$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer File: 308A510040FDF9BC28B7B63D3203E40E2106F1B4.cer (raw, json) Hash identifier: EO7z4I2VRDBhFLxotWQTCUTGakPwpy1QItD6VaXIUng= Subject key identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 47D4CCF8350BF26EB25E821A662DD5088E607F2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft caRepository: rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 26 Mar 2026 20:08:42 +0000 Certificate not after: Thu 25 Mar 2027 20:13:42 +0000 Subordinate resources: IP: 157.66.16.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d4:cc:f8:35:0b:f2:6e:b2:5e:82:1a:66:2d:d5:08:8e:60:7f:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Mar 26 20:08:42 2026 GMT Not After : Mar 25 20:13:42 2027 GMT Subject: CN=308A510040FDF9BC28B7B63D3203E40E2106F1B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b4:00:67:a7:86:c3:8d:e1:0e:09:8a:3a:2f: a0:ca:b3:d5:c0:c6:05:6f:b3:6d:b2:3b:65:c7:bb: d7:3e:98:8f:6d:bd:fd:23:0b:25:e3:5e:6b:ef:57: 7f:98:7d:71:7f:ee:61:c9:f4:83:09:72:a8:b8:5b: 08:ac:61:4e:0e:6a:c2:1c:8d:a8:59:1c:b4:d5:8c: 0f:86:f2:7a:29:47:4d:90:e0:e0:25:12:72:6b:d0: b3:05:73:ae:22:29:21:de:85:73:de:2a:61:d4:12: f3:e3:d1:b2:5f:51:42:e9:ec:15:49:81:fc:50:5b: de:a0:a3:72:c0:91:b6:e6:97:ee:b0:71:ad:86:78: c1:c2:ce:2b:ef:11:a1:3f:b8:e0:e9:86:04:78:4f: 09:ed:f7:b2:01:ec:c3:13:fc:1c:c0:77:2f:44:7f: 89:66:30:23:e3:c5:0f:35:a6:d9:ee:c6:59:c0:b5: be:da:4b:9e:af:c5:80:d6:ec:cd:54:a2:7e:9a:97: 60:66:64:3e:77:76:31:40:8d:25:7e:d3:2b:03:3f: 48:19:d0:28:f3:1e:8a:d1:5a:6f:6a:b9:48:55:6e: b6:3a:e7:18:bb:bf:87:f1:8e:af:19:32:49:9f:63: 25:da:51:07:19:d9:37:e7:b5:c2:b0:35:b1:b7:a3: c0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 30:8A:51:00:40:FD:F9:BC:28:B7:B6:3D:32:03:E4:0E:21:06:F1:B4 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/14ed8d6c-f0fa-47cc-aeaa-b4e3ee116882/0/308A510040FDF9BC28B7B63D3203E40E2106F1B4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.16.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:9a:96:c8:03:73:72:95:18:bc:94:6e:1c:2c:83:4c:27:83: 60:f0:48:f3:0e:b7:95:33:0a:b4:00:1b:da:d0:6a:de:93:20: 84:66:36:ca:f7:b2:5e:3c:27:6c:9c:ef:ca:e2:5a:89:62:09: 6d:3c:50:4a:f0:d5:0e:b0:54:98:14:29:67:0a:8d:29:59:ae: 70:f9:f7:26:ab:4d:b2:06:dc:f3:c2:57:14:19:41:65:31:5a: 29:07:df:27:96:2c:e1:7f:a0:8d:78:8f:b6:a9:fc:1b:04:d9: d5:5c:5a:d0:2d:b2:ba:ae:e4:56:dc:4a:9d:10:39:27:bc:b5: bb:d1:76:00:94:1b:3c:28:22:f6:e3:2d:20:c2:44:89:ae:d7: ca:bd:e2:4e:05:48:fe:c1:fe:20:07:50:2a:56:c1:c0:23:00: 58:41:a9:03:cb:26:3e:86:20:6a:22:f6:ce:39:88:dc:45:22: d2:64:6d:e3:3d:25:9b:2f:31:de:ca:37:d8:60:ca:d6:87:7a: d0:1e:7a:88:3d:8d:0d:6d:46:a8:93:3d:c6:56:f7:1a:45:1b: 95:f4:5f:a9:9e:5a:07:47:dd:27:e7:2f:79:c9:1d:1a:cd:40: 94:ba:2a:d7:a4:d5:e5:f4:c8:20:0c:31:24:22:6f:ca:54:71: b9:9f:f5:d3 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUR9TM+DUL8m6yXoIaZi3VCI5gfyowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDMyNjIwMDg0MloX DTI3MDMyNTIwMTM0MlowMzExMC8GA1UEAxMoMzA4QTUxMDA0MEZERjlCQzI4QjdC NjNEMzIwM0U0MEUyMTA2RjFCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKq0AGenhsON4Q4JijovoMqz1cDGBW+zbbI7Zce71z6Yj229/SMLJeNea+9X f5h9cX/uYcn0gwlyqLhbCKxhTg5qwhyNqFkctNWMD4byeilHTZDg4CUScmvQswVz riIpId6Fc94qYdQS8+PRsl9RQunsFUmB/FBb3qCjcsCRtuaX7rBxrYZ4wcLOK+8R oT+44OmGBHhPCe33sgHswxP8HMB3L0R/iWYwI+PFDzWm2e7GWcC1vtpLnq/FgNbs zVSifpqXYGZkPnd2MUCNJX7TKwM/SBnQKPMeitFab2q5SFVutjrnGLu/h/GOrxky SZ9jJdpRBxnZN+e1wrA1sbejwCcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDCKUQBA/fm8KLe2PTID5A4hBvG0MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8xNGVkOGQ2Yy1mMGZhLTQ3Y2MtYWVhYS1iNGUzZWUxMTY4ODIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0ZWQ4ZDZj LWYwZmEtNDdjYy1hZWFhLWI0ZTNlZTExNjg4Mi8wLzMwOEE1MTAwNDBGREY5QkMy OEI3QjYzRDMyMDNFNDBFMjEwNkYxQjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQhAwDQYJKoZIhvcNAQELBQADggEBAIyalsgDc3KVGLyUbhwsg0wng2DwSPMO t5UzCrQAG9rQat6TIIRmNsr3sl48J2yc78riWoliCW08UErw1Q6wVJgUKWcKjSlZ rnD59yarTbIG3PPCVxQZQWUxWikH3yeWLOF/oI14j7ap/BsE2dVcWtAtsrqu5Fbc Sp0QOSe8tbvRdgCUGzwoIvbjLSDCRImu18q94k4FSP7B/iAHUCpWwcAjAFhBqQPL Jj6GIGoi9s45iNxFItJkbeM9JZsvMd7KN9hgytaHetAeeog9jQ1tRqiTPcZW9xpF G5X0X6meWgdH3SfnL3nJHRrNQJS6Ktek1eX0yCAMMSQib8pUcbmf9dM= -----END CERTIFICATE-----Generated at Fri Apr 17 09:51:18 2026 by rpki-client