$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/668C2397879176FD00D1A4949BAF8C1D8E764166.cer File: 668C2397879176FD00D1A4949BAF8C1D8E764166.cer (raw, json) Hash identifier: WzSf/HVik4hF/E6Q9iViWxLQuWZVYq0HtlJruZ0bWtc= Subject key identifier: 66:8C:23:97:87:91:76:FD:00:D1:A4:94:9B:AF:8C:1D:8E:76:41:66 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6DE98AC797096DBFAF7DD35C31609ECC25DDE41B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/668C2397879176FD00D1A4949BAF8C1D8E764166.mft caRepository: rsync://repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 27 Feb 2026 13:32:39 +0000 Certificate not after: Fri 26 Feb 2027 13:37:39 +0000 Subordinate resources: IP: 2001:df6:9d40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e9:8a:c7:97:09:6d:bf:af:7d:d3:5c:31:60:9e:cc:25:dd:e4:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 27 13:32:39 2026 GMT Not After : Feb 26 13:37:39 2027 GMT Subject: CN=668C2397879176FD00D1A4949BAF8C1D8E764166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a4:f7:65:22:c3:88:ad:e1:23:db:a9:d3:64: a3:f1:25:db:c6:a8:d5:28:78:2b:73:65:d7:a2:0c: bc:40:9e:97:46:94:21:c8:9a:fe:aa:e3:2b:82:57: 73:cf:63:f7:93:9d:35:69:f4:0e:35:74:59:48:94: 1a:a1:05:d9:a4:8c:34:e9:fe:ca:b5:4f:5a:6f:5c: 67:4f:1d:97:b0:de:b4:b1:d1:4d:30:01:1d:36:91: 8e:fb:97:1d:f2:9a:8f:88:2c:6a:2f:5e:c3:d6:ca: 22:1b:9d:a7:c0:70:b3:1c:9d:28:7a:d2:7c:b7:0f: 79:a1:8e:d0:20:1b:f1:42:b2:b5:9c:fd:71:8c:86: 62:54:d4:1c:76:34:85:29:33:df:ec:8b:62:85:46: fa:49:65:be:57:6a:4f:34:4b:f5:25:87:9d:a1:c3: 9e:74:87:b5:c0:08:22:2e:3f:0e:8f:00:93:ec:1c: b0:c6:12:bb:13:0b:37:b1:ea:49:29:77:a7:12:e3: a8:b3:c9:44:85:e9:55:65:a0:ed:65:a7:2f:4b:52: f1:fb:eb:47:b2:b4:1c:4f:26:45:5f:90:dc:30:a6: 86:69:f9:1b:ea:b5:bc:03:9c:a9:1f:24:47:6b:03: df:b1:dc:1d:70:7e:31:d0:c1:c5:22:da:aa:e1:8a: e4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:8C:23:97:87:91:76:FD:00:D1:A4:94:9B:AF:8C:1D:8E:76:41:66 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/cbde3a42-6272-4b6c-ad81-cccfbe9488c0/0/668C2397879176FD00D1A4949BAF8C1D8E764166.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:9d40::/48 Signature Algorithm: sha256WithRSAEncryption 73:67:21:e3:09:ee:85:58:d7:c1:39:04:f7:ba:61:07:94:48: cc:8b:b5:87:9e:15:2e:75:b1:6c:49:ac:e3:b0:5a:9f:c8:eb: 62:ab:95:e0:d7:fb:ef:21:62:92:d9:35:8a:b9:7c:b8:50:63: c8:77:09:76:38:bf:2f:d5:0e:54:47:61:1b:d0:0e:cc:9d:32: 18:a7:8a:3b:a0:f9:1f:bc:71:6c:d5:2e:e9:d0:66:a6:4f:6f: 87:f1:de:da:01:0c:7d:28:ec:be:2f:b5:a0:0c:f0:e5:25:6a: 6b:db:1b:d3:26:71:9f:9e:d3:76:81:68:57:cc:e2:f8:f9:e9: 5b:20:91:d6:f6:f3:60:f6:dc:b0:b1:1f:f1:f4:e8:4e:8d:78: 09:22:e7:50:4d:6a:f2:a1:61:31:f5:5c:ec:fb:68:8a:34:74: 46:9f:e0:16:4d:ae:31:1e:37:80:85:58:1e:23:0b:05:51:3b: 65:19:9b:5a:cd:b3:3e:dc:9a:b8:9e:66:b1:f5:fc:94:48:b3: a4:7d:d2:8c:25:09:20:ca:05:32:ad:38:c9:a5:a0:e6:de:5c: 30:3a:46:a8:6e:c2:3d:63:8a:af:e6:be:9c:8f:b0:ee:02:88: 5f:16:2b:43:51:1e:c0:1f:2f:cc:27:08:7f:f4:75:b7:4f:81: 75:10:06:3c -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUbemKx5cJbb+vfdNcMWCezCXd5BswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNzEzMzIzOVoX DTI3MDIyNjEzMzczOVowMzExMC8GA1UEAxMoNjY4QzIzOTc4NzkxNzZGRDAwRDFB NDk0OUJBRjhDMUQ4RTc2NDE2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMak92Uiw4it4SPbqdNko/El28ao1Sh4K3Nl16IMvECel0aUIcia/qrjK4JX c89j95OdNWn0DjV0WUiUGqEF2aSMNOn+yrVPWm9cZ08dl7DetLHRTTABHTaRjvuX HfKaj4gsai9ew9bKIhudp8BwsxydKHrSfLcPeaGO0CAb8UKytZz9cYyGYlTUHHY0 hSkz3+yLYoVG+kllvldqTzRL9SWHnaHDnnSHtcAIIi4/Do8Ak+wcsMYSuxMLN7Hq SSl3pxLjqLPJRIXpVWWg7WWnL0tS8fvrR7K0HE8mRV+Q3DCmhmn5G+q1vAOcqR8k R2sD37HcHXB+MdDBxSLaquGK5LsCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGaMI5eHkXb9ANGklJuvjB2OdkFmMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jYmRlM2E0Mi02MjcyLTRiNmMtYWQ4MS1jY2NmYmU5NDg4YzAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NiZGUzYTQy LTYyNzItNGI2Yy1hZDgxLWNjY2ZiZTk0ODhjMC8wLzY2OEMyMzk3ODc5MTc2RkQw MEQxQTQ5NDlCQUY4QzFEOEU3NjQxNjYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ32nUAwDQYJKoZIhvcNAQELBQADggEBAHNnIeMJ7oVY18E5BPe6YQeUSMyL tYeeFS51sWxJrOOwWp/I62KrleDX++8hYpLZNYq5fLhQY8h3CXY4vy/VDlRHYRvQ DsydMhinijug+R+8cWzVLunQZqZPb4fx3toBDH0o7L4vtaAM8OUlamvbG9MmcZ+e 03aBaFfM4vj56Vsgkdb282D23LCxH/H06E6NeAki51BNavKhYTH1XOz7aIo0dEaf 4BZNrjEeN4CFWB4jCwVRO2UZm1rNsz7cmrieZrH1/JRIs6R90owlCSDKBTKtOMml oObeXDA6Rqhuwj1jiq/mvpyPsO4CiF8WK0NRHsAfL8wnCH/0dbdPgXUQBjw= -----END CERTIFICATE-----Generated at Mon Mar 2 00:02:46 2026 by rpki-client