$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.cer File: C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.cer (raw, json) Hash identifier: QMdkUy+D1wfG1B0B8lUEviAgeBUZ1zdK02I68Y7VIXA= Subject key identifier: C9:CE:3F:80:07:B3:79:17:27:FA:A3:B4:F2:00:E4:B1:9F:8E:EE:31 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6AE2A074DB7639B51965620DBC8AC0599E0A33A7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft caRepository: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 20 Feb 2026 06:23:11 +0000 Certificate not after: Fri 19 Feb 2027 06:28:11 +0000 Subordinate resources: IP: 198.15.16.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e2:a0:74:db:76:39:b5:19:65:62:0d:bc:8a:c0:59:9e:0a:33:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 20 06:23:11 2026 GMT Not After : Feb 19 06:28:11 2027 GMT Subject: CN=C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e4:0a:69:71:4b:0a:d9:3b:15:82:c3:88:56: 2d:cf:85:5c:1e:40:0c:22:a9:e5:e5:bf:68:9b:3f: 87:24:5b:4f:07:5e:dd:d9:ea:26:68:3e:25:d4:ec: fc:01:6f:61:8b:fd:8b:3b:2e:5e:5f:e4:6a:60:a0: 57:0c:54:4a:11:1c:fe:f7:ba:9d:4b:18:48:80:ec: 29:7d:d3:0c:e2:87:09:3e:7a:07:a1:ed:9c:7c:c5: f7:a8:1b:ed:9c:62:9a:0a:34:da:e7:9f:18:c7:25: a7:4e:0b:71:96:8e:12:45:7c:a8:cb:5c:01:71:61: 90:33:70:0a:2c:13:e4:76:34:0c:95:14:c9:d9:b6: 9d:16:e6:e5:82:ae:f4:db:f3:00:6f:17:72:a7:83: f6:83:e7:93:c7:aa:86:c1:e5:47:7e:1e:a8:61:8b: 4b:94:40:93:99:05:2a:56:50:6c:e6:06:a0:27:a2: 57:5a:c8:19:2b:29:07:6c:c5:0c:cb:06:60:5c:a7: 69:ea:51:53:fa:4b:14:0e:89:d6:98:ca:11:54:d0: f4:f5:03:06:62:08:5d:d7:dd:c2:f3:77:ed:dc:84: 6c:bf:80:bd:6e:f3:d0:59:15:22:ce:86:d0:b5:dc: 7e:61:1e:1a:54:35:1d:1a:0c:98:15:af:01:64:58: 97:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C9:CE:3F:80:07:B3:79:17:27:FA:A3:B4:F2:00:E4:B1:9F:8E:EE:31 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/1/C9CE3F8007B3791727FAA3B4F200E4B19F8EEE31.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.15.16.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:16:da:32:86:85:cc:27:8f:cc:b4:ab:73:7a:9b:49:42:47: 6d:b7:2f:6b:7a:f4:83:f4:83:69:8e:4d:c3:0b:1c:3f:4d:d0: 7a:f8:2b:d5:89:75:0c:e3:80:35:1c:d1:63:b5:66:44:1a:f9: a3:fa:f5:58:b6:75:ec:ae:39:05:e5:00:e1:51:fa:0d:ee:52: 4f:de:fe:24:a4:e1:09:5d:71:1c:01:df:5c:96:c2:7b:75:80: 0e:e8:f0:c0:08:28:54:29:61:38:2b:4c:30:0a:0e:8c:80:7e: 19:84:f2:a6:11:33:ba:b2:54:32:13:c6:2e:61:7e:f5:c3:7f: b9:42:a5:b1:e6:44:57:18:f0:f2:8f:2c:ac:c2:c1:5f:18:89: 57:61:d8:4d:fa:6d:2e:27:26:b0:66:09:ee:6c:2f:96:1c:53: c7:fe:e7:55:2a:28:c1:7c:66:ba:ec:5d:10:d6:fb:0e:e5:f7: 15:8c:4f:90:ec:df:ef:e5:b5:2f:39:5a:2a:36:b0:2e:18:20: a3:88:3f:8f:a0:e8:ae:53:25:f1:1e:58:9e:a2:c8:37:9e:43: a7:55:b8:dc:32:eb:18:7d:db:aa:2c:02:ec:1d:34:de:aa:b7: 0e:cd:0c:3f:b7:bc:3e:a4:d5:51:1d:c6:0d:9d:ee:de:8c:ee: e9:64:7a:1c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUauKgdNt2ObUZZWINvIrAWZ4KM6cwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDIyMDA2MjMxMVoX DTI3MDIxOTA2MjgxMVowMzExMC8GA1UEAxMoQzlDRTNGODAwN0IzNzkxNzI3RkFB M0I0RjIwMEU0QjE5RjhFRUUzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMXkCmlxSwrZOxWCw4hWLc+FXB5ADCKp5eW/aJs/hyRbTwde3dnqJmg+JdTs /AFvYYv9izsuXl/kamCgVwxUShEc/ve6nUsYSIDsKX3TDOKHCT56B6HtnHzF96gb 7Zximgo02uefGMclp04LcZaOEkV8qMtcAXFhkDNwCiwT5HY0DJUUydm2nRbm5YKu 9NvzAG8XcqeD9oPnk8eqhsHlR34eqGGLS5RAk5kFKlZQbOYGoCeiV1rIGSspB2zF DMsGYFynaepRU/pLFA6J1pjKEVTQ9PUDBmIIXdfdwvN37dyEbL+AvW7z0FkVIs6G 0LXcfmEeGlQ1HRoMmBWvAWRYl40CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMnOP4AHs3kXJ/qjtPIA5LGfju4xMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYTljZDY2OC02Y2M1LTQ5YTYtOWZjZi1hZTMyYTg3ZmU2MzYvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhOWNkNjY4 LTZjYzUtNDlhNi05ZmNmLWFlMzJhODdmZTYzNi8xL0M5Q0UzRjgwMDdCMzc5MTcy N0ZBQTNCNEYyMDBFNEIxOUY4RUVFMzEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADGDxAwDQYJKoZIhvcNAQELBQADggEBAA0W2jKGhcwnj8y0q3N6m0lCR223L2t6 9IP0g2mOTcMLHD9N0Hr4K9WJdQzjgDUc0WO1ZkQa+aP69Vi2deyuOQXlAOFR+g3u Uk/e/iSk4QldcRwB31yWwnt1gA7o8MAIKFQpYTgrTDAKDoyAfhmE8qYRM7qyVDIT xi5hfvXDf7lCpbHmRFcY8PKPLKzCwV8YiVdh2E36bS4nJrBmCe5sL5YcU8f+51Uq KMF8ZrrsXRDW+w7l9xWMT5Ds3+/ltS85Wio2sC4YIKOIP4+g6K5TJfEeWJ6iyDee Q6dVuNwy6xh926osAuwdNN6qtw7NDD+3vD6k1VEdxg2d7t6M7ulkehw= -----END CERTIFICATE-----Generated at Mon Mar 2 12:53:34 2026 by rpki-client