$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer File: 91DF058D6AC6F563DCAE86DBAFB48AC326264F50.cer (raw, json) Hash identifier: KvMFX/zlmYUOfpODeFlWiXJLvRB6Il99PDGytnOIHcE= Subject key identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 2779BC22A0C0DF6AF3802EC3BD93B1DC34EC84B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft caRepository: rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 25 Feb 2026 09:09:18 +0000 Certificate not after: Wed 24 Feb 2027 09:14:18 +0000 Subordinate resources: IP: 103.169.128.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:79:bc:22:a0:c0:df:6a:f3:80:2e:c3:bd:93:b1:dc:34:ec:84:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 25 09:09:18 2026 GMT Not After : Feb 24 09:14:18 2027 GMT Subject: CN=91DF058D6AC6F563DCAE86DBAFB48AC326264F50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:17:42:bf:4f:be:49:c9:f6:67:c5:b7:40: 0c:43:25:87:6a:a9:4f:90:23:02:8c:38:80:ae:33: 4d:86:0f:99:13:d7:8c:77:3c:f1:7b:ca:71:32:84: 92:85:5d:1b:5b:bd:29:e7:0c:28:5f:53:29:ac:ed: 04:a1:7b:f8:03:67:27:6e:75:0b:4a:d5:fe:a6:1c: cb:be:e1:86:54:db:d5:91:b5:24:68:4d:fb:18:cf: 99:33:42:e3:aa:1c:b2:37:b4:a2:0a:d1:e8:71:c4: 73:ae:3c:5f:4e:38:97:52:9a:5e:5a:1e:c1:c5:ff: 87:cf:0c:73:8d:50:6e:12:9a:c3:bb:c9:43:04:d5: 78:4b:85:75:bc:dc:55:c7:0e:22:9b:9e:e2:31:f6: 2a:f6:03:57:1c:75:48:4b:d1:fd:d8:4d:df:75:c3: e6:da:80:6c:f2:b5:d9:22:9c:30:e3:df:44:9c:d1: 3a:75:f2:d1:7d:e7:2f:68:95:96:fd:d6:6f:a6:dd: 9d:93:00:59:91:0d:4c:3e:7f:d9:ab:99:a0:e6:ae: 9a:d8:f5:fc:bd:5f:5c:4e:f3:9f:a8:10:10:08:89: d7:7b:de:7d:5f:5b:8c:be:e3:f8:e5:3f:b5:89:87: a9:e0:df:81:cb:15:3e:c1:4c:d2:59:7a:fb:5c:21: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:DF:05:8D:6A:C6:F5:63:DC:AE:86:DB:AF:B4:8A:C3:26:26:4F:50 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2b0e364b-779e-40d5-ad0e-d9178778d6b1/0/91DF058D6AC6F563DCAE86DBAFB48AC326264F50.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.128.0/23 Signature Algorithm: sha256WithRSAEncryption 84:bf:b4:d5:a9:fd:7d:ee:d0:8e:8c:bf:f3:da:0f:f5:20:f4: 49:96:64:e6:88:dc:58:6d:0e:87:00:3b:3b:79:07:1c:e4:69: 16:3e:43:ac:bf:18:76:2f:18:ee:bd:c9:49:22:b1:ef:a6:45: 93:a8:f3:f4:35:34:66:f7:9b:75:34:1e:bc:35:94:ec:a8:e7: e1:e8:9b:f4:c7:ae:18:22:97:58:1a:ae:a8:f6:68:c9:5f:5a: 54:d4:17:26:72:82:5c:1f:e1:3f:08:5d:a5:ce:78:38:6a:ed: 7f:fe:2c:1e:fd:50:2c:c2:fd:fa:7f:16:42:97:4a:89:35:f5: 3e:cb:8a:78:4f:09:b8:b4:fa:38:0a:46:e6:e4:38:76:5d:d1: 9d:73:c9:e8:04:52:d4:ce:a3:39:4d:f2:d5:f5:fb:f9:91:89: f2:12:46:d8:b6:ee:69:3a:b8:ad:30:b1:70:64:59:cf:92:4f: c1:77:1f:ed:ad:fe:24:b0:6d:f5:15:00:a0:61:31:66:51:b7: f5:dd:42:be:99:e6:04:75:87:85:92:14:dc:57:d4:2e:65:ff: 59:5a:6e:ec:c7:a4:a1:1d:51:82:27:e4:cc:1e:95:2b:e5:98: 2a:9f:2c:b3:78:2e:62:52:6e:16:26:5d:8d:f4:a0:1b:ed:0a: 37:80:db:b8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUJ3m8IqDA32rzgC7DvZOx3DTshLcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyNTA5MDkxOFoX DTI3MDIyNDA5MTQxOFowMzExMC8GA1UEAxMoOTFERjA1OEQ2QUM2RjU2M0RDQUU4 NkRCQUZCNDhBQzMyNjI2NEY1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANL9F0K/T75JyfZnxbdADEMlh2qpT5AjAow4gK4zTYYPmRPXjHc88XvKcTKE koVdG1u9KecMKF9TKaztBKF7+ANnJ251C0rV/qYcy77hhlTb1ZG1JGhN+xjPmTNC 46ocsje0ogrR6HHEc648X044l1KaXloewcX/h88Mc41QbhKaw7vJQwTVeEuFdbzc VccOIpue4jH2KvYDVxx1SEvR/dhN33XD5tqAbPK12SKcMOPfRJzROnXy0X3nL2iV lv3Wb6bdnZMAWZENTD5/2auZoOaumtj1/L1fXE7zn6gQEAiJ13vefV9bjL7j+OU/ tYmHqeDfgcsVPsFM0ll6+1whRgECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJHfBY1qxvVj3K6G26+0isMmJk9QMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYjBlMzY0Yi03NzllLTQwZDUtYWQwZS1kOTE3ODc3OGQ2YjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJiMGUzNjRi LTc3OWUtNDBkNS1hZDBlLWQ5MTc4Nzc4ZDZiMS8wLzkxREYwNThENkFDNkY1NjNE Q0FFODZEQkFGQjQ4QUMzMjYyNjRGNTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFnqYAwDQYJKoZIhvcNAQELBQADggEBAIS/tNWp/X3u0I6Mv/PaD/Ug9EmWZOaI 3FhtDocAOzt5BxzkaRY+Q6y/GHYvGO69yUkise+mRZOo8/Q1NGb3m3U0Hrw1lOyo 5+Hom/THrhgil1garqj2aMlfWlTUFyZyglwf4T8IXaXOeDhq7X/+LB79UCzC/fp/ FkKXSok19T7LinhPCbi0+jgKRubkOHZd0Z1zyegEUtTOozlN8tX1+/mRifISRti2 7mk6uK0wsXBkWc+ST8F3H+2t/iSwbfUVAKBhMWZRt/XdQr6Z5gR1h4WSFNxX1C5l /1labuzHpKEdUYIn5MwelSvlmCqfLLN4LmJSbhYmXY30oBvtCjeA27g= -----END CERTIFICATE-----Generated at Mon Mar 2 00:16:05 2026 by rpki-client