$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer File: CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.cer (raw, json) Hash identifier: SYMtncRUUJl7QCrmoh7A94bxptQWPTV2ks+9C6fM0B4= Subject key identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 55E20FBBF1AFF77D7EFFEE4584951659DFD29BD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft caRepository: rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 06 Feb 2026 13:30:41 +0000 Certificate not after: Fri 05 Feb 2027 13:35:41 +0000 Subordinate resources: IP: 103.154.76.0/23 IP: 2406:55c0::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e2:0f:bb:f1:af:f7:7d:7e:ff:ee:45:84:95:16:59:df:d2:9b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 6 13:30:41 2026 GMT Not After : Feb 5 13:35:41 2027 GMT Subject: CN=CEAE4F7759EE21BA652E0FB89D01A309B65D17D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a7:d7:03:ce:b9:28:63:fa:39:b7:8d:41:80: 5a:8b:64:2e:bf:6c:5b:64:a9:a7:98:71:e7:d4:e6: 87:fb:78:30:58:5e:35:f6:46:4f:63:24:a1:5b:23: fc:c2:d8:8f:17:df:9b:0b:c5:fd:0a:db:80:76:6a: 65:0d:2f:34:ec:d7:7f:04:31:6f:d0:b3:2c:ec:ed: c9:35:21:05:69:79:36:1f:5d:c5:30:1d:41:4a:0e: e3:04:11:6d:58:b0:4c:b8:98:e2:d0:85:42:b8:ab: 1d:75:ce:54:ff:a4:b7:b6:58:1a:61:60:15:77:81: bc:21:f7:e3:d5:31:38:ca:c4:3b:93:d6:f5:63:e3: 8a:32:d6:a7:5a:e1:6d:30:f0:e6:3f:88:6b:93:f6: 17:58:67:9a:cc:24:1e:e5:c4:f9:02:88:6d:17:d0: 77:58:d8:11:b7:bb:f0:35:f2:ef:86:6b:61:6c:30: f9:3d:21:a4:17:bf:6b:27:3d:03:b5:59:96:cd:77: 83:b5:f5:c9:6e:3e:81:0c:d5:63:44:6e:31:ef:ac: 2f:ae:48:bb:49:25:40:d4:e9:8c:45:73:a2:19:07: 3e:ff:00:5e:d2:f2:f3:27:30:41:81:ae:e8:19:6f: c6:21:f3:c8:c0:15:8c:92:fa:6d:d9:55:01:cb:7b: 3a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:AE:4F:77:59:EE:21:BA:65:2E:0F:B8:9D:01:A3:09:B6:5D:17:D3 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/1635a451-c304-45f5-b7db-5687e2b10807/0/CEAE4F7759EE21BA652E0FB89D01A309B65D17D3.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.154.76.0/23 IPv6: 2406:55c0::/32 Signature Algorithm: sha256WithRSAEncryption 0d:e9:e7:3b:36:d2:37:84:a5:44:61:88:ab:e6:0b:0d:15:47: 62:c2:9f:af:bd:e8:3b:5b:25:c3:3b:83:4f:4a:e9:a5:b2:a5: 8d:b5:f0:02:25:e3:09:cb:eb:ca:f6:d6:16:6e:4e:bb:5c:4c: c1:a6:57:6e:62:72:34:88:b2:de:57:1d:0c:74:5f:de:c2:05: d6:3b:5a:58:4a:4d:2c:a7:0a:62:be:6c:1c:99:58:27:d7:0a: b7:5f:6e:9e:ac:f9:5c:3e:ef:ea:16:d8:b2:a3:bd:32:d3:ce: ae:a8:38:30:77:d6:15:38:da:cd:54:2b:c2:db:ed:37:0a:f1: 08:6e:59:90:86:08:c6:ef:48:af:1b:b4:e9:54:9d:f2:b4:4b: 3b:1e:93:99:b8:a6:7a:0a:fa:6f:78:9f:4e:62:a2:ad:65:2b: c7:20:ae:00:c3:c0:f4:6d:0c:ff:2a:77:d7:38:8b:fc:e8:7d: d6:60:0d:48:08:2e:b8:e4:19:c8:17:4a:8c:99:f2:85:77:16: ea:61:5e:77:14:f7:a7:60:91:9a:ec:4f:71:3f:2e:2c:d9:f3: 91:d9:a5:fc:ca:52:5b:01:43:18:df:ae:6f:1b:51:a4:79:81: 1e:15:82:5d:50:56:e6:0a:0d:61:33:18:af:7b:ec:94:c7:8a: 08:26:e8:2e -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUVeIPu/Gv931+/+5FhJUWWd/Sm9kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwNjEzMzA0MVoX DTI3MDIwNTEzMzU0MVowMzExMC8GA1UEAxMoQ0VBRTRGNzc1OUVFMjFCQTY1MkUw RkI4OUQwMUEzMDlCNjVEMTdEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK+n1wPOuShj+jm3jUGAWotkLr9sW2Spp5hx59Tmh/t4MFheNfZGT2MkoVsj /MLYjxffmwvF/QrbgHZqZQ0vNOzXfwQxb9CzLOztyTUhBWl5Nh9dxTAdQUoO4wQR bViwTLiY4tCFQrirHXXOVP+kt7ZYGmFgFXeBvCH349UxOMrEO5PW9WPjijLWp1rh bTDw5j+Ia5P2F1hnmswkHuXE+QKIbRfQd1jYEbe78DXy74ZrYWww+T0hpBe/ayc9 A7VZls13g7X1yW4+gQzVY0RuMe+sL65Iu0klQNTpjEVzohkHPv8AXtLy8ycwQYGu 6BlvxiHzyMAVjJL6bdlVAct7OicCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM6uT3dZ7iG6ZS4PuJ0Bowm2XRfTMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNjM1YTQ1MS1jMzA0LTQ1ZjUtYjdkYi01Njg3ZTJiMTA4MDcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2MzVhNDUx LWMzMDQtNDVmNS1iN2RiLTU2ODdlMmIxMDgwNy8wL0NFQUU0Rjc3NTlFRTIxQkE2 NTJFMEZCODlEMDFBMzA5QjY1RDE3RDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFnmkwwDQQCAAIwBwMFACQGVcAwDQYJKoZIhvcNAQELBQADggEBAA3p5zs20jeE pURhiKvmCw0VR2LCn6+96DtbJcM7g09K6aWypY218AIl4wnL68r21hZuTrtcTMGm V25icjSIst5XHQx0X97CBdY7WlhKTSynCmK+bByZWCfXCrdfbp6s+Vw+7+oW2LKj vTLTzq6oODB31hU42s1UK8Lb7TcK8QhuWZCGCMbvSK8btOlUnfK0Szsek5m4pnoK +m94n05ioq1lK8cgrgDDwPRtDP8qd9c4i/zofdZgDUgILrjkGcgXSoyZ8oV3Fuph XncU96dgkZrsT3E/LizZ85HZpfzKUlsBQxjfrm8bUaR5gR4Vgl1QVuYKDWEzGK97 7JTHiggm6C4= -----END CERTIFICATE-----Generated at Sun Mar 1 22:26:43 2026 by rpki-client