$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer File: C453630F1ABE5FF992F948A75DB4587776AD02EC.cer (raw, json) Hash identifier: O2lY6j5PSy7iaFLBCJgtxSzsP3lJvpsXHhLv1XAXMXo= Subject key identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1DD1DD2C4CA2B8820BA0365C86FE502B2C8175DB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft caRepository: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 10 Mar 2026 13:02:13 +0000 Certificate not after: Tue 09 Mar 2027 13:07:13 +0000 Subordinate resources: IP: 157.20.208.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d1:dd:2c:4c:a2:b8:82:0b:a0:36:5c:86:fe:50:2b:2c:81:75:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 10 13:02:13 2026 GMT Not After : Mar 9 13:07:13 2027 GMT Subject: CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:53:2e:06:fe:e8:33:2e:2c:9c:6c:64:89:ed: b9:61:0c:13:3b:36:0a:3c:f6:c0:84:05:f2:00:44: 56:48:61:4e:93:a2:14:33:7e:9c:57:ed:c7:11:b4: 8b:c2:58:1c:1a:ad:55:5a:76:47:d0:4e:47:e2:5d: b5:67:0f:44:94:1e:ea:cf:37:66:62:83:bb:50:86: ce:a2:43:4a:0a:3c:4b:46:de:67:fd:6b:95:37:6a: 85:99:86:92:56:a5:06:52:71:4c:2e:a2:24:56:02: 55:49:52:2a:b2:5f:50:d5:95:c1:b3:46:79:c5:38: 9f:54:02:d0:71:a5:32:1f:30:21:0a:98:78:7d:5c: 4e:d3:08:9f:7b:94:f5:94:f6:99:93:89:dc:cb:42: 36:86:5e:1e:87:e6:35:b9:91:9a:e2:c9:53:29:2b: 3d:cd:36:9e:cf:9e:16:a7:1d:2e:cf:2c:62:b3:f5: 67:60:cb:7f:2e:37:ff:7c:5d:13:ea:8f:cb:11:7e: 1e:e4:bc:de:8c:a8:09:50:54:ab:75:7a:cd:13:61: 6b:4c:f4:99:a9:90:a4:8a:d1:d5:33:aa:53:85:e6: 57:fa:c4:25:68:2a:89:a2:ff:40:48:7b:1a:1b:69: 0b:b8:77:74:e5:9d:b8:a2:c7:cc:17:a2:b3:df:6d: 16:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.208.0/23 Signature Algorithm: sha256WithRSAEncryption 24:67:fa:cf:40:2d:47:dc:e6:8c:cd:cd:09:24:c2:10:15:f9: 57:0d:85:21:e0:12:7a:35:7d:a1:cc:a9:b5:8a:52:7d:cc:b0: 40:c8:59:e3:c1:bd:32:e4:75:4e:a1:be:40:51:ac:ba:d9:3d: 6d:3b:ba:db:cc:c1:0e:16:f6:32:85:07:00:3e:a3:58:4a:d4: 25:8a:82:ab:b1:45:e2:87:aa:90:db:7a:03:b5:e7:e2:a8:28: de:70:cd:28:72:29:ec:d1:39:17:0a:c9:81:1b:e7:25:a0:95: 8a:90:25:06:f3:9d:59:3e:07:d2:49:9c:58:0b:ba:67:22:b8: c6:44:4d:06:f9:58:9c:97:03:d3:fa:10:65:2f:0c:27:b0:0f: fc:d7:d3:05:96:30:95:96:a0:7e:cb:ca:89:54:f1:d1:41:00: 06:83:75:23:27:d6:3f:69:74:61:0e:3b:3f:a6:75:50:a6:eb: 37:db:fe:bf:fe:f7:c9:de:55:e4:e3:d6:ae:7c:d9:f7:fc:ab: 11:1c:ef:5f:b0:28:8c:41:8d:b3:d7:cf:4d:92:a2:1c:c4:3b: 1d:d1:85:c4:21:5c:34:60:45:e2:d6:07:6a:a3:8c:e9:70:28: 52:d0:54:79:51:af:91:ee:93:22:92:2c:48:c6:04:87:13:41: a8:5c:36:e2 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHdHdLEyiuIILoDZchv5QKyyBddswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDMxMDEzMDIxM1oX DTI3MDMwOTEzMDcxM1owMzExMC8GA1UEAxMoQzQ1MzYzMEYxQUJFNUZGOTkyRjk0 OEE3NURCNDU4Nzc3NkFEMDJFQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANNTLgb+6DMuLJxsZIntuWEMEzs2Cjz2wIQF8gBEVkhhTpOiFDN+nFftxxG0 i8JYHBqtVVp2R9BOR+JdtWcPRJQe6s83ZmKDu1CGzqJDSgo8S0beZ/1rlTdqhZmG klalBlJxTC6iJFYCVUlSKrJfUNWVwbNGecU4n1QC0HGlMh8wIQqYeH1cTtMIn3uU 9ZT2mZOJ3MtCNoZeHofmNbmRmuLJUykrPc02ns+eFqcdLs8sYrP1Z2DLfy43/3xd E+qPyxF+HuS83oyoCVBUq3V6zRNha0z0mamQpIrR1TOqU4XmV/rEJWgqiaL/QEh7 GhtpC7h3dOWduKLHzBeis99tFq8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFMRTYw8avl/5kvlIp120WHd2rQLsMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kYzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RjNDA5NGQy LWUxOGQtNDg0MC04NGZhLWM1NzU3YWY1ODBmMS8wL0M0NTM2MzBGMUFCRTVGRjk5 MkY5NDhBNzVEQjQ1ODc3NzZBRDAyRUMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFNAwDQYJKoZIhvcNAQELBQADggEBACRn+s9ALUfc5ozNzQkkwhAV+VcNhSHg Eno1faHMqbWKUn3MsEDIWePBvTLkdU6hvkBRrLrZPW07utvMwQ4W9jKFBwA+o1hK 1CWKgquxReKHqpDbegO15+KoKN5wzShyKezRORcKyYEb5yWglYqQJQbznVk+B9JJ nFgLumciuMZETQb5WJyXA9P6EGUvDCewD/zX0wWWMJWWoH7LyolU8dFBAAaDdSMn 1j9pdGEOOz+mdVCm6zfb/r/+98neVeTj1q582ff8qxEc71+wKIxBjbPXz02SohzE Ox3RhcQhXDRgReLWB2qjjOlwKFLQVHlRr5HukyKSLEjGBIcTQahcNuI= -----END CERTIFICATE-----Generated at Thu Mar 26 18:16:56 2026 by rpki-client