$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer (raw, json) Hash identifier: O0lPuBE/1XrokuxvtolgzPa/4y50xKyxmY/rtFQjkjM= Subject key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 3E2E9295BCBEAB24877A8161C32E3BF9BA889BCF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft caRepository: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 23 Jan 2026 09:44:04 +0000 Certificate not after: Fri 22 Jan 2027 09:49:04 +0000 Subordinate resources: IP: 157.20.220.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:2e:92:95:bc:be:ab:24:87:7a:81:61:c3:2e:3b:f9:ba:88:9b:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 23 09:44:04 2026 GMT Not After : Jan 22 09:49:04 2027 GMT Subject: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a7:18:49:84:f0:31:d7:1b:69:00:06:d5:02: cf:26:e2:a7:79:58:fa:84:fe:c0:4a:ed:37:60:ee: d0:ae:69:f8:69:96:40:23:3b:26:d0:91:b0:0d:64: a8:fd:63:c7:ce:ef:da:a5:b4:0a:1c:db:04:69:70: 6f:13:ed:63:89:e0:80:2b:8a:57:b2:0b:66:6b:90: 04:15:b9:03:61:ea:b0:9c:ef:94:60:31:9f:ca:1a: 5b:ce:bb:03:cc:8c:46:a3:58:4a:d0:0e:19:47:0d: 75:60:0e:a9:40:f7:62:ee:62:c1:64:de:4a:90:41: 49:46:8a:d1:16:dc:af:bd:70:d4:60:18:ca:d0:16: 4f:ab:92:7a:01:5c:0c:fe:fa:f0:6c:c1:ef:8b:e4: 24:73:d3:47:f4:a1:17:e8:00:a3:7c:f5:e1:00:de: ae:f9:f6:3a:c7:f0:82:e0:5f:05:20:31:22:e5:1f: 89:67:83:d2:02:58:d3:0f:a8:2d:64:1b:d2:f4:08: f8:82:5d:c7:b6:ae:65:f1:4b:87:54:4c:0b:6b:39: 76:0f:0f:7c:9d:ca:86:a1:42:a7:76:ee:59:e4:fc: ed:8d:1d:52:74:18:7e:58:f7:c7:8c:d1:80:df:07: d4:b0:05:bf:ab:e9:4f:65:6f:8a:d0:f6:dd:17:b6: cf:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.220.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:63:d8:85:06:3e:c3:64:10:94:cc:ec:00:f3:f4:ff:36:02: 1b:3a:ab:da:de:28:41:f8:b3:65:94:fb:af:d6:18:a7:81:b9: 85:75:d8:5f:35:03:da:84:20:13:7e:51:5c:30:0c:70:84:75: 1b:19:b1:c8:10:39:6c:cd:60:1c:cc:84:d4:ef:b0:08:03:2b: 1e:36:85:fd:fc:d6:b1:ba:fa:fb:fd:3d:83:87:85:df:f8:b1: d4:28:2b:7a:10:73:6f:68:30:94:39:d6:13:37:7d:ca:71:ed: 33:bf:e2:49:94:06:2c:2f:69:24:c0:e9:90:cc:93:82:82:8e: 36:c5:f8:87:78:6b:65:72:5a:45:3f:fc:92:38:87:78:52:3e: e2:09:ce:6f:95:6f:5f:d2:f8:c3:af:96:da:f0:8d:04:da:79: 5f:b9:7f:be:a8:fb:d3:4d:fb:ca:45:d6:76:42:8f:ee:ac:42: f5:e1:75:72:ee:a8:6e:bb:fb:59:5d:b5:92:95:9a:28:0a:f7: ea:b6:27:09:e7:c7:d2:b9:62:da:fe:9d:62:d3:e1:4d:b8:ba: 6b:7a:34:05:3e:49:7b:e3:b3:fd:7c:1a:db:97:00:1b:4f:98: e2:01:17:e0:14:75:96:4d:50:76:f7:e2:82:97:99:e8:5b:49: c7:92:cd:d7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUPi6Slby+qySHeoFhwy47+bqIm88wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEyMzA5NDQwNFoX DTI3MDEyMjA5NDkwNFowMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEw REZDQkUyNEZGOEFBQzQ0MThENDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMinGEmE8DHXG2kABtUCzybip3lY+oT+wErtN2Du0K5p+GmWQCM7JtCRsA1k qP1jx87v2qW0ChzbBGlwbxPtY4nggCuKV7ILZmuQBBW5A2HqsJzvlGAxn8oaW867 A8yMRqNYStAOGUcNdWAOqUD3Yu5iwWTeSpBBSUaK0Rbcr71w1GAYytAWT6uSegFc DP768GzB74vkJHPTR/ShF+gAo3z14QDervn2OsfwguBfBSAxIuUfiWeD0gJY0w+o LWQb0vQI+IJdx7auZfFLh1RMC2s5dg8PfJ3KhqFCp3buWeT87Y0dUnQYflj3x4zR gN8H1LAFv6vpT2VvitD23Re2z6MCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEGkea1rl0tQuZoN/L4k/4qsRBjUMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlZGQ0Y2Ni LTQyZTMtNGI3Mi05MTkzLWU5MThlN2IzMDY3ZC8wLzQxQTQ3OUFENkI5NzRCNTBC OTlBMERGQ0JFMjRGRjhBQUM0NDE4RDQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFNwwDQYJKoZIhvcNAQELBQADggEBAG9j2IUGPsNkEJTM7ADz9P82Ahs6q9re KEH4s2WU+6/WGKeBuYV12F81A9qEIBN+UVwwDHCEdRsZscgQOWzNYBzMhNTvsAgD Kx42hf381rG6+vv9PYOHhd/4sdQoK3oQc29oMJQ51hM3fcpx7TO/4kmUBiwvaSTA 6ZDMk4KCjjbF+Id4a2VyWkU//JI4h3hSPuIJzm+Vb1/S+MOvltrwjQTaeV+5f76o +9NN+8pF1nZCj+6sQvXhdXLuqG67+1ldtZKVmigK9+q2Jwnnx9K5Ytr+nWLT4U24 umt6NAU+SXvjs/18GtuXABtPmOIBF+AUdZZNUHb34oKXmehbSceSzdc= -----END CERTIFICATE-----Generated at Mon Mar 2 07:34:30 2026 by rpki-client