$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer File: 9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.cer (raw, json) Hash identifier: NdrmDWa5KwCiRRQd7jRaaPzL3zQFEkyGQAYWvUSrFAA= Subject key identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 5DFA45371F09ABD20778E887E12AA1C4FDAE9970 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft caRepository: rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 14 Feb 2026 15:01:27 +0000 Certificate not after: Sat 13 Feb 2027 15:06:27 +0000 Subordinate resources: IP: 103.169.227.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:fa:45:37:1f:09:ab:d2:07:78:e8:87:e1:2a:a1:c4:fd:ae:99:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 14 15:01:27 2026 GMT Not After : Feb 13 15:06:27 2027 GMT Subject: CN=9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:72:53:50:d0:8c:70:fa:2b:cf:79:07:56:95: 3e:42:3b:8d:e8:8c:81:c1:a3:a8:56:2f:7b:85:db: 96:ab:d2:4e:01:14:3c:84:aa:76:38:5e:c4:6a:2c: 33:34:6c:57:4f:a5:0b:88:19:c8:ba:40:a7:51:f9: 02:a4:ab:3b:0f:14:bd:24:b5:94:31:03:f1:79:f2: 21:7b:40:37:9c:46:89:cb:d5:f6:43:3c:db:49:b9: af:cb:df:e4:fa:44:2a:a2:9f:f9:f5:00:41:20:ea: d8:1f:be:74:3d:24:ce:b6:66:2a:ab:02:32:ce:3e: dd:17:62:91:55:7c:d4:c6:05:65:cb:63:ac:7d:c3: 24:cf:17:84:fc:a6:e9:7f:c5:6d:80:11:61:82:5d: d2:86:29:b2:6c:42:40:83:e7:da:8e:ac:41:b2:1e: 3b:38:bd:aa:34:10:8e:1f:70:7d:74:8a:f6:ef:62: 62:f2:80:05:ca:71:94:2f:08:fe:8d:e5:88:28:a2: ce:34:a5:9c:d7:b1:ca:47:fd:d9:14:e5:c5:da:ed: 5b:e2:42:e1:ce:12:c0:ff:98:d1:fa:42:36:15:94: c6:b3:48:45:6f:3b:db:a3:df:a7:26:7a:8f:2f:4f: d8:85:d9:98:c6:22:d3:11:10:7d:8c:d9:c2:06:e4: d7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:AA:E7:3A:F6:8F:08:D5:79:3C:C3:2C:5C:4E:A8:C5:F5:D2:43:7A X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d9ae9828-0e82-4434-b8f2-2d8ad59cea88/0/9FAAE73AF68F08D5793CC32C5C4EA8C5F5D2437A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.169.227.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:54:4d:71:1e:45:1a:2b:30:fc:c2:50:dc:28:de:83:de:be: 46:f0:e7:b6:7b:7b:87:8a:c5:ec:40:84:93:90:f0:3d:67:48: 98:79:cd:e3:7d:aa:3f:9e:83:8c:8f:d5:ca:a9:3c:99:92:02: d7:8a:e0:5d:6c:e1:d8:2b:37:85:4e:20:f5:d0:1f:31:1b:a3: a0:63:09:17:98:eb:5c:87:7d:69:d0:f8:94:dd:80:1d:df:6c: 55:ee:d2:47:be:36:69:ba:92:3f:62:45:8b:cd:84:ff:c8:4a: 09:63:fe:3a:2a:f3:e5:6b:08:c7:65:3a:5e:f3:a2:56:f2:27: 73:8a:64:71:16:ee:48:c5:c0:7a:15:39:34:f8:03:55:1f:37: c8:f1:f9:21:54:67:a4:c9:08:38:3f:69:05:e6:42:be:ed:c1: 30:17:6b:a0:73:48:f6:8a:3c:8f:6a:b2:47:1b:b3:9a:35:38: 38:2c:fb:7c:10:80:e9:0b:c5:28:d0:3e:c6:df:11:74:11:e9: a1:6d:2a:3c:1e:72:4b:3c:5a:b1:6e:24:26:24:cb:d1:fd:a9: 27:5b:84:df:8a:45:1f:76:9e:15:bc:ba:5a:44:13:d1:7b:0a: d4:87:ec:17:76:84:f2:c2:33:14:5e:2c:8f:bf:32:2e:3a:05: 08:70:c5:85 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXfpFNx8Jq9IHeOiH4SqhxP2umXAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxNDE1MDEyN1oX DTI3MDIxMzE1MDYyN1owMzExMC8GA1UEAxMoOUZBQUU3M0FGNjhGMDhENTc5M0ND MzJDNUM0RUE4QzVGNUQyNDM3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKNyU1DQjHD6K895B1aVPkI7jeiMgcGjqFYve4XblqvSTgEUPISqdjhexGos MzRsV0+lC4gZyLpAp1H5AqSrOw8UvSS1lDED8XnyIXtAN5xGicvV9kM820m5r8vf 5PpEKqKf+fUAQSDq2B++dD0kzrZmKqsCMs4+3RdikVV81MYFZctjrH3DJM8XhPym 6X/FbYARYYJd0oYpsmxCQIPn2o6sQbIeOzi9qjQQjh9wfXSK9u9iYvKABcpxlC8I /o3liCiizjSlnNexykf92RTlxdrtW+JC4c4SwP+Y0fpCNhWUxrNIRW8726PfpyZ6 jy9P2IXZmMYi0xEQfYzZwgbk14kCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ+q5zr2jwjVeTzDLFxOqMX10kN6MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kOWFlOTgyOC0wZTgyLTQ0MzQtYjhmMi0yZDhhZDU5Y2VhODgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5YWU5ODI4 LTBlODItNDQzNC1iOGYyLTJkOGFkNTljZWE4OC8wLzlGQUFFNzNBRjY4RjA4RDU3 OTNDQzMyQzVDNEVBOEM1RjVEMjQzN0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnqeMwDQYJKoZIhvcNAQELBQADggEBAF1UTXEeRRorMPzCUNwo3oPevkbw57Z7 e4eKxexAhJOQ8D1nSJh5zeN9qj+eg4yP1cqpPJmSAteK4F1s4dgrN4VOIPXQHzEb o6BjCReY61yHfWnQ+JTdgB3fbFXu0ke+Nmm6kj9iRYvNhP/ISglj/joq8+VrCMdl Ol7zolbyJ3OKZHEW7kjFwHoVOTT4A1UfN8jx+SFUZ6TJCDg/aQXmQr7twTAXa6Bz SPaKPI9qskcbs5o1ODgs+3wQgOkLxSjQPsbfEXQR6aFtKjwecks8WrFuJCYky9H9 qSdbhN+KRR92nhW8ulpEE9F7CtSH7Bd2hPLCMxReLI+/Mi46BQhwxYU= -----END CERTIFICATE-----Generated at Mon Mar 2 05:36:21 2026 by rpki-client