$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer (raw, json) Hash identifier: Y7Wc0Qvh1QGfmZRrA/kOBv0jkIzdzBvEamqJnOjlBro= Subject key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2D6D77F3B3B22BC14AC5DC8C12684B21C8222423 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft caRepository: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 16 Mar 2026 14:57:38 +0000 Certificate not after: Mon 15 Mar 2027 15:02:38 +0000 Subordinate resources: IP: 103.186.210.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6d:77:f3:b3:b2:2b:c1:4a:c5:dc:8c:12:68:4b:21:c8:22:24:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 16 14:57:38 2026 GMT Not After : Mar 15 15:02:38 2027 GMT Subject: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d6:1a:e4:61:40:a5:d3:5b:f3:78:2e:4e:14: 43:f8:98:08:2c:18:5d:1d:9d:59:fb:e7:be:17:3b: 31:0f:93:f8:17:d6:b8:c2:5c:0e:6e:57:15:bd:a6: 81:89:61:6b:ba:a6:36:82:7d:f1:e8:6f:98:90:2c: fb:01:59:ff:b6:ea:cf:44:ae:1b:fe:d5:6c:95:2b: 60:86:1a:24:30:80:99:bf:87:0f:49:b9:c7:be:99: 5e:d8:bc:4a:39:bb:39:04:1c:9b:1c:42:30:db:a0: e2:ab:48:ff:09:0c:dc:cd:5b:4d:47:ba:7f:0c:b3: 70:a2:ed:10:fd:1c:a5:b2:69:a9:38:e6:b5:e3:7e: 0f:e6:41:8f:4e:6c:73:cb:a2:eb:1f:80:26:41:23: 35:9e:70:3f:fd:2a:8a:3d:d8:63:93:69:0a:20:49: e1:78:92:4d:cb:1f:83:a7:e5:20:4d:6d:52:6a:e7: 64:f4:7b:11:de:21:cd:f7:36:b8:37:53:c7:88:4a: 30:d8:2b:16:5c:b0:38:a0:8e:a3:b8:0d:6e:57:0f: 37:c9:a4:cc:c1:28:71:c1:5d:2f:17:22:2f:6d:fc: df:2c:da:3c:7a:27:f2:44:a5:8b:45:c2:a4:68:79: 76:f4:50:13:e2:00:00:0b:18:e7:86:6f:e8:22:ef: 52:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.186.210.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:aa:71:2b:3c:88:cf:db:59:5c:f6:9d:6e:a2:d9:42:1c:6a: 15:19:72:48:0e:fe:5d:71:33:49:71:e7:29:e2:4d:53:ac:4e: 72:8a:d8:23:40:d6:20:7d:f9:5d:08:ce:d6:a2:3a:06:9e:0e: 7d:5b:a0:15:ec:85:93:93:08:3d:4e:d6:f6:9a:6f:bd:d6:12: 44:c9:52:4c:e1:75:e1:f0:52:09:68:cc:09:b2:4a:8e:32:27: 16:33:62:1a:db:2f:5a:04:a5:0d:27:fa:5d:32:b4:ec:45:91: a5:d3:bc:f3:83:e0:b9:6b:03:8f:d0:66:0f:df:97:2a:34:4f: f4:90:0d:6d:7d:58:86:87:61:6f:c9:04:26:e0:76:29:13:09: 72:30:4c:66:1a:a8:4c:ba:ae:34:39:58:e9:f7:c4:b6:46:8b: 26:fa:20:dd:33:91:ef:c0:ec:15:c3:67:e5:dc:13:6f:fa:bd: 12:7b:3f:55:ba:f7:be:8e:86:48:c0:b5:b6:37:45:bc:5b:7d: a6:ed:6c:71:99:0f:67:9b:a7:df:72:9b:50:e0:ae:4a:cb:cd: 87:cc:92:6f:62:a3:44:7b:5d:36:36:cb:42:f7:30:dc:10:ee: df:6b:16:35:f6:b1:db:eb:be:63:78:4a:8b:b5:85:ff:91:36: 42:1d:3c:c5 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULW1387OyK8FKxdyMEmhLIcgiJCMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxNjE0NTczOFoX DTI3MDMxNTE1MDIzOFowMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFC NUM3RkQzRUYyN0JFOEU4M0E3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPWGuRhQKXTW/N4Lk4UQ/iYCCwYXR2dWfvnvhc7MQ+T+BfWuMJcDm5XFb2m gYlha7qmNoJ98ehvmJAs+wFZ/7bqz0SuG/7VbJUrYIYaJDCAmb+HD0m5x76ZXti8 Sjm7OQQcmxxCMNug4qtI/wkM3M1bTUe6fwyzcKLtEP0cpbJpqTjmteN+D+ZBj05s c8ui6x+AJkEjNZ5wP/0qij3YY5NpCiBJ4XiSTcsfg6flIE1tUmrnZPR7Ed4hzfc2 uDdTx4hKMNgrFlywOKCOo7gNblcPN8mkzMEoccFdLxciL2383yzaPHon8kSli0XC pGh5dvRQE+IAAAsY54Zv6CLvUvMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB0hOF61s/gsfRq1x/0+8nvo6Dp7MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk0ZGNlZjY1 LTVkZTMtNDEyOS1hYzI3LTc3MDZkNzI2NjAwMS8wLzFEMjEzODVFQjVCM0Y4MkM3 RDFBQjVDN0ZEM0VGMjdCRThFODNBN0IubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnutIwDQYJKoZIhvcNAQELBQADggEBAJuqcSs8iM/bWVz2nW6i2UIcahUZckgO /l1xM0lx5yniTVOsTnKK2CNA1iB9+V0IztaiOgaeDn1boBXshZOTCD1O1vaab73W EkTJUkzhdeHwUglozAmySo4yJxYzYhrbL1oEpQ0n+l0ytOxFkaXTvPOD4LlrA4/Q Zg/flyo0T/SQDW19WIaHYW/JBCbgdikTCXIwTGYaqEy6rjQ5WOn3xLZGiyb6IN0z ke/A7BXDZ+XcE2/6vRJ7P1W6976OhkjAtbY3RbxbfabtbHGZD2ebp99ym1DgrkrL zYfMkm9io0R7XTY2y0L3MNwQ7t9rFjX2sdvrvmN4Sou1hf+RNkIdPMU= -----END CERTIFICATE-----Generated at Thu Mar 19 08:11:25 2026 by rpki-client