$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.cer File: 9FB1C50D13526AC3DB473282E5BEC81D313B8836.cer (raw, json) Hash identifier: M8a8RjeWQXdvBrhd7SWdjaoMkuyfcIXuA0Wxzlz8heQ= Subject key identifier: 9F:B1:C5:0D:13:52:6A:C3:DB:47:32:82:E5:BE:C8:1D:31:3B:88:36 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 754B51BF60B8BF6CE582F2F1822B4886413B27DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.mft caRepository: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 18 Feb 2026 06:18:35 +0000 Certificate not after: Wed 17 Feb 2027 06:23:35 +0000 Subordinate resources: IP: 198.15.30.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:4b:51:bf:60:b8:bf:6c:e5:82:f2:f1:82:2b:48:86:41:3b:27:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 18 06:18:35 2026 GMT Not After : Feb 17 06:23:35 2027 GMT Subject: CN=9FB1C50D13526AC3DB473282E5BEC81D313B8836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:a9:c0:bb:e0:6d:73:e8:23:e3:d5:32:13: 8b:d7:9b:e0:d4:5c:dd:bc:74:fb:9d:89:75:d2:3c: dd:a8:51:1b:d9:ea:5f:a4:56:46:83:28:87:1a:ce: 97:93:25:ed:57:c4:fd:2a:f4:25:5f:eb:97:d5:3b: 8d:2a:6c:af:f2:a8:22:33:b9:cf:4b:ec:0d:7d:b1: 93:d7:ef:0a:db:6d:50:1d:1e:f2:8a:d4:36:4b:10: d3:e8:aa:cc:f9:e6:6c:10:ec:04:d9:42:a1:7b:b9: cc:de:c3:62:11:42:c7:ab:5b:26:3b:ce:28:46:44: 30:ce:7e:63:4f:98:e5:00:f0:2b:1d:35:52:14:44: d4:74:22:ad:2f:94:36:aa:fd:5e:b7:7d:24:d3:d4: 62:fb:c7:33:f5:36:79:e2:d5:4d:7b:a2:95:3d:ee: 49:e3:74:1e:01:d3:e4:87:88:9f:11:be:fa:8d:6d: 32:f0:31:10:1c:6c:8a:22:78:a9:0c:0b:ba:b0:a3: 22:3e:7d:ad:74:6c:b3:88:3e:94:93:d8:77:c0:eb: 78:3e:b3:86:76:1c:20:92:5e:ec:72:17:a9:17:c1: f3:cd:d5:b1:14:bc:b7:18:8b:17:e0:26:bc:a2:81: 28:13:f4:b3:ff:61:58:f1:a4:59:1d:80:35:29:46: 4f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:B1:C5:0D:13:52:6A:C3:DB:47:32:82:E5:BE:C8:1D:31:3B:88:36 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/1/9FB1C50D13526AC3DB473282E5BEC81D313B8836.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.15.30.0/24 Signature Algorithm: sha256WithRSAEncryption 59:af:b7:87:20:ba:b5:cf:64:78:d5:e2:2d:88:81:d4:21:af: b6:c9:cf:fd:b7:26:83:46:42:37:36:e1:9f:c7:0f:1c:55:92: fc:3b:0a:3d:1e:36:1b:e7:1e:54:02:2d:e4:71:42:d5:9d:27: 04:3e:0c:4f:0c:40:91:6f:98:52:ac:56:98:24:27:05:d6:fc: 6c:b5:20:3f:12:2c:f3:cc:86:73:95:37:80:2c:d6:45:25:38: c7:bd:a5:92:3c:6c:8d:9c:31:46:fb:c2:a7:2f:79:42:0b:6b: 74:f9:42:a2:08:2b:84:40:a4:66:05:26:6c:5f:b2:6c:f8:c6: ee:cc:bf:1d:4d:a5:e3:25:03:dd:dd:72:bf:ab:47:f9:a4:83: 76:28:6c:96:39:bc:88:f5:91:fb:8c:db:f1:09:86:58:f8:e1: 8e:4c:7d:d3:24:fa:0b:4d:86:d2:69:57:fc:50:d6:19:30:e7: df:be:f9:d8:c0:0a:64:9d:18:0a:af:b7:bb:79:29:9d:91:e0: 37:53:ea:e4:0b:cb:b3:0a:31:14:dc:c6:23:84:3f:68:e3:99: 26:63:49:f2:9c:3e:b0:7a:7e:dd:d0:d0:62:f0:2e:f6:e8:18: 79:31:7f:6a:9c:53:b4:77:d7:be:bf:bc:39:a3:38:6e:2a:8c: 77:2b:83:b4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdUtRv2C4v2zlgvLxgitIhkE7J9owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDIxODA2MTgzNVoX DTI3MDIxNzA2MjMzNVowMzExMC8GA1UEAxMoOUZCMUM1MEQxMzUyNkFDM0RCNDcz MjgyRTVCRUM4MUQzMTNCODgzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKl+qcC74G1z6CPj1TITi9eb4NRc3bx0+52JddI83ahRG9nqX6RWRoMohxrO l5Ml7VfE/Sr0JV/rl9U7jSpsr/KoIjO5z0vsDX2xk9fvCtttUB0e8orUNksQ0+iq zPnmbBDsBNlCoXu5zN7DYhFCx6tbJjvOKEZEMM5+Y0+Y5QDwKx01UhRE1HQirS+U Nqr9Xrd9JNPUYvvHM/U2eeLVTXuilT3uSeN0HgHT5IeInxG++o1tMvAxEBxsiiJ4 qQwLurCjIj59rXRss4g+lJPYd8DreD6zhnYcIJJe7HIXqRfB883VsRS8txiLF+Am vKKBKBP0s/9hWPGkWR2ANSlGT2ECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ+xxQ0TUmrD20cyguW+yB0xO4g2MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMjc3MGZkMy05MjE2LTQzOGItOTk3Zi1lNTk3MmU0NjRlM2EvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMyNzcwZmQz LTkyMTYtNDM4Yi05OTdmLWU1OTcyZTQ2NGUzYS8xLzlGQjFDNTBEMTM1MjZBQzNE QjQ3MzI4MkU1QkVDODFEMzEzQjg4MzYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADGDx4wDQYJKoZIhvcNAQELBQADggEBAFmvt4cgurXPZHjV4i2IgdQhr7bJz/23 JoNGQjc24Z/HDxxVkvw7Cj0eNhvnHlQCLeRxQtWdJwQ+DE8MQJFvmFKsVpgkJwXW /Gy1ID8SLPPMhnOVN4As1kUlOMe9pZI8bI2cMUb7wqcveUILa3T5QqIIK4RApGYF Jmxfsmz4xu7Mvx1NpeMlA93dcr+rR/mkg3YobJY5vIj1kfuM2/EJhlj44Y5MfdMk +gtNhtJpV/xQ1hkw59+++djACmSdGAqvt7t5KZ2R4DdT6uQLy7MKMRTcxiOEP2jj mSZjSfKcPrB6ft3Q0GLwLvboGHkxf2qcU7R3176/vDmjOG4qjHcrg7Q= -----END CERTIFICATE-----Generated at Mon Mar 2 19:57:23 2026 by rpki-client