$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BF97329188204CAD55AEC0D48286FAC81B806C71.cer File: BF97329188204CAD55AEC0D48286FAC81B806C71.cer (raw, json) Hash identifier: OY1Q1KyoneRGp7mMM88n1q1Y0PUhM9KcqXAf84JeE1k= Subject key identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7064164AA8B28222987477BAF62CF9E6071337F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft caRepository: rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 06 Feb 2026 16:07:12 +0000 Certificate not after: Fri 05 Feb 2027 16:12:12 +0000 Subordinate resources: IP: 103.57.8.0/22 IP: 103.191.157.0/24 IP: 117.102.160.0/22 IP: 175.184.248.0/22 IP: 2001:df2:a440::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:64:16:4a:a8:b2:82:22:98:74:77:ba:f6:2c:f9:e6:07:13:37:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 6 16:07:12 2026 GMT Not After : Feb 5 16:12:12 2027 GMT Subject: CN=BF97329188204CAD55AEC0D48286FAC81B806C71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:ce:28:31:18:db:19:13:b6:c1:21:28:7e: 13:9e:e2:a5:3f:28:22:1d:7e:37:ac:e8:cc:fb:9b: f4:07:b4:a0:f1:41:44:48:a4:1b:41:b2:e7:6a:9f: 45:b8:09:45:5f:23:d2:13:35:75:bf:b2:55:c2:c4: 63:bd:bc:c7:76:c6:38:10:ee:c4:42:8f:48:06:e0: 46:83:8d:15:a3:ca:5b:aa:1e:50:24:6e:3b:c2:24: b3:f7:22:a1:f0:d3:aa:41:f1:c2:6e:1b:87:3e:12: 3a:a2:1c:2a:a0:d5:d8:68:3b:d1:c3:de:1c:71:63: ee:fa:79:ae:81:db:3a:c5:0b:32:05:ae:8e:cc:d0: d6:ac:4d:1e:5e:8d:3f:b4:71:09:39:6d:b1:a3:38: 1e:fd:00:4e:75:ae:5e:2b:26:0c:0c:28:65:df:82: 45:0e:7f:09:ba:43:01:87:0d:af:0c:d4:03:62:cf: 16:b1:ae:43:a8:47:ff:09:5e:1c:85:c3:c1:e2:65: 70:fd:07:48:b6:19:2b:b9:7b:62:21:98:b5:e8:94: 87:39:a1:db:2c:86:d4:da:b9:90:26:83:39:65:f1: 2f:d4:ba:ce:ee:d6:2d:48:24:c9:eb:ea:6f:fd:ed: dd:4c:06:42:02:87:4a:cd:af:69:a9:02:d6:df:60: 49:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BF:97:32:91:88:20:4C:AD:55:AE:C0:D4:82:86:FA:C8:1B:80:6C:71 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c29cceb6-a4e7-4e82-88be-bb9697bd1d01/0/BF97329188204CAD55AEC0D48286FAC81B806C71.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.57.8.0/22 103.191.157.0/24 117.102.160.0/22 175.184.248.0/22 IPv6: 2001:df2:a440::/48 Signature Algorithm: sha256WithRSAEncryption 34:a3:42:d6:67:0c:9a:a4:78:37:ea:36:a6:44:f8:cf:be:c8: ba:0a:bd:d7:79:26:00:76:86:c8:7a:47:47:70:53:a9:06:71: 12:b4:22:fa:e6:01:cd:81:ca:5f:fc:20:e4:b2:14:d6:a5:78: 24:3f:fc:12:cb:71:18:06:d4:b5:65:1d:59:ef:89:f2:4e:db: 91:ef:10:80:1e:09:9e:73:44:df:7c:e8:ba:a5:42:22:ba:42: e5:be:79:ec:b6:80:fd:a5:74:c1:36:49:4e:c3:d8:e8:17:cf: 25:0a:07:76:70:b4:a6:10:76:03:72:b1:99:a5:10:d1:67:1c: 6e:aa:4f:f4:e6:c8:71:68:4d:63:8b:27:b8:e7:ec:ce:69:fd: 3e:0a:bb:f0:10:f2:7a:ae:bf:28:0c:fd:ae:78:f4:36:63:4d: 4a:7a:ed:65:ae:dd:0a:cb:e3:21:f9:d5:37:3d:a3:b8:34:5f: 0b:74:87:d6:38:e7:4e:15:bd:b7:1c:c9:a7:11:37:56:c8:6e: 68:3b:8c:cc:fe:76:e3:11:f6:4f:82:a2:56:8e:bd:77:26:d4: 40:c8:fb:10:dd:f3:47:d0:6c:7f:1e:6b:c9:a8:4f:38:68:02: de:0b:0b:6a:67:63:56:af:cd:7a:8c:e5:5a:11:8a:0e:97:ed: 8e:eb:8f:bf -----BEGIN CERTIFICATE----- MIIF6DCCBNCgAwIBAgIUcGQWSqiygiKYdHe69iz55gcTN/EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwNjE2MDcxMloX DTI3MDIwNTE2MTIxMlowMzExMC8GA1UEAxMoQkY5NzMyOTE4ODIwNENBRDU1QUVD MEQ0ODI4NkZBQzgxQjgwNkM3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKwwzigxGNsZE7bBISh+E57ipT8oIh1+N6zozPub9Ae0oPFBREikG0Gy52qf RbgJRV8j0hM1db+yVcLEY728x3bGOBDuxEKPSAbgRoONFaPKW6oeUCRuO8Iks/ci ofDTqkHxwm4bhz4SOqIcKqDV2Gg70cPeHHFj7vp5roHbOsULMgWujszQ1qxNHl6N P7RxCTltsaM4Hv0ATnWuXismDAwoZd+CRQ5/CbpDAYcNrwzUA2LPFrGuQ6hH/wle HIXDweJlcP0HSLYZK7l7YiGYteiUhzmh2yyG1Nq5kCaDOWXxL9S6zu7WLUgkyevq b/3t3UwGQgKHSs2vaakC1t9gSesCAwEAAaOCAtswggLXMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFL+XMpGIIEytVa7A1IKG+sgbgGxxMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMjljY2ViNi1hNGU3LTRlODItODhiZS1iYjk2OTdiZDFkMDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyOWNjZWI2 LWE0ZTctNGU4Mi04OGJlLWJiOTY5N2JkMWQwMS8wL0JGOTczMjkxODgyMDRDQUQ1 NUFFQzBENDgyODZGQUM4MUI4MDZDNzEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwQgYIKwYBBQUHAQcBAf8EMzAxMB4EAgABMBgD BAJnOQgDBABnv50DBAJ1ZqADBAKvuPgwDwQCAAIwCQMHACABDfKkQDANBgkqhkiG 9w0BAQsFAAOCAQEANKNC1mcMmqR4N+o2pkT4z77Iugq913kmAHaGyHpHR3BTqQZx ErQi+uYBzYHKX/wg5LIU1qV4JD/8EstxGAbUtWUdWe+J8k7bke8QgB4JnnNE33zo uqVCIrpC5b557LaA/aV0wTZJTsPY6BfPJQoHdnC0phB2A3KxmaUQ0WccbqpP9ObI cWhNY4snuOfszmn9Pgq78BDyeq6/KAz9rnj0NmNNSnrtZa7dCsvjIfnVNz2juDRf C3SH1jjnThW9txzJpxE3VshuaDuMzP524xH2T4KiVo69dybUQMj7EN3zR9Bsfx5r yahPOGgC3gsLamdjVq/NeozlWhGKDpftjuuPvw== -----END CERTIFICATE-----Generated at Mon Mar 2 02:13:14 2026 by rpki-client