$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer File: B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer (raw, json) Hash identifier: X94xF3EapUD364mRowbJ+ASjvLZq1rvjNCSY6K4EGRo= Subject key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 1C472A862F10C1C117756EC8EEECDC74054F9AA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft caRepository: rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 06 Feb 2026 01:14:48 +0000 Certificate not after: Fri 05 Feb 2027 01:19:48 +0000 Subordinate resources: IP: 103.186.202.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:47:2a:86:2f:10:c1:c1:17:75:6e:c8:ee:ec:dc:74:05:4f:9a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 6 01:14:48 2026 GMT Not After : Feb 5 01:19:48 2027 GMT Subject: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b7:31:19:50:66:d6:5f:e3:89:e4:db:3f:48: 6f:40:c3:0e:53:c0:c6:d8:09:ea:6e:69:65:6e:91: 05:05:cf:d2:15:42:28:78:13:d5:50:96:43:fa:72: 5e:3a:2c:7a:08:49:43:bf:d8:da:2c:4e:99:7b:c8: 9c:92:85:ee:29:df:8c:ec:b7:6b:87:ca:b5:c8:31: 5a:a9:d1:0a:1b:10:f4:08:cf:1d:91:97:95:e7:d8: 67:7a:c5:01:45:77:45:ac:10:26:ae:dd:f6:c3:40: 04:e5:c3:02:67:ab:e7:e4:c3:62:a4:c0:70:9d:e1: e7:f4:42:80:70:03:99:b5:38:55:79:e6:9a:46:41: 68:9e:1d:2f:35:f2:99:f3:0f:63:b4:cf:77:ef:16: 60:17:76:a0:f3:24:1f:81:5e:a8:eb:83:22:a0:49: b3:5d:5e:b3:8a:dd:9a:e6:8b:22:00:30:ee:2c:e9: ac:55:52:c6:6d:4f:9f:68:69:3d:b4:94:e2:ee:14: 43:3c:52:ee:69:32:81:7e:76:14:ad:ec:a1:51:e1: aa:c7:11:df:b9:7c:bd:4a:6c:62:8d:0c:0e:fc:7e: fc:10:84:59:a1:15:9e:48:5d:bf:5f:39:92:0d:8e: 97:28:c4:85:81:2f:fe:46:90:5e:b6:54:a0:1b:1b: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.202.0/23 Signature Algorithm: sha256WithRSAEncryption 87:a7:ee:7e:0a:35:31:ad:0d:58:3d:66:6f:7a:0c:dc:f8:ae: 59:ec:52:d9:69:b6:72:4b:16:cc:0e:71:87:8c:8f:c2:41:47: 26:89:70:c0:ea:2d:8e:95:00:7e:b0:84:4b:2a:bf:78:2c:5e: 5a:dd:d1:e7:65:e5:11:d3:ee:87:42:39:a0:e1:a5:a5:45:61: 76:d5:96:f8:e3:1c:d6:c5:c2:0c:c2:ad:76:64:e3:cd:0f:67: 59:ff:47:46:c3:a2:30:ca:e9:4d:92:8c:bc:47:b3:cd:f8:87: 51:0a:cb:c1:bd:f6:29:21:05:53:e1:dd:62:63:9c:1e:72:13: b6:26:d1:69:58:a2:0c:ba:4e:94:c5:bb:48:05:98:44:fd:52: 1e:f4:23:f9:56:8e:f6:56:a4:60:d2:ad:9c:60:18:f9:74:2a: ac:b3:39:63:92:86:d6:ac:03:6e:73:84:64:24:4c:cd:95:6e: 96:a0:e9:f9:7b:b4:9e:a6:b8:b9:3d:43:aa:4b:c8:3a:55:55: f0:f6:45:86:46:14:49:4b:38:5f:b5:09:3e:1d:9e:18:16:5e: b5:54:59:77:e5:53:03:a1:41:9a:ae:3d:1f:fe:80:71:f4:d5: 1d:53:a1:58:86:8a:37:ec:ae:8c:f1:ff:d9:ee:e6:52:2e:42: 0b:2b:55:95 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHEcqhi8QwcEXdW7I7uzcdAVPmqQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwNjAxMTQ0OFoX DTI3MDIwNTAxMTk0OFowMzExMC8GA1UEAxMoQjM0N0JCQTZCRDExQkZDNUU1NUY3 RkYzMzRDMTY1RTlGRDIxRkE1QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALG3MRlQZtZf44nk2z9Ib0DDDlPAxtgJ6m5pZW6RBQXP0hVCKHgT1VCWQ/py XjoseghJQ7/Y2ixOmXvInJKF7infjOy3a4fKtcgxWqnRChsQ9AjPHZGXlefYZ3rF AUV3RawQJq7d9sNABOXDAmer5+TDYqTAcJ3h5/RCgHADmbU4VXnmmkZBaJ4dLzXy mfMPY7TPd+8WYBd2oPMkH4FeqOuDIqBJs11es4rdmuaLIgAw7izprFVSxm1Pn2hp PbSU4u4UQzxS7mkygX52FK3soVHhqscR37l8vUpsYo0MDvx+/BCEWaEVnkhdv185 kg2OlyjEhYEv/kaQXrZUoBsb0j0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLNHu6a9Eb/F5V9/8zTBZen9IfpcMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kOTEwNjgyNy04NjZlLTRhYzMtOGY3OS1hNmUzMjBiMjBkZTcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5MTA2ODI3 LTg2NmUtNGFjMy04Zjc5LWE2ZTMyMGIyMGRlNy8wL0IzNDdCQkE2QkQxMUJGQzVF NTVGN0ZGMzM0QzE2NUU5RkQyMUZBNUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnusowDQYJKoZIhvcNAQELBQADggEBAIen7n4KNTGtDVg9Zm96DNz4rlnsUtlp tnJLFswOcYeMj8JBRyaJcMDqLY6VAH6whEsqv3gsXlrd0edl5RHT7odCOaDhpaVF YXbVlvjjHNbFwgzCrXZk480PZ1n/R0bDojDK6U2SjLxHs834h1EKy8G99ikhBVPh 3WJjnB5yE7Ym0WlYogy6TpTFu0gFmET9Uh70I/lWjvZWpGDSrZxgGPl0KqyzOWOS htasA25zhGQkTM2Vbpag6fl7tJ6muLk9Q6pLyDpVVfD2RYZGFElLOF+1CT4dnhgW XrVUWXflUwOhQZquPR/+gHH01R1ToViGijfsrozx/9nu5lIuQgsrVZU= -----END CERTIFICATE-----Generated at Sun Mar 1 22:34:24 2026 by rpki-client