$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer File: 9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.cer (raw, json) Hash identifier: W0PwQAuLSpjkOZjwOKbR4TO/P9j1OPAe6M/PATJLgkE= Subject key identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6E17BAAA98BE8D5462D5894BDF998059D029ADCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft caRepository: rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 31 Mar 2026 23:03:48 +0000 Certificate not after: Tue 30 Mar 2027 23:08:48 +0000 Subordinate resources: IP: 113.59.232.0/21 IP: 2400:b080::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 10:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:17:ba:aa:98:be:8d:54:62:d5:89:4b:df:99:80:59:d0:29:ad:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 31 23:03:48 2026 GMT Not After : Mar 30 23:08:48 2027 GMT Subject: CN=9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:ee:2a:00:57:af:91:d1:a3:67:33:9e:df: b1:c2:f6:71:fe:2a:3b:71:6e:4c:6e:d3:64:6c:51: ab:14:5e:a5:cd:f6:88:96:b5:9d:27:b6:e7:31:1e: db:85:bf:b4:da:f8:51:2a:7e:4a:d6:a8:5e:3e:74: 9b:91:24:73:e3:af:37:4e:ce:f7:95:86:8a:2a:76: 52:65:ed:6f:a7:b4:35:b8:4d:57:27:83:50:6a:b8: d7:ac:cc:f8:b7:93:8a:21:d0:3c:e0:c0:bd:8b:ad: 5f:83:49:a2:62:cb:1b:3a:7f:cb:6f:a4:de:72:04: b0:f7:a5:7b:86:6f:53:69:d2:28:fe:4d:8c:42:e7: 21:d5:79:85:c2:28:35:ec:e6:ec:53:f4:41:e3:4b: 5b:e0:28:df:20:4b:0a:c9:72:d6:30:c4:d5:fa:13: ca:3f:68:99:07:cd:e5:be:75:a0:c1:51:87:b6:67: a2:53:e7:a7:06:b1:da:27:ba:2e:73:1e:60:ff:95: dc:00:cf:37:23:82:df:40:35:52:ef:ef:b3:25:65: af:67:5f:bd:c7:a3:5d:ad:e5:d8:96:86:34:b5:68: 42:b0:61:9d:69:04:c5:b9:42:19:85:95:6f:a2:20: 29:a4:82:9b:0b:9b:5c:cd:97:d4:e2:e0:20:69:cf: 72:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9B:2F:00:47:6D:6A:C1:BA:AB:05:C5:A6:25:DC:00:C2:A5:9F:99:D7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b606718f-f4c6-4775-8957-99d2bd666363/0/9B2F00476D6AC1BAAB05C5A625DC00C2A59F99D7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.59.232.0/21 IPv6: 2400:b080::/32 Signature Algorithm: sha256WithRSAEncryption 6c:e4:c4:9e:0d:66:68:9b:49:14:ca:fe:f1:ed:77:4f:ba:79: 08:73:62:40:b6:b0:58:49:7b:7c:d1:bb:6a:99:1c:94:3c:c7: d3:b4:f3:7c:33:d6:1a:f4:72:79:04:a3:52:8e:dc:76:a8:60: 2b:46:cd:bc:ff:71:27:50:e0:8c:8c:47:a7:e2:41:c6:1a:2c: d3:7b:ca:e5:e7:a6:70:1a:e4:d7:55:fc:a4:e7:53:c1:7c:06: 39:d7:7a:41:51:0a:27:b0:de:78:97:aa:3f:4e:d8:f3:ed:3a: 93:5e:ab:72:d2:f0:43:f2:7e:39:88:57:d7:3c:49:c8:c0:c8: 40:97:c5:70:f7:73:aa:eb:23:4d:e6:31:35:0f:36:0c:7b:a0: 56:26:1c:9a:f9:94:26:5b:ba:8a:01:eb:b0:53:0e:2f:2f:90: 98:b2:8f:69:1a:6a:01:26:64:de:68:56:12:19:e9:f4:4f:9d: f1:fa:a9:68:bf:34:73:aa:c0:f6:58:91:b0:f2:c8:7e:4f:87: 5c:ea:fb:fb:0c:4b:8e:6f:96:b4:ce:3f:cb:f5:dc:50:09:1e: cc:e3:a1:dd:83:32:22:a2:2c:54:b6:96:db:48:ec:7d:e9:43: 89:31:3a:67:98:52:c5:a8:d4:c7:70:b9:38:70:a4:8c:57:57: e4:aa:a1:09 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIUbhe6qpi+jVRi1YlL35mAWdAprc0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMzMTIzMDM0OFoX DTI3MDMzMDIzMDg0OFowMzExMC8GA1UEAxMoOUIyRjAwNDc2RDZBQzFCQUFCMDVD NUE2MjVEQzAwQzJBNTlGOTlENzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALoC7ioAV6+R0aNnM57fscL2cf4qO3FuTG7TZGxRqxRepc32iJa1nSe25zEe 24W/tNr4USp+StaoXj50m5Ekc+OvN07O95WGiip2UmXtb6e0NbhNVyeDUGq416zM +LeTiiHQPODAvYutX4NJomLLGzp/y2+k3nIEsPele4ZvU2nSKP5NjELnIdV5hcIo Nezm7FP0QeNLW+Ao3yBLCsly1jDE1foTyj9omQfN5b51oMFRh7ZnolPnpwax2ie6 LnMeYP+V3ADPNyOC30A1Uu/vsyVlr2dfvcejXa3l2JaGNLVoQrBhnWkExblCGYWV b6IgKaSCmwubXM2X1OLgIGnPcjcCAwEAAaOCAscwggLDMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJsvAEdtasG6qwXFpiXcAMKln5nXMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iNjA2NzE4Zi1mNGM2LTQ3NzUtODk1Ny05OWQyYmQ2NjYzNjMvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I2MDY3MThm LWY0YzYtNDc3NS04OTU3LTk5ZDJiZDY2NjM2My8wLzlCMkYwMDQ3NkQ2QUMxQkFB QjA1QzVBNjI1REMwMEMyQTU5Rjk5RDcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYD BANxO+gwDQQCAAIwBwMFACQAsIAwDQYJKoZIhvcNAQELBQADggEBAGzkxJ4NZmib SRTK/vHtd0+6eQhzYkC2sFhJe3zRu2qZHJQ8x9O083wz1hr0cnkEo1KO3HaoYCtG zbz/cSdQ4IyMR6fiQcYaLNN7yuXnpnAa5NdV/KTnU8F8BjnXekFRCiew3niXqj9O 2PPtOpNeq3LS8EPyfjmIV9c8ScjAyECXxXD3c6rrI03mMTUPNgx7oFYmHJr5lCZb uooB67BTDi8vkJiyj2kaagEmZN5oVhIZ6fRPnfH6qWi/NHOqwPZYkbDyyH5Ph1zq +/sMS45vlrTOP8v13FAJHszjod2DMiKiLFS2lttI7H3pQ4kxOmeYUsWo1MdwuThw pIxXV+SqoQk= -----END CERTIFICATE-----Generated at Sun Apr 19 11:35:17 2026 by rpki-client