$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer File: 394BCC5C0310DB0117DDC1DC1A176026DB421D88.cer (raw, json) Hash identifier: fC+x3VmE1xbQj58VaYJ+jntmt2Gcq90laURxjU6fYvM= Subject key identifier: 39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2A8CA32C4985708DBAE460CC71E14E4DCF3783BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft caRepository: rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 03 Apr 2026 11:08:05 +0000 Certificate not after: Fri 02 Apr 2027 11:13:05 +0000 Subordinate resources: IP: 157.66.190.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:8c:a3:2c:49:85:70:8d:ba:e4:60:cc:71:e1:4e:4d:cf:37:83:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 3 11:08:05 2026 GMT Not After : Apr 2 11:13:05 2027 GMT Subject: CN=394BCC5C0310DB0117DDC1DC1A176026DB421D88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:21:c3:f3:25:f7:70:54:22:30:c7:3c:e6:b6: c9:31:34:57:de:ed:bd:f6:d0:3e:98:09:8e:dd:7d: b4:67:f0:ed:f6:9a:c8:0b:90:9f:38:4c:a4:b2:bc: 6d:40:2c:b0:e7:4e:ea:b0:f4:03:62:f0:8e:9f:15: 9d:79:a0:e1:db:89:e9:32:0a:99:a5:e2:52:23:61: fa:24:a0:4c:be:4c:20:a8:60:c7:32:71:00:bb:74: 27:fd:69:19:e3:87:4e:40:04:62:05:44:f9:c4:c7: d5:0d:f3:56:b2:5e:cb:5e:de:9c:1b:a6:94:cb:54: d0:69:3e:9b:ea:73:9f:55:e0:b0:c5:82:af:d0:04: 4f:88:0e:ad:e0:8e:72:86:cb:31:79:ec:e8:1a:d9: a1:cf:1b:5e:ed:07:2d:7a:d9:f5:6b:ba:c3:1a:3a: 7f:46:9c:ee:af:e9:97:4e:e8:54:b1:87:fe:a6:5f: 6f:38:75:c9:12:6b:ae:77:08:8f:50:b5:d6:88:24: 0e:56:96:a3:4e:8b:94:08:d6:8b:3f:fe:11:b7:70: 8c:c2:cd:1d:02:52:69:94:f5:83:ed:e1:93:54:44: 30:fd:c2:96:57:a9:26:dc:95:7b:de:f5:f0:49:11: 37:c1:5e:d9:76:00:82:fb:29:40:02:31:c9:76:ec: ef:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 39:4B:CC:5C:03:10:DB:01:17:DD:C1:DC:1A:17:60:26:DB:42:1D:88 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/97134f18-11e1-41ae-bb05-9fbf48212b7d/0/394BCC5C0310DB0117DDC1DC1A176026DB421D88.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.190.0/24 Signature Algorithm: sha256WithRSAEncryption 96:74:f0:e1:8a:25:75:df:bc:23:83:62:86:6b:3e:46:85:d8: 12:2f:f1:d8:b3:ad:ca:62:ff:f5:3d:96:f6:fd:a8:25:27:83: f3:f6:1d:a0:2f:65:32:ca:8c:90:e9:70:05:a0:95:21:bb:b3: 8f:53:be:2b:97:12:d8:3e:a8:d9:e6:99:09:47:c0:23:74:53: 25:d9:ae:1a:83:8c:c6:35:a6:a8:f4:15:04:8d:98:40:86:07: a5:5f:32:05:d5:c4:98:ad:62:88:ad:e4:b5:9a:9b:dc:61:88: 8d:e1:18:f7:a6:7f:5f:2d:5f:a5:82:8e:73:2a:29:fc:a8:a0: df:ae:62:6c:38:4f:57:11:04:2a:63:e8:c9:eb:7e:e5:07:12: c3:ae:43:d2:0c:d2:d3:d1:ae:07:d9:c2:6e:e7:5e:9d:05:d7: d7:07:54:95:0f:78:83:f9:31:de:ad:50:51:21:ed:06:47:5e: 6c:97:99:32:f5:27:03:24:0d:d7:fa:01:5d:97:76:7f:4d:92: dc:52:f8:18:85:b2:02:62:c9:36:40:53:70:3e:e4:16:ee:9d: 9d:c9:5e:13:79:46:44:a2:e2:ee:84:ab:27:d1:98:89:9a:f0: da:3f:9a:09:72:e7:1f:38:15:84:86:e7:f7:a8:02:79:23:cc: 90:cb:5d:db -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUKoyjLEmFcI265GDMceFOTc83g74wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDQwMzExMDgwNVoX DTI3MDQwMjExMTMwNVowMzExMC8GA1UEAxMoMzk0QkNDNUMwMzEwREIwMTE3RERD MURDMUExNzYwMjZEQjQyMUQ4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKQhw/Ml93BUIjDHPOa2yTE0V97tvfbQPpgJjt19tGfw7faayAuQnzhMpLK8 bUAssOdO6rD0A2Lwjp8VnXmg4duJ6TIKmaXiUiNh+iSgTL5MIKhgxzJxALt0J/1p GeOHTkAEYgVE+cTH1Q3zVrJey17enBumlMtU0Gk+m+pzn1XgsMWCr9AET4gOreCO cobLMXns6BrZoc8bXu0HLXrZ9Wu6wxo6f0ac7q/pl07oVLGH/qZfbzh1yRJrrncI j1C11ogkDlaWo06LlAjWiz/+EbdwjMLNHQJSaZT1g+3hk1REMP3CllepJtyVe971 8EkRN8Fe2XYAgvspQAIxyXbs7zsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDlLzFwDENsBF93B3BoXYCbbQh2IMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85NzEzNGYxOC0xMWUxLTQxYWUtYmIwNS05ZmJmNDgyMTJiN2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk3MTM0ZjE4 LTExZTEtNDFhZS1iYjA1LTlmYmY0ODIxMmI3ZC8wLzM5NEJDQzVDMDMxMERCMDEx N0REQzFEQzFBMTc2MDI2REI0MjFEODgubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdQr4wDQYJKoZIhvcNAQELBQADggEBAJZ08OGKJXXfvCODYoZrPkaF2BIv8diz rcpi//U9lvb9qCUng/P2HaAvZTLKjJDpcAWglSG7s49TviuXEtg+qNnmmQlHwCN0 UyXZrhqDjMY1pqj0FQSNmECGB6VfMgXVxJitYoit5LWam9xhiI3hGPemf18tX6WC jnMqKfyooN+uYmw4T1cRBCpj6MnrfuUHEsOuQ9IM0tPRrgfZwm7nXp0F19cHVJUP eIP5Md6tUFEh7QZHXmyXmTL1JwMkDdf6AV2Xdn9NktxS+BiFsgJiyTZAU3A+5Bbu nZ3JXhN5RkSi4u6EqyfRmIma8No/mgly5x84FYSG5/eoAnkjzJDLXds= -----END CERTIFICATE-----Generated at Fri Apr 17 12:30:49 2026 by rpki-client