$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer File: 47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.cer (raw, json) Hash identifier: /x/7DlV6Qa/iCSmEX1Yxq+9zK2IsyLw3RZg31PD/aKk= Subject key identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 78EF644340A2DBE9685BB77B034E76EF748B4DCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft caRepository: rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 04 Feb 2026 17:17:56 +0000 Certificate not after: Wed 03 Feb 2027 17:22:56 +0000 Subordinate resources: IP: 58.65.240.0/21 IP: 115.166.96.0/19 IP: 2403:ff00::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ef:64:43:40:a2:db:e9:68:5b:b7:7b:03:4e:76:ef:74:8b:4d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 4 17:17:56 2026 GMT Not After : Feb 3 17:22:56 2027 GMT Subject: CN=47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e3:22:80:c3:1f:c1:86:0b:9c:40:16:24:15: e4:f9:90:d6:3a:ad:d0:3f:35:af:da:96:20:06:10: 1a:f7:fb:7b:c3:86:aa:63:69:bd:4a:06:65:c8:41: f8:1f:1a:6d:99:d3:db:7f:4a:ee:50:e9:61:93:b0: ed:12:f4:f4:ce:7a:25:cb:cb:b9:8b:d9:9a:33:0d: 81:b1:8f:e1:8c:a9:af:e1:45:65:f7:30:e3:e7:00: 78:d0:c7:39:cd:00:e1:46:fd:ba:4b:5e:a3:c5:63: 36:4d:5d:b6:be:5d:7f:11:19:6c:b9:25:35:e2:16: aa:54:ea:93:32:ed:93:62:05:87:50:8d:a8:8c:14: 80:51:b5:3d:68:4c:d0:76:5c:01:f0:dd:1e:a3:dc: b6:55:66:d5:7c:98:65:e4:f2:69:8c:50:35:b3:14: 33:64:ba:f9:a0:84:ce:48:d2:84:0c:44:c7:61:2c: 40:44:c9:5a:ec:44:8e:a8:b0:64:1f:97:c4:65:51: 35:e4:71:64:df:fe:1f:95:d0:59:80:bc:49:85:d0: c2:5d:19:79:08:de:3f:9e:01:f3:a4:9e:c2:7a:3a: 41:1e:c7:3f:53:60:5f:38:f5:11:60:cf:69:45:e8: fb:d7:64:b1:25:fd:44:cd:98:93:c4:f1:5b:ab:00: c2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 47:B3:FB:F3:9D:8D:FE:5B:C5:CF:D2:BE:D3:9F:0F:A1:52:61:90:97 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2dd47f56-ec53-42eb-9b8b-fa08f874d319/0/47B3FBF39D8DFE5BC5CFD2BED39F0FA152619097.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 58.65.240.0/21 115.166.96.0/19 IPv6: 2403:ff00::/32 Signature Algorithm: sha256WithRSAEncryption 86:ef:f0:50:b1:5a:c9:43:46:a2:25:a2:72:4b:18:d8:3b:13: 38:e6:bf:16:31:b0:62:44:00:a4:7b:37:8a:cd:6f:23:7c:d7: cc:0d:0c:30:44:46:37:61:e2:70:6b:86:b3:ce:b1:f7:27:aa: 64:98:a4:30:04:0d:31:30:6c:7d:03:1e:d2:e0:43:64:b5:0d: f3:67:74:2c:7c:e0:5d:9b:32:9b:2d:14:a4:47:48:45:9e:27: f6:a0:bb:5d:f3:97:eb:38:cb:1a:e8:d0:b8:12:d9:ee:7b:87: be:db:a3:3c:88:5e:c7:1e:4c:ac:20:a8:90:17:23:6a:4e:53: d2:45:37:b8:e6:8a:1d:42:dd:ad:9e:cc:d5:1e:a9:76:92:e9: 98:a5:58:5a:c7:a3:88:90:74:be:99:ec:44:52:dd:3f:71:df: 21:9a:46:3b:85:3f:18:b9:57:37:4f:63:3f:7e:a7:ba:08:96: 9f:c8:05:9d:05:46:50:3c:5f:63:6f:c9:6e:7d:d5:72:61:a3: e7:ed:79:3c:ac:3b:49:1a:f4:5a:7a:7b:45:0d:66:9b:83:5c: 2a:5f:eb:ac:02:32:8f:1a:4f:a9:e7:59:d9:2e:36:49:d2:16: 93:af:90:1e:6d:f6:81:87:8a:e7:7a:dc:ff:20:6e:c1:70:98: 42:67:9d:7c -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUeO9kQ0Ci2+loW7d7A05273SLTc0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIwNDE3MTc1NloX DTI3MDIwMzE3MjI1NlowMzExMC8GA1UEAxMoNDdCM0ZCRjM5RDhERkU1QkM1Q0ZE MkJFRDM5RjBGQTE1MjYxOTA5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKbjIoDDH8GGC5xAFiQV5PmQ1jqt0D81r9qWIAYQGvf7e8OGqmNpvUoGZchB +B8abZnT239K7lDpYZOw7RL09M56JcvLuYvZmjMNgbGP4Yypr+FFZfcw4+cAeNDH Oc0A4Ub9ukteo8VjNk1dtr5dfxEZbLklNeIWqlTqkzLtk2IFh1CNqIwUgFG1PWhM 0HZcAfDdHqPctlVm1XyYZeTyaYxQNbMUM2S6+aCEzkjShAxEx2EsQETJWuxEjqiw ZB+XxGVRNeRxZN/+H5XQWYC8SYXQwl0ZeQjeP54B86Sewno6QR7HP1NgXzj1EWDP aUXo+9dksSX9RM2Yk8TxW6sAwq8CAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEez+/Odjf5bxc/SvtOfD6FSYZCXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZGQ0N2Y1Ni1lYzUzLTQyZWItOWI4Yi1mYTA4Zjg3NGQzMTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkZDQ3ZjU2 LWVjNTMtNDJlYi05YjhiLWZhMDhmODc0ZDMxOS8wLzQ3QjNGQkYzOUQ4REZFNUJD NUNGRDJCRUQzOUYwRkExNTI2MTkwOTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAM6QfADBAVzpmAwDQQCAAIwBwMFACQD/wAwDQYJKoZIhvcNAQELBQADggEBAIbv 8FCxWslDRqIlonJLGNg7EzjmvxYxsGJEAKR7N4rNbyN818wNDDBERjdh4nBrhrPO sfcnqmSYpDAEDTEwbH0DHtLgQ2S1DfNndCx84F2bMpstFKRHSEWeJ/agu13zl+s4 yxro0LgS2e57h77bozyIXsceTKwgqJAXI2pOU9JFN7jmih1C3a2ezNUeqXaS6Zil WFrHo4iQdL6Z7ERS3T9x3yGaRjuFPxi5VzdPYz9+p7oIlp/IBZ0FRlA8X2NvyW59 1XJho+fteTysO0ka9Fp6e0UNZpuDXCpf66wCMo8aT6nnWdkuNknSFpOvkB5t9oGH iud63P8gbsFwmEJnnXw= -----END CERTIFICATE-----Generated at Mon Mar 2 00:16:03 2026 by rpki-client