$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer File: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer (raw, json) Hash identifier: VrftpnBMU8GHuhClXvfzMgHt/KcFtEbYRaEecvcMOSY= Subject key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 44DA9B1E3E27134CD4696DE1228A59A6A1AF3635 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft caRepository: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 20 Mar 2026 23:38:15 +0000 Certificate not after: Fri 19 Mar 2027 23:43:15 +0000 Subordinate resources: IP: 103.191.60.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 09:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:da:9b:1e:3e:27:13:4c:d4:69:6d:e1:22:8a:59:a6:a1:af:36:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 20 23:38:15 2026 GMT Not After : Mar 19 23:43:15 2027 GMT Subject: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:f4:04:ce:05:e5:73:48:73:33:cb:08:59: b7:05:9b:6f:11:0e:0f:98:88:fc:31:91:81:8d:f8: 68:4d:9a:77:e4:05:30:0f:94:69:17:11:fb:02:63: 28:a3:78:36:23:e5:ea:d3:7e:23:ce:4b:bd:c9:61: 22:b9:83:6c:87:fb:07:b3:ab:42:34:16:c7:86:8d: 2b:58:cf:77:6d:3f:1f:6b:fa:62:f5:ec:d1:78:2c: a9:fc:f8:bf:25:13:50:e1:f8:c7:72:1b:a6:a7:5f: 1e:91:78:26:e8:5c:da:28:c2:1a:63:ba:d3:d7:fb: e4:d6:aa:d3:1e:b1:1b:d6:3e:c7:39:a9:7c:53:c9: 50:b4:72:93:f2:8e:4c:67:12:b9:6f:74:4f:3c:54: 7a:d0:ac:34:07:b3:55:2c:04:ad:85:0e:4c:83:aa: 31:6a:5e:e0:03:18:3f:c2:66:de:16:72:02:f9:c6: 34:e5:35:f3:a1:ec:2b:ac:cc:da:4c:ce:ee:9d:01: af:b2:ab:b5:b7:ac:74:8e:f8:a7:38:55:db:1b:7d: 78:51:17:2e:0f:0b:b6:2e:66:94:8f:e4:35:72:ae: fb:7e:20:01:02:ab:4c:91:a2:97:46:19:83:be:9c: 39:70:b1:37:cd:58:2c:fd:e8:b9:02:a4:8b:cd:38: d0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.191.60.0/23 Signature Algorithm: sha256WithRSAEncryption 52:6d:31:7b:e5:3e:f1:02:71:15:95:38:6f:7f:40:6c:3f:c4: f6:27:0e:76:45:ef:b8:3f:e5:91:88:df:43:ec:f8:33:d9:a9: d1:c0:6b:6b:43:4b:28:4c:ca:f2:a2:ca:24:b7:4b:4b:2e:77: 52:1c:c0:f6:75:0c:35:a3:78:49:db:3c:c0:33:47:98:91:f2: 65:4e:eb:2b:9e:08:a4:c9:1c:b9:5d:f1:ff:a8:2b:a0:4b:fe: 6a:84:1e:3a:c9:8c:d7:e1:1e:e6:53:65:c7:1a:86:bc:b5:2b: 22:f9:5b:70:bb:64:6d:e4:7d:d0:50:79:7c:57:16:b8:66:a8: 54:22:87:cf:87:3b:de:9b:45:61:e3:33:71:01:25:35:fc:1d: f4:10:90:38:2a:84:b2:50:2b:05:83:7d:23:4d:29:c8:05:4f: 7e:8e:b3:6d:fa:60:02:bb:65:0a:35:4d:26:a8:94:40:e3:9a: b3:41:d6:8f:55:92:7f:0d:1c:69:16:43:32:ee:d0:3d:fd:f7: a7:42:30:85:77:ec:5f:0f:4e:43:5c:05:6e:81:d6:7d:33:01: d6:3b:b2:d7:9e:37:55:95:88:50:90:13:cd:29:2d:62:f2:26: 81:08:a5:ee:53:59:1c:5f:4b:b7:3f:ca:bd:e0:8e:33:27:fe: 53:94:39:e2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIURNqbHj4nE0zUaW3hIopZpqGvNjUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyMDIzMzgxNVoX DTI3MDMxOTIzNDMxNVowMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIx MjJCNkYwNENDNEY1RjMyQ0VCNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9s9ATOBeVzSHMzywhZtwWbbxEOD5iI/DGRgY34aE2ad+QFMA+UaRcR+wJj KKN4NiPl6tN+I85LvclhIrmDbIf7B7OrQjQWx4aNK1jPd20/H2v6YvXs0Xgsqfz4 vyUTUOH4x3IbpqdfHpF4Juhc2ijCGmO609f75Naq0x6xG9Y+xzmpfFPJULRyk/KO TGcSuW90TzxUetCsNAezVSwErYUOTIOqMWpe4AMYP8Jm3hZyAvnGNOU186HsK6zM 2kzO7p0Br7KrtbesdI74pzhV2xt9eFEXLg8Lti5mlI/kNXKu+34gAQKrTJGil0YZ g76cOXCxN81YLP3ouQKki8040N8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC1vlvpjDqeuCisSK28EzE9fMs61MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FlMzRkMmQ4 LTM0YWYtNDc1Ny04YWQ5LTkyZGEzNWQ5MjE2OC8wLzJENkY5NkZBNjMwRUE3QUUw QTJCMTIyQjZGMDRDQzRGNUYzMkNFQjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvzwwDQYJKoZIhvcNAQELBQADggEBAFJtMXvlPvECcRWVOG9/QGw/xPYnDnZF 77g/5ZGI30Ps+DPZqdHAa2tDSyhMyvKiyiS3S0sud1IcwPZ1DDWjeEnbPMAzR5iR 8mVO6yueCKTJHLld8f+oK6BL/mqEHjrJjNfhHuZTZccahry1KyL5W3C7ZG3kfdBQ eXxXFrhmqFQih8+HO96bRWHjM3EBJTX8HfQQkDgqhLJQKwWDfSNNKcgFT36Os236 YAK7ZQo1TSaolEDjmrNB1o9Vkn8NHGkWQzLu0D3996dCMIV37F8PTkNcBW6B1n0z AdY7steeN1WViFCQE80pLWLyJoEIpe5TWRxfS7c/yr3gjjMn/lOUOeI= -----END CERTIFICATE-----Generated at Sun Mar 22 09:24:06 2026 by rpki-client