$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.cer File: 67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.cer (raw, json) Hash identifier: 44IUP311Ja5m74nVqu+jrlKz72EZFRvgPS3xyhhoDps= Subject key identifier: 67:DB:E6:D6:F2:46:D7:FC:91:1D:62:E6:8A:C2:D9:82:07:BA:D8:2F Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 584E5056AE034CF3554AC43CAE73790225C29B68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft caRepository: rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 18 Feb 2026 06:19:38 +0000 Certificate not after: Wed 17 Feb 2027 06:24:38 +0000 Subordinate resources: IP: 2001:df6:afc0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:4e:50:56:ae:03:4c:f3:55:4a:c4:3c:ae:73:79:02:25:c2:9b:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 18 06:19:38 2026 GMT Not After : Feb 17 06:24:38 2027 GMT Subject: CN=67DBE6D6F246D7FC911D62E68AC2D98207BAD82F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:eb:c2:a3:b2:91:42:94:70:01:5e:d2:02:59: 2a:9b:13:ac:e7:dc:d3:2a:c4:00:c0:e6:56:fd:cb: 38:ea:42:83:ca:14:e5:5d:de:fd:cd:ac:33:9c:9e: ae:80:cf:e8:79:74:8e:fe:10:58:60:3b:00:d9:3f: f6:72:43:f9:1d:a4:61:15:39:df:bb:53:14:cb:f2: 79:74:fe:13:b9:31:07:53:ad:a8:fb:ad:37:64:da: f3:ff:d9:b8:ea:03:62:47:5b:35:03:60:0d:db:b5: 4f:b2:43:2a:f9:15:a6:c0:5b:90:aa:3d:47:2a:b6: 1a:6c:6b:01:45:72:91:9b:2c:e7:c0:3f:b9:4d:22: 28:8b:92:f8:a9:d8:c1:04:e8:b5:1a:3c:93:f8:0c: a2:ce:19:56:a3:ec:48:73:42:9c:a4:09:3a:34:33: 30:b7:ab:bb:db:cf:21:5d:ec:a3:49:69:e8:76:39: cb:d6:a2:65:28:c0:b8:4b:4a:0e:fa:84:ad:c1:7b: 91:78:fb:76:2a:69:1b:04:c1:ff:60:43:82:21:38: d5:32:16:70:6f:6f:2c:dd:70:ed:ef:4f:41:8f:b2: b7:86:81:d2:07:b0:06:6e:12:22:9b:b7:6f:18:ac: 90:ca:c9:25:b1:a7:4f:20:28:33:d7:98:b5:d4:36: b0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 67:DB:E6:D6:F2:46:D7:FC:91:1D:62:E6:8A:C2:D9:82:07:BA:D8:2F X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/32770fd3-9216-438b-997f-e5972e464e3a/0/67DBE6D6F246D7FC911D62E68AC2D98207BAD82F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:afc0::/48 Signature Algorithm: sha256WithRSAEncryption 74:ba:e0:1c:ac:8c:4c:01:bd:65:b9:69:c2:18:30:b3:2c:30: c6:b2:a5:cb:08:9c:ad:50:22:fa:12:16:f1:08:11:5c:19:46: c6:19:28:d7:e4:e5:01:5b:76:9f:4b:89:db:32:3e:d3:13:9b: 64:78:4d:d3:65:8f:a7:d5:c8:54:32:74:9c:52:a8:83:dd:ec: eb:fb:67:01:cf:61:33:45:83:06:95:b4:7e:1c:90:c8:9d:43: 7f:c0:e9:c8:55:77:86:b5:fa:e2:04:25:61:b7:73:e9:8a:95: c7:af:9d:09:4d:71:1e:47:4e:2f:91:b2:03:cb:f7:04:27:22: a6:e4:a6:db:cb:61:02:b4:e8:9b:1d:fc:49:4e:5b:17:f1:94: ac:3d:d9:01:34:59:44:bf:70:6f:1d:36:7e:2b:80:16:90:58: 9c:9a:5c:1d:66:78:ea:d7:11:e1:d1:2b:95:fb:f3:b9:cd:e5: 69:2e:6a:a5:78:25:30:99:d5:e2:15:c3:36:cf:eb:b1:59:d6: d1:5a:49:3d:85:b0:e2:37:65:ac:1f:69:e8:50:9d:23:7a:e7: 46:ce:d9:5c:42:a4:55:18:e5:9e:14:6b:e9:44:6b:7e:e9:c4: 76:7c:4d:f2:9f:83:72:96:4d:9a:5c:70:14:a5:66:a7:ce:d8: 55:08:80:a5 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUWE5QVq4DTPNVSsQ8rnN5AiXCm2gwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxODA2MTkzOFoX DTI3MDIxNzA2MjQzOFowMzExMC8GA1UEAxMoNjdEQkU2RDZGMjQ2RDdGQzkxMUQ2 MkU2OEFDMkQ5ODIwN0JBRDgyRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANDrwqOykUKUcAFe0gJZKpsTrOfc0yrEAMDmVv3LOOpCg8oU5V3e/c2sM5ye roDP6Hl0jv4QWGA7ANk/9nJD+R2kYRU537tTFMvyeXT+E7kxB1OtqPutN2Ta8//Z uOoDYkdbNQNgDdu1T7JDKvkVpsBbkKo9Ryq2GmxrAUVykZss58A/uU0iKIuS+KnY wQTotRo8k/gMos4ZVqPsSHNCnKQJOjQzMLeru9vPIV3so0lp6HY5y9aiZSjAuEtK DvqErcF7kXj7dippGwTB/2BDgiE41TIWcG9vLN1w7e9PQY+yt4aB0gewBm4SIpu3 bxiskMrJJbGnTyAoM9eYtdQ2sNMCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGfb5tbyRtf8kR1i5orC2YIHutgvMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMjc3MGZkMy05MjE2LTQzOGItOTk3Zi1lNTk3MmU0NjRlM2EvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMyNzcwZmQz LTkyMTYtNDM4Yi05OTdmLWU1OTcyZTQ2NGUzYS8wLzY3REJFNkQ2RjI0NkQ3RkM5 MTFENjJFNjhBQzJEOTgyMDdCQUQ4MkYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ32r8AwDQYJKoZIhvcNAQELBQADggEBAHS64BysjEwBvWW5acIYMLMsMMay pcsInK1QIvoSFvEIEVwZRsYZKNfk5QFbdp9LidsyPtMTm2R4TdNlj6fVyFQydJxS qIPd7Ov7ZwHPYTNFgwaVtH4ckMidQ3/A6chVd4a1+uIEJWG3c+mKlcevnQlNcR5H Ti+RsgPL9wQnIqbkptvLYQK06Jsd/ElOWxfxlKw92QE0WUS/cG8dNn4rgBaQWJya XB1meOrXEeHRK5X787nN5WkuaqV4JTCZ1eIVwzbP67FZ1tFaST2FsOI3ZawfaehQ nSN650bO2VxCpFUY5Z4Ua+lEa37pxHZ8TfKfg3KWTZpccBSlZqfO2FUIgKU= -----END CERTIFICATE-----Generated at Sun Mar 1 23:42:55 2026 by rpki-client