$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer File: 3C6D7485D61AD54226152E5D8A813D70E34D29AB.cer (raw, json) Hash identifier: 0PLL4n/CPOBGqL8HN+rruaxtLPXLAAFJjUZQk9eDm0g= Subject key identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1419C751848E187345FBDFC25723F39DD37B4306 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft caRepository: rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Feb 2026 18:22:26 +0000 Certificate not after: Tue 02 Feb 2027 18:27:26 +0000 Subordinate resources: IP: 157.20.158.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:19:c7:51:84:8e:18:73:45:fb:df:c2:57:23:f3:9d:d3:7b:43:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 3 18:22:26 2026 GMT Not After : Feb 2 18:27:26 2027 GMT Subject: CN=3C6D7485D61AD54226152E5D8A813D70E34D29AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:81:50:67:ad:85:19:fa:e9:ae:20:c8:74:55: 9b:6c:17:08:16:44:bc:e4:14:79:36:ba:d5:78:df: 6f:44:cd:1e:cb:0d:4b:00:2f:95:29:e7:9a:bd:14: 16:9a:94:89:c0:6d:d1:74:5b:38:95:c6:24:fb:8e: ab:3d:6b:e9:51:bc:4e:12:6e:ad:b2:06:cc:a4:68: 02:03:14:ba:ce:f9:f3:5e:40:29:e4:77:e1:fc:32: bf:79:0a:73:57:30:30:4e:2b:51:fa:65:e9:9e:9d: a3:6f:6b:b1:9e:a3:63:4c:29:df:e3:c9:dc:bc:bf: 29:3c:a1:94:c9:b4:a9:db:3b:d8:24:35:ab:e9:ae: 47:c9:5d:4e:d9:6b:37:75:89:b4:e8:25:61:9e:bf: 76:09:06:bc:7a:1c:92:ee:b7:30:9f:3e:ba:b2:bf: 6e:ba:16:8f:8f:4a:ad:36:43:ef:8e:3c:53:db:73: b7:88:68:91:cc:f4:8e:de:8f:bd:87:9b:95:2d:33: 6c:79:1a:3e:8e:64:53:02:5b:04:62:d3:83:28:bf: 33:b5:1e:53:35:81:64:7a:13:b9:31:71:55:e7:6c: 0d:a2:6e:cf:ec:07:17:ae:f9:63:d2:49:07:7d:02: c6:93:d7:d7:10:eb:14:11:76:55:4d:1a:63:a5:88: b6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3C:6D:74:85:D6:1A:D5:42:26:15:2E:5D:8A:81:3D:70:E3:4D:29:AB X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/d159a362-950c-45c2-aecc-82b214bce474/0/3C6D7485D61AD54226152E5D8A813D70E34D29AB.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.158.0/23 Signature Algorithm: sha256WithRSAEncryption 16:4e:5a:38:01:47:98:93:2b:14:16:43:a5:7c:2d:36:b1:15: 48:6f:47:0c:a7:c9:85:94:23:ca:98:49:62:0f:8a:81:3e:21: 04:9d:50:a5:73:a1:1e:51:bd:ef:5f:82:c9:ac:99:5d:a2:b8: 90:61:6c:2b:ed:d1:20:7e:c7:f0:a3:17:c6:45:48:02:04:0c: 28:4f:4a:21:0e:c5:7a:74:93:a7:68:a5:2d:3b:c8:05:be:0a: ca:ca:4e:be:9f:ff:70:67:6b:f5:28:c0:94:4c:52:66:ad:35: a5:6f:b0:e7:79:84:ca:25:50:33:53:6c:4a:cb:21:3d:68:fa: 37:34:de:03:7c:54:ff:3b:e8:5f:26:44:88:92:75:ec:4c:bb: 24:ee:7c:91:68:b9:5d:93:aa:87:2d:78:87:4e:ce:4b:66:a5: 85:ab:4f:f7:ff:29:df:2e:e0:60:73:2d:6b:bb:3e:bc:00:99: 6d:66:ae:33:4d:76:c8:a1:82:46:fb:44:8c:1a:8c:21:96:6e: 6e:70:40:a9:51:8e:f6:d9:d7:fc:16:08:d4:5c:9d:e1:b6:da: cf:2b:e0:2a:2f:67:8b:73:a7:00:2c:56:70:77:af:af:9b:2d: 38:01:d7:a1:28:a0:98:4c:4f:59:b6:c6:d2:28:9f:69:fe:8b: 85:13:e2:9c -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUFBnHUYSOGHNF+9/CVyPzndN7QwYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDIwMzE4MjIyNloX DTI3MDIwMjE4MjcyNlowMzExMC8GA1UEAxMoM0M2RDc0ODVENjFBRDU0MjI2MTUy RTVEOEE4MTNENzBFMzREMjlBQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALiBUGethRn66a4gyHRVm2wXCBZEvOQUeTa61Xjfb0TNHssNSwAvlSnnmr0U FpqUicBt0XRbOJXGJPuOqz1r6VG8ThJurbIGzKRoAgMUus75815AKeR34fwyv3kK c1cwME4rUfpl6Z6do29rsZ6jY0wp3+PJ3Ly/KTyhlMm0qds72CQ1q+muR8ldTtlr N3WJtOglYZ6/dgkGvHocku63MJ8+urK/broWj49KrTZD7448U9tzt4hokcz0jt6P vYeblS0zbHkaPo5kUwJbBGLTgyi/M7UeUzWBZHoTuTFxVedsDaJuz+wHF675Y9JJ B30CxpPX1xDrFBF2VU0aY6WItgcCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFDxtdIXWGtVCJhUuXYqBPXDjTSmrMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9kMTU5YTM2Mi05NTBjLTQ1YzItYWVjYy04MmIyMTRiY2U0NzQvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxNTlhMzYy LTk1MGMtNDVjMi1hZWNjLTgyYjIxNGJjZTQ3NC8wLzNDNkQ3NDg1RDYxQUQ1NDIy NjE1MkU1RDhBODEzRDcwRTM0RDI5QUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFJ4wDQYJKoZIhvcNAQELBQADggEBABZOWjgBR5iTKxQWQ6V8LTaxFUhvRwyn yYWUI8qYSWIPioE+IQSdUKVzoR5Rve9fgsmsmV2iuJBhbCvt0SB+x/CjF8ZFSAIE DChPSiEOxXp0k6dopS07yAW+CsrKTr6f/3Bna/UowJRMUmatNaVvsOd5hMolUDNT bErLIT1o+jc03gN8VP876F8mRIiSdexMuyTufJFouV2TqocteIdOzktmpYWrT/f/ Kd8u4GBzLWu7PrwAmW1mrjNNdsihgkb7RIwajCGWbm5wQKlRjvbZ1/wWCNRcneG2 2s8r4CovZ4tzpwAsVnB3r6+bLTgB16EooJhMT1m2xtIon2n+i4UT4pw= -----END CERTIFICATE-----Generated at Mon Mar 2 09:46:22 2026 by rpki-client