$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer File: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer (raw, json) Hash identifier: Szzi8mCZ8PeLw2Wqr5FTEFKpGhsHE2AFoT2gvvSpH+c= Subject key identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 517913F80B535E2480B73688962B18B82BB104AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft caRepository: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 07 Feb 2026 08:38:18 +0000 Certificate not after: Sat 06 Feb 2027 08:43:18 +0000 Subordinate resources: IP: 103.132.40.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:79:13:f8:0b:53:5e:24:80:b7:36:88:96:2b:18:b8:2b:b1:04:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 7 08:38:18 2026 GMT Not After : Feb 6 08:43:18 2027 GMT Subject: CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:55:fa:3f:59:ef:6b:f4:58:19:7d:aa:00: 84:00:1f:bc:29:64:fc:82:4c:a8:43:5e:3c:70:fc: 6f:ee:5e:72:c8:52:fc:06:3e:f5:36:d4:fa:95:be: f7:52:f7:c3:a0:0e:8f:06:af:94:c4:b9:58:14:e1: 15:12:f8:8f:88:33:91:21:53:b3:fe:a4:41:2e:c2: 4c:b3:d0:98:0b:df:cb:08:0f:57:d8:05:6e:86:b3: 65:e5:4e:96:db:15:f0:92:1a:4d:be:99:d1:01:1f: 89:3f:cb:a7:a1:5e:b6:08:42:6c:23:20:64:e2:41: 9c:db:67:78:90:9b:b6:50:bc:0a:d5:62:78:88:54: f0:f2:d3:9b:11:94:f2:19:89:db:5e:b8:ca:d0:88: 1f:f7:62:52:f7:c8:50:c8:2b:b5:b6:f1:c2:d9:d8: 05:12:04:66:66:da:c5:5e:80:b8:26:be:8b:2a:e1: 93:5c:0d:ff:f5:e9:e0:b8:13:08:1b:b3:4e:f8:8b: a6:f4:04:2c:d7:fc:95:80:e6:d5:e1:11:39:9c:aa: 1c:8b:50:da:52:78:9d:09:e5:e9:6b:1a:b0:4d:3d: 42:dc:f9:29:fd:a1:1b:1f:b7:63:c6:20:cd:22:dd: 0b:5e:8d:7f:14:71:18:b6:4b:12:1e:87:3f:9a:b9: 16:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.132.40.0/23 Signature Algorithm: sha256WithRSAEncryption 78:1c:b3:fe:58:8e:cc:4a:36:58:a7:3f:c1:4b:0f:6c:04:11: 50:ec:f2:2f:1e:98:fb:f7:2c:e6:5a:ab:a0:93:e2:96:f0:eb: 21:2d:81:c0:e2:5b:90:ad:44:4c:5e:e1:f2:27:f7:31:03:38: 91:31:0b:d0:e2:ce:f4:bb:65:62:41:95:9c:65:59:05:2c:2c: c2:ef:be:21:69:d1:10:a4:45:11:a4:f6:b6:04:94:16:c3:29: c7:43:39:7b:a1:47:82:d2:fb:1a:f4:10:d9:b5:ba:f1:1d:fe: c1:15:87:a3:b9:f4:13:31:82:0b:2b:a9:58:73:d6:16:14:db: 55:d3:28:35:1a:16:65:7e:54:20:90:32:17:fd:19:06:93:1d: 43:9f:a0:4d:b5:32:b4:f2:05:5d:cb:6f:7a:65:5d:c3:7a:82: 11:04:c4:40:44:1c:ab:0b:26:15:fe:62:98:d0:42:d3:c4:c3: 4e:b2:4a:41:3a:c6:6c:89:f6:42:52:e3:97:d8:4c:8a:93:c9: da:a6:98:49:5a:fb:00:ce:d3:dd:5e:0c:0d:cd:b4:ed:83:41: 25:5a:a4:2f:df:fa:9c:15:30:34:70:10:03:6a:66:ad:71:2b: d0:9d:6d:50:e4:ba:28:c2:7a:21:bc:df:a9:66:2b:f7:38:4b: d9:8c:ec:36 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUUXkT+AtTXiSAtzaIlisYuCuxBKwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwNzA4MzgxOFoX DTI3MDIwNjA4NDMxOFowMzExMC8GA1UEAxMoQ0I5NjYyNzMzMTUzQzAyRTRDNDEx QjdEMkYyQjlFMjJEMkYwRUI4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMEZVfo/We9r9FgZfaoAhAAfvClk/IJMqENePHD8b+5ecshS/AY+9TbU+pW+ 91L3w6AOjwavlMS5WBThFRL4j4gzkSFTs/6kQS7CTLPQmAvfywgPV9gFboazZeVO ltsV8JIaTb6Z0QEfiT/Lp6FetghCbCMgZOJBnNtneJCbtlC8CtVieIhU8PLTmxGU 8hmJ2164ytCIH/diUvfIUMgrtbbxwtnYBRIEZmbaxV6AuCa+iyrhk1wN//Xp4LgT CBuzTviLpvQELNf8lYDm1eEROZyqHItQ2lJ4nQnl6WsasE09Qtz5Kf2hGx+3Y8Yg zSLdC16NfxRxGLZLEh6HP5q5FkkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMuWYnMxU8AuTEEbfS8rniLS8OuFMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZGYyZmZkYS0wNWQxLTQwODUtYTEzNS0wMzk4N2EwN2YzOWUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RkZjJmZmRh LTA1ZDEtNDA4NS1hMTM1LTAzOTg3YTA3ZjM5ZS8wL0NCOTY2MjczMzE1M0MwMkU0 QzQxMUI3RDJGMkI5RTIyRDJGMEVCODUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnhCgwDQYJKoZIhvcNAQELBQADggEBAHgcs/5YjsxKNlinP8FLD2wEEVDs8i8e mPv3LOZaq6CT4pbw6yEtgcDiW5CtRExe4fIn9zEDOJExC9DizvS7ZWJBlZxlWQUs LMLvviFp0RCkRRGk9rYElBbDKcdDOXuhR4LS+xr0ENm1uvEd/sEVh6O59BMxggsr qVhz1hYU21XTKDUaFmV+VCCQMhf9GQaTHUOfoE21MrTyBV3Lb3plXcN6ghEExEBE HKsLJhX+YpjQQtPEw06ySkE6xmyJ9kJS45fYTIqTydqmmEla+wDO091eDA3NtO2D QSVapC/f+pwVMDRwEANqZq1xK9CdbVDkuijCeiG836lmK/c4S9mM7DY= -----END CERTIFICATE-----Generated at Mon Mar 2 09:17:32 2026 by rpki-client