$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer File: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer (raw, json) Hash identifier: Kj2nc89l2Ng/zlPRQei+8rdoiTVHjfTRJIUL760RI8Y= Subject key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 4D067A09D23506BB2859F9CDFEAF7C4534046C40 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft caRepository: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Sat 21 Mar 2026 15:37:36 +0000 Certificate not after: Sat 20 Mar 2027 15:42:36 +0000 Subordinate resources: IP: 157.66.84.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:06:7a:09:d2:35:06:bb:28:59:f9:cd:fe:af:7c:45:34:04:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 21 15:37:36 2026 GMT Not After : Mar 20 15:42:36 2027 GMT Subject: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5d:8a:5d:8b:72:01:3b:69:3a:6f:3c:f0:87: 7d:35:57:fd:2d:54:d4:47:34:12:ab:ab:e0:1e:37: 7e:98:3e:53:49:48:e8:48:8c:72:df:5b:24:42:32: da:a7:59:85:ff:16:3f:8c:e9:27:d9:3f:92:19:b9: 5f:8f:c6:95:0e:62:cc:c7:30:a7:22:ce:9c:a3:62: 5e:e5:f7:a3:aa:f8:68:bd:63:9e:a2:bf:2a:16:f3: e8:a4:78:fc:29:2e:b5:e8:03:17:ff:81:c5:f3:57: 71:10:d4:e4:c9:15:ca:53:37:8d:e5:f0:cd:d7:ec: cc:b4:8f:ac:8e:f0:31:44:2b:d5:73:36:f5:c5:73: 6e:c0:7b:ce:07:73:6a:f3:38:f4:c2:4e:03:4e:8b: 2f:95:33:72:80:12:06:65:39:ec:84:43:5b:95:19: 57:3b:62:6a:5d:26:3e:98:12:3c:4e:f9:20:14:32: 34:e3:80:a9:cd:05:ef:15:23:1b:60:4d:ff:e6:b0: 09:c4:ba:11:9d:bb:47:4a:8b:d9:19:07:c4:b3:bf: c4:42:f6:75:cb:7a:b1:ac:7a:d7:12:c0:ce:a8:12: ae:ca:a9:e9:ed:a7:d7:d6:fc:8e:b9:b8:e2:7b:01: 4a:9f:2b:36:f8:59:24:14:d4:f5:2e:ac:d3:09:76: 49:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.84.0/23 Signature Algorithm: sha256WithRSAEncryption 12:20:d9:62:33:bc:95:7f:19:0f:5e:99:9e:ef:2c:2d:8b:a8: 3d:6a:6e:b5:e2:eb:62:14:16:2c:20:93:6c:50:98:d8:e8:9b: 8a:4f:e5:c4:c2:af:3b:22:71:91:c4:5f:e6:4b:94:6d:1e:53: 9f:2b:14:8a:e2:83:08:c2:1e:f6:65:56:cc:18:56:45:3a:e7: d7:6a:78:23:ae:72:ea:61:ef:84:dd:b9:ee:d6:30:60:ad:f6: aa:a3:3a:bd:d2:8c:a3:0e:22:94:6f:28:fe:8a:08:e0:54:24: 78:15:87:1b:b1:fe:13:7a:41:3a:bf:10:22:2c:82:d0:59:00: d2:a4:47:34:62:6a:3a:9d:7d:dd:cb:5a:6b:91:8f:54:07:fa: 3b:32:40:92:25:e2:14:76:8c:18:37:d7:34:97:f1:79:22:fe: 90:6a:97:59:d6:ca:34:f1:1f:8c:c3:47:95:d3:20:45:4f:09: 2c:6b:5e:95:24:2f:4a:5d:cf:b0:c9:bb:0a:e3:fc:e1:f6:13: e4:f7:38:cb:d8:2f:c6:6d:f1:8d:b2:03:b4:4f:fb:ba:44:7a: f7:14:74:1a:f6:63:43:63:df:70:5b:37:b1:07:c6:06:eb:01: 5e:a9:cc:2c:51:22:7d:bb:55:e9:aa:1d:e4:be:6c:88:f5:a5: 80:0b:b2:17 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUTQZ6CdI1BrsoWfnN/q98RTQEbEAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDMyMTE1MzczNloX DTI3MDMyMDE1NDIzNlowMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5 RUNEN0IwRTQzMjZGRTk1NkI0QzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMZdil2LcgE7aTpvPPCHfTVX/S1U1Ec0Equr4B43fpg+U0lI6EiMct9bJEIy 2qdZhf8WP4zpJ9k/khm5X4/GlQ5izMcwpyLOnKNiXuX3o6r4aL1jnqK/Khbz6KR4 /CkutegDF/+BxfNXcRDU5MkVylM3jeXwzdfszLSPrI7wMUQr1XM29cVzbsB7zgdz avM49MJOA06LL5UzcoASBmU57IRDW5UZVztial0mPpgSPE75IBQyNOOAqc0F7xUj G2BN/+awCcS6EZ27R0qL2RkHxLO/xEL2dct6sax61xLAzqgSrsqp6e2n19b8jrm4 4nsBSp8rNvhZJBTU9S6s0wl2SXMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPTZxsPiZT5T5FSezXsOQyb+lWtMMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lOTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5N2M2ODJh LTQ0OGItNDBlMi1hODhmLTE2ZGY4M2RkMzMzNy8wL0Y0RDlDNkMzRTI2NTNFNTNF NDU0OUVDRDdCMEU0MzI2RkU5NTZCNEMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQlQwDQYJKoZIhvcNAQELBQADggEBABIg2WIzvJV/GQ9emZ7vLC2LqD1qbrXi 62IUFiwgk2xQmNjom4pP5cTCrzsicZHEX+ZLlG0eU58rFIrigwjCHvZlVswYVkU6 59dqeCOucuph74Tdue7WMGCt9qqjOr3SjKMOIpRvKP6KCOBUJHgVhxux/hN6QTq/ ECIsgtBZANKkRzRiajqdfd3LWmuRj1QH+jsyQJIl4hR2jBg31zSX8Xki/pBql1nW yjTxH4zDR5XTIEVPCSxrXpUkL0pdz7DJuwrj/OH2E+T3OMvYL8Zt8Y2yA7RP+7pE evcUdBr2Y0Nj33BbN7EHxgbrAV6pzCxRIn27VemqHeS+bIj1pYALshc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:56:25 2026 by rpki-client