$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer File: 88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.cer (raw, json) Hash identifier: lxTl8vvWSAhtEZa0D2Go6wEUmk5Zg59z6mKOVcDc4+8= Subject key identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2F499CF679D648518E11771697992CA5C2AA7214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft caRepository: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 01:41:05 +0000 Certificate not after: Fri 09 Apr 2027 01:46:05 +0000 Subordinate resources: IP: 103.172.172.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:49:9c:f6:79:d6:48:51:8e:11:77:16:97:99:2c:a5:c2:aa:72:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 10 01:41:05 2026 GMT Not After : Apr 9 01:46:05 2027 GMT Subject: CN=88E12887FF4C1BDD31B6A1B22A293CB91F465AA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a0:c8:e6:c1:91:50:49:11:3d:fa:7c:a7:28: c2:c7:c1:b3:59:02:de:0a:5b:e0:df:f6:43:d0:eb: 5a:68:7a:07:c4:6a:6e:c5:fa:eb:c5:78:34:55:37: 62:ea:5f:51:30:f2:e2:99:af:28:0d:22:d1:de:ff: 6b:ad:f1:9f:c3:c8:39:31:20:53:35:39:3f:52:35: 06:1d:e7:51:da:c9:86:de:20:66:5d:df:50:f6:00: 76:ae:e0:6e:48:66:73:7f:99:e1:01:0a:df:e6:2f: de:dc:98:86:25:ca:b9:43:f9:e2:e7:29:51:41:b9: a3:65:a3:1b:20:63:00:72:42:1e:63:fd:83:fc:fd: 34:14:5d:81:a6:16:89:82:2b:2a:0e:19:92:c7:16: 00:b4:52:15:c4:d4:bf:28:14:20:e6:0a:21:1d:3f: 66:3e:fa:ae:54:e0:b6:e8:38:92:f3:66:93:80:0f: 01:f8:69:c4:85:26:34:7f:c1:70:54:e7:ba:87:f8: 00:eb:d3:27:b8:3a:31:9a:7b:51:d5:30:57:ab:f8: 1b:7b:c0:ea:6d:98:d4:d1:ae:69:96:a8:17:d3:99: c1:c2:68:30:00:f9:ef:51:e8:5f:a9:6e:6a:80:f8: cd:29:0a:02:b3:04:f6:81:76:c7:b9:3e:a5:c9:d8: 7a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 88:E1:28:87:FF:4C:1B:DD:31:B6:A1:B2:2A:29:3C:B9:1F:46:5A:A9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/1/88E12887FF4C1BDD31B6A1B22A293CB91F465AA9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.172.172.0/24 Signature Algorithm: sha256WithRSAEncryption 30:ed:cc:9e:f6:e1:66:51:04:7b:70:d4:7b:18:83:44:e4:53: 46:5c:3e:bd:1c:42:11:54:51:80:57:26:5c:b5:55:c0:89:48: 04:e6:27:87:bd:41:cf:89:2f:b4:c5:c3:12:4b:34:38:79:dc: 34:de:69:2d:5d:b5:d0:d4:68:a3:f3:a7:c8:c3:7c:0f:23:28: b3:15:4d:a7:36:ba:0a:37:79:74:71:2b:d8:54:89:49:dc:2f: ff:cc:eb:55:07:f0:65:70:4d:53:9a:ae:e0:f7:15:30:b7:4d: 87:ef:f6:63:59:c0:0b:74:01:2e:06:79:69:06:8d:ed:df:bc: dc:29:29:77:70:71:ea:52:20:47:c8:eb:c0:54:5a:36:18:3e: fb:8f:63:28:0c:12:c9:5b:0d:c3:ba:8c:2c:3d:77:4d:85:9e: dc:46:32:45:f9:47:de:d8:f3:ac:d6:db:d2:21:e1:5d:3d:20: cf:a0:db:72:f0:66:1b:fa:bf:95:45:38:15:0c:c2:f4:3b:10: d0:ed:69:18:e7:39:b3:e6:fb:54:6e:c5:7b:8a:48:63:89:22: fa:d7:d5:09:44:9d:a3:30:a3:ee:a8:07:87:ab:c0:e8:d6:5f: 44:a1:78:a8:66:75:16:a1:58:d4:de:81:f7:80:83:7a:b9:e4: bf:cc:1d:ce -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUL0mc9nnWSFGOEXcWl5kspcKqchQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxMDAxNDEwNVoX DTI3MDQwOTAxNDYwNVowMzExMC8GA1UEAxMoODhFMTI4ODdGRjRDMUJERDMxQjZB MUIyMkEyOTNDQjkxRjQ2NUFBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJqgyObBkVBJET36fKcowsfBs1kC3gpb4N/2Q9DrWmh6B8RqbsX668V4NFU3 YupfUTDy4pmvKA0i0d7/a63xn8PIOTEgUzU5P1I1Bh3nUdrJht4gZl3fUPYAdq7g bkhmc3+Z4QEK3+Yv3tyYhiXKuUP54ucpUUG5o2WjGyBjAHJCHmP9g/z9NBRdgaYW iYIrKg4ZkscWALRSFcTUvygUIOYKIR0/Zj76rlTgtug4kvNmk4APAfhpxIUmNH/B cFTnuof4AOvTJ7g6MZp7UdUwV6v4G3vA6m2Y1NGuaZaoF9OZwcJoMAD571HoX6lu aoD4zSkKArME9oF2x7k+pcnYejECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIjhKIf/TBvdMbahsiopPLkfRlqpMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg0ZGE0MTVi LTVmMTctNDYwMi05YmQ5LWZkODRhYzJjYWU4Ni8xLzg4RTEyODg3RkY0QzFCREQz MUI2QTFCMjJBMjkzQ0I5MUY0NjVBQTkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnrKwwDQYJKoZIhvcNAQELBQADggEBADDtzJ724WZRBHtw1HsYg0TkU0ZcPr0c QhFUUYBXJly1VcCJSATmJ4e9Qc+JL7TFwxJLNDh53DTeaS1dtdDUaKPzp8jDfA8j KLMVTac2ugo3eXRxK9hUiUncL//M61UH8GVwTVOaruD3FTC3TYfv9mNZwAt0AS4G eWkGje3fvNwpKXdwcepSIEfI68BUWjYYPvuPYygMEslbDcO6jCw9d02FntxGMkX5 R97Y86zW29Ih4V09IM+g23LwZhv6v5VFOBUMwvQ7ENDtaRjnObPm+1RuxXuKSGOJ IvrX1QlEnaMwo+6oB4erwOjWX0SheKhmdRahWNTegfeAg3q55L/MHc4= -----END CERTIFICATE-----Generated at Sat Apr 18 00:11:45 2026 by rpki-client