$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/CEE21891B6F5736FAA7D9BED383243F3DF381781.cer File: CEE21891B6F5736FAA7D9BED383243F3DF381781.cer (raw, json) Hash identifier: R5ffU9l9kKJMhpwSljuLkL1MXuMTckTuMNyc8W3W0KE= Subject key identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 160C53717505A4CA071194E479E605BD4703FC2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft caRepository: rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 26 Mar 2026 17:53:02 +0000 Certificate not after: Thu 25 Mar 2027 17:58:02 +0000 Subordinate resources: IP: 103.168.186.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:0c:53:71:75:05:a4:ca:07:11:94:e4:79:e6:05:bd:47:03:fc:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 26 17:53:02 2026 GMT Not After : Mar 25 17:58:02 2027 GMT Subject: CN=CEE21891B6F5736FAA7D9BED383243F3DF381781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:cf:62:ff:75:22:86:0c:02:84:8c:1e:94:22: d1:55:f2:89:5e:47:cb:cb:95:cf:31:f5:44:7c:0f: 87:8c:c1:96:c1:f7:48:95:59:59:5c:07:f7:b1:0f: d9:c6:8e:d3:81:50:ac:78:8f:fe:1d:24:19:4c:d8: 03:99:44:02:44:50:19:a8:7e:84:b7:36:92:7a:cf: 69:57:ed:aa:7d:c7:ca:a2:e6:39:eb:b7:ca:a0:ec: 63:76:77:97:21:b8:f1:e7:d3:14:c0:19:f7:f1:f4: d4:83:4c:f3:a5:c3:b0:af:60:ec:4b:40:4d:a7:67: 43:fe:f6:8b:1f:ff:2d:02:30:14:d2:0f:1f:41:66: 4e:76:c8:0c:53:d3:dd:d6:43:78:72:4a:81:8f:96: 97:4f:ec:d5:1d:67:7e:23:2a:3c:97:dd:1c:ff:bd: 49:de:ba:4b:b2:60:98:45:93:60:3a:2f:54:77:c5: d5:b7:d7:b5:cb:7e:3a:ed:b1:4f:2c:92:f7:ac:f0: 2d:95:54:7a:3f:c7:9d:c7:fe:fb:48:24:b6:4a:7a: b2:70:dd:b7:6e:18:4d:8f:4a:3e:8b:1e:36:e0:ae: ce:29:ef:20:21:67:6e:26:33:b9:96:1b:9e:f6:d2: 72:6e:76:2b:00:dc:87:b9:79:bd:9f:de:71:c5:bd: 59:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: CE:E2:18:91:B6:F5:73:6F:AA:7D:9B:ED:38:32:43:F3:DF:38:17:81 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8af0031e-2a9e-47ca-9283-40e927e35993/0/CEE21891B6F5736FAA7D9BED383243F3DF381781.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.168.186.0/23 Signature Algorithm: sha256WithRSAEncryption 42:cc:c3:09:99:54:82:e1:a9:de:8d:e5:1e:d3:c9:65:2f:eb: 9b:97:fe:ff:89:fb:4b:ca:3e:71:6f:21:63:b0:74:cd:6d:70: 61:a8:62:76:0b:19:db:e3:16:cc:8a:92:64:2e:f2:ff:e4:44: eb:cd:8f:66:82:0a:56:4e:7b:5c:d2:b4:a7:6c:27:de:43:d9: f5:e4:ba:4f:2b:a2:ae:d6:09:b9:35:29:4b:bc:10:60:ff:12: b5:92:48:6b:7a:48:71:f3:73:ba:4d:84:5d:85:d3:e1:a9:2e: 70:0c:b6:e4:c4:4a:7c:0a:0d:36:60:03:ac:c1:d7:0b:44:60: f5:a3:8f:2e:42:e6:ef:fe:c6:04:ea:65:ec:bb:77:62:70:2f: ea:9f:af:84:16:68:df:22:cc:61:5a:44:6b:0e:8e:bb:0f:7a: ef:08:ce:19:f6:63:26:57:e8:2c:b2:3c:4e:06:bc:ac:71:c3: 12:71:40:8f:ca:98:10:72:92:19:53:54:ba:94:9d:4b:03:92: 97:6a:fa:e9:ba:16:d3:7e:fa:b2:ad:ca:64:47:c6:89:e5:b0: e1:a8:46:2f:f5:e3:92:9f:f2:59:8d:b6:38:c6:2e:6a:cb:84: 07:d8:ff:30:53:1a:bb:b3:da:21:e8:79:98:38:12:95:1a:ae: 2c:2c:64:94 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUFgxTcXUFpMoHEZTkeeYFvUcD/C8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyNjE3NTMwMloX DTI3MDMyNTE3NTgwMlowMzExMC8GA1UEAxMoQ0VFMjE4OTFCNkY1NzM2RkFBN0Q5 QkVEMzgzMjQzRjNERjM4MTc4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJTPYv91IoYMAoSMHpQi0VXyiV5Hy8uVzzH1RHwPh4zBlsH3SJVZWVwH97EP 2caO04FQrHiP/h0kGUzYA5lEAkRQGah+hLc2knrPaVftqn3HyqLmOeu3yqDsY3Z3 lyG48efTFMAZ9/H01INM86XDsK9g7EtATadnQ/72ix//LQIwFNIPH0FmTnbIDFPT 3dZDeHJKgY+Wl0/s1R1nfiMqPJfdHP+9Sd66S7JgmEWTYDovVHfF1bfXtct+Ou2x TyyS96zwLZVUej/Hncf++0gktkp6snDdt24YTY9KPoseNuCuzinvICFnbiYzuZYb nvbScm52KwDch7l5vZ/eccW9Wa8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFM7iGJG29XNvqn2b7TgyQ/PfOBeBMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84YWYwMDMxZS0yYTllLTQ3Y2EtOTI4My00MGU5MjdlMzU5OTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhZjAwMzFl LTJhOWUtNDdjYS05MjgzLTQwZTkyN2UzNTk5My8wL0NFRTIxODkxQjZGNTczNkZB QTdEOUJFRDM4MzI0M0YzREYzODE3ODEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqLowDQYJKoZIhvcNAQELBQADggEBAELMwwmZVILhqd6N5R7TyWUv65uX/v+J +0vKPnFvIWOwdM1tcGGoYnYLGdvjFsyKkmQu8v/kROvNj2aCClZOe1zStKdsJ95D 2fXkuk8roq7WCbk1KUu8EGD/ErWSSGt6SHHzc7pNhF2F0+GpLnAMtuTESnwKDTZg A6zB1wtEYPWjjy5C5u/+xgTqZey7d2JwL+qfr4QWaN8izGFaRGsOjrsPeu8Izhn2 YyZX6CyyPE4GvKxxwxJxQI/KmBBykhlTVLqUnUsDkpdq+um6FtN++rKtymRHxonl sOGoRi/145Kf8lmNtjjGLmrLhAfY/zBTGruz2iHoeZg4EpUariwsZJQ= -----END CERTIFICATE-----Generated at Sun Apr 19 08:16:08 2026 by rpki-client