$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.cer File: 07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.cer (raw, json) Hash identifier: HYC6t0YNXqEG5697d86fX7bJZg2hQqfsvk/oGQhDfII= Subject key identifier: 07:E9:A4:22:0C:F1:D4:FF:0D:5C:99:AF:B5:00:12:C6:84:5F:D0:4F Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 6D2CA37A39E1F40E9B08CAD7ECFBAF1030B9DC4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.mft caRepository: rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 14 Mar 2026 14:36:51 +0000 Certificate not after: Sat 13 Mar 2027 14:41:51 +0000 Subordinate resources: IP: 198.15.22.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:2c:a3:7a:39:e1:f4:0e:9b:08:ca:d7:ec:fb:af:10:30:b9:dc:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 14 14:36:51 2026 GMT Not After : Mar 13 14:41:51 2027 GMT Subject: CN=07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:fc:b1:ed:cf:4f:92:98:40:f4:01:40:f3:4a: 33:08:db:e0:ad:ac:76:12:ca:15:22:fc:3f:97:ae: 09:99:d1:0d:90:f5:d9:f1:87:26:cf:9b:9a:c7:a5: 10:1d:56:02:f6:a4:e6:fb:b1:47:60:4c:dc:cb:78: c9:54:33:81:98:3d:f1:61:16:c1:76:66:92:84:42: 82:99:b4:1b:9a:f8:53:da:26:d7:64:6a:76:fe:49: da:b7:ee:93:5a:e4:64:2a:6f:a9:6d:62:11:22:08: 12:36:7c:aa:cf:05:9a:a4:12:7b:99:44:5b:ce:11: 80:f4:52:37:99:8f:bc:9b:7c:ce:f4:94:35:ea:d8: 7c:a3:ef:b6:af:b7:61:a8:e8:c4:dd:10:10:73:74: 46:81:4d:f5:63:18:a2:8c:bc:7f:1f:b2:fa:2b:06: fd:9e:46:98:95:fb:8b:17:41:f8:1d:d0:b7:84:0a: 6a:8f:a8:58:87:4b:cc:81:63:24:24:3f:9f:3e:ec: 8d:5a:3c:a2:94:3c:c3:fa:a3:bc:16:92:ef:92:60: 62:c0:02:5c:cf:d6:66:26:04:47:e7:11:b9:fd:51: 50:14:5c:8e:90:e6:b0:96:cc:70:df:05:b2:dd:a9: 71:6b:a7:07:a1:a2:ac:7f:98:44:c1:00:be:5e:e5: ec:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 07:E9:A4:22:0C:F1:D4:FF:0D:5C:99:AF:B5:00:12:C6:84:5F:D0:4F X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.15.22.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:d2:70:35:37:77:7b:1c:73:12:f5:55:44:c3:d5:36:de:5b: f7:89:20:fe:f7:6a:86:ff:4a:87:37:48:d9:df:26:b4:8e:a8: fe:a6:21:83:96:86:64:b5:6e:0a:8c:f8:59:da:c2:e3:b1:11: 95:84:87:84:24:26:34:e4:d8:00:c7:66:b7:79:1f:82:e6:95: 5c:93:0d:a6:a3:74:e2:41:be:1c:e7:be:e6:fd:48:6a:26:c3: a1:ce:91:ba:77:4e:8b:a3:2f:e4:87:4f:80:c6:3d:ee:ae:33: 77:e7:7f:9d:85:2f:ed:3b:69:e1:ad:d5:7a:36:93:fb:7e:19: 7f:6d:5e:38:39:39:b8:9e:32:7e:9b:72:3f:2d:a3:ba:6c:dc: d9:95:83:71:0b:cb:70:5f:4f:89:50:44:38:6f:27:c0:d0:70: f6:92:4d:d2:00:37:35:64:8b:ff:a1:31:ed:b5:d6:da:63:0d: 0d:59:1e:c5:92:d9:35:29:c4:e9:9e:69:ee:7d:30:b7:b4:f9: b7:a6:ca:d4:e2:70:3e:6d:e8:22:f5:f2:63:4f:07:ad:02:4a: a8:cc:76:75:63:7d:b4:64:02:4b:09:65:2f:54:6a:a5:c6:77: a3:9e:df:a5:fd:c3:cc:d5:62:0b:01:7f:31:70:dd:a4:4b:d3: 3c:04:d3:aa -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUbSyjejnh9A6bCMrX7PuvEDC53EwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDMxNDE0MzY1MVoX DTI3MDMxMzE0NDE1MVowMzExMC8GA1UEAxMoMDdFOUE0MjIwQ0YxRDRGRjBENUM5 OUFGQjUwMDEyQzY4NDVGRDA0RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPT8se3PT5KYQPQBQPNKMwjb4K2sdhLKFSL8P5euCZnRDZD12fGHJs+bmsel EB1WAvak5vuxR2BM3Mt4yVQzgZg98WEWwXZmkoRCgpm0G5r4U9om12Rqdv5J2rfu k1rkZCpvqW1iESIIEjZ8qs8FmqQSe5lEW84RgPRSN5mPvJt8zvSUNerYfKPvtq+3 YajoxN0QEHN0RoFN9WMYooy8fx+y+isG/Z5GmJX7ixdB+B3Qt4QKao+oWIdLzIFj JCQ/nz7sjVo8opQ8w/qjvBaS75JgYsACXM/WZiYER+cRuf1RUBRcjpDmsJbMcN8F st2pcWunB6GirH+YRMEAvl7l7DcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFAfppCIM8dT/DVyZr7UAEsaEX9BPMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85MzdmMTk1YS0zNjllLTQ0YmEtODBjZS03MjE3M2Q1MWEzNzIvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzN2YxOTVh LTM2OWUtNDRiYS04MGNlLTcyMTczZDUxYTM3Mi8xLzA3RTlBNDIyMENGMUQ0RkYw RDVDOTlBRkI1MDAxMkM2ODQ1RkQwNEYubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADGDxYwDQYJKoZIhvcNAQELBQADggEBAF/ScDU3d3sccxL1VUTD1TbeW/eJIP73 aob/Soc3SNnfJrSOqP6mIYOWhmS1bgqM+FnawuOxEZWEh4QkJjTk2ADHZrd5H4Lm lVyTDaajdOJBvhznvub9SGomw6HOkbp3ToujL+SHT4DGPe6uM3fnf52FL+07aeGt 1Xo2k/t+GX9tXjg5ObieMn6bcj8to7ps3NmVg3ELy3BfT4lQRDhvJ8DQcPaSTdIA NzVki/+hMe211tpjDQ1ZHsWS2TUpxOmeae59MLe0+bemytTicD5t6CL18mNPB60C SqjMdnVjfbRkAksJZS9UaqXGd6Oe36X9w8zVYgsBfzFw3aRL0zwE06o= -----END CERTIFICATE-----Generated at Thu Mar 26 10:46:18 2026 by rpki-client