$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer (raw, json) Hash identifier: S3v28A23K/h+89MELRmnn2xv+L3HS3Z+zt8Xls3sSg0= Subject key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 70ABA3E3E6079FDEEC07945A875FD48FF2871DBF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft caRepository: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 30 Jan 2026 23:12:10 +0000 Certificate not after: Fri 29 Jan 2027 23:17:10 +0000 Subordinate resources: IP: 157.15.44.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ab:a3:e3:e6:07:9f:de:ec:07:94:5a:87:5f:d4:8f:f2:87:1d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Jan 30 23:12:10 2026 GMT Not After : Jan 29 23:17:10 2027 GMT Subject: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:47:af:46:af:6e:1c:52:a4:5a:90:60:13:02: 56:69:62:b9:7b:0c:e7:7e:fa:64:76:27:3c:b2:75: 66:66:ac:e2:86:0b:82:90:7c:e8:3b:e0:fa:c1:4c: 69:13:fb:b6:01:32:62:ea:9c:e3:93:e2:e8:3d:6c: 32:54:1c:a1:65:ce:cc:a3:62:5a:cd:fd:29:b9:96: 5e:84:87:f6:5a:0b:63:3e:06:0c:ca:3e:22:dd:fc: 6a:0d:4d:fe:5a:e1:fb:97:c2:e1:eb:b9:7b:e4:d7: a1:25:22:92:6b:56:c9:5c:5e:f3:1f:3b:0c:96:f4: 5c:82:c7:3c:80:d2:83:8b:e8:77:48:5c:79:62:f5: f7:d2:5c:a5:2b:1c:ea:2a:a7:4a:e9:b5:64:c3:7f: c9:2e:dd:07:3c:95:d0:be:53:48:9e:35:9c:32:d4: 88:db:ae:4d:7b:b5:28:ba:72:f0:98:23:ba:71:70: d5:4d:4f:2a:6b:e3:b8:fd:ad:16:76:93:35:7a:81: ef:c5:19:d6:6b:6a:e3:d0:3a:76:54:7d:9b:63:d0: b4:74:d3:ce:61:fb:97:ec:46:80:01:33:46:2d:44: 9f:39:95:cb:df:06:9e:93:bc:5b:76:13:67:39:05: eb:5f:2c:3d:d2:6b:b8:26:76:7c:a8:9a:6f:5b:52: d1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.15.44.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:eb:74:68:f4:e2:61:fa:b7:47:70:98:5e:95:79:cb:71:d4: 97:72:86:f5:b4:28:7b:26:bc:34:c5:40:dc:d0:5c:6f:cd:61: 4b:64:b6:6b:ff:3f:e4:c0:43:01:af:4b:4e:da:25:d9:3c:6b: 74:82:54:b3:4a:c2:12:e3:31:88:e6:6c:6a:cb:dd:91:08:d0: ae:00:58:0a:96:5c:4d:8b:07:90:1e:d0:4e:64:2f:6e:29:9a: a4:e7:1a:0e:04:19:80:63:8a:29:73:40:11:29:3c:23:fd:9c: d6:b3:93:33:f7:c7:c4:b4:86:b8:70:4f:4c:e4:e0:35:e3:f6: b0:8f:17:f2:c8:15:a0:1f:c4:1a:89:c2:f6:5a:d8:34:bc:99: 95:6d:d9:0a:8e:e3:5c:a2:66:09:f7:dc:d3:78:1a:32:43:c5: 27:bc:d9:f9:23:58:fc:80:14:8d:9b:04:0d:40:98:f8:9a:f3: a1:83:02:24:36:7e:4c:65:52:c3:76:2d:c0:62:ed:67:77:3f: e0:ab:84:fa:a5:ac:80:26:d9:89:40:9b:f5:ae:40:41:3a:89: 69:da:eb:29:68:23:4b:bd:ff:ab:b7:a9:f1:ba:10:a3:46:06: 94:96:c8:b1:b8:73:e6:13:66:d9:26:10:ef:a0:93:91:fa:c1: 5d:70:ef:f8 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUcKuj4+YHn97sB5Rah1/Uj/KHHb8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDEzMDIzMTIxMFoX DTI3MDEyOTIzMTcxMFowMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJB ODgzMzBBOTVGNjQxMEEzRUIxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMhHr0avbhxSpFqQYBMCVmliuXsM5376ZHYnPLJ1Zmas4oYLgpB86Dvg+sFM aRP7tgEyYuqc45Pi6D1sMlQcoWXOzKNiWs39KbmWXoSH9loLYz4GDMo+It38ag1N /lrh+5fC4eu5e+TXoSUikmtWyVxe8x87DJb0XILHPIDSg4vod0hceWL199JcpSsc 6iqnSum1ZMN/yS7dBzyV0L5TSJ41nDLUiNuuTXu1KLpy8JgjunFw1U1PKmvjuP2t FnaTNXqB78UZ1mtq49A6dlR9m2PQtHTTzmH7l+xGgAEzRi1EnzmVy98GnpO8W3YT ZzkF618sPdJruCZ2fKiab1tS0d0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEYXJy7odbVc1fKogzCpX2QQo+sbMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by85ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlmZGFmMDZh LWY2MjQtNDJjZi1iYjE5LWI2YmJmOTMxYWFjOC8wLzQ2MTcyNzJFRTg3NUI1NUNE NUYyQTg4MzMwQTk1RjY0MTBBM0VCMUIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdDywwDQYJKoZIhvcNAQELBQADggEBABzrdGj04mH6t0dwmF6Vectx1JdyhvW0 KHsmvDTFQNzQXG/NYUtktmv/P+TAQwGvS07aJdk8a3SCVLNKwhLjMYjmbGrL3ZEI 0K4AWAqWXE2LB5Ae0E5kL24pmqTnGg4EGYBjiilzQBEpPCP9nNazkzP3x8S0hrhw T0zk4DXj9rCPF/LIFaAfxBqJwvZa2DS8mZVt2QqO41yiZgn33NN4GjJDxSe82fkj WPyAFI2bBA1AmPia86GDAiQ2fkxlUsN2LcBi7Wd3P+CrhPqlrIAm2YlAm/WuQEE6 iWna6yloI0u9/6u3qfG6EKNGBpSWyLG4c+YTZtkmEO+gk5H6wV1w7/g= -----END CERTIFICATE-----Generated at Mon Mar 2 08:02:18 2026 by rpki-client