$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3AAFE074610C85854BE75082EC16E60A126879.cer File: FB3AAFE074610C85854BE75082EC16E60A126879.cer (raw, json) Hash identifier: vZwkNbeR2zv4D5ccYgAhKLF4OY16bA1+7MjH5vDTwro= Subject key identifier: FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7822D84AE5143808C41D71AAFBAD52C622981FAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft caRepository: rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 06 Feb 2026 04:02:18 +0000 Certificate not after: Fri 05 Feb 2027 04:07:18 +0000 Subordinate resources: IP: 103.150.159.0/24 IP: 2001:df3:7e80::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:22:d8:4a:e5:14:38:08:c4:1d:71:aa:fb:ad:52:c6:22:98:1f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 6 04:02:18 2026 GMT Not After : Feb 5 04:07:18 2027 GMT Subject: CN=FB3AAFE074610C85854BE75082EC16E60A126879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e9:7a:09:48:c0:21:1d:c7:30:86:b6:2b:ae: a8:17:48:22:9c:86:80:05:17:0c:55:2c:8b:fc:dc: 54:c9:dd:cf:90:44:a6:36:1a:9d:7a:d2:fe:b8:62: 43:75:d3:af:44:5d:77:e4:79:b9:6b:ee:bd:c1:96: 2e:18:65:13:6c:b4:1a:1b:83:66:29:f6:5f:40:85: 0e:4e:9b:86:be:d2:fe:7c:09:b9:a9:44:db:f1:da: b8:00:fb:4f:68:5e:d8:ad:97:da:7c:cd:af:ff:1e: bb:f9:a9:77:eb:1a:f5:4d:b0:8c:29:3c:ce:7f:61: 5a:c6:a9:a0:9d:94:55:80:f8:f7:27:e6:55:3c:f2: 4d:0e:47:45:90:ea:38:fc:f8:0f:61:0a:ae:2b:d4: fe:21:fa:d4:f5:9d:72:fe:85:e6:67:a0:9f:2d:08: 5d:2e:3e:fc:25:4c:7d:14:76:29:0e:ba:14:8f:57: 60:de:87:a0:ca:88:58:a4:46:34:d9:fa:6c:69:21: 99:41:28:e9:4a:7f:0c:df:81:ab:21:ac:93:b2:65: 31:1e:d0:f9:95:43:e8:a6:01:ce:b1:5e:ff:8e:35: 2d:18:e7:9a:52:00:47:96:ff:4e:e4:a4:8d:a7:29: 62:57:37:98:27:16:46:b0:e4:8c:f2:c0:85:c4:a6: e2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:3A:AF:E0:74:61:0C:85:85:4B:E7:50:82:EC:16:E6:0A:12:68:79 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/8165e481-5a79-4868-a4e4-facfd922d813/0/FB3AAFE074610C85854BE75082EC16E60A126879.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.150.159.0/24 IPv6: 2001:df3:7e80::/48 Signature Algorithm: sha256WithRSAEncryption 6c:ef:ff:27:8f:af:74:c7:01:f5:c6:56:21:bc:70:2b:07:f0: 76:38:56:8c:1b:03:47:9d:db:ba:5c:4f:bf:fd:d2:ee:40:f8: 71:69:ab:3a:e6:f1:f3:79:75:6b:b7:47:56:01:bd:ec:cd:ab: 5e:d7:e1:aa:6d:0e:21:f5:a5:bc:dc:6f:a8:84:a5:22:63:f8: 30:ef:b2:01:f7:9b:43:56:56:0a:00:b3:73:b5:6e:19:f5:bd: 85:92:bf:2c:36:f5:50:4a:8c:4f:7c:c7:b0:d2:25:36:bb:e1: 7c:3b:87:c0:ac:2c:71:25:73:db:6c:6a:25:8d:af:48:b4:44: 1b:24:b6:9f:1d:3a:8a:f8:69:d8:6c:ed:0b:cd:a5:d1:c4:d8: 9d:3a:e7:37:da:6a:11:fa:f5:66:5e:43:3b:e2:f7:2b:8e:22: ef:7c:52:67:26:ad:cd:6f:ff:07:36:0c:88:bc:2b:aa:ff:0a: ab:0e:14:6f:83:ca:50:91:b9:e3:e6:67:2d:d4:ff:a1:e0:d5: 1c:be:ce:4b:3c:eb:10:cb:f1:90:f9:1b:e3:82:76:64:93:9d: 0a:9f:70:e0:63:cd:fb:e4:b7:78:98:51:57:c0:e6:f3:51:27: 23:80:a8:9a:af:0b:6d:cb:74:c0:bf:74:83:d4:fd:ac:1a:ec: 8e:1b:f1:c4 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUeCLYSuUUOAjEHXGq+61SxiKYH6owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwNjA0MDIxOFoX DTI3MDIwNTA0MDcxOFowMzExMC8GA1UEAxMoRkIzQUFGRTA3NDYxMEM4NTg1NEJF NzUwODJFQzE2RTYwQTEyNjg3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMTpeglIwCEdxzCGtiuuqBdIIpyGgAUXDFUsi/zcVMndz5BEpjYanXrS/rhi Q3XTr0Rdd+R5uWvuvcGWLhhlE2y0GhuDZin2X0CFDk6bhr7S/nwJualE2/HauAD7 T2he2K2X2nzNr/8eu/mpd+sa9U2wjCk8zn9hWsapoJ2UVYD49yfmVTzyTQ5HRZDq OPz4D2EKrivU/iH61PWdcv6F5megny0IXS4+/CVMfRR2KQ66FI9XYN6HoMqIWKRG NNn6bGkhmUEo6Up/DN+BqyGsk7JlMR7Q+ZVD6KYBzrFe/441LRjnmlIAR5b/TuSk jacpYlc3mCcWRrDkjPLAhcSm4oUCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPs6r+B0YQyFhUvnUILsFuYKEmh5MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84MTY1ZTQ4MS01YTc5LTQ4NjgtYTRlNC1mYWNmZDkyMmQ4MTMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxNjVlNDgx LTVhNzktNDg2OC1hNGU0LWZhY2ZkOTIyZDgxMy8wL0ZCM0FBRkUwNzQ2MTBDODU4 NTRCRTc1MDgyRUMxNkU2MEExMjY4NzkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnlp8wDwQCAAIwCQMHACABDfN+gDANBgkqhkiG9w0BAQsFAAOCAQEAbO//J4+v dMcB9cZWIbxwKwfwdjhWjBsDR53bulxPv/3S7kD4cWmrOubx83l1a7dHVgG97M2r Xtfhqm0OIfWlvNxvqISlImP4MO+yAfebQ1ZWCgCzc7VuGfW9hZK/LDb1UEqMT3zH sNIlNrvhfDuHwKwscSVz22xqJY2vSLREGyS2nx06ivhp2GztC82l0cTYnTrnN9pq Efr1Zl5DO+L3K44i73xSZyatzW//BzYMiLwrqv8Kqw4Ub4PKUJG54+ZnLdT/oeDV HL7OSzzrEMvxkPkb44J2ZJOdCp9w4GPN++S3eJhRV8Dm81EnI4Comq8Lbct0wL90 g9T9rBrsjhvxxA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:24:19 2026 by rpki-client