$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer File: 172EF26B46332C842D6DD562C82C8CDBC927C3F5.cer (raw, json) Hash identifier: AxSN/PTv1DUAQLO2HGxybUv6A+FXS8N11uR8HJxkJXo= Subject key identifier: 17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 01B14AE1F3B0BFE411367B972309F62204DAD321 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft caRepository: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 25 Mar 2026 19:12:25 +0000 Certificate not after: Wed 24 Mar 2027 19:17:25 +0000 Subordinate resources: IP: 157.20.46.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:b1:4a:e1:f3:b0:bf:e4:11:36:7b:97:23:09:f6:22:04:da:d3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 25 19:12:25 2026 GMT Not After : Mar 24 19:17:25 2027 GMT Subject: CN=172EF26B46332C842D6DD562C82C8CDBC927C3F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b0:02:d4:90:e2:d8:27:e9:37:4a:2a:5c:8f: be:5f:3b:d7:34:15:c8:37:c8:91:88:7b:b9:6e:aa: 01:b0:f2:9b:ed:58:b7:37:34:06:35:17:f8:dc:40: fe:2b:ec:4b:29:31:58:32:dc:bd:09:65:b8:de:00: c7:e6:62:0b:9f:dd:4d:0c:89:0e:62:d6:12:89:ec: bb:fd:ac:12:ec:47:c9:0e:55:17:94:ac:04:37:69: 2e:51:9a:e0:bb:8e:0e:fc:70:6c:fe:da:10:b8:2b: b6:15:75:38:44:55:b5:b0:ab:9d:c6:9e:27:f8:57: 47:a8:54:db:c7:b6:f7:13:9e:fd:33:24:d5:3f:dd: 0b:7f:9c:35:d7:35:fa:09:da:25:f2:e0:2a:67:a6: 13:dd:32:b7:f8:2b:aa:8e:db:75:ab:af:ac:b9:e3: 2f:96:a5:78:0e:99:96:4f:f5:b8:be:a1:d0:06:5f: 9b:31:62:69:f1:ad:12:be:21:3a:75:00:0d:cf:60: 42:94:ce:3d:a9:66:56:c4:5f:ec:96:0f:fc:90:18: c1:9c:e7:fe:53:9f:88:bc:00:6b:f3:09:92:c0:60: 44:44:d0:15:08:14:23:5c:20:50:2c:ce:ef:58:33: fd:0b:ac:8d:81:d7:51:56:20:bf:b2:4d:fb:64:ff: de:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:2E:F2:6B:46:33:2C:84:2D:6D:D5:62:C8:2C:8C:DB:C9:27:C3:F5 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/0/172EF26B46332C842D6DD562C82C8CDBC927C3F5.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.46.0/23 Signature Algorithm: sha256WithRSAEncryption 65:fb:88:ec:0d:d6:85:57:9b:d9:39:00:04:be:de:07:8a:4f: 35:1a:d9:f8:1a:ae:6a:42:eb:14:b2:05:fb:4f:bb:53:cf:99: 87:d9:ac:e1:29:98:5a:5d:c6:26:b9:95:c3:cf:ba:76:14:fa: 7f:4e:f5:20:12:d3:10:76:73:e1:c4:f8:58:b3:b7:31:fb:07: 78:bb:51:9e:d5:9f:68:12:8c:ff:cf:db:a7:16:09:2d:78:f8: 10:10:65:8f:74:5a:4a:d9:5a:4d:87:a9:85:d6:d9:fd:e4:e6: c2:63:9b:29:3d:f1:80:2d:5c:23:d9:6f:ed:db:38:b0:8d:31: 35:47:a3:de:07:65:ac:99:25:db:a3:83:41:c0:65:78:0c:e7: c4:51:11:1c:45:77:72:53:a0:2e:50:84:01:a4:42:3a:61:1a: 03:00:5d:00:89:89:41:7a:84:32:78:9b:09:65:45:d9:08:16: fa:ba:07:af:d4:89:31:70:e2:02:e7:1d:7d:ad:66:78:88:7e: 40:5b:17:a4:cf:09:cf:1c:71:ba:3a:36:00:48:26:e7:56:97: ba:3c:8e:68:eb:ff:45:68:ea:2c:90:98:52:47:e8:ec:77:60: d1:1e:6c:16:2b:61:66:b7:9a:f2:2b:f0:b3:b5:79:c5:3d:f5: 61:ab:2b:c8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUAbFK4fOwv+QRNnuXIwn2IgTa0yEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDMyNTE5MTIyNVoX DTI3MDMyNDE5MTcyNVowMzExMC8GA1UEAxMoMTcyRUYyNkI0NjMzMkM4NDJENkRE NTYyQzgyQzhDREJDOTI3QzNGNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMWwAtSQ4tgn6TdKKlyPvl871zQVyDfIkYh7uW6qAbDym+1Ytzc0BjUX+NxA /ivsSykxWDLcvQlluN4Ax+ZiC5/dTQyJDmLWEonsu/2sEuxHyQ5VF5SsBDdpLlGa 4LuODvxwbP7aELgrthV1OERVtbCrncaeJ/hXR6hU28e29xOe/TMk1T/dC3+cNdc1 +gnaJfLgKmemE90yt/grqo7bdauvrLnjL5aleA6Zlk/1uL6h0AZfmzFiafGtEr4h OnUADc9gQpTOPalmVsRf7JYP/JAYwZzn/lOfiLwAa/MJksBgRETQFQgUI1wgUCzO 71gz/QusjYHXUVYgv7JN+2T/3vkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBcu8mtGMyyELW3VYsgsjNvJJ8P1MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9jODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M4MmI4ZjU2 LThlODItNDY0NC1iMDQ5LTJjNWMyZmZiNGQ5OS8wLzE3MkVGMjZCNDYzMzJDODQy RDZERDU2MkM4MkM4Q0RCQzkyN0MzRjUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFC4wDQYJKoZIhvcNAQELBQADggEBAGX7iOwN1oVXm9k5AAS+3geKTzUa2fga rmpC6xSyBftPu1PPmYfZrOEpmFpdxia5lcPPunYU+n9O9SAS0xB2c+HE+FiztzH7 B3i7UZ7Vn2gSjP/P26cWCS14+BAQZY90WkrZWk2HqYXW2f3k5sJjmyk98YAtXCPZ b+3bOLCNMTVHo94HZayZJdujg0HAZXgM58RRERxFd3JToC5QhAGkQjphGgMAXQCJ iUF6hDJ4mwllRdkIFvq6B6/UiTFw4gLnHX2tZniIfkBbF6TPCc8ccbo6NgBIJudW l7o8jmjr/0Vo6iyQmFJH6Ox3YNEebBYrYWa3mvIr8LO1ecU99WGrK8g= -----END CERTIFICATE-----Generated at Thu Mar 26 12:17:18 2026 by rpki-client