$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BA464CC49469C32DF090DA43D97CD49A55310171.cer File: BA464CC49469C32DF090DA43D97CD49A55310171.cer (raw, json) Hash identifier: YSPMirTobTRJloMJYhPMA4GkoD3LfpsjnbkCqUCzWYY= Subject key identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3251540C0795F9A96F369909A99FE13F1036E066 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft caRepository: rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 07 Feb 2026 12:03:19 +0000 Certificate not after: Sat 06 Feb 2027 12:08:19 +0000 Subordinate resources: IP: 103.228.24.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:51:54:0c:07:95:f9:a9:6f:36:99:09:a9:9f:e1:3f:10:36:e0:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 7 12:03:19 2026 GMT Not After : Feb 6 12:08:19 2027 GMT Subject: CN=BA464CC49469C32DF090DA43D97CD49A55310171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:41:06:03:6c:32:3a:81:f9:f5:10:8e:03: 2f:07:32:99:86:c6:f6:31:2e:72:0a:4e:62:b1:24: 2f:fd:de:4c:88:0d:c0:c6:f5:8c:e1:bb:78:cb:e2: d8:39:ac:09:86:b0:2c:8d:47:11:0b:92:e9:5c:44: 94:95:bf:4b:71:21:e6:a3:a0:69:64:cb:0a:dd:5d: 93:2c:2e:9b:b8:27:c8:ed:2d:e9:92:ce:f7:92:46: 8b:9a:b9:d1:d3:40:1e:7f:f7:c0:42:6e:37:48:4c: 82:34:6f:8d:28:dc:bd:f0:8e:a4:c4:21:75:26:d7: a7:05:9d:55:a2:72:7d:d0:3b:9a:5c:b6:66:4b:ff: 3d:15:e5:23:ed:1d:f7:e7:ea:e4:9e:e3:c2:7a:1c: 03:a8:3c:c6:c1:da:70:23:8f:89:46:31:8f:6c:5e: 74:9a:3a:07:3e:2e:cb:fe:35:41:67:10:d1:52:de: 99:1f:f0:54:51:c4:05:40:47:2a:36:54:2b:63:3f: 52:42:7c:b7:b0:81:2c:90:3d:32:49:44:95:c1:20: 5a:f5:bb:fa:7b:9d:1b:fc:96:90:aa:68:fb:22:e6: cc:6c:9c:11:23:00:c7:96:c2:41:a1:30:72:7f:8b: f8:d6:e2:42:09:15:d3:56:f5:09:a0:ec:13:c1:bd: 03:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:46:4C:C4:94:69:C3:2D:F0:90:DA:43:D9:7C:D4:9A:55:31:01:71 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c9b1e7f7-1f4b-41a6-9252-f6b8288fb3ab/0/BA464CC49469C32DF090DA43D97CD49A55310171.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.228.24.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:85:27:cd:b5:b1:bc:77:9a:0d:e5:66:54:79:9d:d7:f3:bd: cb:05:0e:79:b5:4e:8c:93:cb:80:dd:94:40:25:ce:14:4b:0b: 4d:e2:c0:dc:87:bd:17:b5:90:74:3e:ef:02:8b:dd:78:f6:eb: eb:61:0e:7b:d2:d3:ac:e2:d4:11:bc:6d:3e:5a:e5:6d:cd:94: f6:6c:75:21:bd:1a:de:f4:92:20:75:e7:00:23:70:d0:37:5d: cf:ca:b9:3f:6b:cd:6a:44:bb:7c:89:5b:9f:41:65:1f:c4:fc: 98:5a:d8:d0:1b:3a:30:3f:70:25:e3:d5:11:09:61:17:63:b0: 4d:09:84:f8:34:51:19:e6:44:92:32:10:f0:71:b3:5f:b9:58: 35:f4:bd:21:5e:cf:0d:e8:48:df:61:fd:f9:7b:66:fa:f4:95: 89:7c:e4:3b:92:a5:e3:ba:78:72:dc:5f:ed:6f:7d:b1:33:6e: 98:e5:72:4b:4d:a1:28:8e:f0:68:d2:39:62:60:59:c9:1d:33: 08:f5:2d:19:3a:6c:0f:4e:d9:36:41:fb:4e:48:45:4e:ed:ae: 73:3f:43:6e:d4:a4:6d:09:35:00:90:3e:25:25:63:c2:3f:4d: c5:af:b7:a5:86:02:e7:a4:9f:21:34:7f:9a:5d:a6:43:0d:60: 60:b4:71:86 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUMlFUDAeV+alvNpkJqZ/hPxA24GYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwNzEyMDMxOVoX DTI3MDIwNjEyMDgxOVowMzExMC8GA1UEAxMoQkE0NjRDQzQ5NDY5QzMyREYwOTBE QTQzRDk3Q0Q0OUE1NTMxMDE3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK0lQQYDbDI6gfn1EI4DLwcymYbG9jEucgpOYrEkL/3eTIgNwMb1jOG7eMvi 2DmsCYawLI1HEQuS6VxElJW/S3Eh5qOgaWTLCt1dkywum7gnyO0t6ZLO95JGi5q5 0dNAHn/3wEJuN0hMgjRvjSjcvfCOpMQhdSbXpwWdVaJyfdA7mly2Zkv/PRXlI+0d 9+fq5J7jwnocA6g8xsHacCOPiUYxj2xedJo6Bz4uy/41QWcQ0VLemR/wVFHEBUBH KjZUK2M/UkJ8t7CBLJA9MklElcEgWvW7+nudG/yWkKpo+yLmzGycESMAx5bCQaEw cn+L+NbiQgkV01b1CaDsE8G9AwsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLpGTMSUacMt8JDaQ9l81JpVMQFxMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jOWIxZTdmNy0xZjRiLTQxYTYtOTI1Mi1mNmI4Mjg4ZmIzYWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5YjFlN2Y3 LTFmNGItNDFhNi05MjUyLWY2YjgyODhmYjNhYi8wL0JBNDY0Q0M0OTQ2OUMzMkRG MDkwREE0M0Q5N0NENDlBNTUzMTAxNzEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn5BgwDQYJKoZIhvcNAQELBQADggEBAGqFJ821sbx3mg3lZlR5ndfzvcsFDnm1 ToyTy4DdlEAlzhRLC03iwNyHvRe1kHQ+7wKL3Xj26+thDnvS06zi1BG8bT5a5W3N lPZsdSG9Gt70kiB15wAjcNA3Xc/KuT9rzWpEu3yJW59BZR/E/Jha2NAbOjA/cCXj 1REJYRdjsE0JhPg0URnmRJIyEPBxs1+5WDX0vSFezw3oSN9h/fl7Zvr0lYl85DuS peO6eHLcX+1vfbEzbpjlcktNoSiO8GjSOWJgWckdMwj1LRk6bA9O2TZB+05IRU7t rnM/Q27UpG0JNQCQPiUlY8I/TcWvt6WGAueknyE0f5pdpkMNYGC0cYY= -----END CERTIFICATE-----Generated at Sun Mar 1 22:18:35 2026 by rpki-client