$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.cer File: 9432D378217A8BEEE34D953A8BFFD5AA33F1104E.cer (raw, json) Hash identifier: zMMPUPS+Z7Yfin9x7KCV552kKhEUqDDWtDvpviEY3h0= Subject key identifier: 94:32:D3:78:21:7A:8B:EE:E3:4D:95:3A:8B:FF:D5:AA:33:F1:10:4E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 42D69CE7F90FD46B4782DA7EF22A2C82C2F22FA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.mft caRepository: rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 07 Feb 2026 01:40:43 +0000 Certificate not after: Sat 06 Feb 2027 01:45:43 +0000 Subordinate resources: IP: 103.203.232.0/23 IP: 2001:df3:d6c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:d6:9c:e7:f9:0f:d4:6b:47:82:da:7e:f2:2a:2c:82:c2:f2:2f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 7 01:40:43 2026 GMT Not After : Feb 6 01:45:43 2027 GMT Subject: CN=9432D378217A8BEEE34D953A8BFFD5AA33F1104E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:11:ec:75:09:ad:39:f4:c9:35:1a:63:57:f8: 3a:0d:cb:db:18:2c:75:9a:2c:a7:90:6e:6f:8e:4e: 74:61:3d:a1:59:8c:12:e4:53:4a:0d:28:dd:1f:2c: ab:9c:c4:66:62:3a:21:09:73:49:52:46:80:7e:93: c2:ea:26:9f:3a:cf:3f:2f:96:c8:af:ff:22:89:d5: 0c:32:34:12:5f:92:0d:80:5d:f1:23:29:a8:07:20: 5b:af:25:a6:eb:fa:2d:5a:a9:bb:84:0c:46:70:ed: 08:10:55:cb:c1:43:7b:be:b7:bb:9e:20:fc:86:5f: 86:27:17:11:9a:dc:43:db:64:89:40:38:d2:e0:5c: e7:8e:3f:bb:f7:e7:bb:05:d3:31:3a:ad:c3:61:b6: 8d:ad:46:f7:6c:10:02:23:87:17:4f:be:e5:f8:5d: 2e:98:e0:ce:b8:cc:7f:2e:2d:69:db:ec:f7:77:4e: 2c:11:ea:ff:11:b7:e4:92:8f:80:d2:d0:5d:ec:f8: da:6e:a7:28:7f:6e:28:dc:d4:52:e7:42:30:6f:35: 62:ec:18:43:b4:77:24:59:88:d3:69:48:ab:77:9d: 89:e4:22:98:7b:a7:58:28:49:73:d4:24:28:92:98: 77:43:68:1f:c3:31:99:bc:a5:b1:6d:74:0b:81:79: e9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 94:32:D3:78:21:7A:8B:EE:E3:4D:95:3A:8B:FF:D5:AA:33:F1:10:4E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/176607ea-add7-4ca5-8f2d-da8b791a3b42/0/9432D378217A8BEEE34D953A8BFFD5AA33F1104E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.203.232.0/23 IPv6: 2001:df3:d6c0::/48 Signature Algorithm: sha256WithRSAEncryption 1d:be:9b:67:17:a3:81:42:2d:95:03:e6:85:bf:2d:0d:1f:98: 77:dc:f2:b4:ff:64:71:41:67:d3:11:82:d3:cc:05:88:07:82: 19:bb:12:00:70:4e:6c:69:16:86:35:a3:cc:49:af:60:53:50: 32:98:42:1f:b9:8c:dc:22:67:05:45:59:34:3e:d4:e9:be:72: 5e:9a:28:c5:3c:e1:fc:89:a1:1d:2b:46:f4:57:87:12:18:2d: 9a:a0:41:d7:ee:55:d8:28:a6:34:e1:b1:34:39:0b:b6:fa:db: 44:12:c7:c5:29:9a:f5:58:20:96:5f:48:3e:6e:ee:bb:6a:4d: af:5c:84:6c:b6:77:eb:87:87:02:52:0e:85:b5:a0:79:c6:36: f8:db:c2:0b:da:14:e1:e7:48:4a:bf:7d:36:16:de:d5:80:0c: bc:c1:10:fb:d8:8b:cb:1e:00:87:14:7f:06:62:10:b0:04:2f: 51:48:4f:07:1d:c9:07:10:d8:f9:23:4c:7b:8f:06:91:35:94: eb:ed:c4:70:0c:4c:37:94:bc:6e:06:34:07:3b:98:58:0a:f9: 91:a7:92:06:dd:59:dc:a9:b2:b3:9f:01:2d:54:fb:05:c0:fd: 25:fa:85:64:2f:10:05:11:11:52:51:de:c5:1a:f0:f8:87:df: f3:a9:48:4e -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUQtac5/kP1GtHgtp+8iosgsLyL6cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwNzAxNDA0M1oX DTI3MDIwNjAxNDU0M1owMzExMC8GA1UEAxMoOTQzMkQzNzgyMTdBOEJFRUUzNEQ5 NTNBOEJGRkQ1QUEzM0YxMTA0RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOER7HUJrTn0yTUaY1f4Og3L2xgsdZosp5Bub45OdGE9oVmMEuRTSg0o3R8s q5zEZmI6IQlzSVJGgH6TwuomnzrPPy+WyK//IonVDDI0El+SDYBd8SMpqAcgW68l puv6LVqpu4QMRnDtCBBVy8FDe763u54g/IZfhicXEZrcQ9tkiUA40uBc544/u/fn uwXTMTqtw2G2ja1G92wQAiOHF0++5fhdLpjgzrjMfy4tadvs93dOLBHq/xG35JKP gNLQXez42m6nKH9uKNzUUudCMG81YuwYQ7R3JFmI02lIq3edieQimHunWChJc9Qk KJKYd0NoH8MxmbylsW10C4F56W0CAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJQy03gheovu402VOov/1aoz8RBOMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNzY2MDdlYS1hZGQ3LTRjYTUtOGYyZC1kYThiNzkxYTNiNDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3NjYwN2Vh LWFkZDctNGNhNS04ZjJkLWRhOGI3OTFhM2I0Mi8wLzk0MzJEMzc4MjE3QThCRUVF MzREOTUzQThCRkZENUFBMzNGMTEwNEUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAFny+gwDwQCAAIwCQMHACABDfPWwDANBgkqhkiG9w0BAQsFAAOCAQEAHb6bZxej gUItlQPmhb8tDR+Yd9zytP9kcUFn0xGC08wFiAeCGbsSAHBObGkWhjWjzEmvYFNQ MphCH7mM3CJnBUVZND7U6b5yXpooxTzh/ImhHStG9FeHEhgtmqBB1+5V2CimNOGx NDkLtvrbRBLHxSma9Vggll9IPm7uu2pNr1yEbLZ364eHAlIOhbWgecY2+NvCC9oU 4edISr99Nhbe1YAMvMEQ+9iLyx4AhxR/BmIQsAQvUUhPBx3JBxDY+SNMe48GkTWU 6+3EcAxMN5S8bgY0BzuYWAr5kaeSBt1Z3Kmys58BLVT7BcD9JfqFZC8QBRERUlHe xRrw+Iff86lITg== -----END CERTIFICATE-----Generated at Mon Mar 2 15:07:20 2026 by rpki-client