$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer File: FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.cer (raw, json) Hash identifier: EhHt1pTn4VogzL39Uu83R2dgUzv9j2wFFidwyHt9jbA= Subject key identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 54AAC90DCE94B2E03051386C1869C058FE0F162F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft caRepository: rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 28 Feb 2026 12:31:03 +0000 Certificate not after: Sat 27 Feb 2027 12:36:03 +0000 Subordinate resources: IP: 103.164.170.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:aa:c9:0d:ce:94:b2:e0:30:51:38:6c:18:69:c0:58:fe:0f:16:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 28 12:31:03 2026 GMT Not After : Feb 27 12:36:03 2027 GMT Subject: CN=FB3FCC1A69B1BD92D6A319D7FD820EEECE674245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6d:9a:78:e3:8b:0e:98:f0:e3:2c:62:87:e5: a1:2e:a4:76:e1:f0:4e:f8:57:72:88:f8:88:84:56: f7:9a:de:82:6a:86:0d:2b:09:70:d1:d9:dc:f9:45: 14:4c:72:37:16:34:b5:f5:3e:77:14:e4:b1:7d:0d: 47:61:32:48:ab:d7:0a:2e:2b:12:c2:e0:24:c7:1b: 2b:d9:ee:9e:60:76:a0:14:73:26:75:ee:43:35:ba: c3:74:8c:dc:1e:4c:6d:90:f9:63:2d:a9:7d:5b:0a: f7:c8:19:1e:74:65:d0:7b:1c:e0:11:ea:9a:6a:1e: dc:a7:fc:71:19:d0:7f:b6:68:09:48:9b:bd:58:66: 45:15:c9:4d:25:35:82:77:fa:6c:b7:e6:ac:2c:e8: 35:11:9a:c6:e5:7b:2e:7f:a5:7b:97:70:1d:44:82: 2d:b1:0d:36:7a:29:95:43:fe:3f:7d:5e:57:94:db: ef:f5:cc:77:ad:ec:97:01:22:65:5f:0d:4e:e9:29: e6:9b:87:af:f5:08:21:56:e3:3f:8e:0a:f2:62:bf: 68:b6:78:a4:6c:40:0d:2f:73:d7:e4:00:1a:e4:85: 6f:c4:37:89:a1:c8:50:e2:d1:6f:7d:fc:a9:6d:30: 24:45:53:ad:f2:f9:5c:e0:bf:7d:63:5e:b9:0d:3d: 8f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FB:3F:CC:1A:69:B1:BD:92:D6:A3:19:D7:FD:82:0E:EE:CE:67:42:45 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ad87beed-6330-4f33-9105-87722cdf2dd0/0/FB3FCC1A69B1BD92D6A319D7FD820EEECE674245.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.164.170.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:cd:eb:77:37:b6:4d:89:30:01:d4:63:9a:14:06:70:50:ad: 9f:31:fa:32:55:af:05:b2:6a:a7:43:9f:5f:7a:96:0a:52:91: ef:16:be:11:47:75:82:b7:fa:2e:42:4c:e8:00:25:2f:8e:fe: 82:50:89:9b:9b:03:fb:2c:d6:91:43:71:d7:13:af:ba:3e:5e: 5f:38:6d:c7:5d:5a:38:39:63:e6:2a:b2:b2:b1:17:ea:db:1f: 6e:6e:10:4c:9f:7b:36:fd:db:52:41:e0:73:31:53:7c:34:53: 2f:c8:6e:4d:8a:60:33:3c:55:80:69:d5:94:e6:7e:38:55:02: 44:a7:3f:97:8e:8c:77:68:1d:57:e9:04:56:08:9e:b8:ea:4f: 32:f7:91:6a:b5:d3:27:3b:f4:56:15:32:a5:63:a5:72:1e:9c: 32:aa:d3:ad:04:75:c6:29:f7:0d:03:40:fe:1a:f8:ec:8a:7b: 52:41:19:06:d8:c5:ac:0a:11:76:f0:3c:83:9c:88:fc:38:20: e7:b5:94:4a:90:c6:81:36:1b:70:88:22:78:84:f4:dd:73:cd: fb:5f:ec:62:bd:25:54:c7:c8:db:aa:e4:11:d9:4b:57:d9:cf: 48:86:8c:ea:33:f0:b5:7d:ef:ab:f6:d9:23:ee:06:6c:9d:dd: eb:08:e8:6f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVKrJDc6UsuAwUThsGGnAWP4PFi8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyODEyMzEwM1oX DTI3MDIyNzEyMzYwM1owMzExMC8GA1UEAxMoRkIzRkNDMUE2OUIxQkQ5MkQ2QTMx OUQ3RkQ4MjBFRUVDRTY3NDI0NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALptmnjjiw6Y8OMsYofloS6kduHwTvhXcoj4iIRW95regmqGDSsJcNHZ3PlF FExyNxY0tfU+dxTksX0NR2EySKvXCi4rEsLgJMcbK9nunmB2oBRzJnXuQzW6w3SM 3B5MbZD5Yy2pfVsK98gZHnRl0Hsc4BHqmmoe3Kf8cRnQf7ZoCUibvVhmRRXJTSU1 gnf6bLfmrCzoNRGaxuV7Ln+le5dwHUSCLbENNnoplUP+P31eV5Tb7/XMd63slwEi ZV8NTukp5puHr/UIIVbjP44K8mK/aLZ4pGxADS9z1+QAGuSFb8Q3iaHIUOLRb338 qW0wJEVTrfL5XOC/fWNeuQ09jw0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPs/zBppsb2S1qMZ1/2CDu7OZ0JFMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZDg3YmVlZC02MzMwLTRmMzMtOTEwNS04NzcyMmNkZjJkZDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkODdiZWVk LTYzMzAtNGYzMy05MTA1LTg3NzIyY2RmMmRkMC8wL0ZCM0ZDQzFBNjlCMUJEOTJE NkEzMTlEN0ZEODIwRUVFQ0U2NzQyNDUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnpKowDQYJKoZIhvcNAQELBQADggEBAB/N63c3tk2JMAHUY5oUBnBQrZ8x+jJV rwWyaqdDn196lgpSke8WvhFHdYK3+i5CTOgAJS+O/oJQiZubA/ss1pFDcdcTr7o+ Xl84bcddWjg5Y+YqsrKxF+rbH25uEEyfezb921JB4HMxU3w0Uy/Ibk2KYDM8VYBp 1ZTmfjhVAkSnP5eOjHdoHVfpBFYInrjqTzL3kWq10yc79FYVMqVjpXIenDKq060E dcYp9w0DQP4a+OyKe1JBGQbYxawKEXbwPIOciPw4IOe1lEqQxoE2G3CIIniE9N1z zftf7GK9JVTHyNuq5BHZS1fZz0iGjOoz8LV976v22SPuBmyd3esI6G8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:38:58 2026 by rpki-client