$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer File: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer (raw, json) Hash identifier: fFGgIC9foZunn/4/c4RvuDdLOcbmgCrIWsVBA/Hitl8= Subject key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 07A25FAA7E49F26BF1FB20C23104B16F4ABF930F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft caRepository: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 14 Mar 2026 01:11:17 +0000 Certificate not after: Sat 13 Mar 2027 01:16:17 +0000 Subordinate resources: IP: 103.189.200.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 10:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:a2:5f:aa:7e:49:f2:6b:f1:fb:20:c2:31:04:b1:6f:4a:bf:93:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 14 01:11:17 2026 GMT Not After : Mar 13 01:16:17 2027 GMT Subject: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5b:9d:78:0c:e4:f4:24:43:2c:d7:7c:c6:52: d2:a1:6f:d3:0c:2d:aa:63:5e:c7:5b:ab:03:df:0d: e5:5f:6f:39:a0:c1:e0:17:97:7a:ef:d8:f8:4e:b1: 19:ab:9d:78:b4:b8:0f:69:bd:01:55:eb:f8:e1:a7: 18:13:f9:e8:34:ad:17:68:b2:ed:4f:f5:3c:4a:39: 15:a7:0f:1a:5f:d7:b7:63:79:2f:03:1b:09:a6:87: 69:eb:ae:b3:1d:df:80:a0:33:2e:89:4f:aa:62:f0: df:fd:75:35:a3:b5:2f:c0:04:a1:d4:ad:0c:c8:18: 65:12:ad:b7:39:cb:d3:34:b5:01:97:ae:30:da:86: 7c:ea:66:ff:7f:25:4a:bb:3e:cc:ff:11:2f:a4:de: 4d:17:71:25:d3:23:40:b6:a9:d0:63:c5:40:8d:ed: 11:52:55:1b:4f:8f:06:f6:63:1e:81:46:eb:c2:8f: 40:c8:e9:93:db:af:92:f5:0a:cd:2a:ff:6b:77:b9: d0:7c:42:18:43:a5:de:df:c8:8d:fa:ad:ba:83:77: c1:c8:b3:32:5a:3a:49:ef:78:1e:7d:f1:59:ef:b9: 87:bd:8c:2f:b4:e1:ab:0a:04:e1:98:d0:eb:4a:71: d5:13:6d:65:42:ca:79:7c:ef:5c:a7:29:8d:4f:af: 77:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.200.0/23 Signature Algorithm: sha256WithRSAEncryption 08:12:8e:e7:69:6f:fb:3d:f0:69:ae:48:62:0f:d7:95:17:fb: f9:ea:c2:df:6c:f7:49:c1:79:fc:68:94:c0:cd:23:ac:d1:1d: 2b:02:ff:0f:9c:5a:c7:74:bf:f0:b8:9b:28:3d:e7:0a:b2:39: 68:3b:2b:f4:01:7e:86:b3:f1:b3:b1:11:e2:a0:a4:5d:10:c3: fb:e8:19:f9:83:c7:f6:1c:74:b6:0e:73:cd:73:8a:cb:0f:03: 09:7e:ff:6f:dd:6e:5d:b1:8c:bb:08:2b:92:1d:e1:30:6d:e5: 1f:b2:ca:2e:58:27:e0:06:fb:07:4e:fc:31:a0:dd:3a:1d:78: 4c:93:6f:b8:75:a0:8a:2e:1d:15:3c:e0:ea:57:ee:76:7d:f9: fc:84:37:6e:15:03:69:b6:ed:62:e0:cc:f3:e6:50:85:9a:3f: ed:57:ef:60:cb:42:51:04:6e:76:51:73:48:af:13:f2:62:b1: 5a:b4:da:f7:d1:2a:c7:55:4c:f1:02:d3:1c:1a:85:96:1a:1f: e2:66:4f:8e:ea:87:ef:17:08:58:26:71:bf:32:66:dc:3a:24: 17:85:6c:d3:22:39:66:b5:5c:7c:68:31:92:e5:62:49:95:df: d9:4e:2b:6f:f8:f9:c4:b5:c6:05:a1:d3:cb:75:f2:a0:d7:9e: f7:c8:67:08 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUB6Jfqn5J8mvx+yDCMQSxb0q/kw8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxNDAxMTExN1oX DTI3MDMxMzAxMTYxN1owMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUy RkExODkzNEMxRTdCMUQ5MjE2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALdbnXgM5PQkQyzXfMZS0qFv0wwtqmNex1urA98N5V9vOaDB4BeXeu/Y+E6x GaudeLS4D2m9AVXr+OGnGBP56DStF2iy7U/1PEo5FacPGl/Xt2N5LwMbCaaHaeuu sx3fgKAzLolPqmLw3/11NaO1L8AEodStDMgYZRKttznL0zS1AZeuMNqGfOpm/38l Srs+zP8RL6TeTRdxJdMjQLap0GPFQI3tEVJVG0+PBvZjHoFG68KPQMjpk9uvkvUK zSr/a3e50HxCGEOl3t/IjfqtuoN3wcizMlo6Se94Hn3xWe+5h72ML7ThqwoE4ZjQ 60px1RNtZULKeXzvXKcpjU+vd7kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFF7CwCNA+/p5ozUvoYk0weex2SFvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by83YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhMmU1ZjAz LWJmOTYtNGI0MC1iZDRhLTZlMzg4OGM0MDIwNS8wLzVFQzJDMDIzNDBGQkZBNzlB MzM1MkZBMTg5MzRDMUU3QjFEOTIxNkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvcgwDQYJKoZIhvcNAQELBQADggEBAAgSjudpb/s98GmuSGIP15UX+/nqwt9s 90nBefxolMDNI6zRHSsC/w+cWsd0v/C4myg95wqyOWg7K/QBfoaz8bOxEeKgpF0Q w/voGfmDx/YcdLYOc81zissPAwl+/2/dbl2xjLsIK5Id4TBt5R+yyi5YJ+AG+wdO /DGg3TodeEyTb7h1oIouHRU84OpX7nZ9+fyEN24VA2m27WLgzPPmUIWaP+1X72DL QlEEbnZRc0ivE/JisVq02vfRKsdVTPEC0xwahZYaH+JmT47qh+8XCFgmcb8yZtw6 JBeFbNMiOWa1XHxoMZLlYkmV39lOK2/4+cS1xgWh08t18qDXnvfIZwg= -----END CERTIFICATE-----Generated at Fri Mar 20 12:41:12 2026 by rpki-client