$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/170979C0E31958FA76259F360B8405233C40BA7A.cer File: 170979C0E31958FA76259F360B8405233C40BA7A.cer (raw, json) Hash identifier: 78s+tYAvYbPvIsF+/ByEi2bw9IWpqfS1jwntT8vY5Ig= Subject key identifier: 17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1E988F45D2BF4D9046498F9E1E9ED352EFD49BA6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft caRepository: rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 09 Apr 2026 11:20:53 +0000 Certificate not after: Thu 08 Apr 2027 11:25:53 +0000 Subordinate resources: IP: 157.20.38.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:98:8f:45:d2:bf:4d:90:46:49:8f:9e:1e:9e:d3:52:ef:d4:9b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 9 11:20:53 2026 GMT Not After : Apr 8 11:25:53 2027 GMT Subject: CN=170979C0E31958FA76259F360B8405233C40BA7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fc:06:50:c2:86:e8:c7:b3:8f:64:6f:00:70: cc:c2:2d:e7:98:6f:8f:f0:59:19:0d:6f:bf:9a:8d: bb:ed:56:19:fd:72:de:e3:39:b9:56:99:e5:9e:15: 69:94:15:a7:43:1d:66:c1:3d:7e:81:55:c1:25:a9: d7:04:0f:78:f0:be:d0:1c:d0:28:6d:5e:de:06:78: d3:e2:a9:2e:9e:9d:46:26:eb:e6:3a:f5:ee:a0:14: 89:d5:df:3f:9b:43:fe:ba:b6:05:64:97:a4:34:e1: ce:46:7b:2c:7e:3a:ab:75:92:a8:cb:bb:1b:3c:9d: 95:fe:12:b5:aa:eb:dc:a6:d0:5e:a6:ba:71:38:29: 55:a2:ab:8b:61:d0:61:87:90:26:bd:9e:1a:5b:29: df:fa:51:9e:33:07:27:39:ed:52:dc:ac:37:a6:c6: ef:59:dc:77:97:77:e7:0e:fb:95:19:60:63:03:49: a3:35:2d:0b:3b:52:b0:64:34:99:9d:95:ab:2e:19: e9:d0:0b:0c:fd:07:a2:95:65:9b:79:cb:55:ae:a2: e6:75:62:a2:63:16:74:94:c1:a2:55:5d:8a:7b:cd: f6:e4:6e:a2:ca:f9:1c:42:d4:42:4d:99:e8:01:e9: 5f:0a:39:c2:66:b0:8c:bc:8c:b1:48:de:34:fd:c3: 07:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:09:79:C0:E3:19:58:FA:76:25:9F:36:0B:84:05:23:3C:40:BA:7A X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/e992bf26-c8e6-4a86-9b33-ea3a2af557f0/0/170979C0E31958FA76259F360B8405233C40BA7A.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.38.0/23 Signature Algorithm: sha256WithRSAEncryption 30:24:8c:0c:fb:ec:5c:9d:e0:46:5e:25:44:05:55:e1:70:4c: 38:9b:2b:b8:b9:de:ea:25:26:d2:8e:2a:27:ae:40:4e:b3:4d: 86:63:dc:de:9e:df:3a:24:b2:45:1f:21:11:42:30:53:31:01: 43:85:45:7c:4e:05:86:6e:3f:de:43:53:9e:30:69:79:dc:db: c2:9d:e3:0f:2f:56:4a:a4:33:16:b1:5e:89:88:4e:18:d1:19: 44:49:08:15:ae:07:a3:22:bb:6e:2a:93:d3:00:a3:7e:b9:b4: b4:db:10:4c:5f:9d:ec:c8:6e:7c:bc:d1:be:f3:b5:ac:74:59: 7a:82:34:20:73:cb:92:63:42:90:ec:66:4a:0e:c9:41:3e:4b: 17:f3:e3:b1:ef:af:dc:65:07:82:5c:b9:c7:90:78:19:c3:27: cf:60:dd:42:09:bc:6a:d8:75:ac:c5:21:fa:c6:10:49:c6:c1: aa:13:7e:1e:8b:af:a0:f3:e5:4d:91:53:61:f3:ca:e9:8b:d2: f5:7a:e5:bf:db:33:ed:47:95:bf:60:1f:3e:78:91:b4:b7:85: 70:6d:b1:29:92:e2:10:db:fc:89:7d:c0:57:90:0a:f4:4a:c3: 0b:52:82:f7:0a:8d:1f:1c:d6:50:1f:05:75:21:65:0c:e3:71: 71:f8:9d:99 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHpiPRdK/TZBGSY+eHp7TUu/Um6YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDQwOTExMjA1M1oX DTI3MDQwODExMjU1M1owMzExMC8GA1UEAxMoMTcwOTc5QzBFMzE5NThGQTc2MjU5 RjM2MEI4NDA1MjMzQzQwQkE3QTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK/8BlDChujHs49kbwBwzMIt55hvj/BZGQ1vv5qNu+1WGf1y3uM5uVaZ5Z4V aZQVp0MdZsE9foFVwSWp1wQPePC+0BzQKG1e3gZ40+KpLp6dRibr5jr17qAUidXf P5tD/rq2BWSXpDThzkZ7LH46q3WSqMu7Gzydlf4Starr3KbQXqa6cTgpVaKri2HQ YYeQJr2eGlsp3/pRnjMHJzntUtysN6bG71ncd5d35w77lRlgYwNJozUtCztSsGQ0 mZ2Vqy4Z6dALDP0HopVlm3nLVa6i5nViomMWdJTBolVdinvN9uRuosr5HELUQk2Z 6AHpXwo5wmawjLyMsUjeNP3DB4cCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFBcJecDjGVj6diWfNguEBSM8QLp6MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9lOTkyYmYyNi1jOGU2LTRhODYtOWIzMy1lYTNhMmFmNTU3ZjAvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5OTJiZjI2 LWM4ZTYtNGE4Ni05YjMzLWVhM2EyYWY1NTdmMC8wLzE3MDk3OUMwRTMxOTU4RkE3 NjI1OUYzNjBCODQwNTIzM0M0MEJBN0EubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFCYwDQYJKoZIhvcNAQELBQADggEBADAkjAz77Fyd4EZeJUQFVeFwTDibK7i5 3uolJtKOKieuQE6zTYZj3N6e3zokskUfIRFCMFMxAUOFRXxOBYZuP95DU54waXnc 28Kd4w8vVkqkMxaxXomIThjRGURJCBWuB6Miu24qk9MAo365tLTbEExfnezIbny8 0b7ztax0WXqCNCBzy5JjQpDsZkoOyUE+Sxfz47Hvr9xlB4JcuceQeBnDJ89g3UIJ vGrYdazFIfrGEEnGwaoTfh6Lr6Dz5U2RU2HzyumL0vV65b/bM+1Hlb9gHz54kbS3 hXBtsSmS4hDb/Il9wFeQCvRKwwtSgvcKjR8c1lAfBXUhZQzjcXH4nZk= -----END CERTIFICATE-----Generated at Fri Apr 17 10:31:23 2026 by rpki-client