$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.cer File: AE0590FE0368DD081CC93760B9FC7C5244A6D15F.cer (raw, json) Hash identifier: X70sjBp2doJ96Pe47bdviIkNh3WOM91JVgUkFqrxv9Q= Subject key identifier: AE:05:90:FE:03:68:DD:08:1C:C9:37:60:B9:FC:7C:52:44:A6:D1:5F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 55AE96EDFC91D3322534ABFF1B573C6F677D4CA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.mft caRepository: rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 12 Mar 2026 01:13:58 +0000 Certificate not after: Thu 11 Mar 2027 01:18:58 +0000 Subordinate resources: IP: 103.138.143.0/24 IP: 2001:df0:4180::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ae:96:ed:fc:91:d3:32:25:34:ab:ff:1b:57:3c:6f:67:7d:4c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 12 01:13:58 2026 GMT Not After : Mar 11 01:18:58 2027 GMT Subject: CN=AE0590FE0368DD081CC93760B9FC7C5244A6D15F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6b:26:e3:63:ee:50:f8:89:b8:52:07:1c:d2: 0a:00:66:29:c1:a7:e5:20:c0:03:66:74:dc:cb:00: bb:76:59:e3:d7:b4:2e:85:ff:f5:48:1e:c3:e6:1a: a2:c1:61:dc:0b:64:61:b8:41:8e:9c:04:28:8e:d4: cd:39:60:23:e3:de:7d:18:62:75:e1:46:e7:aa:16: 25:be:20:cb:45:ad:78:4b:17:85:2f:68:64:58:2b: 35:ff:d0:4c:33:94:3c:6d:73:cf:5b:3b:ff:4c:bb: 6d:c7:2f:40:22:64:ee:35:d2:c1:c6:b4:f9:c5:49: 5b:61:d9:fb:0e:98:84:af:61:a1:3a:c9:a6:0f:4c: a6:a7:da:e5:0e:70:1e:d2:f3:4d:17:b8:2b:4b:03: f6:7d:ae:ee:f8:66:66:c3:da:08:df:62:3c:92:10: cd:97:c5:9e:95:7b:1d:66:72:15:6a:ca:7c:ae:b0: a7:20:6e:dd:98:89:1e:32:75:00:ea:e1:53:be:34: ad:ab:52:3f:b8:50:79:20:e5:27:8e:6f:ed:b3:d9: 23:7a:90:e0:f1:64:ff:ea:d3:07:57:f2:d3:f1:12: e0:cd:e0:e7:b0:55:02:46:02:b0:79:95:8e:9a:1b: da:1b:6d:07:65:cb:4e:9a:a8:0b:bd:87:74:d4:04: 75:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AE:05:90:FE:03:68:DD:08:1C:C9:37:60:B9:FC:7C:52:44:A6:D1:5F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2535850e-4bfa-4504-bbec-6c6b2cc3ba29/0/AE0590FE0368DD081CC93760B9FC7C5244A6D15F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.138.143.0/24 IPv6: 2001:df0:4180::/48 Signature Algorithm: sha256WithRSAEncryption 88:c6:07:16:61:93:51:ff:5e:e4:57:0d:52:cb:06:52:9a:d2: 7c:e8:45:2b:a8:d1:97:47:db:8d:e8:a7:21:a7:00:5f:bb:c3: 05:c8:64:bc:d9:99:ab:9d:d3:d6:5f:c6:fe:ae:11:42:61:c9: 64:41:1b:b5:91:43:9f:f0:9b:94:c0:6c:eb:38:f9:fb:0f:06: 26:6c:2a:4b:55:77:c3:e3:be:37:2c:e5:28:36:6d:9a:95:d4: 25:0b:cf:95:08:f8:98:85:ce:ec:54:88:3f:87:28:da:bb:97: bc:95:15:30:99:df:25:3b:78:5b:f9:3a:aa:e5:27:79:ee:d4: b7:fe:18:f2:f3:72:72:5c:8a:17:bf:f8:fa:27:ca:f9:27:6a: 9f:83:84:c8:66:df:fd:e8:80:9a:c2:1f:f7:a2:58:41:ea:43: 45:4e:53:89:e5:08:80:b5:5c:ea:7a:2a:31:40:90:b1:c4:9a: 1d:7c:6c:7a:6d:f7:dc:56:8f:15:76:81:2e:3e:ef:97:15:dc: 7f:15:bd:ec:73:34:ba:92:44:1e:d2:51:7b:b8:9b:87:1e:69: 0e:c7:19:93:dc:7f:72:75:1e:14:5c:6f:7d:e5:06:68:24:76: 2e:10:8a:9f:80:75:3b:52:34:1a:cd:62:4e:f9:60:58:2b:20: 05:86:e0:5a -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUVa6W7fyR0zIlNKv/G1c8b2d9TKIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxMjAxMTM1OFoX DTI3MDMxMTAxMTg1OFowMzExMC8GA1UEAxMoQUUwNTkwRkUwMzY4REQwODFDQzkz NzYwQjlGQzdDNTI0NEE2RDE1RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOJrJuNj7lD4ibhSBxzSCgBmKcGn5SDAA2Z03MsAu3ZZ49e0LoX/9Ugew+Ya osFh3AtkYbhBjpwEKI7UzTlgI+PefRhideFG56oWJb4gy0WteEsXhS9oZFgrNf/Q TDOUPG1zz1s7/0y7bccvQCJk7jXSwca0+cVJW2HZ+w6YhK9hoTrJpg9Mpqfa5Q5w HtLzTRe4K0sD9n2u7vhmZsPaCN9iPJIQzZfFnpV7HWZyFWrKfK6wpyBu3ZiJHjJ1 AOrhU740ratSP7hQeSDlJ45v7bPZI3qQ4PFk/+rTB1fy0/ES4M3g57BVAkYCsHmV jpob2httB2XLTpqoC72HdNQEdZcCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK4FkP4DaN0IHMk3YLn8fFJEptFfMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNTM1ODUwZS00YmZhLTQ1MDQtYmJlYy02YzZiMmNjM2JhMjkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI1MzU4NTBl LTRiZmEtNDUwNC1iYmVjLTZjNmIyY2MzYmEyOS8wL0FFMDU5MEZFMDM2OEREMDgx Q0M5Mzc2MEI5RkM3QzUyNDRBNkQxNUYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BABnio8wDwQCAAIwCQMHACABDfBBgDANBgkqhkiG9w0BAQsFAAOCAQEAiMYHFmGT Uf9e5FcNUssGUprSfOhFK6jRl0fbjeinIacAX7vDBchkvNmZq53T1l/G/q4RQmHJ ZEEbtZFDn/CblMBs6zj5+w8GJmwqS1V3w+O+NyzlKDZtmpXUJQvPlQj4mIXO7FSI P4co2ruXvJUVMJnfJTt4W/k6quUnee7Ut/4Y8vNyclyKF7/4+ifK+Sdqn4OEyGbf /eiAmsIf96JYQepDRU5TieUIgLVc6noqMUCQscSaHXxsem333FaPFXaBLj7vlxXc fxW97HM0upJEHtJRe7ibhx5pDscZk9x/cnUeFFxvfeUGaCR2LhCKn4B1O1I0Gs1i TvlgWCsgBYbgWg== -----END CERTIFICATE-----Generated at Thu Mar 19 08:11:51 2026 by rpki-client