$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer File: D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.cer (raw, json) Hash identifier: SKPK8GDBOqdUX2NU3IA2Z/3UGxGzoPXSI5xnOlrn9mY= Subject key identifier: D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 612659835A4BEA654E74911C88D4E1EE91AC1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft caRepository: rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 16 Feb 2026 23:41:41 +0000 Certificate not after: Mon 15 Feb 2027 23:46:41 +0000 Subordinate resources: AS: 150503 IP: 103.126.238.0/24 IP: 163.227.201.0/24 IP: 2001:df1:de40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:26:59:83:5a:4b:ea:65:4e:74:91:1c:88:d4:e1:ee:91:ac:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 16 23:41:41 2026 GMT Not After : Feb 15 23:46:41 2027 GMT Subject: CN=D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:68:01:c6:62:ea:df:56:16:44:b4:3b:de: eb:ef:15:28:ee:ed:c3:d2:e0:15:b2:76:ce:ab:65: 8d:19:9b:85:6a:ca:49:8c:ba:1b:3c:40:a6:ab:22: 78:35:20:a7:96:c5:aa:0a:e7:4f:f1:ba:bf:b8:21: c5:19:e0:33:40:e9:5c:3b:e3:0a:28:90:a4:d7:50: 78:d0:64:cb:68:bb:ec:d8:3b:1a:1d:b2:49:7b:a0: 37:84:0a:44:ff:45:5d:8a:44:b0:d5:8f:5e:89:a9: d6:ce:53:e9:0b:d5:57:59:69:20:9e:fe:66:c9:a4: 11:50:e8:53:a1:c6:b1:ff:fb:5f:73:b7:d1:02:31: c6:35:e2:7f:96:54:03:6b:11:a8:38:b5:4c:89:f5: 16:f7:1f:c0:1b:c3:49:8d:68:a0:17:7e:68:9a:fc: 55:6e:ca:2d:91:af:be:16:1b:87:0c:a2:07:28:09: 77:1f:4d:5d:10:68:b2:68:b7:48:4d:50:86:cb:07: 91:4e:35:8b:38:93:df:a9:58:6f:b2:bc:7e:98:9a: cf:9d:1a:f7:4f:82:f1:8e:87:37:31:68:38:79:73: ba:9f:37:df:ee:cd:1f:5b:ff:76:16:2d:94:93:8d: 05:b4:d6:e3:1e:8d:eb:0d:e5:e1:ef:0b:92:42:fe: e5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:75:BD:C5:A6:41:4C:EB:AB:47:2D:F9:15:9C:BD:32:BC:CF:91:EA X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/862d4d74-6295-4496-823a-1e8a3d5bbb6c/0/D175BDC5A6414CEBAB472DF9159CBD32BCCF91EA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.126.238.0/24 163.227.201.0/24 IPv6: 2001:df1:de40::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 150503 Signature Algorithm: sha256WithRSAEncryption 35:7c:cb:9b:19:e8:0e:5d:10:c0:4e:d8:6c:55:ea:1c:ec:07: 80:b5:48:8c:26:44:17:38:5a:ad:01:31:c6:21:dd:17:53:ac: ff:d0:14:8b:70:1b:62:ae:d9:75:03:76:a3:76:f6:66:c9:bc: 70:bd:2f:06:24:f0:b4:61:86:9b:8d:d4:58:0d:5b:71:3c:8d: c9:50:df:70:79:16:30:4e:b3:81:b2:7b:fa:64:46:d9:5c:3f: ff:0e:36:d4:9d:57:04:d3:7a:79:f1:2c:ee:30:02:2b:c3:57: 39:fc:7f:85:09:b4:63:f7:f3:38:ef:9f:1b:d6:59:41:d6:5b: 78:c3:31:6a:bd:2e:c4:89:a2:5d:90:3d:ff:ed:74:63:a2:f9: f6:b2:86:39:2a:66:13:6b:e5:56:63:cf:9e:d3:80:5c:70:85: c8:2c:7d:d4:22:3e:87:84:13:80:a2:22:ea:63:cf:9c:59:48: 4e:d9:3e:02:56:2d:86:69:c6:62:8a:a8:ae:08:86:30:f8:81: ac:d3:76:6d:7a:8c:f6:c1:08:8b:d5:23:04:e9:12:99:8d:fd: 23:75:a6:96:8b:0d:a9:87:b1:44:cd:ee:1d:5a:d8:f7:19:9b: 12:6f:1e:d4:39:ec:a3:d4:ca:2d:e2:1d:78:f3:23:33:43:5b: 58:6e:dd:b8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITYSZZg1pL6mVOdJEciNTh7pGsGzANBgkqhkiG9w0BAQsF ADBKMRUwEwYDVQQDDAxBOTE4NjIxNDAwMDAxMTAvBgNVBAUTKEJBOEY3N0QyMUU1 OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIwHhcNMjYwMjE2MjM0MTQxWhcN MjcwMjE1MjM0NjQxWjAzMTEwLwYDVQQDEyhEMTc1QkRDNUE2NDE0Q0VCQUI0NzJE RjkxNTlDQkQzMkJDQ0Y5MUVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fpoAcZi6t9WFkS0O97r7xUo7u3D0uAVsnbOq2WNGZuFaspJjLobPECmqyJ4 NSCnlsWqCudP8bq/uCHFGeAzQOlcO+MKKJCk11B40GTLaLvs2DsaHbJJe6A3hApE /0VdikSw1Y9eianWzlPpC9VXWWkgnv5myaQRUOhTocax//tfc7fRAjHGNeJ/llQD axGoOLVMifUW9x/AG8NJjWigF35omvxVbsotka++FhuHDKIHKAl3H01dEGiyaLdI TVCGyweRTjWLOJPfqVhvsrx+mJrPnRr3T4Lxjoc3MWg4eXO6nzff7s0fW/92Fi2U k40FtNbjHo3rDeXh7wuSQv7lVQIDAQABo4IC6zCCAucwDwYDVR0TAQH/BAUwAwEB /zAdBgNVHQ4EFgQU0XW9xaZBTOurRy35FZy9MrzPkeowHwYDVR0jBBgwFoAUuo93 0h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgEGMGkGA1UdHwRiMGAwXqBc oFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL0lETklDLUlELzIv QkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgzMzc2Qi5jcmwwfgYI KwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0 L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvdW85 MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCCASkGCCsGAQUFBwELBIIBGzCC ARcwUwYIKwYBBQUHMAWGR3JzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv Lzg2MmQ0ZDc0LTYyOTUtNDQ5Ni04MjNhLTFlOGEzZDViYmI2Yy8wMIGABggrBgEF BQcwCoZ0cnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODYyZDRkNzQt NjI5NS00NDk2LTgyM2EtMWU4YTNkNWJiYjZjLzAvRDE3NUJEQzVBNjQxNENFQkFC NDcyREY5MTU5Q0JEMzJCQ0NGOTFFQS5tZnQwPQYIKwYBBQUHMA2GMWh0dHBzOi8v cmVwby1ycGtpLmlkbmljLm5ldC9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAME AGd+7gMEAKPjyTAPBAIAAjAJAwcAIAEN8d5AMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwJL5zANBgkqhkiG9w0BAQsFAAOCAQEANXzLmxnoDl0QwE7YbFXqHOwHgLVI jCZEFzharQExxiHdF1Os/9AUi3AbYq7ZdQN2o3b2Zsm8cL0vBiTwtGGGm43UWA1b cTyNyVDfcHkWME6zgbJ7+mRG2Vw//w421J1XBNN6efEs7jACK8NXOfx/hQm0Y/fz OO+fG9ZZQdZbeMMxar0uxImiXZA9/+10Y6L59rKGOSpmE2vlVmPPntOAXHCFyCx9 1CI+h4QTgKIi6mPPnFlITtk+AlYthmnGYoqorgiGMPiBrNN2bXqM9sEIi9UjBOkS mY39I3WmlosNqYexRM3uHVrY9xmbEm8e1Dnso9TKLeIdePMjM0NbWG7duA== -----END CERTIFICATE-----Generated at Sun Mar 1 22:36:27 2026 by rpki-client