$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/8A78F143A2E18078229313E44ACE70165360440C.cer File: 8A78F143A2E18078229313E44ACE70165360440C.cer (raw, json) Hash identifier: pC9DHQk4csn6x6c3cTPZhTlvbkoRL7TvJRMYsAqIxOY= Subject key identifier: 8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3549CD52DFC32F6E0A21EA3661F0379FCD849741 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft caRepository: rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 18 Mar 2026 05:31:08 +0000 Certificate not after: Wed 17 Mar 2027 05:36:08 +0000 Subordinate resources: IP: 157.20.244.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:49:cd:52:df:c3:2f:6e:0a:21:ea:36:61:f0:37:9f:cd:84:97:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 18 05:31:08 2026 GMT Not After : Mar 17 05:36:08 2027 GMT Subject: CN=8A78F143A2E18078229313E44ACE70165360440C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:40:5c:5c:10:6b:48:5b:00:84:97:59:48:b6: de:79:e3:2c:3d:f8:7e:fc:d9:0b:6c:8d:01:94:d7: 54:e4:5b:38:49:43:76:ae:c9:17:7e:25:1e:d7:eb: d8:4c:19:f6:b2:58:9b:3d:b4:24:68:1d:cd:89:5d: 75:d7:c3:0b:f8:42:34:7b:a1:f2:75:9a:b5:4b:c4: 22:c3:a1:c8:13:92:44:02:89:c5:20:4d:1b:f5:ba: 4e:f6:4a:61:5c:26:b1:94:e0:72:e8:2f:22:cb:89: 28:ed:cc:2e:a2:24:9e:2d:aa:13:10:77:54:e0:3f: 2e:b3:53:cf:c7:bd:e4:b0:6b:61:eb:0b:6a:43:ad: fa:0e:83:04:0f:f9:68:50:43:9f:d9:fa:64:6a:c1: 79:1c:6b:f2:23:99:c4:40:9a:85:ad:27:94:b8:45: e9:58:d7:66:6d:45:b2:25:59:92:ed:a5:6c:1a:80: ca:bf:17:c5:cf:23:01:4b:2a:c5:1e:29:b0:63:96: 34:f7:9b:86:97:4a:00:1d:8e:e8:06:aa:e0:cb:ee: 82:4d:f2:3d:fa:b2:af:3c:3c:c0:e3:bc:50:b7:96: 06:79:60:9e:a9:d3:3d:bd:19:db:be:4a:d0:35:7d: 03:ba:9f:6b:a6:59:20:15:48:c2:55:99:6b:53:aa: ea:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:78:F1:43:A2:E1:80:78:22:93:13:E4:4A:CE:70:16:53:60:44:0C X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/273e2c09-70e4-4114-b4de-dd420c82fc1b/0/8A78F143A2E18078229313E44ACE70165360440C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.244.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:07:f4:3a:1a:2c:ac:07:ce:1c:a3:ae:46:d8:f0:01:d3:7c: 89:e0:70:f7:99:c5:6d:9b:f1:9c:e0:e8:9d:ed:52:67:03:17: aa:71:fe:38:5a:af:b9:d6:67:f3:93:28:3b:a9:f3:eb:0e:44: dd:19:33:b4:5c:d9:79:85:79:cd:c5:78:ec:c9:9d:ec:cb:67: a8:82:23:eb:96:f2:95:92:62:b1:c3:b8:a9:3d:f7:55:32:2f: 5d:68:3b:b6:01:70:26:f3:57:a7:8c:f4:00:26:53:ef:64:1f: 9f:52:0b:c1:08:b9:26:a6:12:2e:f4:46:8d:6d:86:37:a2:45: ff:1b:44:da:09:bd:19:5a:28:2a:7f:94:72:59:a9:98:2b:af: fe:e8:94:43:a8:25:24:5b:1a:ed:af:ee:78:73:1d:29:87:6c: 81:32:1a:ad:32:5b:c1:8e:47:b5:2b:29:31:9f:81:86:6b:64: 5c:ac:12:f7:cc:8d:ce:54:2d:d9:89:f6:35:f8:38:40:b7:06: 16:a3:27:bf:d0:09:59:3e:a1:28:97:33:55:ea:60:c3:49:eb: 24:d2:35:b0:5d:81:93:06:13:f4:10:80:ea:cb:51:00:af:8a: 51:17:33:7b:09:47:57:60:33:3a:f1:d1:7f:96:49:5b:73:84: 02:4e:37:f9 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNUnNUt/DL24KIeo2YfA3n82El0EwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDMxODA1MzEwOFoX DTI3MDMxNzA1MzYwOFowMzExMC8GA1UEAxMoOEE3OEYxNDNBMkUxODA3ODIyOTMx M0U0NEFDRTcwMTY1MzYwNDQwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAPhAXFwQa0hbAISXWUi23nnjLD34fvzZC2yNAZTXVORbOElDdq7JF34lHtfr 2EwZ9rJYmz20JGgdzYldddfDC/hCNHuh8nWatUvEIsOhyBOSRAKJxSBNG/W6TvZK YVwmsZTgcugvIsuJKO3MLqIkni2qExB3VOA/LrNTz8e95LBrYesLakOt+g6DBA/5 aFBDn9n6ZGrBeRxr8iOZxECaha0nlLhF6VjXZm1FsiVZku2lbBqAyr8Xxc8jAUsq xR4psGOWNPebhpdKAB2O6Aaq4Mvugk3yPfqyrzw8wOO8ULeWBnlgnqnTPb0Z275K 0DV9A7qfa6ZZIBVIwlWZa1Oq6j8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFIp48UOi4YB4IpMT5ErOcBZTYEQMMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8yNzNlMmMwOS03MGU0LTQxMTQtYjRkZS1kZDQyMGM4MmZjMWIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3M2UyYzA5 LTcwZTQtNDExNC1iNGRlLWRkNDIwYzgyZmMxYi8wLzhBNzhGMTQzQTJFMTgwNzgy MjkzMTNFNDRBQ0U3MDE2NTM2MDQ0MEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdFPQwDQYJKoZIhvcNAQELBQADggEBAHwH9DoaLKwHzhyjrkbY8AHTfIngcPeZ xW2b8Zzg6J3tUmcDF6px/jhar7nWZ/OTKDup8+sORN0ZM7Rc2XmFec3FeOzJnezL Z6iCI+uW8pWSYrHDuKk991UyL11oO7YBcCbzV6eM9AAmU+9kH59SC8EIuSamEi70 Ro1thjeiRf8bRNoJvRlaKCp/lHJZqZgrr/7olEOoJSRbGu2v7nhzHSmHbIEyGq0y W8GOR7UrKTGfgYZrZFysEvfMjc5ULdmJ9jX4OEC3BhajJ7/QCVk+oSiXM1XqYMNJ 6yTSNbBdgZMGE/QQgOrLUQCvilEXM3sJR1dgMzrx0X+WSVtzhAJON/k= -----END CERTIFICATE-----Generated at Thu Mar 26 10:49:56 2026 by rpki-client