$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer File: 11A839F5FB6B345FB1586C56F146C0D80026AB7E.cer (raw, json) Hash identifier: 0q+z1qsnTgOpxV38vV5KEn4TT1VsPBBktlxyOjdahCU= Subject key identifier: 11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 64F9DF99BA2C6596EB25605F6D7E1A1B512B3524 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft caRepository: rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 06 Apr 2026 10:44:38 +0000 Certificate not after: Mon 05 Apr 2027 10:49:38 +0000 Subordinate resources: IP: 2001:df3:c240::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 09:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:f9:df:99:ba:2c:65:96:eb:25:60:5f:6d:7e:1a:1b:51:2b:35:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Apr 6 10:44:38 2026 GMT Not After : Apr 5 10:49:38 2027 GMT Subject: CN=11A839F5FB6B345FB1586C56F146C0D80026AB7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1d:e6:03:15:73:da:1a:33:a8:6d:01:7c:aa: 9a:49:f8:5f:f0:c4:09:3d:40:3e:1c:d3:d3:55:e3: cc:68:cf:84:9f:47:ef:e6:40:03:d8:f6:c7:61:d5: ae:a1:02:46:5a:99:17:b0:7a:ba:15:df:96:34:b0: de:c7:d0:f4:9d:11:b6:4e:91:47:1f:83:03:5a:9d: cc:83:30:5f:9b:35:13:4e:c5:25:dd:c3:aa:02:f4: 35:50:73:e4:26:90:ed:d0:ad:9d:e2:da:e8:0d:cf: 73:9d:b6:e7:24:14:9f:3a:71:0e:38:35:42:93:15: c2:9e:d5:f9:df:3f:55:49:e5:be:5f:29:ff:2c:4f: cf:6e:1a:e1:c5:bd:65:78:bc:dd:c1:d2:22:c9:e7: 8d:e4:37:a4:ae:c7:3d:b4:3b:77:a8:46:9e:ca:e0: 21:c3:ba:fb:5b:d1:5a:6e:b1:51:b9:ce:99:62:6c: 05:5e:a4:5e:fb:66:b7:97:31:5e:5e:a8:48:87:b6: f0:da:be:92:5a:10:e1:6c:ed:63:dc:53:14:25:e5: 85:0a:fa:32:41:56:3e:6e:49:76:c3:33:24:e6:79: d4:e7:4f:14:75:fe:fc:33:cf:f6:72:e4:4a:58:9a: 92:a8:ab:57:9c:c9:be:9c:e2:7a:4a:e5:bf:5f:fc: 8a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 11:A8:39:F5:FB:6B:34:5F:B1:58:6C:56:F1:46:C0:D8:00:26:AB:7E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5fb808eb-c98e-4036-be9a-193bbcc64892/1/11A839F5FB6B345FB1586C56F146C0D80026AB7E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df3:c240::/48 Signature Algorithm: sha256WithRSAEncryption 8e:c7:71:68:34:8f:f4:5c:9e:15:e4:66:50:f4:62:1c:06:af: 2b:be:c2:f7:fb:bf:0d:1b:6a:04:0a:63:eb:29:12:2e:bb:78: e6:c3:93:8d:3e:f2:48:8f:dd:3a:e4:66:43:fa:38:4b:ac:66: c5:08:f6:ee:78:c1:3e:66:b2:a6:1d:65:c0:b1:88:06:82:ec: 88:f1:1f:75:77:21:b1:ea:07:ee:f8:bf:83:29:f9:ae:2b:42: 1b:1e:0b:be:0f:d0:20:22:f4:9d:d7:88:1f:e9:89:18:86:e4: a1:1a:02:1f:51:3a:da:ab:96:f0:dc:fc:73:b1:5f:9a:23:d6: 64:45:90:ee:83:13:68:39:91:7d:c2:c6:2e:1a:5a:04:c5:08: 75:b7:e8:5d:03:9e:a3:17:ea:41:8f:69:72:f1:6d:64:c1:91: 0a:fb:43:cb:d0:27:da:81:78:55:97:c9:a7:1e:c1:43:bc:cd: 6a:8b:e3:e9:3c:cb:36:c7:2d:38:bf:eb:f5:bc:09:90:59:3d: 18:fe:8b:18:54:ab:fe:c3:22:bf:51:9d:5a:65:d1:d1:7e:fe: 1a:92:f2:6c:c8:89:5b:90:ac:84:88:36:9a:9b:5c:e3:e9:9c: 8c:d9:e7:13:c3:a3:99:0d:bb:86:cf:a4:c3:de:88:c3:1b:bd: da:61:26:e2 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUZPnfmbosZZbrJWBfbX4aG1ErNSQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDQwNjEwNDQzOFoX DTI3MDQwNTEwNDkzOFowMzExMC8GA1UEAxMoMTFBODM5RjVGQjZCMzQ1RkIxNTg2 QzU2RjE0NkMwRDgwMDI2QUI3RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOId5gMVc9oaM6htAXyqmkn4X/DECT1APhzT01XjzGjPhJ9H7+ZAA9j2x2HV rqECRlqZF7B6uhXfljSw3sfQ9J0Rtk6RRx+DA1qdzIMwX5s1E07FJd3DqgL0NVBz 5CaQ7dCtneLa6A3Pc5225yQUnzpxDjg1QpMVwp7V+d8/VUnlvl8p/yxPz24a4cW9 ZXi83cHSIsnnjeQ3pK7HPbQ7d6hGnsrgIcO6+1vRWm6xUbnOmWJsBV6kXvtmt5cx Xl6oSIe28Nq+kloQ4WztY9xTFCXlhQr6MkFWPm5JdsMzJOZ51OdPFHX+/DPP9nLk SliakqirV5zJvpziekrlv1/8ircCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBGoOfX7azRfsVhsVvFGwNgAJqt+MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZmI4MDhlYi1jOThlLTQwMzYtYmU5YS0xOTNiYmNjNjQ4OTIvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVmYjgwOGVi LWM5OGUtNDAzNi1iZTlhLTE5M2JiY2M2NDg5Mi8xLzExQTgzOUY1RkI2QjM0NUZC MTU4NkM1NkYxNDZDMEQ4MDAyNkFCN0UubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ3zwkAwDQYJKoZIhvcNAQELBQADggEBAI7HcWg0j/RcnhXkZlD0YhwGryu+ wvf7vw0bagQKY+spEi67eObDk40+8kiP3TrkZkP6OEusZsUI9u54wT5msqYdZcCx iAaC7IjxH3V3IbHqB+74v4Mp+a4rQhseC74P0CAi9J3XiB/piRiG5KEaAh9ROtqr lvDc/HOxX5oj1mRFkO6DE2g5kX3Cxi4aWgTFCHW36F0DnqMX6kGPaXLxbWTBkQr7 Q8vQJ9qBeFWXyacewUO8zWqL4+k8yzbHLTi/6/W8CZBZPRj+ixhUq/7DIr9RnVpl 0dF+/hqS8mzIiVuQrISINpqbXOPpnIzZ5xPDo5kNu4bPpMPeiMMbvdphJuI= -----END CERTIFICATE-----Generated at Fri Apr 17 10:05:27 2026 by rpki-client