$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer File: 9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer (raw, json) Hash identifier: yYn9t4KSNYjUbS1t7AHNYcba+AcF2k/+529K1PdhAqs= Subject key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 69A0A4FCD7EF72392E76A888D51564466D5B7ADA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft caRepository: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 21 Feb 2026 02:09:09 +0000 Certificate not after: Sat 20 Feb 2027 02:14:09 +0000 Subordinate resources: IP: 202.51.16.0/20 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a0:a4:fc:d7:ef:72:39:2e:76:a8:88:d5:15:64:46:6d:5b:7a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 21 02:09:09 2026 GMT Not After : Feb 20 02:14:09 2027 GMT Subject: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:8c:9f:6e:0c:0e:1e:ce:10:c9:e0:c8:3d: 35:12:19:93:f7:39:7d:5e:0c:2f:68:41:02:48:9f: c9:fe:d1:b8:2e:e7:dc:94:d9:8a:da:7a:b7:7a:34: 0c:41:ad:7b:79:46:59:d0:35:2d:42:6d:9e:78:fe: 0e:d4:17:91:f2:4c:44:59:a3:5f:e7:a7:02:22:e7: 00:17:0e:15:bc:75:2a:1b:a7:a6:5f:c7:74:06:bf: 2b:06:f8:13:a4:15:51:6c:10:55:0f:e4:71:dc:7d: 1f:5e:cc:76:48:56:f3:02:a0:0e:23:31:66:8a:25: 79:4d:d5:9c:0e:4f:5a:29:ee:91:06:b6:dd:59:fb: 99:42:2b:86:a4:70:7d:a3:d5:1e:af:62:ec:69:80: 46:2b:ab:06:6d:38:88:29:cc:7e:2b:a8:95:45:d2: d3:e1:db:04:57:4b:24:38:e8:c4:1b:9b:b4:5b:d2: c4:42:13:ee:ea:d5:3c:14:7e:4f:cf:99:d3:ea:5e: 6b:46:ca:94:fc:6f:09:b5:d5:03:c0:98:28:10:61: f4:f5:88:80:84:a1:53:99:75:ce:b2:89:14:5a:c0: a9:0b:4d:a7:87:fe:b1:29:bd:71:94:b6:9f:66:c1: b6:60:e3:26:4c:18:17:53:f7:ea:b2:02:95:d8:bb: 75:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.51.16.0/20 Signature Algorithm: sha256WithRSAEncryption 12:13:7f:a7:c1:8e:35:eb:db:99:fe:77:c2:2e:f8:34:32:f4: 6f:b3:df:6e:cd:e0:e8:64:7f:e7:67:e1:63:0f:4c:01:dc:bf: bd:2e:96:aa:b2:39:70:4c:4f:3c:da:2a:cb:56:70:bd:1a:31: de:43:42:8e:86:13:99:a6:8c:b0:5f:ec:50:09:bb:4f:93:6a: 27:70:1e:5f:81:39:77:35:b5:e5:60:c1:ed:96:61:1f:35:e3: d8:76:0e:e2:0d:60:fd:06:8d:9d:56:93:57:be:ea:55:87:fc: 07:d1:d5:01:86:77:2a:02:ca:df:8b:8f:09:77:f6:69:55:86: eb:8d:7a:b8:d4:8d:ba:f9:75:a8:9d:42:4a:75:59:71:7e:3b: 7b:7c:b4:65:f3:ed:88:6f:73:d4:c9:b1:45:7f:42:c1:ad:cf: d3:38:97:14:0d:b4:73:84:be:f0:8a:c5:b3:8d:5c:e3:2d:bb: b1:9f:f8:b9:2b:f7:d7:f7:4a:d9:af:ec:54:cf:cb:60:cb:d2: ca:1b:7e:47:83:49:34:6b:38:52:c8:30:7e:bf:36:58:80:ec: e3:3d:12:0c:7d:9a:d3:44:3f:c8:90:3a:c8:25:9f:a0:15:d9: 38:58:73:45:66:54:eb:6d:9d:29:d9:96:c7:ca:7e:d9:6d:c3: 4b:bc:03:b4 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUaaCk/NfvcjkudqiI1RVkRm1betowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIyMTAyMDkwOVoX DTI3MDIyMDAyMTQwOVowMzExMC8GA1UEAxMoOUU2QTY3RDVCOUQ3MjVDMUY0MDlB OUZCM0JGMzVBMDcxQUI0MjBBMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL3EjJ9uDA4ezhDJ4Mg9NRIZk/c5fV4ML2hBAkifyf7RuC7n3JTZitp6t3o0 DEGte3lGWdA1LUJtnnj+DtQXkfJMRFmjX+enAiLnABcOFbx1Khunpl/HdAa/Kwb4 E6QVUWwQVQ/kcdx9H17MdkhW8wKgDiMxZooleU3VnA5PWinukQa23Vn7mUIrhqRw faPVHq9i7GmARiurBm04iCnMfiuolUXS0+HbBFdLJDjoxBubtFvSxEIT7urVPBR+ T8+Z0+pea0bKlPxvCbXVA8CYKBBh9PWIgIShU5l1zrKJFFrAqQtNp4f+sSm9cZS2 n2bBtmDjJkwYF1P36rICldi7dc0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ5qZ9W51yXB9Amp+zvzWgcatCCgMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85OTRlNmIyZC0zZGRiLTQ2ZWItODNlZi1jOTliMjAwMzc4M2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5NGU2YjJk LTNkZGItNDZlYi04M2VmLWM5OWIyMDAzNzgzZi8wLzlFNkE2N0Q1QjlENzI1QzFG NDA5QTlGQjNCRjM1QTA3MUFCNDIwQTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BATKMxAwDQYJKoZIhvcNAQELBQADggEBABITf6fBjjXr25n+d8Iu+DQy9G+z327N 4Ohkf+dn4WMPTAHcv70ulqqyOXBMTzzaKstWcL0aMd5DQo6GE5mmjLBf7FAJu0+T aidwHl+BOXc1teVgwe2WYR8149h2DuINYP0GjZ1Wk1e+6lWH/AfR1QGGdyoCyt+L jwl39mlVhuuNerjUjbr5daidQkp1WXF+O3t8tGXz7Yhvc9TJsUV/QsGtz9M4lxQN tHOEvvCKxbONXOMtu7Gf+Lkr99f3Stmv7FTPy2DL0sobfkeDSTRrOFLIMH6/NliA 7OM9Egx9mtNEP8iQOsgln6AV2ThYc0VmVOttnSnZlsfKftltw0u8A7Q= -----END CERTIFICATE-----Generated at Sun Mar 1 23:24:23 2026 by rpki-client