$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/1391AB90F1BF56A92FBDF7B8F48207992410775E.cer File: 1391AB90F1BF56A92FBDF7B8F48207992410775E.cer (raw, json) Hash identifier: zz42vfx8Jghm8vCFUv4Z1rOC13UytXqa5VEGLVuAOLg= Subject key identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 5E652B4B7A579E1E36E75AE7CE01C80251C5E475 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft caRepository: rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 02 Apr 2026 19:19:34 +0000 Certificate not after: Thu 01 Apr 2027 19:24:34 +0000 Subordinate resources: IP: 160.19.146.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:65:2b:4b:7a:57:9e:1e:36:e7:5a:e7:ce:01:c8:02:51:c5:e4:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 2 19:19:34 2026 GMT Not After : Apr 1 19:24:34 2027 GMT Subject: CN=1391AB90F1BF56A92FBDF7B8F48207992410775E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:40:3a:85:02:42:85:1f:84:51:41:a8:bc:2f: 59:7e:5d:31:8e:b6:a7:bb:94:70:1f:d0:57:b0:a6: 2e:5b:37:9f:3a:fb:22:20:e0:8f:c9:a3:a5:68:11: 77:5c:fa:28:a2:70:30:cb:f7:b2:ff:33:15:a9:74: 3e:94:fc:da:cc:be:e8:1d:3e:ec:d8:89:29:f1:5e: 2d:dd:c9:f1:c3:1b:bc:25:dc:33:32:f2:69:3a:0e: 02:78:cb:85:18:f6:4a:b2:91:66:dc:69:49:90:59: 20:01:a1:5c:05:02:0d:0a:b6:a9:91:e8:5a:6a:bc: 26:a8:47:7a:29:73:81:9e:6b:37:f7:e3:6c:4c:73: af:82:b8:c8:1a:c1:90:47:f9:b1:37:3b:ac:7e:49: 10:79:24:c7:08:e0:52:11:07:33:43:31:9b:57:28: 63:e6:34:a1:fa:89:d5:24:f9:65:be:27:b7:29:8d: f0:60:d5:23:2c:a9:55:41:13:b4:29:c5:ab:6a:88: b1:42:24:01:1a:6a:73:d8:d6:6c:83:93:ff:26:0f: d4:f5:66:5c:22:94:b7:96:61:76:bc:af:a7:13:e5: 60:a5:f0:7d:39:c5:76:2f:41:3a:a1:e3:42:ae:ef: cd:96:e8:cb:e2:56:d0:85:09:05:27:b5:e4:32:e6: 7d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 13:91:AB:90:F1:BF:56:A9:2F:BD:F7:B8:F4:82:07:99:24:10:77:5E X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/b9b9bd38-2efa-4d4c-a956-42492a3e6000/0/1391AB90F1BF56A92FBDF7B8F48207992410775E.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.146.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:8f:c7:3c:8f:a6:f6:c3:11:62:e9:05:8d:13:b9:58:15:c3: e4:0e:70:8c:b0:17:f8:18:c9:b5:f6:d8:e7:51:b3:94:ec:96: 0b:0c:48:29:fd:ce:66:4c:f3:fa:ad:f0:ba:e8:b3:e2:8d:af: ad:ed:c3:e0:a0:8f:c6:1c:ff:ca:ec:db:57:bc:e5:28:b8:5f: 34:9c:93:9b:53:a0:d1:2a:65:76:d3:67:fb:49:38:60:65:83: 21:9b:89:ed:b6:24:95:8c:6a:25:c3:ab:99:ad:ef:58:1d:a8: c9:29:c6:f5:84:ee:b3:16:d7:94:aa:f5:7b:6a:13:24:b9:70: f6:18:3e:24:56:7d:84:9c:19:8a:f8:0a:e3:ce:28:4f:85:90: cf:06:6e:db:cc:b6:64:51:68:52:36:c3:aa:df:3d:4d:86:4e: 12:02:28:03:31:f5:f3:12:dd:7f:ad:10:56:71:42:ff:c2:61: 65:e6:34:a5:fc:1f:7f:b7:de:db:2e:2d:27:ee:b6:9e:b6:e7: 55:22:57:fb:ac:1d:a7:27:2d:68:7c:12:ae:2c:2e:8a:92:1f: 5e:be:f7:43:31:bf:e0:13:95:a9:36:36:78:68:df:fa:ae:97: ea:12:8d:8e:dc:5b:e9:9c:9b:20:fa:9b:c0:e1:ab:26:9f:ea: e5:70:9b:e1 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUXmUrS3pXnh4251rnzgHIAlHF5HUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDQwMjE5MTkzNFoX DTI3MDQwMTE5MjQzNFowMzExMC8GA1UEAxMoMTM5MUFCOTBGMUJGNTZBOTJGQkRG N0I4RjQ4MjA3OTkyNDEwNzc1RTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBAOoUCQoUfhFFBqLwvWX5dMY62p7uUcB/QV7CmLls3nzr7IiDgj8mjpWgR d1z6KKJwMMv3sv8zFal0PpT82sy+6B0+7NiJKfFeLd3J8cMbvCXcMzLyaToOAnjL hRj2SrKRZtxpSZBZIAGhXAUCDQq2qZHoWmq8JqhHeilzgZ5rN/fjbExzr4K4yBrB kEf5sTc7rH5JEHkkxwjgUhEHM0Mxm1coY+Y0ofqJ1ST5Zb4ntymN8GDVIyypVUET tCnFq2qIsUIkARpqc9jWbIOT/yYP1PVmXCKUt5ZhdryvpxPlYKXwfTnFdi9BOqHj Qq7vzZboy+JW0IUJBSe15DLmfdkCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBORq5Dxv1apL733uPSCB5kkEHdeMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9iOWI5YmQzOC0yZWZhLTRkNGMtYTk1Ni00MjQ5MmEzZTYwMDAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I5YjliZDM4 LTJlZmEtNGQ0Yy1hOTU2LTQyNDkyYTNlNjAwMC8wLzEzOTFBQjkwRjFCRjU2QTky RkJERjdCOEY0ODIwNzk5MjQxMDc3NUUubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGgE5IwDQYJKoZIhvcNAQELBQADggEBAHyPxzyPpvbDEWLpBY0TuVgVw+QOcIyw F/gYybX22OdRs5TslgsMSCn9zmZM8/qt8Lros+KNr63tw+Cgj8Yc/8rs21e85Si4 XzSck5tToNEqZXbTZ/tJOGBlgyGbie22JJWMaiXDq5mt71gdqMkpxvWE7rMW15Sq 9XtqEyS5cPYYPiRWfYScGYr4CuPOKE+FkM8GbtvMtmRRaFI2w6rfPU2GThICKAMx 9fMS3X+tEFZxQv/CYWXmNKX8H3+33tsuLSfutp6251UiV/usHacnLWh8Eq4sLoqS H16+90Mxv+ATlak2Nnho3/qul+oSjY7cW+mcmyD6m8Dhqyaf6uVwm+E= -----END CERTIFICATE-----Generated at Fri Apr 17 11:18:01 2026 by rpki-client