$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/F503463BC571123F80B94A358280E0D0F9750C09.cer File: F503463BC571123F80B94A358280E0D0F9750C09.cer (raw, json) Hash identifier: QtUQuGPpv64fRzO0+q9bmV3nneRgmdYYQqvAG7jp7iw= Subject key identifier: F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 04361D55D866208EED8E597BAA86F286FC43D357 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft caRepository: rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 01 Mar 2026 14:59:07 +0000 Certificate not after: Sun 28 Feb 2027 15:04:07 +0000 Subordinate resources: IP: 103.169.186.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:36:1d:55:d8:66:20:8e:ed:8e:59:7b:aa:86:f2:86:fc:43:d3:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 1 14:59:07 2026 GMT Not After : Feb 28 15:04:07 2027 GMT Subject: CN=F503463BC571123F80B94A358280E0D0F9750C09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:57:ef:f8:21:0b:92:2e:f8:40:c6:e4:28: 8e:37:87:71:e1:85:b7:e2:80:cc:05:96:e3:fc:51: bc:e5:43:84:9c:fc:0a:12:ae:2f:fa:0f:05:bc:c8: 81:77:5e:44:47:a5:ca:4a:9b:ed:3a:8d:e7:e7:34: 55:d5:cf:b4:55:ed:1d:4d:49:bd:a1:46:c1:97:0a: e3:14:15:a6:6c:ce:72:ca:49:b6:61:49:49:68:f5: 3c:a3:7a:3e:6e:63:3d:69:27:6d:d2:72:2c:ac:1f: 44:57:f1:23:af:e2:13:55:43:6f:13:88:78:85:8c: 01:d3:bb:83:e6:65:c9:ef:5d:23:31:b0:09:66:08: 1c:6f:f3:d0:0d:1d:e3:08:f8:fc:1f:64:d7:86:9e: b0:b9:0f:8d:62:5f:67:7d:e8:9c:80:c4:6d:d2:3a: 8f:cc:15:81:9e:19:1e:46:48:5a:2e:93:ef:f0:90: 64:a5:5b:bc:49:7f:68:c7:8f:19:55:ec:13:3e:43: ee:60:ae:59:ef:9c:34:47:9d:fc:53:d0:04:27:59: 1c:61:76:ce:e8:d4:03:ea:b5:5e:f0:7e:94:63:76: 3d:c7:a8:35:6c:84:bd:dc:f3:8e:2a:3d:e2:64:92: 04:05:1c:7e:40:94:1a:dc:4e:d9:fe:4b:85:64:9e: 1f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F5:03:46:3B:C5:71:12:3F:80:B9:4A:35:82:80:E0:D0:F9:75:0C:09 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fbcd9a7d-de35-47e8-9228-12dfb0b8eac8/0/F503463BC571123F80B94A358280E0D0F9750C09.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.186.0/23 Signature Algorithm: sha256WithRSAEncryption 98:af:dd:9d:96:8a:84:90:c3:61:2b:1e:20:e9:72:d3:25:1d: d4:fb:c2:86:7b:15:9c:0d:5a:f9:e1:35:03:36:59:fb:02:27: 91:63:8b:6b:45:6e:12:f7:6a:a0:7a:cd:40:8e:f6:93:a8:04: df:72:0a:c5:0b:ec:32:4a:c3:fe:7f:ea:a3:78:71:2d:b2:3e: 9a:15:67:e0:2d:24:3f:83:d0:ac:23:e1:e3:e4:bd:24:90:a5: 34:a4:95:9f:ba:e4:2c:35:aa:a8:d2:e3:86:1d:02:9a:13:af: 5c:7d:a3:51:f8:d8:9e:7d:a2:45:d1:87:75:26:dc:c9:bb:7a: 47:74:94:0c:64:d8:67:c9:78:90:12:02:a9:64:c5:dd:c7:de: 8c:4f:8e:47:9c:4b:aa:8b:b5:fb:5e:9c:53:79:83:92:3c:37: 14:da:f5:90:3b:6a:c9:1d:12:09:d3:56:0b:8a:8a:d3:fb:28: ea:34:82:c7:7c:da:6e:08:16:3b:91:c3:c8:fb:7b:e7:ac:b8: be:d8:2e:c4:63:e8:3b:ba:39:b3:11:f9:15:46:56:31:a7:bc: 45:a7:53:7c:01:44:33:d0:0f:1c:3a:64:13:ba:01:48:ac:56: 1d:fc:14:65:41:45:0a:d7:c0:2f:6a:4e:f2:4b:39:96:cd:15: 95:74:13:30 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUBDYdVdhmII7tjll7qobyhvxD01cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwMTE0NTkwN1oX DTI3MDIyODE1MDQwN1owMzExMC8GA1UEAxMoRjUwMzQ2M0JDNTcxMTIzRjgwQjk0 QTM1ODI4MEUwRDBGOTc1MEMwOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKe/V+/4IQuSLvhAxuQojjeHceGFt+KAzAWW4/xRvOVDhJz8ChKuL/oPBbzI gXdeREelykqb7TqN5+c0VdXPtFXtHU1JvaFGwZcK4xQVpmzOcspJtmFJSWj1PKN6 Pm5jPWknbdJyLKwfRFfxI6/iE1VDbxOIeIWMAdO7g+Zlye9dIzGwCWYIHG/z0A0d 4wj4/B9k14aesLkPjWJfZ33onIDEbdI6j8wVgZ4ZHkZIWi6T7/CQZKVbvEl/aMeP GVXsEz5D7mCuWe+cNEed/FPQBCdZHGF2zujUA+q1XvB+lGN2PceoNWyEvdzzjio9 4mSSBAUcfkCUGtxO2f5LhWSeH7cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPUDRjvFcRI/gLlKNYKA4ND5dQwJMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mYmNkOWE3ZC1kZTM1LTQ3ZTgtOTIyOC0xMmRmYjBiOGVhYzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZiY2Q5YTdk LWRlMzUtNDdlOC05MjI4LTEyZGZiMGI4ZWFjOC8wL0Y1MDM0NjNCQzU3MTEyM0Y4 MEI5NEEzNTgyODBFMEQwRjk3NTBDMDkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqbowDQYJKoZIhvcNAQELBQADggEBAJiv3Z2WioSQw2ErHiDpctMlHdT7woZ7 FZwNWvnhNQM2WfsCJ5Fji2tFbhL3aqB6zUCO9pOoBN9yCsUL7DJKw/5/6qN4cS2y PpoVZ+AtJD+D0Kwj4ePkvSSQpTSklZ+65Cw1qqjS44YdApoTr1x9o1H42J59okXR h3Um3Mm7ekd0lAxk2GfJeJASAqlkxd3H3oxPjkecS6qLtftenFN5g5I8NxTa9ZA7 askdEgnTVguKitP7KOo0gsd82m4IFjuRw8j7e+esuL7YLsRj6Du6ObMR+RVGVjGn vEWnU3wBRDPQDxw6ZBO6AUisVh38FGVBRQrXwC9qTvJLOZbNFZV0EzA= -----END CERTIFICATE-----Generated at Mon Mar 2 00:35:41 2026 by rpki-client