$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer File: 1DA681831B93B418171487CF65FAA0EC34CD5AFB.cer (raw, json) Hash identifier: fewpVNLy6/HRvoDNDTlZwpVW2bZGk39++Q7XR4HP7Tk= Subject key identifier: 1D:A6:81:83:1B:93:B4:18:17:14:87:CF:65:FA:A0:EC:34:CD:5A:FB Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 100C97B617E3AB4721E5F038EB4E40EE1A025956 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Manifest: rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft caRepository: rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 25 Feb 2026 12:02:56 +0000 Certificate not after: Wed 24 Feb 2027 12:07:56 +0000 Subordinate resources: IP: 151.158.10.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0c:97:b6:17:e3:ab:47:21:e5:f0:38:eb:4e:40:ee:1a:02:59:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Feb 25 12:02:56 2026 GMT Not After : Feb 24 12:07:56 2027 GMT Subject: CN=1DA681831B93B418171487CF65FAA0EC34CD5AFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f7:35:c8:f8:7d:bc:83:27:49:64:a0:80:62: 01:72:76:ec:6d:2b:7b:65:90:42:9e:cc:00:d5:2c: ad:c6:b5:67:3c:8e:bb:49:9c:64:94:d5:ff:d2:55: a3:dd:b6:12:af:d5:51:2c:bc:88:27:8a:27:14:a8: 15:b8:c4:94:e9:9b:f3:35:b7:23:22:14:c0:84:51: 16:d2:e1:e8:bb:9d:c9:c2:01:ad:73:c3:72:86:52: 0b:21:1e:b3:a7:b5:bf:bd:e5:62:21:ff:62:58:b1: 83:c9:5f:08:dd:f2:ed:7e:fa:4b:6e:1b:66:11:43: ac:56:d9:d1:33:c5:10:fe:67:c8:7a:63:39:f3:2d: 59:f8:bc:57:cd:33:47:00:2f:51:74:37:be:a6:48: 76:e8:8f:e9:44:3e:6f:7f:1c:2c:37:6d:60:40:ee: b4:cc:eb:ae:6e:9b:5e:1c:24:ad:15:80:e7:7e:a8: 3e:c3:38:70:7f:39:5f:77:c9:ca:2e:c0:97:c7:0f: 33:b7:8e:98:6e:d5:10:ec:61:85:46:1d:14:97:5d: c3:9c:f2:36:e7:c7:d3:a8:f9:28:b9:8e:c3:b8:8b: aa:12:66:c2:15:0d:bb:1e:f9:f7:c9:41:3a:c7:0a: 39:14:d5:d2:bc:b2:53:65:30:8b:c0:be:68:f4:3e: 2e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 1D:A6:81:83:1B:93:B4:18:17:14:87:CF:65:FA:A0:EC:34:CD:5A:FB X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/1/1DA681831B93B418171487CF65FAA0EC34CD5AFB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.10.0/23 Signature Algorithm: sha256WithRSAEncryption 36:ab:e9:e7:57:b0:f5:fc:db:6b:cb:33:09:79:38:ae:2a:a3: 61:c0:8a:f8:9a:07:82:19:15:f7:b3:a1:de:61:0d:53:8b:c7: 7e:68:03:ed:44:de:dc:37:54:83:05:1d:92:67:4d:e2:ad:09: 7d:63:ea:eb:f8:f5:2a:ca:35:73:38:c0:0b:f9:04:3a:fb:01: 0d:11:44:8e:a6:28:07:46:f9:98:17:9a:69:ea:02:08:88:fc: b2:a9:12:21:bb:c0:cf:63:cb:41:14:51:3a:c0:76:da:59:95: 10:56:91:11:2a:99:71:ca:94:71:52:09:ac:a5:b5:54:6f:75: fb:2b:b2:ba:2c:3c:40:2e:d7:60:b9:c0:96:88:94:e6:99:ae: 5b:63:af:d5:1d:60:bf:f0:3e:bc:5a:17:78:87:ba:67:fc:8f: dc:cd:a5:cc:69:e6:a9:ad:8d:0e:7c:06:32:e3:d0:33:57:1f: 79:8c:1b:0f:a6:71:7e:42:01:d2:df:b1:90:09:49:5c:df:e4: d8:c1:d0:4c:ca:18:8d:73:25:15:0d:b7:63:22:2a:70:17:a2: f9:b2:5d:21:e3:70:73:3c:1c:a6:cf:fc:cd:fe:75:81:83:1b: a4:09:71:f3:1d:a3:dd:68:2f:28:6d:13:c8:20:2d:da:d0:0e: 95:b8:8a:40 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUEAyXthfjq0ch5fA4605A7hoCWVYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI2MDIyNTEyMDI1NloX DTI3MDIyNDEyMDc1NlowMzExMC8GA1UEAxMoMURBNjgxODMxQjkzQjQxODE3MTQ4 N0NGNjVGQUEwRUMzNENENUFGQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALj3Ncj4fbyDJ0lkoIBiAXJ27G0re2WQQp7MANUsrca1ZzyOu0mcZJTV/9JV o922Eq/VUSy8iCeKJxSoFbjElOmb8zW3IyIUwIRRFtLh6LudycIBrXPDcoZSCyEe s6e1v73lYiH/Ylixg8lfCN3y7X76S24bZhFDrFbZ0TPFEP5nyHpjOfMtWfi8V80z RwAvUXQ3vqZIduiP6UQ+b38cLDdtYEDutMzrrm6bXhwkrRWA536oPsM4cH85X3fJ yi7Al8cPM7eOmG7VEOxhhUYdFJddw5zyNufH06j5KLmOw7iLqhJmwhUNux7598lB OscKORTV0ryyU2Uwi8C+aPQ+LpkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFB2mgYMbk7QYFxSHz2X6oOw0zVr7MB8GA1UdIwQYMBaAFBI0 XxFaxLYqUfUnTFTIHoZGO9C6MA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8w LzEyMzQ1RjExNUFDNEI2MkE1MUY1Mjc0QzU0QzgxRTg2NDYzQkQwQkEuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYyL0Vq UmZFVnJFdGlwUjlTZE1WTWdlaGtZNzBMby5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85MDY0OWVmNS1jNDg0LTRmNDEtYTA1NC1kNmNlMzljMWY1MDYvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkwNjQ5ZWY1 LWM0ODQtNGY0MS1hMDU0LWQ2Y2UzOWMxZjUwNi8xLzFEQTY4MTgzMUI5M0I0MTgx NzE0ODdDRjY1RkFBMEVDMzRDRDVBRkIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGXngowDQYJKoZIhvcNAQELBQADggEBADar6edXsPX822vLMwl5OK4qo2HAivia B4IZFfezod5hDVOLx35oA+1E3tw3VIMFHZJnTeKtCX1j6uv49SrKNXM4wAv5BDr7 AQ0RRI6mKAdG+ZgXmmnqAgiI/LKpEiG7wM9jy0EUUTrAdtpZlRBWkREqmXHKlHFS CayltVRvdfsrsrosPEAu12C5wJaIlOaZrltjr9UdYL/wPrxaF3iHumf8j9zNpcxp 5qmtjQ58BjLj0DNXH3mMGw+mcX5CAdLfsZAJSVzf5NjB0EzKGI1zJRUNt2MiKnAX ovmyXSHjcHM8HKbP/M3+dYGDG6QJcfMdo91oLyhtE8ggLdrQDpW4ikA= -----END CERTIFICATE-----Generated at Mon Mar 2 00:02:20 2026 by rpki-client