4a:65:92:8c:cf:1a:5c: 84:cd:bb:6d:8e:db:2c:45:49:6b:90:9e:84:d9:f1:45:57:34: e0:cc:aa:d5:04:47:d0:09:48:49:e6:63:5c:d8:de:1b:8b:36: d2:e0:1e:ce:77:a8:d6:27:46:ed:79:47:97:e0:b4:2b:03:41: 54:ba:f8:1d:e8:5f:72:62:e2:35:0a:06:db:66:c0:db:0f:b3: e0:94:87:04 -----BEGIN CERTIFICATE----- MIIF/jCCBOagAwIBAgIUPAldWnJjWEfsv2wkiQmc+oYS32IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxMjAzMzE0MFoX DTI3MDIxMTAzMzY0MFowMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdD RTFBQ0U5NUE1MUM2QzhBMUQ4RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK2AeOQfJoE3Oz9fXjUvMJXyujH7WaDA+XLHuTyhFLbKgy/MqA8rxQKtYjxs RvF6eRSGY1pOdiXLvw2JL2lBZeOeCRU1IA3nao9b9gXbERR7ZwnCQ/a5IdgGBmLe qPKWzP/L3cPnLjZrapErxfFrj87hsuvl0Ut3eJjeMIWfXXulabRGoD+dyZvXKKmm 7JwFKoar69HCDrPafzhbtuBfCM2RJj+BrYmyR/bdOXJUo6X89kZ537Or8nZnB9OR 9Eu8gIVYGo15aZtRV+c1yy89l+Di/uIo+zMBioAEUjeENLosSfrYcVdmWhHiPapg ErkZTkBQJQz442+6Hd/ZpEQjl5ECAwEAAaOCAvEwggLtMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIKIQVGlKD9DypfOGs6VpRxsih2OMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYz LTEyYjYtNGQ4Zi1hZDBiLTRjZDViNjE5NTllZi8wLzgyODg0MTUxQTUyODNGNDND QTk3Q0UxQUNFOTVBNTFDNkM4QTFEOEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwWAYIKwYBBQUHAQcBAf8ESTBHMDYEAgABMDAD BAJnBAADBAR0WqADBAN6gBgDBAKWa2wDBATKK6ADBATKTsADBAPLhugDBALLrVww DQQCAAIwBwMFACQEAbAwDQYJKoZIhvcNAQELBQADggEBABdVRpdsidO8gKYYlA2C V1DqLnD71fmd4oXvYqzAuFhms2wjeCvuLj4tanX4m9Mma50N3Y7ns+mPt5IZgeUe lUUsy/8EA5f0wJ1qWVED5Tb+T2yM2HQlnXyqrGeucZOfKvju+vABc6mULoWFpeDy ltBOVNYOdJXBIH9W+OSXCgHTAZo7oHcTgTtRt8jTdXayVVoFYmA+sNUC0FyHbQMy 2YD+9y8QVu2GZyLsf/t/SmWSjM8aXITNu22O2yxFSWuQnoTZ8UVXNODMqtUER9AJ SEnmY1zY3huLNtLgHs53qNYnRu15R5fgtCsDQVS6+B3oX3Ji4jUKBttmwNsPs+CU hwQ= -----END CERTIFICATE-----Generated at Mon Mar 2 00:24:08 2026 by rpki-client