$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer File: AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer (raw, json) Hash identifier: RPvP/YzzxbQiytnwVLTCYt1Ru41AfjOy1PPeeBcUN9g= Subject key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6344FFA8B568E5A5907B099EC03090A592522824 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft caRepository: rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 27 Feb 2026 21:42:34 +0000 Certificate not after: Fri 26 Feb 2027 21:47:34 +0000 Subordinate resources: IP: 103.166.6.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:44:ff:a8:b5:68:e5:a5:90:7b:09:9e:c0:30:90:a5:92:52:28:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 27 21:42:34 2026 GMT Not After : Feb 26 21:47:34 2027 GMT Subject: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:cc:a3:4c:73:a8:05:8a:5d:f8:99:ad:b5:5b: a0:c2:13:8e:4d:d0:17:a6:b5:15:c7:10:86:38:a3: ac:6f:5a:53:b3:e9:8a:10:a7:8d:7b:39:97:84:d5: 96:b0:ed:ae:fe:11:b5:7b:d3:0e:3b:75:fc:de:00: ad:47:24:54:8a:b0:f7:51:83:f2:fe:b5:ec:bf:37: ba:5a:a7:fb:16:98:17:22:19:6e:fe:1a:0b:65:44: 8c:64:46:ac:8d:a5:d3:0b:70:5d:52:f4:a8:ea:cc: 34:14:a1:60:d8:37:c2:e8:0c:f3:c1:02:40:57:18: 1a:eb:ee:85:76:27:8c:0e:25:51:13:7d:ab:1e:f5: 5b:82:3e:38:5e:7f:bb:9d:5c:7d:5e:4a:d1:18:5f: c1:cd:2d:4a:26:28:52:77:5a:c8:02:24:0e:57:c3: df:08:dd:b0:23:5d:67:ef:d4:69:6e:b1:14:6e:67: b8:fe:21:39:97:86:5b:fe:64:6a:a3:a0:df:1a:ab: ed:09:fa:f1:02:9c:ce:70:74:04:3f:69:09:f1:72: 62:cb:1c:f5:6e:39:a8:9e:73:51:5f:d8:76:e1:22: 72:e8:94:36:c5:75:9b:07:f5:c2:f4:10:fd:1f:fd: 55:1e:3c:ea:ac:cf:08:c6:46:51:63:34:dc:dd:4c: c0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.6.0/23 Signature Algorithm: sha256WithRSAEncryption 10:e9:66:2f:90:11:b7:7f:2e:0b:ae:51:d0:5c:d5:29:ab:c6: 94:63:a6:b3:e6:ac:3d:e2:1e:53:e9:da:f1:62:6c:dd:6e:ce: 62:9a:ba:b6:86:6a:7d:ba:a9:be:54:53:f1:b6:b5:ca:78:3c: ff:5b:f0:e4:b2:fa:e0:e6:01:89:58:11:66:91:0c:45:f3:c7: 86:82:11:6d:d4:0d:c4:db:2f:0f:50:8e:ad:2f:ce:0e:ad:2b: 88:b6:4b:08:ab:b8:61:22:af:22:02:a8:1b:6e:52:f9:67:70: bc:8f:c2:74:b3:8a:c2:41:96:eb:f3:6b:a6:2b:ee:c7:04:d1: 1d:53:04:4a:da:44:06:d5:e2:d8:79:45:74:d1:eb:10:85:71: f9:29:6c:9b:1f:e0:4f:b0:fc:0f:a3:f4:16:30:02:72:d0:5c: 49:1b:45:53:3f:90:c6:2d:66:01:9a:73:ea:6e:60:39:e6:cc: ee:5d:45:7e:da:a3:b2:43:e3:e2:e9:a6:f5:88:59:cb:de:f6: bb:3f:fa:82:2c:e9:f6:df:c8:a9:c9:7b:6a:f2:d2:74:2f:89: 6f:c5:ae:27:47:72:2a:69:ed:5e:33:54:a3:64:7f:a7:87:e3: d8:ca:99:c7:16:89:43:9f:77:c6:24:3a:e6:95:f3:ae:ba:0e: 8d:80:50:c6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUY0T/qLVo5aWQewmewDCQpZJSKCQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNzIxNDIzNFoX DTI3MDIyNjIxNDczNFowMzExMC8GA1UEAxMoQUFFMDI5RUFEM0M2RTVDQjE5QkM5 Q0UxNDFEQjc2NzlBNDIzRDMxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAO7Mo0xzqAWKXfiZrbVboMITjk3QF6a1FccQhjijrG9aU7PpihCnjXs5l4TV lrDtrv4RtXvTDjt1/N4ArUckVIqw91GD8v617L83ulqn+xaYFyIZbv4aC2VEjGRG rI2l0wtwXVL0qOrMNBShYNg3wugM88ECQFcYGuvuhXYnjA4lURN9qx71W4I+OF5/ u51cfV5K0Rhfwc0tSiYoUndayAIkDlfD3wjdsCNdZ+/UaW6xFG5nuP4hOZeGW/5k aqOg3xqr7Qn68QKcznB0BD9pCfFyYssc9W45qJ5zUV/YduEicuiUNsV1mwf1wvQQ /R/9VR486qzPCMZGUWM03N1MwDsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKrgKerTxuXLGbyc4UHbdnmkI9MYMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZGI5MmU4OS05MmQ1LTQwNjQtOTUxMS0wNjdlMzUzNjc5Y2UvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RkYjkyZTg5 LTkyZDUtNDA2NC05NTExLTA2N2UzNTM2NzljZS8wL0FBRTAyOUVBRDNDNkU1Q0Ix OUJDOUNFMTQxREI3Njc5QTQyM0QzMTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnpgYwDQYJKoZIhvcNAQELBQADggEBABDpZi+QEbd/LguuUdBc1SmrxpRjprPm rD3iHlPp2vFibN1uzmKauraGan26qb5UU/G2tcp4PP9b8OSy+uDmAYlYEWaRDEXz x4aCEW3UDcTbLw9Qjq0vzg6tK4i2SwiruGEiryICqBtuUvlncLyPwnSzisJBluvz a6Yr7scE0R1TBEraRAbV4th5RXTR6xCFcfkpbJsf4E+w/A+j9BYwAnLQXEkbRVM/ kMYtZgGac+puYDnmzO5dRX7ao7JD4+LppvWIWcve9rs/+oIs6fbfyKnJe2ry0nQv iW/FridHcipp7V4zVKNkf6eH49jKmccWiUOfd8YkOuaV8666Do2AUMY= -----END CERTIFICATE-----Generated at Mon Mar 2 02:31:25 2026 by rpki-client