$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/B59504F478A4226C16D97004A6F98153CD19D2E0.cer File: B59504F478A4226C16D97004A6F98153CD19D2E0.cer (raw, json) Hash identifier: RPRaNcPVPx+vVL3uEBh7O2ZbEATcSeEnushzIIdjfEk= Subject key identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2BB34FA1E1C130F0B07543D2C1B88D5D7F9987A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft caRepository: rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 16 Feb 2026 11:03:01 +0000 Certificate not after: Mon 15 Feb 2027 11:08:01 +0000 Subordinate resources: IP: 103.122.5.0/24 IP: 103.147.222.0/24 IP: 2001:df6:7b00::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b3:4f:a1:e1:c1:30:f0:b0:75:43:d2:c1:b8:8d:5d:7f:99:87:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 16 11:03:01 2026 GMT Not After : Feb 15 11:08:01 2027 GMT Subject: CN=B59504F478A4226C16D97004A6F98153CD19D2E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cc:40:c1:8a:f4:7b:25:9e:89:ee:fc:62:37: b8:6a:78:d4:36:82:18:7c:de:45:82:29:57:1b:f3: a5:6c:31:1d:59:dd:3d:89:62:14:c3:21:f5:04:e4: 67:74:10:be:8c:30:bd:e7:d2:da:ff:4e:fd:28:8c: 61:7b:53:95:0f:6b:3a:62:a7:66:d5:f2:66:74:a1: b8:42:2c:da:20:66:43:8f:e7:3c:c3:65:7a:9e:97: b0:f4:32:80:06:34:b3:f6:58:3a:cb:f5:95:e5:5d: 2f:12:c1:dc:e9:c9:86:9d:1c:e8:b0:10:28:5c:f0: e5:0a:8f:c3:89:b7:79:a3:96:36:74:cf:05:ca:46: 3d:06:48:2f:65:6a:85:ac:e0:67:d7:cd:cc:d9:fe: b7:10:0e:e8:06:d2:c2:29:95:fc:13:d3:f2:6c:12: e2:b8:58:e2:9d:f4:db:de:2a:f1:f5:27:33:52:6e: 17:1a:ba:a6:23:1b:f0:a5:96:3d:78:81:e9:56:27: ab:49:0e:cc:fb:c7:2c:87:8f:8e:5b:b6:70:dd:09: e3:28:f2:5e:a7:60:d4:8c:c8:23:c9:8b:6f:03:4e: 4d:a0:b2:31:da:87:bb:52:8c:31:31:65:f8:37:52: 24:98:e1:ce:e8:e3:f4:56:48:fc:11:65:20:9b:6a: 38:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B5:95:04:F4:78:A4:22:6C:16:D9:70:04:A6:F9:81:53:CD:19:D2:E0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/6d4fbfb0-93ee-4ea6-b4cf-07d769b88a22/0/B59504F478A4226C16D97004A6F98153CD19D2E0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.122.5.0/24 103.147.222.0/24 IPv6: 2001:df6:7b00::/48 Signature Algorithm: sha256WithRSAEncryption 23:d3:b0:a1:93:dc:28:9c:0e:ae:a8:9e:f6:80:b9:00:33:00: 2e:9e:18:28:13:65:5b:32:b8:71:b0:2a:da:c9:e0:56:4e:87: c6:a7:e6:06:0c:64:83:01:0d:1e:59:84:d7:03:74:9b:a3:1d: c1:3a:72:3d:03:e6:fb:2e:0a:a6:56:4b:7a:53:69:cb:a9:06: 88:76:68:22:3b:35:94:31:35:3d:0f:1e:dd:5b:76:f7:8c:df: 2b:4a:b6:f5:60:bd:a1:97:02:04:a6:e2:2b:28:28:75:a8:f8: 5a:ea:94:3b:42:1a:74:8c:04:8e:5c:c6:72:3a:47:9f:7c:21: 39:ab:39:ad:82:da:ad:39:a2:26:6a:60:b0:b5:8b:d5:dc:18: fd:1b:a3:fe:a1:52:2e:b9:d0:30:f4:9e:af:4f:32:06:d1:b8: 6b:a2:43:98:40:47:fb:52:6d:8c:aa:a2:c6:f2:12:c7:86:92: 07:a9:e8:aa:5f:ae:5d:71:69:ab:37:4c:b1:18:62:1b:0d:7d: 51:00:f2:d9:d2:71:e6:b6:80:36:3e:3d:5a:d7:45:49:57:3d: dc:38:ce:b1:59:f5:0c:9a:ae:0a:65:fa:53:f9:71:54:6f:ce: c6:f0:f6:ab:bf:42:d2:99:ae:42:e3:23:36:0f:6c:fa:c2:39: a4:d7:6b:a1 -----BEGIN CERTIFICATE----- MIIF3DCCBMSgAwIBAgIUK7NPoeHBMPCwdUPSwbiNXX+Zh6IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxNjExMDMwMVoX DTI3MDIxNTExMDgwMVowMzExMC8GA1UEAxMoQjU5NTA0RjQ3OEE0MjI2QzE2RDk3 MDA0QTZGOTgxNTNDRDE5RDJFMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPMQMGK9Hslnonu/GI3uGp41DaCGHzeRYIpVxvzpWwxHVndPYliFMMh9QTk Z3QQvowwvefS2v9O/SiMYXtTlQ9rOmKnZtXyZnShuEIs2iBmQ4/nPMNlep6XsPQy gAY0s/ZYOsv1leVdLxLB3OnJhp0c6LAQKFzw5QqPw4m3eaOWNnTPBcpGPQZIL2Vq hazgZ9fNzNn+txAO6AbSwimV/BPT8mwS4rhY4p30294q8fUnM1JuFxq6piMb8KWW PXiB6VYnq0kOzPvHLIePjlu2cN0J4yjyXqdg1IzII8mLbwNOTaCyMdqHu1KMMTFl +DdSJJjhzujj9FZI/BFlIJtqOI0CAwEAAaOCAs8wggLLMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLWVBPR4pCJsFtlwBKb5gVPNGdLgMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82ZDRmYmZiMC05M2VlLTRlYTYtYjRjZi0wN2Q3NjliODhhMjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZkNGZiZmIw LTkzZWUtNGVhNi1iNGNmLTA3ZDc2OWI4OGEyMi8wL0I1OTUwNEY0NzhBNDIyNkMx NkQ5NzAwNEE2Rjk4MTUzQ0QxOUQyRTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNgYIKwYBBQUHAQcBAf8EJzAlMBIEAgABMAwD BABnegUDBABnk94wDwQCAAIwCQMHACABDfZ7ADANBgkqhkiG9w0BAQsFAAOCAQEA I9OwoZPcKJwOrqie9oC5ADMALp4YKBNlWzK4cbAq2sngVk6HxqfmBgxkgwENHlmE 1wN0m6MdwTpyPQPm+y4KplZLelNpy6kGiHZoIjs1lDE1PQ8e3Vt294zfK0q29WC9 oZcCBKbiKygodaj4WuqUO0IadIwEjlzGcjpHn3whOas5rYLarTmiJmpgsLWL1dwY /Ruj/qFSLrnQMPSer08yBtG4a6JDmEBH+1JtjKqixvISx4aSB6noql+uXXFpqzdM sRhiGw19UQDy2dJx5raANj49WtdFSVc93DjOsVn1DJquCmX6U/lxVG/OxvD2q79C 0pmuQuMjNg9s+sI5pNdroQ== -----END CERTIFICATE-----Generated at Mon Mar 2 04:16:14 2026 by rpki-client