$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/2F225A0699074B5634923E69A9A4CE84DF3CAB03.cer File: 2F225A0699074B5634923E69A9A4CE84DF3CAB03.cer (raw, json) Hash identifier: NACX4cqi5E6hQxE99mAaLPqkS8sUtHeubAuSIK8eV4U= Subject key identifier: 2F:22:5A:06:99:07:4B:56:34:92:3E:69:A9:A4:CE:84:DF:3C:AB:03 Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Certificate serial: 3953BADF18773261CABE60453DD112229611317C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Manifest: rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.mft caRepository: rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 14 Mar 2026 14:38:16 +0000 Certificate not after: Sat 13 Mar 2027 14:43:16 +0000 Subordinate resources: IP: 2001:df6:a7c0::/48 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:53:ba:df:18:77:32:61:ca:be:60:45:3d:d1:12:22:96:11:31:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B Validity Not Before: Mar 14 14:38:16 2026 GMT Not After : Mar 13 14:43:16 2027 GMT Subject: CN=2F225A0699074B5634923E69A9A4CE84DF3CAB03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:99:ff:01:f0:81:d6:50:5f:94:f5:d4:72: 53:17:e0:10:15:a9:d9:40:ea:8a:90:4e:c0:23:03: 6d:1d:5a:43:09:0d:37:b1:44:55:13:17:7d:10:ed: 0a:d3:69:de:27:87:97:45:05:3c:8b:42:af:fd:d6: 94:20:de:6b:fe:dd:bb:32:6a:69:f7:25:d2:ac:82: a0:cd:e3:77:1c:af:66:86:8c:8f:a1:9d:a8:0b:d0: 94:3a:e2:4c:36:ee:6a:b5:4d:ee:60:b3:21:b5:eb: 46:d2:5d:01:1e:aa:b2:80:53:7e:96:17:12:bf:bd: 43:cc:69:a4:9f:d8:e8:f0:1d:aa:97:81:b0:1e:c8: ff:a2:1f:68:b1:46:d0:22:9a:73:e3:28:5a:b1:fe: 79:6a:c3:e3:85:60:2f:42:bd:22:69:69:28:ee:b8: 7d:9c:2a:59:d0:f5:85:a2:1d:bd:3b:71:32:bd:04: 3a:39:c7:39:bd:2c:35:a6:a6:d5:84:91:97:a2:75: 83:33:4b:6f:d4:63:cd:f4:b7:1b:90:9a:1c:f9:22: 3a:b4:2f:08:0b:00:3f:a4:c3:cd:83:ad:2f:df:c8: 03:98:ed:2a:7b:40:ee:f4:37:e5:58:a7:c6:8f:55: 27:66:96:15:76:32:38:62:ee:ed:ba:7c:27:d1:86: e1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2F:22:5A:06:99:07:4B:56:34:92:3E:69:A9:A4:CE:84:DF:3C:AB:03 X509v3 Authority Key Identifier: keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/0/2F225A0699074B5634923E69A9A4CE84DF3CAB03.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:df6:a7c0::/48 Signature Algorithm: sha256WithRSAEncryption 6f:0a:81:0f:5d:e2:4c:8a:6f:2d:dc:8f:8a:26:9e:a0:bc:af: 0a:4c:08:5c:d8:8f:ab:7f:b8:12:db:60:2c:97:d4:24:28:cf: 98:c2:af:49:4e:89:c7:7b:76:ec:a5:e0:ed:cd:11:29:4d:a9: f8:6c:87:5c:d1:82:53:63:33:d1:13:0b:3d:50:5e:3d:ac:ce: 68:02:c0:7c:00:68:34:1f:ed:ed:bb:46:fd:97:f0:2a:d5:7a: fd:f0:79:9f:3c:10:43:42:66:5b:c7:c7:7f:37:f1:93:4d:be: 76:f8:4e:54:c4:ca:08:f9:cd:19:27:44:b2:44:4a:b2:57:d3: c9:91:a4:bf:3e:a2:b5:8e:c4:cb:26:75:2b:c3:2f:c9:a5:a6: 0b:73:00:55:06:97:87:3b:48:30:db:5b:b1:65:14:3f:e2:67: 06:86:c3:f5:ae:69:88:d7:02:0a:f7:38:99:55:a8:51:bb:63: 03:6d:00:dc:8d:e3:ff:1b:cc:04:47:1e:1e:bb:a0:52:14:bb: 4b:10:77:66:7c:15:19:8a:4f:78:28:94:2b:87:f6:56:ce:05: db:be:0b:21:b9:08:85:db:6c:b4:b7:21:98:bb:26:9a:1d:a8: df:e5:5d:10:66:f0:04:e7:1b:53:6e:1f:5d:49:5b:98:d8:83: 14:c6:c0:71 -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIUOVO63xh3MmHKvmBFPdESIpYRMXwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI2MDMxNDE0MzgxNloX DTI3MDMxMzE0NDMxNlowMzExMC8GA1UEAxMoMkYyMjVBMDY5OTA3NEI1NjM0OTIz RTY5QTlBNENFODRERjNDQUIwMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANXwmf8B8IHWUF+U9dRyUxfgEBWp2UDqipBOwCMDbR1aQwkNN7FEVRMXfRDt CtNp3ieHl0UFPItCr/3WlCDea/7duzJqafcl0qyCoM3jdxyvZoaMj6GdqAvQlDri TDbuarVN7mCzIbXrRtJdAR6qsoBTfpYXEr+9Q8xppJ/Y6PAdqpeBsB7I/6IfaLFG 0CKac+MoWrH+eWrD44VgL0K9ImlpKO64fZwqWdD1haIdvTtxMr0EOjnHOb0sNaam 1YSRl6J1gzNLb9RjzfS3G5CaHPkiOrQvCAsAP6TDzYOtL9/IA5jtKntA7vQ35Vin xo9VJ2aWFXYyOGLu7bp8J9GG4ckCAwEAAaOCArswggK3MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFC8iWgaZB0tWNJI+aamkzoTfPKsDMB8GA1UdIwQYMBaAFLqP d9IeWP6ck5prcOJYVhfhgzdrMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8y L0JBOEY3N0QyMUU1OEZFOUM5MzlBNkI3MEUyNTg1NjE3RTE4MzM3NkIuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3Vv OTMwaDVZX3B5VG1tdHc0bGhXRi1HRE4ycy5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85MzdmMTk1YS0zNjllLTQ0YmEtODBjZS03MjE3M2Q1MWEzNzIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzN2YxOTVh LTM2OWUtNDRiYS04MGNlLTcyMTczZDUxYTM3Mi8wLzJGMjI1QTA2OTkwNzRCNTYz NDkyM0U2OUE5QTRDRTg0REYzQ0FCMDMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAgAQ32p8AwDQYJKoZIhvcNAQELBQADggEBAG8KgQ9d4kyKby3cj4omnqC8rwpM CFzYj6t/uBLbYCyX1CQoz5jCr0lOicd7duyl4O3NESlNqfhsh1zRglNjM9ETCz1Q Xj2szmgCwHwAaDQf7e27Rv2X8CrVev3weZ88EENCZlvHx3838ZNNvnb4TlTEygj5 zRknRLJESrJX08mRpL8+orWOxMsmdSvDL8mlpgtzAFUGl4c7SDDbW7FlFD/iZwaG w/WuaYjXAgr3OJlVqFG7YwNtANyN4/8bzARHHh67oFIUu0sQd2Z8FRmKT3golCuH 9lbOBdu+CyG5CIXbbLS3IZi7JpodqN/lXRBm8ATnG1NuH11JW5jYgxTGwHE= -----END CERTIFICATE-----Generated at Thu Mar 19 08:08:17 2026 by rpki-client