$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer File: ADCB9F9DF56E90B39B5344118194104F46A83702.cer (raw, json) Hash identifier: zeptcQ0Di8bFf3Z4cA4WmTGnhL8vQzCCN9hCR4myiFM= Subject key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 258AE671354BB757A51961010FC0712B49970547 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft caRepository: rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 24 Mar 2026 18:44:10 +0000 Certificate not after: Tue 23 Mar 2027 18:49:10 +0000 Subordinate resources: IP: 114.199.96.0/19 IP: 203.153.24.0/21 IP: 2401:9e80::/32 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:8a:e6:71:35:4b:b7:57:a5:19:61:01:0f:c0:71:2b:49:97:05:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 24 18:44:10 2026 GMT Not After : Mar 23 18:49:10 2027 GMT Subject: CN=ADCB9F9DF56E90B39B5344118194104F46A83702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1a:22:4c:79:3b:60:56:0f:1c:51:c2:39:13: 8b:c7:65:17:77:d1:e8:e1:75:68:70:3c:a1:4f:04: 58:70:c1:0e:5d:26:74:65:39:0d:c5:c5:7a:ff:f9: 64:2e:c3:69:23:73:58:e7:52:5e:58:16:9a:9d:6e: cf:04:83:6e:26:90:37:d1:82:5e:18:90:ba:5b:24: 31:32:e0:57:43:76:f2:35:c5:be:d1:fa:35:db:41: 56:fb:57:0e:09:20:59:f8:4a:3b:ae:9b:9a:45:2b: 13:d4:7e:99:ca:76:84:62:df:7b:76:e2:4d:e4:ea: f5:87:82:56:8b:b3:aa:75:44:38:7a:4d:db:5c:2f: 8d:dd:c1:5d:a1:b0:f0:57:0e:63:d3:93:79:1f:1f: c1:a7:56:5f:0b:2a:29:4b:bd:95:0d:db:23:4f:30: 4d:5b:ea:34:7d:01:29:41:31:33:55:3d:ac:b2:e3: 31:f4:cf:d8:45:75:5c:af:fc:93:e9:8e:58:e9:e6: d2:23:e0:c9:2c:59:7e:5a:d3:85:0e:ed:79:11:2a: 58:4e:3d:d3:81:f9:8f:fc:32:39:44:ab:00:81:7d: d5:25:b7:73:1d:b4:84:63:0f:58:e9:0c:57:5b:fd: d6:96:15:23:3a:6e:ff:01:ef:9a:8f:20:e1:56:59: 3d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.199.96.0/19 203.153.24.0/21 IPv6: 2401:9e80::/32 Signature Algorithm: sha256WithRSAEncryption 85:6a:d0:6f:4a:f6:a5:73:27:fd:17:4a:6c:b3:09:ee:73:5f: 06:13:8e:03:c3:8e:ff:47:1f:d8:b8:b7:ee:2d:c9:23:c3:dd: 1d:9c:d0:0b:de:59:37:bc:83:98:83:48:58:c1:ec:24:60:8c: 9d:ca:29:6c:0b:a2:4f:32:0d:cb:39:a9:d8:d2:5a:6c:fb:d0: 29:02:f0:29:35:ec:25:b4:15:f5:d8:df:90:5e:9f:de:a7:a5: b3:35:25:96:0d:33:5f:90:9d:8a:31:5c:c1:c0:6c:ed:e3:17: 17:25:e4:cd:54:ff:02:12:1c:e3:af:8d:c4:2b:17:2b:9a:9f: 64:6f:8c:c7:a6:92:03:40:47:24:5a:1c:4a:0b:f1:fc:20:4a: 90:77:da:42:3b:05:87:f8:90:98:a6:25:4f:f0:2f:c9:1b:a4: b4:f4:74:e8:79:44:aa:08:a4:55:d6:c6:0c:06:e7:05:61:dd: 51:d0:96:57:25:7c:06:5e:cc:27:be:d4:2a:14:b0:c9:86:06: 10:48:a4:af:77:0a:88:09:c2:93:58:95:d1:88:5d:0f:0e:33: 14:3d:57:9c:ac:10:19:d4:7a:30:68:1b:97:b2:f7:db:01:62: ba:e8:9b:e8:da:f4:dc:3c:3e:46:a4:b7:4f:11:e7:c0:33:be: f8:c3:3d:50 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIUJYrmcTVLt1elGWEBD8BxK0mXBUcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMyNDE4NDQxMFoX DTI3MDMyMzE4NDkxMFowMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0 NDExODE5NDEwNEY0NkE4MzcwMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMwaIkx5O2BWDxxRwjkTi8dlF3fR6OF1aHA8oU8EWHDBDl0mdGU5DcXFev/5 ZC7DaSNzWOdSXlgWmp1uzwSDbiaQN9GCXhiQulskMTLgV0N28jXFvtH6NdtBVvtX DgkgWfhKO66bmkUrE9R+mcp2hGLfe3biTeTq9YeCVouzqnVEOHpN21wvjd3BXaGw 8FcOY9OTeR8fwadWXwsqKUu9lQ3bI08wTVvqNH0BKUExM1U9rLLjMfTP2EV1XK/8 k+mOWOnm0iPgySxZflrThQ7teREqWE4904H5j/wyOUSrAIF91SW3cx20hGMPWOkM V1v91pYVIzpu/wHvmo8g4VZZPXcCAwEAAaOCAs0wggLJMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFK3Ln531bpCzm1NEEYGUEE9GqDcCMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4 LTc4MjYtNDIwMS05ZjliLTFkN2M3NmFhMjRkZC8wL0FEQ0I5RjlERjU2RTkwQjM5 QjUzNDQxMTgxOTQxMDRGNDZBODM3MDIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwD BAVyx2ADBAPLmRgwDQQCAAIwBwMFACQBnoAwDQYJKoZIhvcNAQELBQADggEBAIVq 0G9K9qVzJ/0XSmyzCe5zXwYTjgPDjv9HH9i4t+4tySPD3R2c0AveWTe8g5iDSFjB 7CRgjJ3KKWwLok8yDcs5qdjSWmz70CkC8Ck17CW0FfXY35Ben96npbM1JZYNM1+Q nYoxXMHAbO3jFxcl5M1U/wISHOOvjcQrFyuan2RvjMemkgNARyRaHEoL8fwgSpB3 2kI7BYf4kJimJU/wL8kbpLT0dOh5RKoIpFXWxgwG5wVh3VHQllclfAZezCe+1CoU sMmGBhBIpK93CogJwpNYldGIXQ8OMxQ9V5ysEBnUejBoG5ey99sBYrrom+ja9Nw8 Pkakt08R58AzvvjDPVA= -----END CERTIFICATE-----Generated at Thu Mar 26 11:14:02 2026 by rpki-client