$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/0/F8EA79769F4F98F7D5A723816314CD216D8F01AA.cer File: F8EA79769F4F98F7D5A723816314CD216D8F01AA.cer (raw, json) Hash identifier: jWRcOEtjjDvspoWa+pEhrBdCuOMVZJEcsnEKE1D68Hs= Subject key identifier: F8:EA:79:76:9F:4F:98:F7:D5:A7:23:81:63:14:CD:21:6D:8F:01:AA Authority key identifier: 12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA Certificate issuer: /CN=A91862140000/serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Certificate serial: 341F28FFC90489D839BF4D159A2055ECC1950D45 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Manifest: rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/F8EA79769F4F98F7D5A723816314CD216D8F01AA.mft caRepository: rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 07 Apr 2026 07:20:11 +0000 Certificate not after: Tue 06 Apr 2027 07:25:11 +0000 Subordinate resources: IP: 151.158.150.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 15:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:1f:28:ff:c9:04:89:d8:39:bf:4d:15:9a:20:55:ec:c1:95:0d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=12345F115AC4B62A51F5274C54C81E86463BD0BA Validity Not Before: Apr 7 07:20:11 2026 GMT Not After : Apr 6 07:25:11 2027 GMT Subject: CN=F8EA79769F4F98F7D5A723816314CD216D8F01AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cc:44:ee:9e:d6:97:81:af:81:3b:a9:9d:86: d9:19:31:80:8b:c0:ea:a4:e3:24:ef:ed:a2:19:83: 24:16:f2:a5:d2:c5:56:d6:d6:22:29:14:8e:a1:e4: dc:6c:2a:2c:f3:ad:bd:06:79:a6:ff:cd:53:11:02: d3:8a:58:4f:e6:4b:c1:51:55:c4:dd:f0:5f:24:ac: db:3d:48:97:98:05:b2:0a:5d:8c:0a:bc:59:51:d5: eb:0d:61:3f:04:fb:9f:df:f6:f8:78:bf:c0:f0:c4: 5c:85:30:66:44:5f:6a:31:61:ec:70:76:f5:ab:72: 40:90:0b:26:fc:3c:29:d8:c6:09:15:c0:3c:6d:b0: 6e:16:05:8e:f6:fb:66:ad:93:47:4f:0e:3c:65:61: af:37:21:20:ef:93:aa:8f:d6:c7:20:e9:58:c7:22: 72:f2:ff:8e:bc:7f:bd:a3:cd:ad:75:0f:71:3d:cb: d3:ad:4d:d3:4a:a2:87:e4:0f:d2:f1:9c:aa:c2:16: dc:ce:af:0d:13:bb:46:34:37:dc:35:00:16:4c:01: 2e:bc:0d:53:f8:50:d6:13:21:b6:4d:76:23:18:23: 35:18:bf:3d:61:0d:99:83:59:92:90:f6:2f:4c:26: 10:6f:62:6d:bb:d3:aa:e2:ef:1b:08:8b:85:d6:18: 45:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: F8:EA:79:76:9F:4F:98:F7:D5:A7:23:81:63:14:CD:21:6D:8F:01:AA X509v3 Authority Key Identifier: keyid:12:34:5F:11:5A:C4:B6:2A:51:F5:27:4C:54:C8:1E:86:46:3B:D0:BA X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/0/12345F115AC4B62A51F5274C54C81E86463BD0BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/EjRfEVrEtipR9SdMVMgehkY70Lo.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/4d5a03eb-a3e1-4879-85bf-2bea035558dd/1/F8EA79769F4F98F7D5A723816314CD216D8F01AA.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.158.150.0/23 Signature Algorithm: sha256WithRSAEncryption 56:4d:aa:cc:f0:9b:dd:95:f6:7d:fa:7e:50:5f:d4:69:fb:e5: ef:dd:2e:3d:87:75:ba:d8:47:9c:51:44:96:49:b6:5b:51:cf: 36:c5:ec:8d:a5:ba:9d:bc:7e:0e:86:ac:03:03:13:ea:6e:89: 17:1f:4b:ba:ef:67:a1:09:3c:d9:0f:e5:ec:68:1e:4c:fd:73: 46:85:c9:f0:39:a8:5e:6b:ee:b9:ea:ce:05:3b:4a:c0:46:62: 93:48:af:5e:ff:80:85:26:d4:ea:45:05:63:f9:99:af:ce:ab: 02:ce:7b:ac:4e:96:c1:f9:d8:48:bb:16:4c:8e:1d:e3:14:07: 85:57:d7:b4:2a:2d:a6:4c:f8:22:b0:45:0e:ac:60:a3:1e:a4: 02:4a:d9:dd:f3:f4:3e:3c:aa:11:33:e4:4b:68:57:61:18:d9: 17:ed:3a:2b:9b:b7:b9:52:b8:45:2a:f4:97:56:f4:a9:a6:06: a0:b8:b8:22:8c:27:6e:c9:b1:53:53:3d:cf:9b:5e:50:06:1c: 1a:ee:34:32:92:73:f9:a0:63:26:c9:49:6f:8d:2b:11:35:56: 78:33:8d:5d:0f:8c:0b:ce:a3:cd:a7:4d:65:6e:f1:11:e3:e5: 8f:aa:f2:4e:d7:62:e7:da:e8:ad:30:60:53:6e:51:48:b3:e2: eb:ea:b6:0a -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUNB8o/8kEidg5v00VmiBV7MGVDUUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEygxMjM0NUYxMTVB QzRCNjJBNTFGNTI3NEM1NEM4MUU4NjQ2M0JEMEJBMB4XDTI2MDQwNzA3MjAxMVoX DTI3MDQwNjA3MjUxMVowMzExMC8GA1UEAxMoRjhFQTc5NzY5RjRGOThGN0Q1QTcy MzgxNjMxNENEMjE2RDhGMDFBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALPMRO6e1peBr4E7qZ2G2RkxgIvA6qTjJO/tohmDJBbypdLFVtbWIikUjqHk 3GwqLPOtvQZ5pv/NUxEC04pYT+ZLwVFVxN3wXySs2z1Il5gFsgpdjAq8WVHV6w1h PwT7n9/2+Hi/wPDEXIUwZkRfajFh7HB29atyQJALJvw8KdjGCRXAPG2wbhYFjvb7 Zq2TR08OPGVhrzchIO+Tqo/WxyDpWMcicvL/jrx/vaPNrXUPcT3L061N00qih+QP 0vGcqsIW3M6vDRO7RjQ33DUAFkwBLrwNU/hQ1hMhtk12IxgjNRi/PWENmYNZkpD2 L0wmEG9ibbvTquLvGwiLhdYYRT8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFPjqeXafT5j31acjgWMUzSFtjwGqMB8GA1UdIwQYMBaAFBI0 XxFaxLYqUfUnTFTIHoZGO9C6MA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8w LzEyMzQ1RjExNUFDNEI2MkE1MUY1Mjc0QzU0QzgxRTg2NDYzQkQwQkEuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3QzcyRkQxRkYyL0Vq UmZFVnJFdGlwUjlTZE1WTWdlaGtZNzBMby5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by80ZDVhMDNlYi1hM2UxLTQ4NzktODViZi0yYmVhMDM1NTU4ZGQvMTCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkNWEwM2Vi LWEzZTEtNDg3OS04NWJmLTJiZWEwMzU1NThkZC8xL0Y4RUE3OTc2OUY0Rjk4RjdE NUE3MjM4MTYzMTRDRDIxNkQ4RjAxQUEubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGXnpYwDQYJKoZIhvcNAQELBQADggEBAFZNqszwm92V9n36flBf1Gn75e/dLj2H dbrYR5xRRJZJtltRzzbF7I2lup28fg6GrAMDE+puiRcfS7rvZ6EJPNkP5exoHkz9 c0aFyfA5qF5r7rnqzgU7SsBGYpNIr17/gIUm1OpFBWP5ma/OqwLOe6xOlsH52Ei7 FkyOHeMUB4VX17QqLaZM+CKwRQ6sYKMepAJK2d3z9D48qhEz5EtoV2EY2RftOiub t7lSuEUq9JdW9KmmBqC4uCKMJ27JsVNTPc+bXlAGHBruNDKSc/mgYybJSW+NKxE1 VngzjV0PjAvOo82nTWVu8RHj5Y+q8k7XYufa6K0wYFNuUUiz4uvqtgo= -----END CERTIFICATE-----Generated at Fri Apr 17 06:52:15 2026 by rpki-client