$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/EAD173629E4F955F44EC781A3739775E738ACCFD.cer File: EAD173629E4F955F44EC781A3739775E738ACCFD.cer (raw, json) Hash identifier: TkYM8WlfnvPZxea6C46PNv62wKXoPD5zf42ATiEm04Y= Subject key identifier: EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 0C2F8B28D103FE222E67E4AC9C1597087C62BBBF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft caRepository: rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 17 Mar 2026 18:46:24 +0000 Certificate not after: Tue 16 Mar 2027 18:51:24 +0000 Subordinate resources: IP: 157.66.29.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:2f:8b:28:d1:03:fe:22:2e:67:e4:ac:9c:15:97:08:7c:62:bb:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 17 18:46:24 2026 GMT Not After : Mar 16 18:51:24 2027 GMT Subject: CN=EAD173629E4F955F44EC781A3739775E738ACCFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3d:48:d8:b3:ec:89:bd:a6:1c:03:b0:75:4b: a8:b7:25:84:20:aa:97:71:50:ea:79:07:4c:8e:9c: 4a:0c:a4:b4:09:f7:71:fa:f1:5c:0d:03:bc:1c:c2: dc:c9:f3:d2:26:a6:f8:9b:1f:3e:b5:ba:6d:7a:3e: c7:68:07:04:c3:1f:f9:dd:79:fb:e0:5f:85:0b:47: 7b:e0:9e:13:34:e2:d4:1c:13:c1:7f:eb:6c:bc:99: 92:1a:db:65:97:7e:fa:93:a0:a4:18:18:f4:79:1e: 7f:3d:e0:4d:e9:7f:27:b6:bc:97:fe:9f:51:de:08: d6:34:a0:a3:24:24:3d:34:0f:76:17:65:db:e5:df: 03:71:28:6d:e6:8b:3f:75:44:56:73:d3:04:f3:e8: 14:c7:6b:09:75:88:4c:4d:38:b4:37:5a:72:c4:b8: c8:dc:da:fb:cd:57:8f:5a:96:8f:4a:1d:5d:90:f8: d2:7c:1b:dd:7f:f9:12:6c:87:3f:31:df:2b:03:54: a2:32:2c:cd:72:c1:26:2f:46:48:ef:4c:e0:0f:59: ed:cc:3c:e2:0c:90:be:bd:da:4e:a0:32:34:1b:e3: 9d:96:6e:3e:ab:36:68:34:d9:f9:72:00:2e:c8:93: b6:ce:bc:41:9d:3b:25:2d:27:09:0d:b9:06:fc:6d: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EA:D1:73:62:9E:4F:95:5F:44:EC:78:1A:37:39:77:5E:73:8A:CC:FD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/31b433a5-72b1-4653-99d3-9469c8b8b762/0/EAD173629E4F955F44EC781A3739775E738ACCFD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.29.0/24 Signature Algorithm: sha256WithRSAEncryption 71:96:4b:d3:23:7b:f1:7d:95:ed:a7:a7:e3:d0:b0:19:39:e8: 84:06:05:85:de:48:b1:a1:4c:73:8d:84:1b:f1:5d:70:51:0c: de:ce:a5:92:da:25:c2:22:55:37:b9:22:28:1a:10:d3:55:59: b9:30:b2:41:d9:ef:70:b9:1b:e6:01:64:74:60:b9:28:85:22: 69:cc:58:ca:dc:25:2e:de:82:a7:07:e5:4b:34:13:92:f3:61: 31:19:8c:84:ad:90:44:5a:2b:d5:04:53:4e:0c:f8:87:a5:3f: a3:1d:55:f2:10:b8:27:f0:1c:9e:cf:24:32:b2:48:c3:ca:d8: 32:a1:25:5f:97:79:97:ac:41:0e:d3:92:c9:2f:c4:dc:44:e0: de:a0:88:8c:7e:ea:01:d2:4b:a6:46:aa:cb:be:ad:24:c3:0f: 8b:16:71:4d:5a:1e:82:cf:6c:fd:ac:f0:35:42:aa:51:3e:43: 50:f3:e7:06:f5:9c:50:b8:8c:55:6b:2c:0b:a2:7c:f3:12:a4: 6a:38:fc:fe:eb:a1:5a:21:cb:8b:e9:f0:0f:a1:7f:ea:84:d9: 65:7e:a6:ec:04:5a:df:dc:a4:2c:e3:e5:5d:a2:43:13:65:a8: 3a:f2:ca:60:c9:20:97:9b:ae:ca:87:ba:aa:10:44:da:8f:f1: e7:d2:c5:30 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUDC+LKNED/iIuZ+SsnBWXCHxiu78wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDMxNzE4NDYyNFoX DTI3MDMxNjE4NTEyNFowMzExMC8GA1UEAxMoRUFEMTczNjI5RTRGOTU1RjQ0RUM3 ODFBMzczOTc3NUU3MzhBQ0NGRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQ9SNiz7Im9phwDsHVLqLclhCCql3FQ6nkHTI6cSgyktAn3cfrxXA0DvBzC 3Mnz0iam+JsfPrW6bXo+x2gHBMMf+d15++BfhQtHe+CeEzTi1BwTwX/rbLyZkhrb ZZd++pOgpBgY9Hkefz3gTel/J7a8l/6fUd4I1jSgoyQkPTQPdhdl2+XfA3EobeaL P3VEVnPTBPPoFMdrCXWITE04tDdacsS4yNza+81Xj1qWj0odXZD40nwb3X/5EmyH PzHfKwNUojIszXLBJi9GSO9M4A9Z7cw84gyQvr3aTqAyNBvjnZZuPqs2aDTZ+XIA LsiTts68QZ07JS0nCQ25Bvxt/rcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFOrRc2KeT5VfROx4Gjc5d15zisz9MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8zMWI0MzNhNS03MmIxLTQ2NTMtOTlkMy05NDY5YzhiOGI3NjIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMxYjQzM2E1 LTcyYjEtNDY1My05OWQzLTk0NjljOGI4Yjc2Mi8wL0VBRDE3MzYyOUU0Rjk1NUY0 NEVDNzgxQTM3Mzk3NzVFNzM4QUNDRkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdQh0wDQYJKoZIhvcNAQELBQADggEBAHGWS9Mje/F9le2np+PQsBk56IQGBYXe SLGhTHONhBvxXXBRDN7OpZLaJcIiVTe5IigaENNVWbkwskHZ73C5G+YBZHRguSiF ImnMWMrcJS7egqcH5Us0E5LzYTEZjIStkERaK9UEU04M+IelP6MdVfIQuCfwHJ7P JDKySMPK2DKhJV+XeZesQQ7TkskvxNxE4N6giIx+6gHSS6ZGqsu+rSTDD4sWcU1a HoLPbP2s8DVCqlE+Q1Dz5wb1nFC4jFVrLAuifPMSpGo4/P7roVohy4vp8A+hf+qE 2WV+puwEWt/cpCzj5V2iQxNlqDryymDJIJebrsqHuqoQRNqP8efSxTA= -----END CERTIFICATE-----Generated at Thu Mar 26 12:16:57 2026 by rpki-client