$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer File: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer (raw, json) Hash identifier: SXG1zjyNxraEVsh7dYZAzRZcuF99VQFIQKKPiXlK8do= Subject key identifier: 09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 78D6C30315332F759EE9AC23FC7EAD0476BAF33C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft caRepository: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 28 Oct 2025 18:28:06 +0000 Certificate not after: Tue 27 Oct 2026 18:33:06 +0000 Subordinate resources: IP: 2001:df4:8e40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 23:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d6:c3:03:15:33:2f:75:9e:e9:ac:23:fc:7e:ad:04:76:ba:f3:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Oct 28 18:28:06 2025 GMT Not After : Oct 27 18:33:06 2026 GMT Subject: CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ae:bd:a6:9b:f0:a8:fb:4f:14:de:a3:b4:67: 6b:bd:53:1e:da:0b:db:3b:e5:82:ae:aa:d3:b5:07: 5f:94:7f:96:4a:fa:2e:4e:f5:07:0d:73:03:da:cf: 93:2c:2a:96:a5:1c:80:80:3e:88:21:14:5c:e1:53: 96:27:70:6b:a7:ab:c0:5b:52:f0:f7:92:da:64:9c: c9:d6:30:8a:e2:9c:4e:43:61:f5:bb:93:cf:92:9f: 65:61:8c:4c:93:ca:54:d6:f6:ea:3a:ce:79:d5:3e: ce:ef:5b:b5:08:7d:f2:0d:af:00:b1:96:32:50:5f: 4c:e1:0e:2a:7d:2b:f8:87:7e:71:e8:3b:66:fa:6e: 8a:7d:a0:c4:8e:a2:44:64:9b:87:bf:26:76:57:cc: 48:c8:90:78:1a:e2:6d:28:41:76:4a:b9:13:e9:2e: 7e:ce:cb:6d:b0:0c:35:1f:52:cd:98:9e:96:19:bb: 26:33:91:3e:d8:70:c2:aa:e4:be:9a:b6:84:37:e9: ce:4b:46:99:03:96:eb:db:03:77:4b:99:1e:26:31: a0:1b:77:45:08:03:f8:7a:e5:ac:9c:23:d9:67:c3: 2b:bd:7e:05:a3:38:a3:61:e9:aa:22:0f:32:4e:0b: 95:18:44:77:39:f3:78:9e:ac:6c:d1:06:15:2d:85: 53:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df4:8e40::/48 Signature Algorithm: sha256WithRSAEncryption 06:f9:2b:7c:f7:05:f7:30:23:55:b3:7a:de:46:b4:8a:29:46: cb:96:d0:8e:84:4e:03:2b:ba:db:70:83:2a:9f:99:00:f5:5f: 4a:57:43:b0:e5:b9:ef:9c:e6:54:70:d5:98:6b:bf:5c:ba:2e: ba:63:e8:57:65:db:0f:38:e9:3a:dc:ae:60:9e:18:e8:12:e6: 07:68:31:8f:9b:f8:f6:27:60:84:18:eb:06:52:28:d4:f6:b0: 90:15:44:5a:c6:56:c3:5d:05:a5:5f:4a:cc:54:51:a1:cd:5a: bf:ff:6b:5d:0b:1d:51:c8:b0:c9:04:11:b2:7f:8c:a5:4c:ec: b0:b2:f6:2a:7a:65:34:28:0f:67:cc:d6:1a:cf:38:cf:fe:a3: a5:8c:25:03:e4:d2:89:c2:ce:b2:4c:1a:a7:d1:26:4f:f5:39: 44:a2:31:77:24:3c:40:51:d2:00:62:0e:49:f1:5c:b4:1e:52: e7:54:31:81:d9:52:54:6e:32:ac:cb:0d:35:4f:4e:42:30:69: 68:31:ea:40:6b:7c:28:b1:64:f8:b0:23:b5:1d:7a:7e:cf:3e: cb:e3:22:dc:5b:dd:36:29:78:8e:84:a7:7c:48:95:57:10:4d: 4b:e3:40:7c:2c:46:d8:cf:63:b6:9c:47:30:66:49:b4:9e:83: 26:73:4c:16 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUeNbDAxUzL3We6awj/H6tBHa68zwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI1MTAyODE4MjgwNloX DTI2MTAyNzE4MzMwNlowMzExMC8GA1UEAxMoMDlFNDczN0NFRTM2Q0NDRTY4MTlG NzA0RjlBOTI0RTNCMzEwQTVFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMquvaab8Kj7TxTeo7Rna71THtoL2zvlgq6q07UHX5R/lkr6Lk71Bw1zA9rP kywqlqUcgIA+iCEUXOFTlidwa6erwFtS8PeS2mScydYwiuKcTkNh9buTz5KfZWGM TJPKVNb26jrOedU+zu9btQh98g2vALGWMlBfTOEOKn0r+Id+ceg7Zvpuin2gxI6i RGSbh78mdlfMSMiQeBribShBdkq5E+kufs7LbbAMNR9SzZielhm7JjORPthwwqrk vpq2hDfpzktGmQOW69sDd0uZHiYxoBt3RQgD+HrlrJwj2WfDK71+BaM4o2HpqiIP Mk4LlRhEdznzeJ6sbNEGFS2FUzsCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAnkc3zuNszOaBn3BPmpJOOzEKXiMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1OTYxMmEy LTQ0MzMtNDJiOS04ZjRmLWI4NDc3NzZhY2FmZC8xLzA5RTQ3MzdDRUUzNkNDQ0U2 ODE5RjcwNEY5QTkyNEUzQjMxMEE1RTIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ30jkAwDQYJKoZIhvcNAQELBQADggEBAAb5K3z3BfcwI1Wzet5GtIopRsuW 0I6ETgMruttwgyqfmQD1X0pXQ7Dlue+c5lRw1Zhrv1y6Lrpj6Fdl2w846TrcrmCe GOgS5gdoMY+b+PYnYIQY6wZSKNT2sJAVRFrGVsNdBaVfSsxUUaHNWr//a10LHVHI sMkEEbJ/jKVM7LCy9ip6ZTQoD2fM1hrPOM/+o6WMJQPk0onCzrJMGqfRJk/1OUSi MXckPEBR0gBiDknxXLQeUudUMYHZUlRuMqzLDTVPTkIwaWgx6kBrfCixZPiwI7Ud en7PPsvjItxb3TYpeI6Ep3xIlVcQTUvjQHwsRtjPY7acRzBmSbSegyZzTBY= -----END CERTIFICATE-----Generated at Wed Nov 5 19:12:38 2025 by rpki-client