$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.cer File: DFF6098A4921B357E69571FC3EB289143D85ADBD.cer (raw, json) Hash identifier: G+wCwk8Gc7Ny64HN1d7lwS95P2/mSbq63JFwDaIbmH0= Subject key identifier: DF:F6:09:8A:49:21:B3:57:E6:95:71:FC:3E:B2:89:14:3D:85:AD:BD Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 74EFF5E37F51F8DF18DB82CCC0FAE7DC41A80595 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.mft caRepository: rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 08 Mar 2026 13:28:41 +0000 Certificate not after: Sun 07 Mar 2027 13:33:41 +0000 Subordinate resources: IP: 198.15.25.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ef:f5:e3:7f:51:f8:df:18:db:82:cc:c0:fa:e7:dc:41:a8:05:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 8 13:28:41 2026 GMT Not After : Mar 7 13:33:41 2027 GMT Subject: CN=DFF6098A4921B357E69571FC3EB289143D85ADBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:8b:ed:78:59:2c:27:d8:d5:83:9c:3e:21: 6e:43:0d:68:e3:62:f8:94:06:e5:c7:58:c9:b4:1a: 4b:2c:2c:c8:2f:2d:3b:e1:a8:12:3d:ff:59:ca:48: 36:dc:ac:ca:e2:1d:eb:d1:e9:7c:46:a0:88:7a:93: 9b:1c:2c:fc:0c:95:80:89:a1:b8:de:1d:57:23:84: 3a:e5:14:9d:30:fd:6e:c6:56:c5:61:ec:64:b7:b1: 80:d9:6a:73:c7:e3:32:44:d3:34:69:b7:d1:02:2e: e0:a1:88:65:5d:82:4a:f8:f9:8e:58:54:ec:65:0b: 99:3c:4f:b1:f5:1b:2d:dd:07:9a:d6:b2:de:6f:35: a5:d7:3c:c0:f4:16:1c:4d:6d:c2:4a:cd:3a:7c:c6: 94:2a:1d:d6:7c:7a:71:d4:22:45:bd:e5:ec:cd:e5: f5:af:b6:88:71:e9:86:10:ec:b3:7a:8d:84:94:92: 65:da:68:64:06:b0:b4:29:28:03:91:a7:bd:3f:e4: be:53:49:f9:ee:26:55:15:83:3c:a3:fe:e1:2c:d7: 0e:a0:b2:e3:65:fb:ef:2b:7f:92:42:20:f6:a5:9b: 30:65:99:7b:64:24:fb:76:2f:3b:f2:1f:f6:cc:86: 97:47:6f:11:96:0e:9a:f7:22:6e:3b:68:e6:31:a3: 8f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: DF:F6:09:8A:49:21:B3:57:E6:95:71:FC:3E:B2:89:14:3D:85:AD:BD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/1/DFF6098A4921B357E69571FC3EB289143D85ADBD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.15.25.0/24 Signature Algorithm: sha256WithRSAEncryption 62:32:9d:99:d1:22:fc:ba:b1:d9:42:49:2a:56:a0:92:61:ae: 11:77:fe:8b:f9:a8:9a:c2:69:6b:5a:95:8f:19:20:58:86:b1: a2:b4:2c:d3:76:34:2d:f9:d9:78:5b:b4:c3:75:d8:ce:5e:3b: 1c:ed:10:d4:18:86:13:b4:b3:19:ac:7e:bd:13:58:44:48:2a: c6:72:57:16:e4:a3:5a:a3:0d:eb:49:cf:7f:9b:03:15:59:c1: 64:65:30:49:ee:d4:94:02:d7:75:4d:3a:2f:02:ec:ae:f4:b4: e4:14:05:a1:98:8e:20:9b:f5:a5:a4:b7:65:9b:9d:4a:ed:a4: c9:92:4f:4f:dc:ac:c0:b9:2b:37:45:cd:50:42:a2:6c:2d:64: b8:61:e9:e9:bc:f5:bc:e5:3e:3a:cb:6d:1f:e1:96:19:78:3b: b3:90:5a:95:c7:fa:9a:ed:ab:47:6f:56:98:57:ee:b2:ed:bb: cc:d2:24:34:e6:22:cb:40:4c:a7:a2:67:a7:c2:a2:81:ef:65: d2:41:a1:22:f8:39:d1:a1:ff:8c:04:d3:8f:ff:23:e9:16:60: 8b:f2:7c:42:7f:a4:eb:99:07:f8:80:75:ab:e0:a1:62:2e:0b: 59:73:69:08:5f:53:fe:51:8d:c2:4d:82:fc:1a:b6:37:29:12: 85:d9:7e:69 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdO/1439R+N8Y24LMwPrn3EGoBZUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDMwODEzMjg0MVoX DTI3MDMwNzEzMzM0MVowMzExMC8GA1UEAxMoREZGNjA5OEE0OTIxQjM1N0U2OTU3 MUZDM0VCMjg5MTQzRDg1QURCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/si+14WSwn2NWDnD4hbkMNaONi+JQG5cdYybQaSywsyC8tO+GoEj3/WcpI NtysyuId69HpfEagiHqTmxws/AyVgImhuN4dVyOEOuUUnTD9bsZWxWHsZLexgNlq c8fjMkTTNGm30QIu4KGIZV2CSvj5jlhU7GULmTxPsfUbLd0Hmtay3m81pdc8wPQW HE1twkrNOnzGlCod1nx6cdQiRb3l7M3l9a+2iHHphhDss3qNhJSSZdpoZAawtCko A5GnvT/kvlNJ+e4mVRWDPKP+4SzXDqCy42X77yt/kkIg9qWbMGWZe2Qk+3YvO/If 9syGl0dvEZYOmvcibjto5jGjj7UCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFN/2CYpJIbNX5pVx/D6yiRQ9ha29MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yYmUyOTkwMi1lMGY0LTQyOWEtOWEyNi00MzliOWJmZWU0ODkvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJiZTI5OTAy LWUwZjQtNDI5YS05YTI2LTQzOWI5YmZlZTQ4OS8xL0RGRjYwOThBNDkyMUIzNTdF Njk1NzFGQzNFQjI4OTE0M0Q4NUFEQkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADGDxkwDQYJKoZIhvcNAQELBQADggEBAGIynZnRIvy6sdlCSSpWoJJhrhF3/ov5 qJrCaWtalY8ZIFiGsaK0LNN2NC352XhbtMN12M5eOxztENQYhhO0sxmsfr0TWERI KsZyVxbko1qjDetJz3+bAxVZwWRlMEnu1JQC13VNOi8C7K70tOQUBaGYjiCb9aWk t2WbnUrtpMmST0/crMC5KzdFzVBComwtZLhh6em89bzlPjrLbR/hlhl4O7OQWpXH +prtq0dvVphX7rLtu8zSJDTmIstATKeiZ6fCooHvZdJBoSL4OdGh/4wE04//I+kW YIvyfEJ/pOuZB/iAdavgoWIuC1lzaQhfU/5RjcJNgvwatjcpEoXZfmk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:47:15 2026 by rpki-client