$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer File: 340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.cer (raw, json) Hash identifier: m6dU16gg8XV4AOCbFSx4ZlBQh9fqmy9eU52YBxTMfrw= Subject key identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 131F3D7F442ADF7A5B93D039031A00D00D790781 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft caRepository: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 21 Mar 2026 00:18:46 +0000 Certificate not after: Sat 20 Mar 2027 00:23:46 +0000 Subordinate resources: IP: 160.19.86.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:1f:3d:7f:44:2a:df:7a:5b:93:d0:39:03:1a:00:d0:0d:79:07:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 21 00:18:46 2026 GMT Not After : Mar 20 00:23:46 2027 GMT Subject: CN=340A98C1E96A3909CEB0BEB588C40CFBDD3CA295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:24:be:f5:21:b5:12:91:6e:52:bf:fa:16:c1: 63:d4:5a:97:ea:91:80:e5:4b:8b:bc:3b:45:3d:a6: 3e:12:2b:19:57:a2:1d:dc:8c:94:4d:5a:c8:41:09: 5d:75:ea:43:95:01:6f:2e:4c:b0:42:bc:5e:17:47: 8f:88:c2:c6:e1:18:e2:01:59:e5:87:5a:41:79:d6: 8e:6f:74:f7:5b:d0:96:d5:05:82:fb:d0:c5:3e:af: e1:d2:9d:00:b9:85:1b:3e:18:a3:e4:db:5b:30:bd: 55:a0:aa:fb:cb:36:28:63:a8:9c:f0:f6:4f:78:a1: 90:50:85:71:79:e2:1d:1d:2d:2c:12:93:1d:f9:82: a9:31:33:cc:d7:f9:7b:49:96:eb:ce:ea:dd:c4:39: 72:39:fc:d0:07:8c:76:4e:e8:56:16:ed:c7:ae:71: 54:3f:ac:34:67:7c:9f:73:78:66:dd:6f:8f:b6:f7: ef:6f:86:bd:c7:58:57:59:2f:61:4b:be:77:0f:19: 21:be:b6:25:5f:da:23:1a:8c:40:a4:d0:9c:5d:71: f4:0a:5c:79:9a:5b:ff:75:76:4a:70:6a:0b:ff:3a: f8:17:d0:10:5c:4a:3e:30:55:90:8a:b1:c4:44:91: eb:af:c9:56:c2:e0:92:e8:83:db:e3:be:f9:46:2c: c8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:0A:98:C1:E9:6A:39:09:CE:B0:BE:B5:88:C4:0C:FB:DD:3C:A2:95 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/340A98C1E96A3909CEB0BEB588C40CFBDD3CA295.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.86.0/24 Signature Algorithm: sha256WithRSAEncryption 53:7a:1f:b6:7d:d2:03:82:0a:78:55:20:d7:93:3c:bc:7e:09: f1:ae:68:62:23:5e:33:9d:76:04:6d:cd:03:07:c9:ba:d0:b5: 09:1d:c3:eb:94:04:29:73:a8:4a:ea:26:63:a4:ba:21:28:f0: bb:7c:be:a1:5c:d6:1d:29:23:85:94:c6:fd:e4:a7:54:22:c5: 5b:1e:03:ed:fa:7d:95:de:b8:10:b1:22:94:84:dd:d9:95:d9: b1:82:86:df:41:7f:df:26:81:be:ae:2b:1e:2f:34:8d:68:1e: 30:ed:c8:ea:43:98:ff:58:2a:05:d8:60:af:df:3a:a7:dd:4e: ba:3c:78:c1:be:4b:6f:9a:ce:01:a6:c2:e3:15:6b:d9:df:35: 94:43:89:88:a8:fc:64:53:6e:54:0c:71:4f:95:95:28:66:f9: a9:dc:66:bc:61:4e:13:e4:2a:7c:ce:58:7d:75:1f:bd:f6:02: c7:c8:af:59:4a:a7:22:b3:ab:1d:58:8e:ea:a0:31:51:b6:fe: 5e:b7:69:33:97:6c:f9:59:81:1a:35:cb:1c:c9:c9:25:5d:72: 89:48:c4:fd:db:51:d6:e6:de:3e:e1:fa:5f:a7:c5:72:65:4f: 04:0f:02:df:32:e1:a0:67:29:45:63:5d:bc:e8:81:c9:a4:16: eb:4e:c1:35 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUEx89f0Qq33pbk9A5AxoA0A15B4EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDMyMTAwMTg0NloX DTI3MDMyMDAwMjM0NlowMzExMC8GA1UEAxMoMzQwQTk4QzFFOTZBMzkwOUNFQjBC RUI1ODhDNDBDRkJERDNDQTI5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJgkvvUhtRKRblK/+hbBY9Ral+qRgOVLi7w7RT2mPhIrGVeiHdyMlE1ayEEJ XXXqQ5UBby5MsEK8XhdHj4jCxuEY4gFZ5YdaQXnWjm9091vQltUFgvvQxT6v4dKd ALmFGz4Yo+TbWzC9VaCq+8s2KGOonPD2T3ihkFCFcXniHR0tLBKTHfmCqTEzzNf5 e0mW687q3cQ5cjn80AeMdk7oVhbtx65xVD+sNGd8n3N4Zt1vj7b372+GvcdYV1kv YUu+dw8ZIb62JV/aIxqMQKTQnF1x9ApceZpb/3V2SnBqC/86+BfQEFxKPjBVkIqx xESR66/JVsLgkuiD2+O++UYsyHUCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDQKmMHpajkJzrC+tYjEDPvdPKKVMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxNDRkOTdh LWUzZmItNGZmYy1iN2Y3LWY3YjhiNjY1OWFjNC8wLzM0MEE5OEMxRTk2QTM5MDlD RUIwQkVCNTg4QzQwQ0ZCREQzQ0EyOTUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgE1YwDQYJKoZIhvcNAQELBQADggEBAFN6H7Z90gOCCnhVINeTPLx+CfGuaGIj XjOddgRtzQMHybrQtQkdw+uUBClzqErqJmOkuiEo8Lt8vqFc1h0pI4WUxv3kp1Qi xVseA+36fZXeuBCxIpSE3dmV2bGCht9Bf98mgb6uKx4vNI1oHjDtyOpDmP9YKgXY YK/fOqfdTro8eMG+S2+azgGmwuMVa9nfNZRDiYio/GRTblQMcU+VlShm+ancZrxh ThPkKnzOWH11H732AsfIr1lKpyKzqx1YjuqgMVG2/l63aTOXbPlZgRo1yxzJySVd colIxP3bUdbm3j7h+l+nxXJlTwQPAt8y4aBnKUVjXbzogcmkFutOwTU= -----END CERTIFICATE-----Generated at Thu Mar 26 10:53:54 2026 by rpki-client