$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/0955FAD07ADAFA4D810608923476BE03CAB7151E.cer File: 0955FAD07ADAFA4D810608923476BE03CAB7151E.cer (raw, json) Hash identifier: uihl0Wi1fcTQFO1DBNlU00PF/pDI13w6Um953grgSdo= Subject key identifier: 09:55:FA:D0:7A:DA:FA:4D:81:06:08:92:34:76:BE:03:CA:B7:15:1E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 68DFD98B6474A0B6DA846187B49F8D313B74940B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/0955FAD07ADAFA4D810608923476BE03CAB7151E.mft caRepository: rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 07 Apr 2026 04:40:22 +0000 Certificate not after: Tue 06 Apr 2027 04:45:22 +0000 Subordinate resources: IP: 2001:df6:c3c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:df:d9:8b:64:74:a0:b6:da:84:61:87:b4:9f:8d:31:3b:74:94:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 7 04:40:22 2026 GMT Not After : Apr 6 04:45:22 2027 GMT Subject: CN=0955FAD07ADAFA4D810608923476BE03CAB7151E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9f:93:cf:8c:6b:3c:e9:97:18:b1:d4:f8:09: e7:39:6e:3c:96:5c:0f:2c:a9:4d:41:bd:f6:58:b8: df:f3:12:6b:61:b3:23:86:b1:c4:ee:76:c8:ae:6f: a9:a6:50:77:6c:62:7b:55:a4:dc:34:bc:f0:84:c0: 9c:d1:7c:3f:5a:79:83:ff:ec:64:89:e8:27:f5:3d: 82:73:c6:53:73:51:8a:c0:dc:47:62:7b:16:92:6c: b1:f5:bb:7d:e9:22:e2:ac:63:0a:89:89:d7:77:d0: e4:9a:0f:e6:72:9f:e2:05:85:fa:61:83:74:9b:9b: 9a:ad:a1:b9:fe:19:f0:92:c0:c5:f8:7c:92:b0:49: dc:51:83:c6:13:39:36:b7:06:d4:be:52:78:c6:a9: 3d:61:ce:83:83:77:47:8b:7b:d3:3b:ea:86:66:79: c6:a6:73:98:06:b0:77:6f:05:82:1e:3d:af:e3:7c: 2d:b6:22:d5:fc:51:d5:5f:83:e2:c1:a0:fd:fd:18: fd:6c:a9:20:d6:5e:8f:3d:aa:f9:0f:b2:ce:d7:8f: 0b:0f:4d:ee:2f:41:4e:5b:e9:d5:bd:49:fc:7f:c7: 43:93:cd:95:3d:15:88:c8:ba:f6:81:c7:a2:20:9f: 89:20:c7:ea:47:2b:4d:71:0d:ba:bc:ce:5c:ff:8f: a5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:55:FA:D0:7A:DA:FA:4D:81:06:08:92:34:76:BE:03:CA:B7:15:1E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c0685307-84ea-4fe3-bb7c-fb2895378742/0/0955FAD07ADAFA4D810608923476BE03CAB7151E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:c3c0::/48 Signature Algorithm: sha256WithRSAEncryption 71:22:45:28:ec:87:80:ad:89:96:2a:f4:9c:b2:a2:59:2f:fb: 1c:96:09:06:08:dd:06:c9:f5:a7:98:50:6b:a5:a7:9c:ee:e1: 38:41:4d:fe:d4:ad:da:0c:75:13:ed:5e:b9:b2:44:69:46:e5: 88:2d:ce:73:41:08:4c:82:4e:72:da:f3:f7:c8:cb:e0:46:b4: 07:d2:6f:e4:4f:80:8e:7a:74:44:5f:d4:ce:67:13:4b:b8:e3: b3:d2:f4:52:31:a1:ed:3f:11:c9:2e:7b:aa:0b:15:47:67:06: 31:ad:85:5e:85:36:49:78:b7:1c:64:52:5f:3d:49:f0:c8:b5: 60:76:57:c6:cb:bd:f1:c0:f9:97:47:ea:38:a1:d7:eb:0a:33: 0d:e1:43:2d:7b:2c:c1:1a:86:e3:43:b0:5e:ca:4b:aa:dd:b4: 94:2f:c5:3c:dd:78:9b:7d:63:f2:69:09:d5:17:28:f6:17:10: 1e:96:4f:40:f5:fa:18:97:bf:bc:25:a2:d7:67:8d:f2:95:42: 0c:3b:9e:00:20:b4:83:62:50:71:66:a1:a4:f9:79:7b:60:8f: 15:0e:e7:f4:95:ca:70:00:7e:51:0c:fa:2e:be:47:1f:1e:04: 79:64:e7:08:f7:ab:27:45:29:f7:f8:47:de:83:46:4c:8b:28: 81:62:ea:72 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUaN/Zi2R0oLbahGGHtJ+NMTt0lAswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwNzA0NDAyMloX DTI3MDQwNjA0NDUyMlowMzExMC8GA1UEAxMoMDk1NUZBRDA3QURBRkE0RDgxMDYw ODkyMzQ3NkJFMDNDQUI3MTUxRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANqfk8+Mazzplxix1PgJ5zluPJZcDyypTUG99li43/MSa2GzI4axxO52yK5v qaZQd2xie1Wk3DS88ITAnNF8P1p5g//sZInoJ/U9gnPGU3NRisDcR2J7FpJssfW7 feki4qxjComJ13fQ5JoP5nKf4gWF+mGDdJubmq2huf4Z8JLAxfh8krBJ3FGDxhM5 NrcG1L5SeMapPWHOg4N3R4t70zvqhmZ5xqZzmAawd28Fgh49r+N8LbYi1fxR1V+D 4sGg/f0Y/WypINZejz2q+Q+yztePCw9N7i9BTlvp1b1J/H/HQ5PNlT0ViMi69oHH oiCfiSDH6kcrTXENurzOXP+Ppd8CAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAlV+tB62vpNgQYIkjR2vgPKtxUeMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jMDY4NTMwNy04NGVhLTRmZTMtYmI3Yy1mYjI4OTUzNzg3NDIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MwNjg1MzA3 LTg0ZWEtNGZlMy1iYjdjLWZiMjg5NTM3ODc0Mi8wLzA5NTVGQUQwN0FEQUZBNEQ4 MTA2MDg5MjM0NzZCRTAzQ0FCNzE1MUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ32w8AwDQYJKoZIhvcNAQELBQADggEBAHEiRSjsh4CtiZYq9Jyyolkv+xyW CQYI3QbJ9aeYUGulp5zu4ThBTf7UrdoMdRPtXrmyRGlG5YgtznNBCEyCTnLa8/fI y+BGtAfSb+RPgI56dERf1M5nE0u447PS9FIxoe0/Eckue6oLFUdnBjGthV6FNkl4 txxkUl89SfDItWB2V8bLvfHA+ZdH6jih1+sKMw3hQy17LMEahuNDsF7KS6rdtJQv xTzdeJt9Y/JpCdUXKPYXEB6WT0D1+hiXv7wlotdnjfKVQgw7ngAgtINiUHFmoaT5 eXtgjxUO5/SVynAAflEM+i6+Rx8eBHlk5wj3qydFKff4R96DRkyLKIFi6nI= -----END CERTIFICATE-----Generated at Fri Apr 17 09:28:39 2026 by rpki-client