$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer File: 8F9164714A1B3B906CF8A8B371F342EBA3540CD9.cer (raw, json) Hash identifier: f1RMhrrCRQTf/J+D6ISo7LYgMuCg8Ao0CXEDHOJD4VA= Subject key identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1029D85388B65E674958DDF6BA2FE071B51D69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft caRepository: rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 27 Mar 2026 22:20:54 +0000 Certificate not after: Fri 26 Mar 2027 22:25:54 +0000 Subordinate resources: IP: 103.188.119.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:29:d8:53:88:b6:5e:67:49:58:dd:f6:ba:2f:e0:71:b5:1d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 27 22:20:54 2026 GMT Not After : Mar 26 22:25:54 2027 GMT Subject: CN=8F9164714A1B3B906CF8A8B371F342EBA3540CD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:91:c2:3a:0a:d1:5d:6b:80:4b:73:c2:d7:e9: d5:27:ea:35:0a:20:57:57:bc:02:f2:f9:09:34:a3: 41:9f:00:91:0f:0f:c6:7b:a8:f5:eb:77:d4:6e:53: de:a3:e1:c6:d6:7d:23:83:f2:a5:1e:bb:20:f7:3b: 37:46:b8:96:0e:1f:d8:03:d0:0b:39:58:4a:bf:7e: bd:ef:27:76:dd:14:ef:77:1a:07:71:b6:ba:1c:d8: ff:0f:07:15:8b:40:78:88:01:71:be:08:24:2e:45: f7:f0:3c:ee:d5:f3:52:e0:10:11:2f:28:4b:ad:0f: d7:0d:22:0c:eb:66:00:49:fe:7a:e0:7e:7e:8f:d4: 9c:ec:bb:7c:61:1c:cb:4a:92:f0:a7:1f:4e:0f:ed: ed:f9:a4:21:ba:34:28:ff:1f:4f:e8:ac:2a:f3:bf: bc:0f:83:67:b5:26:94:c0:16:a4:a1:e4:f2:0d:dc: c4:da:b4:3a:32:5c:4f:ac:1d:94:c3:47:48:4d:3d: 08:33:d1:7b:39:ed:3f:c1:91:76:54:04:8c:a6:df: 7c:b4:f1:66:2e:01:1e:6a:67:3c:e8:b9:b4:f7:b3: 07:de:ee:76:6e:b6:3b:fd:8f:c8:d9:a1:36:6c:ca: 78:a0:42:26:cb:f2:08:63:25:85:85:ee:41:a3:82: 0b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8F:91:64:71:4A:1B:3B:90:6C:F8:A8:B3:71:F3:42:EB:A3:54:0C:D9 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/14758e8e-49c8-48b8-bdcb-35339e2ae601/0/8F9164714A1B3B906CF8A8B371F342EBA3540CD9.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.188.119.0/24 Signature Algorithm: sha256WithRSAEncryption 12:45:84:6d:4b:24:fc:7c:e2:83:2a:ad:0b:f5:a9:7a:42:63: 3f:41:e4:aa:18:81:de:d1:76:d9:18:c7:c7:87:d9:ce:1e:95: df:b9:e1:66:3f:ec:97:0e:74:e4:64:34:00:6b:80:04:4d:e9: 2d:04:ad:16:03:2c:72:58:19:cf:2e:24:58:bb:75:e4:62:4b: 22:02:43:19:c4:bf:95:7a:8f:91:ce:7c:4e:c4:32:c3:06:7e: 47:8a:4e:82:d5:c4:a1:37:0d:13:c3:0d:06:17:c7:fa:e0:d3: 71:e6:9c:28:29:44:0e:af:49:1b:60:e8:6e:aa:fd:cd:04:88: 79:73:b7:69:3a:35:16:9d:cc:43:57:a1:09:ac:19:d1:c5:76: b1:5c:06:28:35:8c:2b:60:f2:e5:6c:29:89:2d:83:83:c6:01: c1:5b:71:d2:dc:70:4c:db:b8:5c:a5:11:3f:37:ee:7f:62:70: b2:6e:28:b2:06:17:bb:61:e5:7a:8a:80:12:ba:05:43:79:56: 31:38:2d:a9:35:c0:fb:fe:99:03:25:82:e1:50:18:99:fb:b6: b1:f3:56:b4:20:f7:49:47:a8:49:f8:4f:41:4c:53:1e:62:17: 1c:36:91:3a:97:a1:44:60:00:54:d2:ae:c6:76:d9:b9:bd:7e: d7:a2:18:12 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgITECnYU4i2XmdJWN32ui/gcbUdaTANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDEwxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjYwMzI3MjIyMDU0WhcN MjcwMzI2MjIyNTU0WjAzMTEwLwYDVQQDEyg4RjkxNjQ3MTRBMUIzQjkwNkNGOEE4 QjM3MUYzNDJFQkEzNTQwQ0Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pHCOgrRXWuAS3PC1+nVJ+o1CiBXV7wC8vkJNKNBnwCRDw/Ge6j163fUblPe o+HG1n0jg/KlHrsg9zs3RriWDh/YA9ALOVhKv3697yd23RTvdxoHcba6HNj/DwcV i0B4iAFxvggkLkX38Dzu1fNS4BARLyhLrQ/XDSIM62YASf564H5+j9Sc7Lt8YRzL SpLwpx9OD+3t+aQhujQo/x9P6Kwq87+8D4NntSaUwBakoeTyDdzE2rQ6MlxPrB2U w0dITT0IM9F7Oe0/wZF2VASMpt98tPFmLgEeamc86Lm097MH3u52brY7/Y/I2aE2 bMp4oEImy/IIYyWFhe5Bo4ILKwIDAQABo4ICuDCCArQwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQUj5FkcUobO5Bs+KizcfNC66NUDNkwHwYDVR0jBBgwFoAUuo93 0h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIv QkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgzMzc2Qi5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvdW85 MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv LzE0NzU4ZThlLTQ5YzgtNDhiOC1iZGNiLTM1MzM5ZTJhZTYwMS8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ3NThlOGUt NDljOC00OGI4LWJkY2ItMzUzMzllMmFlNjAxLzAvOEY5MTY0NzE0QTFCM0I5MDZD RjhBOEIzNzFGMzQyRUJBMzU0MENEOS5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AGe8dzANBgkqhkiG9w0BAQsFAAOCAQEAEkWEbUsk/HzigyqtC/WpekJjP0HkqhiB 3tF22RjHx4fZzh6V37nhZj/slw505GQ0AGuABE3pLQStFgMsclgZzy4kWLt15GJL IgJDGcS/lXqPkc58TsQywwZ+R4pOgtXEoTcNE8MNBhfH+uDTceacKClEDq9JG2Do bqr9zQSIeXO3aTo1Fp3MQ1ehCawZ0cV2sVwGKDWMK2Dy5WwpiS2Dg8YBwVtx0txw TNu4XKURPzfuf2Jwsm4osgYXu2HleoqAEroFQ3lWMTgtqTXA+/6ZAyWC4VAYmfu2 sfNWtCD3SUeoSfhPQUxTHmIXHDaROpehRGAAVNKuxnbZub1+16IYEg== -----END CERTIFICATE-----Generated at Sun Apr 19 09:45:36 2026 by rpki-client