$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer File: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer (raw, json) Hash identifier: dCeDG2EzRCy6G46+lADoNgJmUwfukIyNP6yTzLPsSJk= Subject key identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5566B746226AC64AF28B97683A0AA52BAB3FD349 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft caRepository: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 19 Mar 2026 16:02:20 +0000 Certificate not after: Thu 18 Mar 2027 16:07:20 +0000 Subordinate resources: IP: 157.15.120.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:66:b7:46:22:6a:c6:4a:f2:8b:97:68:3a:0a:a5:2b:ab:3f:d3:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 19 16:02:20 2026 GMT Not After : Mar 18 16:07:20 2027 GMT Subject: CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a2:06:86:81:ad:9e:de:d8:6b:28:b0:15:ee: 57:4e:41:85:b5:63:cc:fe:5b:46:db:0f:96:7f:15: 82:cd:e0:4f:60:aa:8e:26:9d:f8:26:ab:ff:2c:bc: fa:99:bb:ff:2e:6a:53:ed:cb:6b:7e:c4:7e:75:4e: ea:d2:5b:38:ca:ad:a0:af:09:0f:10:e2:e6:39:7d: ea:84:81:d4:75:67:ad:4b:dc:68:5a:53:86:51:3e: aa:e4:a5:a9:73:b1:b8:35:9e:b8:f1:81:26:51:b1: 79:91:05:7b:a2:67:e9:a1:67:04:2b:1e:ca:cf:85: 52:64:f6:c7:01:9e:ad:0c:f2:08:a6:93:b7:31:65: cc:4a:78:d7:9b:c3:ab:86:13:54:4a:64:41:0d:36: e3:b4:aa:e2:62:5c:7d:74:00:a5:fb:d6:cc:7e:e9: 8e:5d:62:5f:de:8d:5a:51:1f:75:7d:08:dd:e4:e2: 23:9c:2c:54:58:ab:61:2d:d3:c9:3c:0a:de:d2:3e: a6:e5:c7:e0:7c:ef:73:43:e0:7f:d7:4a:57:b3:fd: 20:ff:96:55:03:48:dd:53:62:aa:b6:2f:a6:30:d3: c6:7b:db:4f:77:32:a4:b6:6a:a9:ff:17:47:6d:d4: 61:2f:a4:bd:e6:88:bf:ce:1f:37:2e:bf:26:37:94: 1a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.120.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:36:a4:14:c4:96:a6:4e:33:ca:68:79:ee:6c:ec:a3:09:a8: f6:fd:14:bd:b3:67:74:ee:68:7e:c0:44:af:b8:37:b4:19:76: e5:f1:88:9c:a2:1e:a0:7a:61:e9:08:aa:04:24:de:42:85:db: a8:c7:26:19:b3:0d:29:c3:ac:72:4b:b2:15:75:92:98:31:5e: 80:5a:e6:73:f9:95:12:11:7d:e6:2c:e4:d5:01:3a:d1:3e:da: 9a:3f:3b:e0:36:1c:01:a9:f7:14:c6:7e:c1:11:f6:53:a1:96: 06:02:76:4d:95:de:91:7a:4a:64:4d:e8:47:0e:82:5f:8e:fb: b7:f6:e1:b7:2d:5b:3a:eb:ba:50:ae:89:54:11:de:21:e8:4d: 5a:61:cc:d2:24:0a:6e:92:a0:8e:36:db:25:09:f5:16:3c:bb: 36:7a:1f:e2:58:b0:6e:63:e1:f5:f1:1f:5e:ee:60:ae:bc:fa: a7:57:77:a9:63:35:63:04:f6:bd:ee:ac:67:7c:e0:90:c6:95: 39:37:7f:0a:ed:2b:0e:19:ed:08:94:b9:ec:6d:f6:d1:76:0f: 3f:00:f0:ec:a8:92:a8:7f:84:65:1c:c7:f4:37:71:e2:40:22: 4e:f6:4e:3e:fa:2a:e9:c7:a2:61:68:93:aa:4a:21:29:80:fa: 2a:dc:95:a1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUVWa3RiJqxkryi5doOgqlK6s/00kwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDMxOTE2MDIyMFoX DTI3MDMxODE2MDcyMFowMzExMC8GA1UEAxMoRTkwMkJGNENGQzlEOTk3RTM2QTlF MUEzMkZBQTJFMDhDQzJGNUM3RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOiBoaBrZ7e2GsosBXuV05BhbVjzP5bRtsPln8Vgs3gT2Cqjiad+Car/yy8 +pm7/y5qU+3La37EfnVO6tJbOMqtoK8JDxDi5jl96oSB1HVnrUvcaFpThlE+quSl qXOxuDWeuPGBJlGxeZEFe6Jn6aFnBCseys+FUmT2xwGerQzyCKaTtzFlzEp415vD q4YTVEpkQQ0247Sq4mJcfXQApfvWzH7pjl1iX96NWlEfdX0I3eTiI5wsVFirYS3T yTwK3tI+puXH4Hzvc0Pgf9dKV7P9IP+WVQNI3VNiqrYvpjDTxnvbT3cypLZqqf8X R23UYS+kveaIv84fNy6/JjeUGm8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOkCv0z8nZl+Nqnhoy+qLgjML1x/MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kZmI0NjZjNi0zNzQzLTQ5NWYtYjFhOC0yNjA3Y2M5OTU3M2YvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmYjQ2NmM2 LTM3NDMtNDk1Zi1iMWE4LTI2MDdjYzk5NTczZi8wL0U5MDJCRjRDRkM5RDk5N0Uz NkE5RTFBMzJGQUEyRTA4Q0MyRjVDN0YubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdD3gwDQYJKoZIhvcNAQELBQADggEBAFo2pBTElqZOM8poee5s7KMJqPb9FL2z Z3TuaH7ARK+4N7QZduXxiJyiHqB6YekIqgQk3kKF26jHJhmzDSnDrHJLshV1kpgx XoBa5nP5lRIRfeYs5NUBOtE+2po/O+A2HAGp9xTGfsER9lOhlgYCdk2V3pF6SmRN 6EcOgl+O+7f24bctWzrrulCuiVQR3iHoTVphzNIkCm6SoI422yUJ9RY8uzZ6H+JY sG5j4fXxH17uYK68+qdXd6ljNWME9r3urGd84JDGlTk3fwrtKw4Z7QiUuext9tF2 Dz8A8Oyokqh/hGUcx/Q3ceJAIk72Tj76KunHomFok6pKISmA+irclaE= -----END CERTIFICATE-----Generated at Thu Mar 26 12:17:16 2026 by rpki-client