$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.cer File: DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.cer (raw, json) Hash identifier: App6d7gV9SkcHKvwmKX2zr47CmMwoYSDYNqUs12qQP0= Subject key identifier: DB:B2:73:D6:AE:AB:E4:2B:DD:27:C4:B5:41:94:6E:6F:1F:1A:59:35 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 381E3732F8A40B407A33375DBC9928096DA61725 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft caRepository: rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 10 Feb 2026 03:43:08 +0000 Certificate not after: Tue 09 Feb 2027 03:48:08 +0000 Subordinate resources: IP: 2001:df6:9f40::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1e:37:32:f8:a4:0b:40:7a:33:37:5d:bc:99:28:09:6d:a6:17:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Feb 10 03:43:08 2026 GMT Not After : Feb 9 03:48:08 2027 GMT Subject: CN=DBB273D6AEABE42BDD27C4B541946E6F1F1A5935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ca:54:a7:ae:19:8b:5e:c1:96:f8:59:30:14: c1:80:dc:5a:b3:9d:86:db:8a:a0:b4:47:b9:cd:cd: c8:d9:21:f8:27:fd:90:25:93:42:d4:de:37:c9:5e: df:aa:c0:2e:46:ed:ce:2a:b8:d8:c7:58:53:92:46: 04:f0:16:04:45:48:b2:7c:dd:95:f1:47:71:9c:50: e4:67:06:57:c6:38:33:c6:a6:68:a2:4b:c6:d8:ca: 8e:9f:11:7e:48:ea:f1:e2:3c:32:30:ff:c0:a4:68: 39:59:26:38:c7:cd:95:1f:33:61:85:03:96:4f:09: 4e:01:62:c3:09:67:ef:87:64:2b:ae:f1:a2:62:d3: 44:bd:18:bb:9a:98:e8:84:86:52:90:86:07:7f:05: f6:3d:b0:75:0b:a0:58:06:a8:92:a4:33:5c:a6:1c: 76:bf:2e:8c:5b:81:83:47:4f:ea:cb:15:d8:00:2c: 5b:d5:1f:95:4d:14:4a:66:1f:1e:2c:60:ac:1b:87: 13:6c:fc:e1:2d:c6:6a:60:26:1a:10:65:a0:10:c0: 6c:f2:88:b8:04:0e:f9:f5:ef:7d:69:a7:6d:46:14: 62:82:44:c3:50:1e:64:b1:8f:74:3a:24:ab:bb:c2: 5b:b8:ac:63:85:69:40:a0:20:8f:62:2a:0f:a0:25: 39:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DB:B2:73:D6:AE:AB:E4:2B:DD:27:C4:B5:41:94:6E:6F:1F:1A:59:35 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2ef16f31-60ce-47a7-ae8d-5a28c511c947/0/DBB273D6AEABE42BDD27C4B541946E6F1F1A5935.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:9f40::/48 Signature Algorithm: sha256WithRSAEncryption 35:1f:cf:bc:6c:04:c3:7c:5c:86:cb:21:9e:0f:7e:40:99:61: a9:d4:21:47:d8:4f:22:40:75:77:87:9f:b1:9c:0d:70:8a:0a: a4:ee:0b:49:c1:99:7e:7f:99:99:5b:ca:ef:c6:4d:fe:4c:ce: 6f:43:82:c8:77:23:7f:c3:61:ab:b7:13:66:2b:4f:37:01:fe: 4b:44:c0:33:fb:9c:d1:94:69:6b:90:1b:83:3b:01:8e:92:d4: 11:b3:55:56:ea:9b:b6:31:86:0f:f9:6b:ed:54:b0:b1:46:14: 8a:e3:8d:0c:56:e5:46:80:66:78:3a:6f:be:76:ae:2c:21:a0: ab:c3:27:ea:de:e1:b3:98:e4:fb:8a:77:ae:f1:56:8f:48:1c: 56:22:0c:d5:65:c3:aa:4e:e2:3e:c9:01:e8:b2:9e:f3:48:fd: 09:73:b7:f7:c7:6c:d9:5d:af:56:7f:c1:14:b6:4f:46:24:8c: 79:0f:9a:50:79:34:58:85:1e:44:33:0c:88:c6:d8:40:92:63: 8d:a1:f9:b8:13:00:67:2c:87:b1:c1:dd:d0:59:59:da:fc:70: 0c:6e:d9:f2:dc:f4:13:bc:22:eb:e0:76:3e:4e:ba:01:30:08: 91:63:f5:6b:12:46:5c:43:9e:42:5e:88:b0:99:a4:e0:d4:f6: 2a:51:88:f9 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUOB43MvikC0B6MzddvJkoCW2mFyUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDIxMDAzNDMwOFoX DTI3MDIwOTAzNDgwOFowMzExMC8GA1UEAxMoREJCMjczRDZBRUFCRTQyQkREMjdD NEI1NDE5NDZFNkYxRjFBNTkzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANzKVKeuGYtewZb4WTAUwYDcWrOdhtuKoLRHuc3NyNkh+Cf9kCWTQtTeN8le 36rALkbtziq42MdYU5JGBPAWBEVIsnzdlfFHcZxQ5GcGV8Y4M8amaKJLxtjKjp8R fkjq8eI8MjD/wKRoOVkmOMfNlR8zYYUDlk8JTgFiwwln74dkK67xomLTRL0Yu5qY 6ISGUpCGB38F9j2wdQugWAaokqQzXKYcdr8ujFuBg0dP6ssV2AAsW9UflU0USmYf HixgrBuHE2z84S3GamAmGhBloBDAbPKIuAQO+fXvfWmnbUYUYoJEw1AeZLGPdDok q7vCW7isY4VpQKAgj2IqD6AlOdkCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFNuyc9auq+Qr3SfEtUGUbm8fGlk1MB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yZWYxNmYzMS02MGNlLTQ3YTctYWU4ZC01YTI4YzUxMWM5NDcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJlZjE2ZjMx LTYwY2UtNDdhNy1hZThkLTVhMjhjNTExYzk0Ny8wL0RCQjI3M0Q2QUVBQkU0MkJE RDI3QzRCNTQxOTQ2RTZGMUYxQTU5MzUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ32n0AwDQYJKoZIhvcNAQELBQADggEBADUfz7xsBMN8XIbLIZ4PfkCZYanU IUfYTyJAdXeHn7GcDXCKCqTuC0nBmX5/mZlbyu/GTf5Mzm9Dgsh3I3/DYau3E2Yr TzcB/ktEwDP7nNGUaWuQG4M7AY6S1BGzVVbqm7Yxhg/5a+1UsLFGFIrjjQxW5UaA Zng6b752riwhoKvDJ+re4bOY5PuKd67xVo9IHFYiDNVlw6pO4j7JAeiynvNI/Qlz t/fHbNldr1Z/wRS2T0YkjHkPmlB5NFiFHkQzDIjG2ECSY42h+bgTAGcsh7HB3dBZ Wdr8cAxu2fLc9BO8Iuvgdj5OugEwCJFj9WsSRlxDnkJeiLCZpODU9ipRiPk= -----END CERTIFICATE-----Generated at Mon Mar 2 00:04:29 2026 by rpki-client