$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/358F4D417A1317CB220BBDC982D7F35D1540D51A.cer File: 358F4D417A1317CB220BBDC982D7F35D1540D51A.cer (raw, json) Hash identifier: ICs/u7v6oaM0z7gYvyoi0eQicx3dJIil53xHVbmaxs0= Subject key identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 39857D5D7BBEDD76C673859C024AB310C9A3E072 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft caRepository: rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 13 Mar 2026 17:01:05 +0000 Certificate not after: Fri 12 Mar 2027 17:06:05 +0000 Subordinate resources: IP: 103.210.68.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:85:7d:5d:7b:be:dd:76:c6:73:85:9c:02:4a:b3:10:c9:a3:e0:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 13 17:01:05 2026 GMT Not After : Mar 12 17:06:05 2027 GMT Subject: CN=358F4D417A1317CB220BBDC982D7F35D1540D51A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:44:0c:1b:e6:2f:b4:99:50:cc:6b:84:68: a8:f5:63:a1:38:9a:4c:ab:fb:78:3a:37:77:8e:fc: bb:fb:c1:9a:74:d0:be:e1:0c:35:55:24:01:de:3a: 46:2b:f1:f0:42:08:d0:84:a2:74:73:17:fe:7f:cc: 0c:8f:ec:ff:07:a6:66:43:75:f0:6d:4e:c9:cf:ae: 73:39:f6:2e:c6:51:62:9b:4f:5c:24:9e:3f:58:3d: f0:1c:aa:98:92:c3:45:ec:65:2c:e1:21:7c:41:f7: 23:ee:ee:d1:1d:27:24:9c:29:88:57:b0:21:c1:bb: d3:3b:5a:4b:68:c2:3a:6b:5b:96:69:ce:1d:a0:08: 96:8d:d8:fd:7b:82:cb:58:16:d7:d0:b3:00:71:26: 5c:28:25:f1:fc:c2:5a:26:69:d6:9f:87:d1:2f:5b: 8d:62:49:25:8b:53:cc:5d:f6:d7:cf:09:f6:aa:26: e3:fa:f0:98:b8:00:e4:f4:fc:d2:08:d1:6e:3f:6e: 2d:d4:6d:f4:d9:a8:8b:85:3a:5a:cd:d9:dd:ec:d6: 9e:b6:a5:1c:f7:c9:a7:3a:d4:2b:ad:8b:80:cd:0a: b1:f9:da:7e:47:44:c6:df:bf:71:05:11:31:0d:ca: 96:ab:32:fe:28:49:45:28:c7:3f:35:e3:b7:2f:f4: 80:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 35:8F:4D:41:7A:13:17:CB:22:0B:BD:C9:82:D7:F3:5D:15:40:D5:1A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f438c195-494a-46a2-b93c-8e15668f05b2/0/358F4D417A1317CB220BBDC982D7F35D1540D51A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.210.68.0/23 Signature Algorithm: sha256WithRSAEncryption 14:bc:9d:83:18:65:c6:f7:f4:b3:1b:78:04:7a:14:cd:b3:9c: fd:20:1d:a9:8e:24:d6:78:b7:18:60:43:aa:7e:5b:f0:2b:60: 7b:b0:15:13:92:e8:fd:c0:f4:99:3f:11:24:a1:ac:3d:09:95: 8b:7e:91:6f:a4:1f:e0:aa:76:50:86:28:c5:80:f7:c8:30:2e: 3f:67:00:e3:ca:81:be:5b:1c:7f:54:e1:f8:fd:35:3c:b6:68: 2c:70:ca:a6:3f:56:ce:af:e5:fe:60:b5:6f:83:88:ac:9b:4d: 56:d6:64:c5:c5:0b:0f:59:a1:ad:0d:ee:ba:b9:e2:23:f7:03: 51:19:d6:cd:3f:ff:be:e4:81:fa:60:a3:3a:ff:48:9b:a1:68: 9b:24:2a:8e:dd:ee:d1:19:29:b4:a3:fb:38:b9:dd:8c:d8:cc: 21:e1:7e:62:ac:75:cd:a3:ef:54:cc:cc:34:cf:5f:d4:d0:bd: 99:c4:81:fa:72:0e:67:e9:d1:02:14:0c:dc:f7:80:b6:13:90: 17:06:f8:42:d5:0d:b4:fd:39:c8:24:59:69:25:b8:02:b7:4f: 83:50:9f:88:d6:c8:38:2c:6d:f4:b8:bc:90:e6:7e:5f:16:dc: 33:b4:65:8c:a2:36:15:5d:dd:78:69:b1:16:65:6a:ec:94:5d: 80:4b:54:0c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUOYV9XXu+3XbGc4WcAkqzEMmj4HIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxMzE3MDEwNVoX DTI3MDMxMjE3MDYwNVowMzExMC8GA1UEAxMoMzU4RjRENDE3QTEzMTdDQjIyMEJC REM5ODJEN0YzNUQxNTQwRDUxQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKk/RAwb5i+0mVDMa4RoqPVjoTiaTKv7eDo3d478u/vBmnTQvuEMNVUkAd46 Rivx8EII0ISidHMX/n/MDI/s/wemZkN18G1Oyc+uczn2LsZRYptPXCSeP1g98Byq mJLDRexlLOEhfEH3I+7u0R0nJJwpiFewIcG70ztaS2jCOmtblmnOHaAIlo3Y/XuC y1gW19CzAHEmXCgl8fzCWiZp1p+H0S9bjWJJJYtTzF32188J9qom4/rwmLgA5PT8 0gjRbj9uLdRt9Nmoi4U6Ws3Z3ezWnralHPfJpzrUK62LgM0KsfnafkdExt+/cQUR MQ3Klqsy/ihJRSjHPzXjty/0gLkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDWPTUF6ExfLIgu9yYLX810VQNUaMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mNDM4YzE5NS00OTRhLTQ2YTItYjkzYy04ZTE1NjY4ZjA1YjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y0MzhjMTk1 LTQ5NGEtNDZhMi1iOTNjLThlMTU2NjhmMDViMi8wLzM1OEY0RDQxN0ExMzE3Q0Iy MjBCQkRDOTgyRDdGMzVEMTU0MEQ1MUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFn0kQwDQYJKoZIhvcNAQELBQADggEBABS8nYMYZcb39LMbeAR6FM2znP0gHamO JNZ4txhgQ6p+W/ArYHuwFROS6P3A9Jk/ESShrD0JlYt+kW+kH+CqdlCGKMWA98gw Lj9nAOPKgb5bHH9U4fj9NTy2aCxwyqY/Vs6v5f5gtW+DiKybTVbWZMXFCw9Zoa0N 7rq54iP3A1EZ1s0//77kgfpgozr/SJuhaJskKo7d7tEZKbSj+zi53YzYzCHhfmKs dc2j71TMzDTPX9TQvZnEgfpyDmfp0QIUDNz3gLYTkBcG+ELVDbT9OcgkWWkluAK3 T4NQn4jWyDgsbfS4vJDmfl8W3DO0ZYyiNhVd3XhpsRZlauyUXYBLVAw= -----END CERTIFICATE-----Generated at Wed Mar 25 04:39:26 2026 by rpki-client