$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer File: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer (raw, json) Hash identifier: BLoGMUXhjjQoZrSL4EPoydsdQXr0/mkOuMJ0F5WY6fA= Subject key identifier: BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2F35E33896D383FF29DA2A817C59F490B536BAFE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft caRepository: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Mar 2026 02:31:54 +0000 Certificate not after: Thu 04 Mar 2027 02:36:54 +0000 Subordinate resources: IP: 103.189.118.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:35:e3:38:96:d3:83:ff:29:da:2a:81:7c:59:f4:90:b5:36:ba:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 5 02:31:54 2026 GMT Not After : Mar 4 02:36:54 2027 GMT Subject: CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:b4:f5:af:4c:db:75:dc:aa:b1:b3:04:46: 69:2a:4a:98:c9:e3:ce:d7:82:3c:79:75:f7:25:54: 12:7b:9b:e2:f5:4c:61:ea:76:29:33:64:fb:66:86: 36:63:0c:1d:64:c7:76:bb:ad:77:31:96:b8:7c:08: a7:27:ad:d3:61:89:a7:fc:33:49:14:8d:c3:63:23: 43:3b:f7:18:7d:ea:65:12:d3:6d:ea:d4:f7:20:c1: 84:e5:d2:02:3b:10:27:83:f7:84:a1:c0:cd:ea:94: 06:f0:af:9a:b0:01:22:15:0c:ad:b2:01:ab:d6:01: 32:ef:34:c8:b2:a4:80:8b:53:a8:00:3b:c6:04:86: 70:2a:e1:de:09:87:15:cc:cc:16:4c:21:b4:11:5d: 9d:18:32:eb:ba:09:d2:ab:c1:45:7d:a6:a9:5b:4e: 5a:b2:26:47:73:11:2c:7a:4c:19:da:28:33:ff:36: 77:a7:0c:a3:e3:54:52:06:ff:9c:00:ad:bf:e0:05: d7:ef:2c:56:73:0e:32:1a:2d:82:c9:5d:f7:6c:e9: ee:a1:76:66:36:ff:90:e2:dc:ae:c9:58:48:5f:d8: 46:a7:7e:8a:88:3c:30:ee:98:ac:23:00:a2:7d:c1: 90:28:9f:26:0b:e8:ab:d3:f4:7d:48:3f:99:08:eb: 87:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.118.0/23 Signature Algorithm: sha256WithRSAEncryption 10:69:08:fe:c3:8f:f4:f2:9b:ee:e2:b5:83:b2:7a:f3:b4:19: 62:a6:30:35:18:40:89:f5:76:06:f7:c6:de:7d:78:44:ef:9c: 5e:f8:52:89:10:c0:09:36:d5:f6:7f:e4:1e:b3:db:66:92:c6: 57:13:0c:77:49:a7:48:1c:54:06:5e:e2:0b:20:44:47:e2:f6: 68:e9:46:9e:98:b9:00:8c:db:f2:35:68:49:00:76:a7:cf:69: ba:ea:32:e6:36:8a:e6:36:d0:d1:21:ce:47:0d:4b:8f:ce:96: 64:c6:9d:f8:b3:4f:54:8c:2b:2e:f6:d0:48:23:e9:aa:b5:9d: 14:49:22:e0:0d:84:26:18:19:10:d8:9b:ea:4c:c5:06:5c:a0: 1f:b8:67:ce:17:28:69:85:02:31:5c:5f:2b:dc:fd:89:e3:30: 43:d3:c2:dc:02:79:7c:fa:b1:7f:38:7c:25:33:52:d4:da:76: 02:0a:75:e8:43:74:e2:ed:50:8c:ab:c8:a1:bc:84:a4:42:af: b7:84:67:da:ef:ce:cc:84:d9:05:bb:5d:e2:f9:de:57:18:2b: 49:6d:9b:72:65:56:a6:7b:d4:4e:4d:fd:ad:a2:25:ee:b8:5b: f2:75:a9:7e:87:1a:ef:28:1b:81:1f:1d:fb:ee:f1:50:f8:ff: c4:04:4f:0f -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIULzXjOJbTg/8p2iqBfFn0kLU2uv4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMwNTAyMzE1NFoX DTI3MDMwNDAyMzY1NFowMzExMC8GA1UEAxMoQkFDODJBNEQ1NUIzNjhGNDhEODBC RTA0NUUwRjRBODQxOEMzRUE3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL10tPWvTNt13KqxswRGaSpKmMnjzteCPHl19yVUEnub4vVMYep2KTNk+2aG NmMMHWTHdrutdzGWuHwIpyet02GJp/wzSRSNw2MjQzv3GH3qZRLTberU9yDBhOXS AjsQJ4P3hKHAzeqUBvCvmrABIhUMrbIBq9YBMu80yLKkgItTqAA7xgSGcCrh3gmH FczMFkwhtBFdnRgy67oJ0qvBRX2mqVtOWrImR3MRLHpMGdooM/82d6cMo+NUUgb/ nACtv+AF1+8sVnMOMhotgsld92zp7qF2Zjb/kOLcrslYSF/YRqd+iog8MO6YrCMA on3BkCifJgvoq9P0fUg/mQjrhwMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFLrIKk1Vs2j0jYC+BF4PSoQYw+pzMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80M2FkNTIyNi02NTZkLTQ2MWQtOWNmZi1jODNhYzA3NDJmMjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQzYWQ1MjI2 LTY1NmQtNDYxZC05Y2ZmLWM4M2FjMDc0MmYyMC8wL0JBQzgyQTRENTVCMzY4RjQ4 RDgwQkUwNDVFMEY0QTg0MThDM0VBNzMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnvXYwDQYJKoZIhvcNAQELBQADggEBABBpCP7Dj/Tym+7itYOyevO0GWKmMDUY QIn1dgb3xt59eETvnF74UokQwAk21fZ/5B6z22aSxlcTDHdJp0gcVAZe4gsgREfi 9mjpRp6YuQCM2/I1aEkAdqfPabrqMuY2iuY20NEhzkcNS4/OlmTGnfizT1SMKy72 0Egj6aq1nRRJIuANhCYYGRDYm+pMxQZcoB+4Z84XKGmFAjFcXyvc/YnjMEPTwtwC eXz6sX84fCUzUtTadgIKdehDdOLtUIyryKG8hKRCr7eEZ9rvzsyE2QW7XeL53lcY K0ltm3JlVqZ71E5N/a2iJe64W/J1qX6HGu8oG4EfHfvu8VD4/8QETw8= -----END CERTIFICATE-----Generated at Thu Mar 19 08:14:16 2026 by rpki-client