$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer File: DB3705DEAC1CB7212393B7021AB671BD8699FE9B.cer (raw, json) Hash identifier: BfOMLXOfU5r5A+xCMYtOuoCZoX7jKv/ouV//eZXaMXA= Subject key identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 785EF1C0FBFE76E70756F1557402CBC95CFFBF0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft caRepository: rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 16 Apr 2026 06:38:50 +0000 Certificate not after: Thu 15 Apr 2027 06:43:50 +0000 Subordinate resources: IP: 103.163.240.0/23 IP: 2401:7e20::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:5e:f1:c0:fb:fe:76:e7:07:56:f1:55:74:02:cb:c9:5c:ff:bf:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 16 06:38:50 2026 GMT Not After : Apr 15 06:43:50 2027 GMT Subject: CN=DB3705DEAC1CB7212393B7021AB671BD8699FE9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d6:d5:8a:c6:91:68:71:1c:e6:2c:44:d7:f9: 31:76:cf:3e:15:42:96:95:1c:f5:76:c7:8b:8e:d7: 88:12:18:34:cf:cc:eb:77:03:c6:16:77:7b:c4:39: 0d:1f:c9:1a:7d:35:39:5a:68:a6:2b:a5:72:b0:ef: 6c:f2:59:8c:ce:6f:a6:1e:ff:57:f5:38:a8:65:ae: 2f:32:8e:36:2f:03:99:24:fb:f2:b1:e7:1d:a4:df: bc:44:84:04:03:88:5a:4b:04:8b:90:95:9f:c6:4d: 73:1b:d2:9e:9d:cb:ef:2b:a9:e5:40:e1:61:c6:38: 4d:8f:dc:cb:d5:c8:30:ef:d4:a2:c1:b4:1d:7c:04: f4:51:5e:44:63:25:79:4a:c3:c6:37:12:ae:46:47: 72:df:2b:9e:13:11:21:ed:6a:07:93:f5:84:2d:93: 86:5d:1e:d2:59:f0:10:20:ce:54:79:b0:39:9b:92: 76:f0:d6:1e:22:f3:a3:4c:7b:43:23:8e:5a:47:c7: 35:dc:05:9e:77:ae:29:30:70:85:2e:6c:e5:6d:7d: cd:1c:98:24:6f:84:2a:56:24:c7:1c:73:0b:95:60: 95:75:0b:81:11:da:41:66:d1:04:6e:5c:9e:d4:10: 22:f0:eb:de:d3:ef:fc:cb:85:9e:0c:95:54:fa:a1: a8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:37:05:DE:AC:1C:B7:21:23:93:B7:02:1A:B6:71:BD:86:99:FE:9B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3c5b785d-8303-45c5-9a58-ec1288740866/0/DB3705DEAC1CB7212393B7021AB671BD8699FE9B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.163.240.0/23 IPv6: 2401:7e20::/32 Signature Algorithm: sha256WithRSAEncryption 59:b2:16:d4:a1:41:21:fc:47:9e:b9:4b:f4:6a:68:02:b2:b2: d4:37:27:29:cb:94:d8:c3:e9:c7:56:0a:ac:dc:05:9f:f6:2a: cc:37:80:e5:d4:22:3a:8f:64:45:7b:73:b5:45:86:eb:76:e5: b7:03:72:b1:9d:b5:6e:dc:f2:92:69:ff:c1:48:4b:eb:77:88: bb:13:89:1a:ab:09:ca:8e:d4:90:9e:10:40:c5:dc:04:65:4a: e7:f6:4a:7a:7e:a4:a8:ef:42:93:32:97:b6:f2:38:32:fa:06: fc:6f:ef:ea:f1:eb:19:07:ad:d1:b8:91:11:d0:a3:b6:1a:3d: 9a:76:73:7c:00:93:23:63:38:8a:63:15:51:4b:92:04:ae:b5: 70:c2:9f:fd:21:af:54:83:c1:b8:ca:65:20:1d:e9:45:a1:98: 7a:60:38:52:2b:ef:b1:9c:4c:48:6a:ff:eb:e2:c2:39:0e:19: 35:64:66:8d:4e:4d:44:c2:38:b8:e8:73:53:ce:3b:e8:16:2d: a6:21:d4:59:ee:48:5b:ed:2c:91:cd:8f:f6:60:46:06:72:2d: d4:da:b6:ee:6d:8f:71:36:be:d3:94:fe:00:19:70:32:64:2d: 59:5a:00:35:f1:88:b1:c3:12:8b:e4:61:8f:d3:43:ba:3e:00: 7a:24:e4:fc -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUeF7xwPv+ducHVvFVdALLyVz/vwowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQxNjA2Mzg1MFoX DTI3MDQxNTA2NDM1MFowMzExMC8GA1UEAxMoREIzNzA1REVBQzFDQjcyMTIzOTNC NzAyMUFCNjcxQkQ4Njk5RkU5QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAODW1YrGkWhxHOYsRNf5MXbPPhVClpUc9XbHi47XiBIYNM/M63cDxhZ3e8Q5 DR/JGn01OVpopiulcrDvbPJZjM5vph7/V/U4qGWuLzKONi8DmST78rHnHaTfvESE BAOIWksEi5CVn8ZNcxvSnp3L7yup5UDhYcY4TY/cy9XIMO/UosG0HXwE9FFeRGMl eUrDxjcSrkZHct8rnhMRIe1qB5P1hC2Thl0e0lnwECDOVHmwOZuSdvDWHiLzo0x7 QyOOWkfHNdwFnneuKTBwhS5s5W19zRyYJG+EKlYkxxxzC5VglXULgRHaQWbRBG5c ntQQIvDr3tPv/MuFngyVVPqhqE8CAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNs3Bd6sHLchI5O3Ahq2cb2Gmf6bMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zYzViNzg1ZC04MzAzLTQ1YzUtOWE1OC1lYzEyODg3NDA4NjYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjNWI3ODVk LTgzMDMtNDVjNS05YTU4LWVjMTI4ODc0MDg2Ni8wL0RCMzcwNURFQUMxQ0I3MjEy MzkzQjcwMjFBQjY3MUJEODY5OUZFOUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BAFno/AwDQQCAAIwBwMFACQBfiAwDQYJKoZIhvcNAQELBQADggEBAFmyFtShQSH8 R565S/RqaAKystQ3JynLlNjD6cdWCqzcBZ/2Ksw3gOXUIjqPZEV7c7VFhut25bcD crGdtW7c8pJp/8FIS+t3iLsTiRqrCcqO1JCeEEDF3ARlSuf2Snp+pKjvQpMyl7by ODL6Bvxv7+rx6xkHrdG4kRHQo7YaPZp2c3wAkyNjOIpjFVFLkgSutXDCn/0hr1SD wbjKZSAd6UWhmHpgOFIr77GcTEhq/+viwjkOGTVkZo1OTUTCOLjoc1POO+gWLaYh 1FnuSFvtLJHNj/ZgRgZyLdTatu5tj3E2vtOU/gAZcDJkLVlaADXxiLHDEovkYY/T Q7o+AHok5Pw= -----END CERTIFICATE-----Generated at Fri Apr 17 21:36:54 2026 by rpki-client