$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.cer File: D1E72366861E93FD36BD58F05CF0809B25AFC9E7.cer (raw, json) Hash identifier: /rLaW1f9fLyqsxPZX5JDMcP7pcuS38ZcDRUbOuSUEUM= Subject key identifier: D1:E7:23:66:86:1E:93:FD:36:BD:58:F0:5C:F0:80:9B:25:AF:C9:E7 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 510873CEE4E4D71D13B27384338823E8AC14CDD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft caRepository: rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 14 Feb 2026 17:53:02 +0000 Certificate not after: Sat 13 Feb 2027 17:58:02 +0000 Subordinate resources: AS: 152438 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:08:73:ce:e4:e4:d7:1d:13:b2:73:84:33:88:23:e8:ac:14:cd:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 14 17:53:02 2026 GMT Not After : Feb 13 17:58:02 2027 GMT Subject: CN=D1E72366861E93FD36BD58F05CF0809B25AFC9E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:99:ed:d6:ac:0a:6a:45:3b:41:05:91:d7:e8: 93:97:11:85:e3:8c:0a:be:fb:c5:70:3a:36:99:2f: 16:1b:31:6b:7e:43:9f:17:8d:a8:0e:df:0f:2d:3a: c5:a8:6f:cc:8a:f7:9a:46:bc:1e:be:53:73:71:9b: 6c:91:9e:1d:71:54:e8:c6:60:46:9c:51:79:38:f2: 26:94:11:71:43:29:f7:b4:81:96:25:30:61:94:20: 42:a4:7a:bc:0b:38:ac:f9:89:ff:4c:e6:2b:51:e4: 7f:97:32:bc:e6:88:06:b1:5d:f4:af:d3:cd:9b:a7: 2b:12:9b:ab:d0:b6:e2:cb:a8:dd:12:19:20:06:92: 90:a3:2a:02:2e:a5:56:27:13:d2:1a:0f:47:89:08: 64:92:22:fa:cf:b9:75:df:c8:62:9e:13:da:56:a6: 45:8d:db:46:25:23:a8:a6:1b:f8:2a:18:96:ca:b9: 02:1b:fb:9d:f1:70:a4:a9:e9:21:7c:62:a2:ae:fe: 03:c2:5c:f0:9b:40:cd:9e:fe:f6:cd:38:0d:d9:19: d0:9e:db:69:ca:96:fb:c2:91:eb:3b:1a:2c:38:cc: 54:6f:a1:29:a7:bf:3c:a9:19:2c:2f:f7:a5:40:9d: a5:6a:bd:41:08:c6:97:c6:18:1c:02:b4:db:ee:f6: 64:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D1:E7:23:66:86:1E:93:FD:36:BD:58:F0:5C:F0:80:9B:25:AF:C9:E7 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/26fa9584-6f97-4041-9c8d-8b3959e4f9b3/1/D1E72366861E93FD36BD58F05CF0809B25AFC9E7.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 152438 Signature Algorithm: sha256WithRSAEncryption 62:a8:ad:40:3a:b1:0e:d9:3b:a6:a4:9b:45:2a:23:33:cf:1e: 9a:e1:25:7f:79:6b:31:fa:2b:87:59:22:3e:6e:59:aa:7c:e7: 2a:fd:9c:8d:0e:7d:9b:c2:bd:21:67:6d:2c:45:c4:69:4e:41: 69:b6:0d:d5:7a:a7:2c:30:4f:f9:ed:3b:d1:73:51:8a:31:35: 58:74:4b:15:0d:2c:86:39:49:26:d6:45:96:1f:a2:37:e2:32: 10:17:e6:74:48:1f:d3:47:b5:9b:63:47:81:53:4b:dd:89:78: 6b:b0:67:69:a4:b3:63:b2:12:bf:14:9c:12:65:1d:88:75:1a: 0d:09:ae:8d:ae:b8:66:30:c8:ed:f3:fa:59:4d:86:18:91:37: 7d:65:dc:4f:9b:83:94:7b:c6:dd:a2:ac:63:1c:96:6e:9d:9e: 89:be:93:2f:04:06:44:f4:e4:de:d4:a7:ac:ff:53:f1:13:29: 11:2d:e9:0b:eb:18:2c:91:5e:61:66:47:1c:a6:0e:ac:d7:b1: 75:32:6a:44:9a:13:83:3f:15:26:71:81:33:9c:3c:d8:4f:d8: 94:af:99:79:8e:fc:ec:86:16:65:ca:23:f0:62:4a:13:5d:13: ee:dd:7d:dd:77:73:8c:86:dd:d2:ff:ef:03:39:fb:98:69:3c: 23:60:d3:65 -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIUUQhzzuTk1x0TsnOEM4gj6KwUzdMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxNDE3NTMwMloX DTI3MDIxMzE3NTgwMlowMzExMC8GA1UEAxMoRDFFNzIzNjY4NjFFOTNGRDM2QkQ1 OEYwNUNGMDgwOUIyNUFGQzlFNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN6Z7dasCmpFO0EFkdfok5cRheOMCr77xXA6NpkvFhsxa35DnxeNqA7fDy06 xahvzIr3mka8Hr5Tc3GbbJGeHXFU6MZgRpxReTjyJpQRcUMp97SBliUwYZQgQqR6 vAs4rPmJ/0zmK1Hkf5cyvOaIBrFd9K/TzZunKxKbq9C24suo3RIZIAaSkKMqAi6l VicT0hoPR4kIZJIi+s+5dd/IYp4T2lamRY3bRiUjqKYb+CoYlsq5Ahv7nfFwpKnp IXxioq7+A8Jc8JtAzZ7+9s04DdkZ0J7bacqW+8KR6zsaLDjMVG+hKae/PKkZLC/3 pUCdpWq9QQjGl8YYHAK02+72ZB8CAwEAAaOCArMwggKvMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNHnI2aGHpP9Nr1Y8FzwgJslr8nnMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNmZhOTU4NC02Zjk3LTQwNDEtOWM4ZC04YjM5NTllNGY5YjMvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2ZmE5NTg0 LTZmOTctNDA0MS05YzhkLThiMzk1OWU0ZjliMy8xL0QxRTcyMzY2ODYxRTkzRkQz NkJENThGMDVDRjA4MDlCMjVBRkM5RTcubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAlN2 MA0GCSqGSIb3DQEBCwUAA4IBAQBiqK1AOrEO2TumpJtFKiMzzx6a4SV/eWsx+iuH WSI+blmqfOcq/ZyNDn2bwr0hZ20sRcRpTkFptg3VeqcsME/57TvRc1GKMTVYdEsV DSyGOUkm1kWWH6I34jIQF+Z0SB/TR7WbY0eBU0vdiXhrsGdppLNjshK/FJwSZR2I dRoNCa6NrrhmMMjt8/pZTYYYkTd9ZdxPm4OUe8bdoqxjHJZunZ6JvpMvBAZE9OTe 1Kes/1PxEykRLekL6xgskV5hZkccpg6s17F1MmpEmhODPxUmcYEznDzYT9iUr5l5 jvzshhZlyiPwYkoTXRPu3X3dd3OMht3S/+8DOfuYaTwjYNNl -----END CERTIFICATE-----Generated at Sun Mar 1 22:32:13 2026 by rpki-client