$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer File: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer (raw, json) Hash identifier: d7Go1piWwi9x4cNZa9Zq4V13fUW5CkqPzI23ZFabe+4= Subject key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 7FC5DCC86C75492AF3877DBC2E452F375448F7D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft caRepository: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 11 Feb 2026 14:04:27 +0000 Certificate not after: Wed 10 Feb 2027 14:09:27 +0000 Subordinate resources: IP: 42.62.176.0/22 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c5:dc:c8:6c:75:49:2a:f3:87:7d:bc:2e:45:2f:37:54:48:f7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 11 14:04:27 2026 GMT Not After : Feb 10 14:09:27 2027 GMT Subject: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:29:96:cd:7d:00:8e:f1:f0:e6:69:9d:5d:c9: 26:7b:eb:34:f6:ad:a0:fe:30:9a:87:1f:fe:92:4e: 03:33:ab:2a:f4:12:20:8f:2c:bc:4d:3d:4e:7e:0a: 61:4e:72:90:92:46:24:d6:e4:ce:87:1c:fd:e0:cc: 7a:58:97:ea:32:f7:09:55:aa:29:3c:58:3a:e2:a7: bf:30:3c:ee:82:8f:5c:d1:c2:5d:8a:4a:cd:19:99: 8e:ae:93:3d:51:dd:d0:51:c0:eb:0e:d2:2b:1f:4d: 19:43:dc:f0:d3:3c:d5:e4:1a:4d:31:c9:1c:d8:2d: 40:2f:99:ba:2f:f2:cd:4d:73:1f:ce:06:0f:40:a2: e7:e1:6d:69:e4:fe:14:f4:25:9d:48:36:4b:b6:d8: 43:c1:14:de:39:e7:39:6c:24:0b:99:b0:37:87:fe: 04:b0:50:63:60:b5:38:e3:7d:79:b5:df:c2:d3:98: a0:bf:60:f9:7a:5b:23:8f:64:60:80:d3:77:11:98: 5d:21:47:e8:70:c8:d2:0c:e3:98:76:96:93:08:0c: fb:10:e5:03:6c:eb:23:13:c4:16:31:78:82:88:39: ae:49:95:48:ce:1d:3d:2a:eb:2e:a1:cf:da:63:23: 95:2c:7a:2f:94:af:21:2f:49:f1:eb:5c:86:bb:bc: 97:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.62.176.0/22 Signature Algorithm: sha256WithRSAEncryption 91:6d:f3:24:cf:d6:6e:57:ef:c4:aa:83:43:4d:58:ad:b0:0e: f3:c6:de:6f:e5:85:0f:59:3e:3d:6b:a9:85:2c:4c:3f:99:d7: 0e:9a:6c:11:67:79:72:35:ed:d0:14:ff:b6:62:36:f1:b7:6e: ee:73:73:cc:45:d4:20:df:75:d5:fe:bb:a5:d8:33:e2:19:ab: d8:13:2b:e1:7a:33:6b:7c:f3:68:cc:28:27:7e:43:e5:c0:52: ec:f4:d8:3a:f4:39:eb:6a:6a:51:41:dd:fe:63:50:1c:d4:ad: fc:34:ab:d6:fd:39:f0:d9:f5:25:46:4f:5f:ec:68:d7:d9:4d: 7c:98:2e:c0:22:50:9e:04:6f:5b:26:55:66:dc:73:b4:3d:1d: 27:71:fa:19:d1:04:d1:49:c7:25:2f:ca:0f:96:3f:96:b2:25: b6:0f:fe:18:65:75:df:9a:c6:f0:f7:14:55:d2:74:23:f0:ee: 19:21:a3:3a:6e:7e:ce:21:10:6f:da:08:f0:e0:e8:0e:4a:3c: 11:e0:f9:10:6c:d5:3b:7b:5e:44:9f:7e:87:30:2b:ea:74:62: 79:00:75:30:5c:49:d7:8f:09:ce:76:58:23:08:ac:fb:e0:9c: 3a:89:69:94:1b:43:1f:20:35:81:d6:51:46:99:cf:cd:49:21: 4b:e3:2f:12 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUf8XcyGx1SSrzh328LkUvN1RI99AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxMTE0MDQyN1oX DTI3MDIxMDE0MDkyN1owMzExMC8GA1UEAxMoQTBERTIxQTAzNUNGNjAxQkNCRDlE NUM5OEJENDdERDk1Rjk5MzQ2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAOApls19AI7x8OZpnV3JJnvrNPatoP4wmocf/pJOAzOrKvQSII8svE09Tn4K YU5ykJJGJNbkzocc/eDMeliX6jL3CVWqKTxYOuKnvzA87oKPXNHCXYpKzRmZjq6T PVHd0FHA6w7SKx9NGUPc8NM81eQaTTHJHNgtQC+Zui/yzU1zH84GD0Ci5+FtaeT+ FPQlnUg2S7bYQ8EU3jnnOWwkC5mwN4f+BLBQY2C1OON9ebXfwtOYoL9g+XpbI49k YIDTdxGYXSFH6HDI0gzjmHaWkwgM+xDlA2zrIxPEFjF4gog5rkmVSM4dPSrrLqHP 2mMjlSx6L5SvIS9J8etchru8l0sCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFKDeIaA1z2Aby9nVyYvUfdlfmTRkMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wN2Y4ZjZhNC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3ZjhmNmE0 LThkODctNGVmMy1iNGRjLTUyYzI1Y2I1NzdjMi8wL0EwREUyMUEwMzVDRjYwMUJD QkQ5RDVDOThCRDQ3REQ5NUY5OTM0NjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIqPrAwDQYJKoZIhvcNAQELBQADggEBAJFt8yTP1m5X78Sqg0NNWK2wDvPG3m/l hQ9ZPj1rqYUsTD+Z1w6abBFneXI17dAU/7ZiNvG3bu5zc8xF1CDfddX+u6XYM+IZ q9gTK+F6M2t882jMKCd+Q+XAUuz02Dr0OetqalFB3f5jUBzUrfw0q9b9OfDZ9SVG T1/saNfZTXyYLsAiUJ4Eb1smVWbcc7Q9HSdx+hnRBNFJxyUvyg+WP5ayJbYP/hhl dd+axvD3FFXSdCPw7hkhozpufs4hEG/aCPDg6A5KPBHg+RBs1Tt7XkSffocwK+p0 YnkAdTBcSdePCc52WCMIrPvgnDqJaZQbQx8gNYHWUUaZz81JIUvjLxI= -----END CERTIFICATE-----Generated at Mon Mar 2 09:51:53 2026 by rpki-client