$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/990382439FFA8C086A4458B338B52CCD0D54CFA8.cer File: 990382439FFA8C086A4458B338B52CCD0D54CFA8.cer (raw, json) Hash identifier: 30x0/cEpxxRam3gDuKdZcTrGjuJE/iWQdzMYZ7qF/nI= Subject key identifier: 99:03:82:43:9F:FA:8C:08:6A:44:58:B3:38:B5:2C:CD:0D:54:CF:A8 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6CF75E9EB7AEA407705124D1409CAA360C1F2FCB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft caRepository: rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 20 Feb 2026 06:24:13 +0000 Certificate not after: Fri 19 Feb 2027 06:29:13 +0000 Subordinate resources: IP: 2001:df6:a440::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f7:5e:9e:b7:ae:a4:07:70:51:24:d1:40:9c:aa:36:0c:1f:2f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 20 06:24:13 2026 GMT Not After : Feb 19 06:29:13 2027 GMT Subject: CN=990382439FFA8C086A4458B338B52CCD0D54CFA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:df:8e:20:5b:c8:68:37:af:b3:08:00:99:4d: 9c:1b:6e:f5:66:73:8d:01:f5:ec:0f:d3:0e:2b:d0: 49:1e:4f:9c:41:49:0a:1e:ff:53:00:37:97:54:d7: 72:bf:e3:2a:54:af:94:59:a5:5d:ca:a0:a7:e6:6a: b1:8c:c6:06:44:13:f4:70:c0:8f:9a:2c:35:e3:d6: 07:65:81:89:03:ff:f0:db:5e:64:52:1d:7a:69:90: b7:4d:39:03:9a:fd:5d:89:63:b0:fb:ab:03:20:80: 8d:a5:c9:7e:bf:1c:f0:fe:f9:34:2b:0b:05:d9:bb: d8:f7:c4:d8:2c:c5:89:44:e7:0f:0d:6f:fb:7d:50: 6b:d4:40:ea:e5:d6:40:82:e2:aa:8d:7a:1b:57:2a: db:0b:e2:5e:3e:58:51:68:9f:f4:f5:78:39:c3:8d: 5a:f4:a4:8d:d0:14:27:c6:b8:22:ea:23:35:6e:fa: 22:08:32:c1:e1:8e:73:1d:2d:6d:6f:43:1f:27:62: a7:33:8e:af:07:8b:90:41:e0:ef:73:fc:d4:57:ed: d5:7d:59:ae:ad:a7:a1:60:61:f9:1f:38:d2:c7:cb: 7b:87:d4:5b:06:47:83:b5:f4:0f:89:69:54:96:34: 36:ff:cc:78:ae:24:92:9a:3a:3e:5c:b1:79:56:57: 65:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 99:03:82:43:9F:FA:8C:08:6A:44:58:B3:38:B5:2C:CD:0D:54:CF:A8 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/da9cd668-6cc5-49a6-9fcf-ae32a87fe636/0/990382439FFA8C086A4458B338B52CCD0D54CFA8.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:a440::/48 Signature Algorithm: sha256WithRSAEncryption 91:12:ba:05:a8:31:54:e4:68:9a:7d:d1:4b:65:1f:f6:b2:99: 1f:1f:26:4c:92:18:fb:3b:75:bd:8f:16:58:a1:89:66:22:8d: e2:c9:e0:e9:0a:df:4b:e0:fb:2f:3a:3a:a2:08:eb:82:ab:44: 3e:80:c5:fd:d6:f6:72:e0:01:84:30:5c:e7:74:78:ed:bb:ac: 26:bf:d2:6c:6e:5e:11:37:c8:00:64:3c:40:c5:2b:f3:e0:1c: 5c:7f:06:09:4f:ef:b8:50:a6:95:25:dd:d7:da:24:89:a2:b3: dd:8e:06:e5:2f:02:e0:97:95:79:de:29:0a:62:2a:bf:af:c0: 5f:59:9b:f3:80:49:ec:83:8b:9e:2b:40:62:32:22:c5:e9:61: a9:ca:0e:61:ef:e8:69:c5:ec:a1:14:be:15:be:a2:e0:57:0f: 57:e4:74:c0:98:5f:e2:9b:dd:0c:bc:ae:dc:b6:ab:ef:1e:5f: 04:11:d7:8e:f6:ec:0a:4a:3f:66:71:bf:f1:cc:a8:52:1a:af: a9:94:53:b2:02:83:4e:d3:8d:55:b7:b4:ef:a4:54:92:3f:fc: 9b:e0:d9:25:86:fa:f0:f1:9b:96:a3:d8:84:eb:ae:cf:ae:40: 33:ca:3b:79:2d:8e:ca:7f:b7:2e:da:03:d4:56:1f:e6:f2:cb: 37:27:3c:dd -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUbPdenreupAdwUSTRQJyqNgwfL8swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyMDA2MjQxM1oX DTI3MDIxOTA2MjkxM1owMzExMC8GA1UEAxMoOTkwMzgyNDM5RkZBOEMwODZBNDQ1 OEIzMzhCNTJDQ0QwRDU0Q0ZBODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMPfjiBbyGg3r7MIAJlNnBtu9WZzjQH17A/TDivQSR5PnEFJCh7/UwA3l1TX cr/jKlSvlFmlXcqgp+ZqsYzGBkQT9HDAj5osNePWB2WBiQP/8NteZFIdemmQt005 A5r9XYljsPurAyCAjaXJfr8c8P75NCsLBdm72PfE2CzFiUTnDw1v+31Qa9RA6uXW QILiqo16G1cq2wviXj5YUWif9PV4OcONWvSkjdAUJ8a4IuojNW76IggyweGOcx0t bW9DHydipzOOrweLkEHg73P81Fft1X1Zrq2noWBh+R840sfLe4fUWwZHg7X0D4lp VJY0Nv/MeK4kkpo6PlyxeVZXZVkCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJkDgkOf+owIakRYszi1LM0NVM+oMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYTljZDY2OC02Y2M1LTQ5YTYtOWZjZi1hZTMyYTg3ZmU2MzYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhOWNkNjY4 LTZjYzUtNDlhNi05ZmNmLWFlMzJhODdmZTYzNi8wLzk5MDM4MjQzOUZGQThDMDg2 QTQ0NThCMzM4QjUyQ0NEMEQ1NENGQTgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ32pEAwDQYJKoZIhvcNAQELBQADggEBAJESugWoMVTkaJp90UtlH/aymR8f JkySGPs7db2PFlihiWYijeLJ4OkK30vg+y86OqII64KrRD6Axf3W9nLgAYQwXOd0 eO27rCa/0mxuXhE3yABkPEDFK/PgHFx/BglP77hQppUl3dfaJImis92OBuUvAuCX lXneKQpiKr+vwF9Zm/OASeyDi54rQGIyIsXpYanKDmHv6GnF7KEUvhW+ouBXD1fk dMCYX+Kb3Qy8rty2q+8eXwQR14727ApKP2Zxv/HMqFIar6mUU7ICg07TjVW3tO+k VJI//Jvg2SWG+vDxm5aj2ITrrs+uQDPKO3ktjsp/ty7aA9RWH+byyzcnPN0= -----END CERTIFICATE-----Generated at Mon Mar 2 04:31:55 2026 by rpki-client