$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer File: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer (raw, json) Hash identifier: ppUeKOlj0bVzmaFN1HycfKf8XbMxLItl/RnByovgjZU= Subject key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 78DAE84E82B3554B57A9D1F4CBC4EAA243A6C3CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft caRepository: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 24 Feb 2026 05:59:44 +0000 Certificate not after: Tue 23 Feb 2027 06:04:44 +0000 Subordinate resources: IP: 103.12.112.0/22 IP: 203.153.212.0/22 IP: 2404:e700::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:da:e8:4e:82:b3:55:4b:57:a9:d1:f4:cb:c4:ea:a2:43:a6:c3:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 24 05:59:44 2026 GMT Not After : Feb 23 06:04:44 2027 GMT Subject: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0d:2f:c3:4d:30:c7:9f:40:ba:96:ac:4e:0d: 01:40:af:76:f9:59:19:71:96:98:73:09:7e:86:62: 69:16:99:0b:58:3a:5c:91:5a:e1:f1:5a:ff:fb:2d: 2d:75:76:2b:38:0f:f1:ba:87:60:c3:6e:d7:ff:8f: 25:22:94:8b:b8:04:7f:be:c6:a1:6d:da:84:2d:27: ae:60:f5:3e:2d:da:80:84:83:9a:a1:12:1b:1d:fa: 23:11:b9:c6:68:3c:00:50:44:dc:49:48:04:1b:cf: dd:06:89:8a:41:6f:b4:2a:8d:57:a1:7b:3d:06:f1: 63:cd:b4:1c:2d:19:44:d7:15:ea:29:54:53:79:d2: f5:a0:6d:9e:e1:8c:35:59:68:1c:9d:dc:4e:ac:80: 8c:69:fa:52:42:a4:dd:41:9d:44:79:80:06:e5:b6: 7b:d6:97:ed:45:d5:14:1f:fa:62:0c:09:c5:d3:8b: d4:3e:e0:24:ff:e2:12:ec:27:15:8b:91:b5:b9:57: 79:33:45:c8:93:dc:d6:20:9d:a9:57:35:a4:d3:b9: e5:09:d2:86:9e:2d:b4:1c:32:dc:9c:94:09:43:ab: ea:2e:88:a5:f0:2f:03:da:eb:11:e6:d3:9e:9b:92: 59:57:b0:2e:9f:1d:b8:dc:86:ad:a7:48:2c:80:07: 7e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.12.112.0/22 203.153.212.0/22 IPv6: 2404:e700::/32 Signature Algorithm: sha256WithRSAEncryption 1e:2b:1e:16:2c:07:c8:a2:3b:6d:84:62:e2:c4:a8:c9:4d:f2: fb:72:61:33:1f:86:b4:20:98:bd:79:01:5f:bd:21:ca:9d:0b: fd:dc:35:69:88:08:15:63:48:7c:47:4e:b9:6f:f7:65:89:f5: 89:38:cb:fb:e8:74:89:9a:9c:84:9e:6d:af:e8:20:81:41:bb: 15:13:fa:92:f6:58:bf:a1:4a:2a:5e:ae:a5:d8:c6:24:49:d4: 72:3a:91:c3:e7:36:89:87:f0:5d:8e:e5:c3:a3:f4:07:58:f3: a5:d7:c7:a1:45:81:40:08:cc:83:d6:0d:06:2c:4e:67:32:d1: 77:93:ad:43:e0:ad:71:e3:8f:e5:4b:37:87:5a:f3:48:0f:81: b9:98:65:dc:13:58:8b:c5:83:34:81:39:50:ee:d1:0a:bb:cb: bf:52:1f:d6:9c:f7:f1:45:90:ac:26:5d:06:25:59:de:1a:8e: 0d:da:a0:e5:7c:c0:9e:f6:50:75:4b:49:cd:4d:21:21:8e:a5: ad:ca:5a:20:f0:35:95:1f:f2:5a:15:23:c6:05:e0:6c:e4:c0: d2:57:11:3d:e9:bb:57:84:80:c7:f7:d2:44:72:84:02:79:b2: 12:18:24:a3:97:b2:60:09:4e:eb:a5:2b:ca:03:8f:5a:c7:b1: c6:37:4d:e0 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUeNroToKzVUtXqdH0y8TqokOmw84wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNDA1NTk0NFoX DTI3MDIyMzA2MDQ0NFowMzExMC8GA1UEAxMoREI3MjVFQUMyREQxRTYyQjdBMDJD NTRBNjE4RDdBMDFCOTU4RTRDNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL4NL8NNMMefQLqWrE4NAUCvdvlZGXGWmHMJfoZiaRaZC1g6XJFa4fFa//st LXV2KzgP8bqHYMNu1/+PJSKUi7gEf77GoW3ahC0nrmD1Pi3agISDmqESGx36IxG5 xmg8AFBE3ElIBBvP3QaJikFvtCqNV6F7PQbxY820HC0ZRNcV6ilUU3nS9aBtnuGM NVloHJ3cTqyAjGn6UkKk3UGdRHmABuW2e9aX7UXVFB/6YgwJxdOL1D7gJP/iEuwn FYuRtblXeTNFyJPc1iCdqVc1pNO55QnShp4ttBwy3JyUCUOr6i6IpfAvA9rrEebT npuSWVewLp8duNyGradILIAHfoECAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNtyXqwt0eYregLFSmGNegG5WOTEMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84MDE1YTg1NS1iMjljLTQ1MDItYWY4MS1jYmI4YjRmN2YwZjcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwMTVhODU1 LWIyOWMtNDUwMi1hZjgxLWNiYjhiNGY3ZjBmNy8wL0RCNzI1RUFDMkREMUU2MkI3 QTAyQzU0QTYxOEQ3QTAxQjk1OEU0QzQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAJnDHADBALLmdQwDQQCAAIwBwMFACQE5wAwDQYJKoZIhvcNAQELBQADggEBAB4r HhYsB8iiO22EYuLEqMlN8vtyYTMfhrQgmL15AV+9IcqdC/3cNWmICBVjSHxHTrlv 92WJ9Yk4y/vodImanISeba/oIIFBuxUT+pL2WL+hSiperqXYxiRJ1HI6kcPnNomH 8F2O5cOj9AdY86XXx6FFgUAIzIPWDQYsTmcy0XeTrUPgrXHjj+VLN4da80gPgbmY ZdwTWIvFgzSBOVDu0Qq7y79SH9ac9/FFkKwmXQYlWd4ajg3aoOV8wJ72UHVLSc1N ISGOpa3KWiDwNZUf8loVI8YF4GzkwNJXET3pu1eEgMf30kRyhAJ5shIYJKOXsmAJ TuulK8oDj1rHscY3TeA= -----END CERTIFICATE-----Generated at Sun Mar 1 22:38:00 2026 by rpki-client