$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer File: 6DBB100D8D4669AB8A5C7EE057228ED67A98099E.cer (raw, json) Hash identifier: OYNDZe49egu3zvojnp2EySbjOAgPto+p60wYRBwJhIs= Subject key identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 6148AFD8FBFDDDC2DF810195BB9493910824BECB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft caRepository: rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sun 15 Mar 2026 02:59:59 +0000 Certificate not after: Sun 14 Mar 2027 03:04:59 +0000 Subordinate resources: IP: 36.50.216.0/23 IP: 2001:df3:7bc0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:48:af:d8:fb:fd:dd:c2:df:81:01:95:bb:94:93:91:08:24:be:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 15 02:59:59 2026 GMT Not After : Mar 14 03:04:59 2027 GMT Subject: CN=6DBB100D8D4669AB8A5C7EE057228ED67A98099E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:3d:79:b9:16:64:66:a2:78:3a:f7:69:f3: 4c:fd:78:a6:31:71:cf:d0:9b:2a:00:d8:31:73:6d: db:b5:e9:17:74:2c:14:c3:ef:96:8f:aa:7b:b5:2b: 0b:5d:97:92:8f:a4:06:c2:1f:38:ad:66:55:35:21: 65:f5:ac:e4:6c:c8:7e:b0:c8:da:f8:76:80:3d:1d: 9a:c8:22:6e:bc:7f:c5:95:64:0d:6e:6d:d2:15:bb: 8c:d7:76:1b:e1:b5:53:3c:f5:59:d8:91:bb:1b:f2: 05:24:3f:7d:c8:57:77:f9:b5:85:81:2f:7c:c1:ba: a2:75:55:89:6e:61:19:de:33:ea:d7:91:a6:65:f5: 7f:42:3e:b5:16:e6:4e:c1:7b:e4:71:c2:44:36:dc: e7:86:ad:8f:97:f8:2d:c4:ad:09:55:a5:cc:6d:e4: c5:e2:26:0f:db:cd:dc:a9:05:da:d1:14:61:fa:9d: 5d:b1:68:7e:af:8c:e9:48:73:94:f0:f7:52:cf:7e: 22:07:54:57:f3:e1:44:5a:0e:b1:ca:7e:a4:7c:5d: f9:d8:44:98:1c:e7:6f:11:0b:37:d9:f2:90:ca:c2: 46:3d:95:55:19:aa:62:c2:8e:fd:9f:7e:dc:a9:f3: e8:8e:2c:75:e5:c6:98:37:de:35:6c:60:d0:18:84: 23:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6D:BB:10:0D:8D:46:69:AB:8A:5C:7E:E0:57:22:8E:D6:7A:98:09:9E X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/65989faf-48fb-4f40-9e77-243d78a5b5c4/0/6DBB100D8D4669AB8A5C7EE057228ED67A98099E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.50.216.0/23 IPv6: 2001:df3:7bc0::/48 Signature Algorithm: sha256WithRSAEncryption 3a:9d:70:90:8a:67:ac:87:af:f0:c0:8c:77:b7:62:88:4a:f7: 6d:79:aa:c8:9c:c1:a0:4e:62:75:25:cc:7d:73:84:4d:22:c0: 63:78:2a:10:34:b2:68:d3:be:f7:a5:92:61:f2:27:2a:9d:8f: fe:ce:81:ea:b9:c5:78:7e:a6:ba:bf:ff:e6:46:e7:7b:fe:70: 77:8a:48:96:e2:6f:7a:88:6e:a0:6d:d3:17:bd:49:bb:99:70: c1:15:38:06:24:3c:9c:8b:ec:47:0e:45:5c:d4:3c:71:c9:06: 16:4e:c2:25:e3:00:71:41:81:f3:07:84:0f:00:47:8d:45:cc: 81:fa:ac:f4:a7:e8:a7:03:82:69:bd:dd:b7:9c:3e:b2:e1:c9: 52:96:b1:1a:60:a3:65:75:74:0c:11:0c:ea:fb:74:f0:b4:27: 74:24:7b:90:a4:02:2a:ca:25:dc:d7:0f:fe:49:d1:48:0e:8d: a4:1d:f3:75:c8:2b:f5:f0:2e:0e:a7:98:90:22:21:f9:3d:ec: ca:3b:4b:35:4d:a5:2b:4e:2c:c2:2f:97:21:35:6d:1e:7e:a1: 92:1c:c5:31:e5:1c:53:ba:6b:7b:f2:cb:a7:6b:55:5b:d0:64: e6:e0:44:cc:07:55:74:56:92:aa:05:56:27:37:4d:5d:53:c6: f1:d2:a3:52 -----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIUYUiv2Pv93cLfgQGVu5STkQgkvsswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxNTAyNTk1OVoX DTI3MDMxNDAzMDQ1OVowMzExMC8GA1UEAxMoNkRCQjEwMEQ4RDQ2NjlBQjhBNUM3 RUUwNTcyMjhFRDY3QTk4MDk5RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK39PXm5FmRmong692nzTP14pjFxz9CbKgDYMXNt27XpF3QsFMPvlo+qe7Ur C12Xko+kBsIfOK1mVTUhZfWs5GzIfrDI2vh2gD0dmsgibrx/xZVkDW5t0hW7jNd2 G+G1Uzz1WdiRuxvyBSQ/fchXd/m1hYEvfMG6onVViW5hGd4z6teRpmX1f0I+tRbm TsF75HHCRDbc54atj5f4LcStCVWlzG3kxeImD9vN3KkF2tEUYfqdXbFofq+M6Uhz lPD3Us9+IgdUV/PhRFoOscp+pHxd+dhEmBznbxELN9nykMrCRj2VVRmqYsKO/Z9+ 3Knz6I4sdeXGmDfeNWxg0BiEI0cCAwEAAaOCAskwggLFMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFG27EA2NRmmrilx+4FcijtZ6mAmeMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by82NTk4OWZhZi00OGZiLTRmNDAtOWU3Ny0yNDNkNzhhNWI1YzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1OTg5ZmFm LTQ4ZmItNGY0MC05ZTc3LTI0M2Q3OGE1YjVjNC8wLzZEQkIxMDBEOEQ0NjY5QUI4 QTVDN0VFMDU3MjI4RUQ2N0E5ODA5OUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYD BAEkMtgwDwQCAAIwCQMHACABDfN7wDANBgkqhkiG9w0BAQsFAAOCAQEAOp1wkIpn rIev8MCMd7diiEr3bXmqyJzBoE5idSXMfXOETSLAY3gqEDSyaNO+96WSYfInKp2P /s6B6rnFeH6mur//5kbne/5wd4pIluJveohuoG3TF71Ju5lwwRU4BiQ8nIvsRw5F XNQ8cckGFk7CJeMAcUGB8weEDwBHjUXMgfqs9KfopwOCab3dt5w+suHJUpaxGmCj ZXV0DBEM6vt08LQndCR7kKQCKsol3NcP/knRSA6NpB3zdcgr9fAuDqeYkCIh+T3s yjtLNU2lK04swi+XITVtHn6hkhzFMeUcU7pre/LLp2tVW9Bk5uBEzAdVdFaSqgVW JzdNXVPG8dKjUg== -----END CERTIFICATE-----Generated at Thu Mar 26 05:35:27 2026 by rpki-client