$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer (raw, json) Hash identifier: TmgejcjK74hhskEDcSgNO6Yn2hpFGjaM4Qe+x7B82DQ= Subject key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 63B57A451FFB64621836D4C2B9055EA3B9DB0F1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft caRepository: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Wed 04 Feb 2026 04:52:45 +0000 Certificate not after: Wed 03 Feb 2027 04:57:45 +0000 Subordinate resources: IP: 157.10.63.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b5:7a:45:1f:fb:64:62:18:36:d4:c2:b9:05:5e:a3:b9:db:0f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 4 04:52:45 2026 GMT Not After : Feb 3 04:57:45 2027 GMT Subject: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fb:cb:f7:4c:2c:55:72:a7:ff:3a:e7:66:d4: 55:df:98:b1:f2:fd:29:07:4f:c9:b5:43:8e:a7:91: eb:09:dd:6a:e2:c3:4f:0f:23:60:61:53:a0:72:cc: 48:20:58:72:0e:68:a3:30:48:15:44:c4:b4:65:b0: 7c:53:67:61:81:5e:a5:9a:87:d6:88:1c:bb:1f:79: 04:23:0e:cb:0e:ff:86:29:4d:1b:74:31:71:65:35: ed:81:b2:70:0f:58:4b:92:fe:ed:c9:c3:52:69:f5: bf:a4:1b:80:ed:a7:b9:75:26:be:52:8f:21:79:6c: 82:68:a8:fb:e1:c7:8a:30:18:37:17:98:92:c4:df: ae:cd:78:55:14:35:e8:cb:bd:9d:40:a3:c6:52:bd: 6c:a8:5d:5b:7e:2b:53:a8:5b:b0:0a:a3:2e:c9:cb: 8f:0e:3a:87:14:2e:94:48:20:86:35:c1:49:52:83: fd:1f:53:3f:03:0f:a6:88:a7:e4:0d:76:34:89:35: 92:7e:dd:70:f7:eb:58:23:ad:ef:6f:06:b7:a0:42: 94:d4:08:72:a9:58:25:5c:1f:4f:a5:f0:3e:7c:c0: d1:45:27:0d:45:ab:5d:80:4a:5f:41:e0:29:e0:fe: ac:ae:b9:da:6a:52:1f:2f:bd:78:cd:8a:e7:44:a8: 5e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.10.63.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:bf:9b:e1:84:d4:2d:d9:59:92:80:f0:a2:ef:a3:de:17:87: 99:c4:fe:b5:38:8b:7b:c9:2d:7a:f0:4e:e7:b8:42:2e:da:15: c0:47:7c:78:57:2a:19:09:50:d7:2e:a9:1b:53:d6:d4:d6:0d: a2:da:5a:7f:ef:2d:9e:44:5c:2c:28:39:ba:af:1e:f7:a9:4b: f1:a7:88:69:7a:80:be:1c:7c:36:ac:2f:2d:ad:e2:06:6e:a3: fe:c3:4f:bc:78:ac:7c:9d:cd:f1:f0:cf:2f:1c:4d:76:c9:8a: be:61:94:fc:18:03:a7:56:82:5c:7f:93:fc:45:76:00:54:04: f5:73:5a:60:1e:42:77:1f:49:af:c4:f9:6e:b0:01:bb:5d:ef: d1:3c:9f:fb:08:d0:84:72:e6:8c:04:2b:91:d8:b8:7f:5f:bd: 0a:0c:9d:84:94:1d:b5:49:ee:e6:c0:8a:35:ff:b2:81:4c:a8: bd:5b:0f:34:f6:80:2a:7b:90:ca:c4:fc:e8:1d:45:20:56:b3: 05:e4:97:c5:f6:36:89:fd:31:df:93:49:f2:a9:c4:a9:af:3e: 5a:4b:ea:d7:49:60:5a:90:42:e9:93:37:ea:09:c5:f4:4b:ba: 57:4d:0f:ea:a1:6b:a4:67:b7:08:63:93:94:56:2e:a3:29:93: 53:59:be:3d -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUY7V6RR/7ZGIYNtTCuQVeo7nbDx0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDIwNDA0NTI0NVoX DTI3MDIwMzA0NTc0NVowMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlF MEYwRjE0NTQ2NkUwQkU1MkNCRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANf7y/dMLFVyp/8652bUVd+YsfL9KQdPybVDjqeR6wndauLDTw8jYGFToHLM SCBYcg5oozBIFUTEtGWwfFNnYYFepZqH1ogcux95BCMOyw7/hilNG3QxcWU17YGy cA9YS5L+7cnDUmn1v6QbgO2nuXUmvlKPIXlsgmio++HHijAYNxeYksTfrs14VRQ1 6Mu9nUCjxlK9bKhdW34rU6hbsAqjLsnLjw46hxQulEgghjXBSVKD/R9TPwMPpoin 5A12NIk1kn7dcPfrWCOt728Gt6BClNQIcqlYJVwfT6XwPnzA0UUnDUWrXYBKX0Hg KeD+rK652mpSHy+9eM2K50SoXhsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFEo3dkzIDRuKaBng8PFFRm4L5Sy9MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZkM2EyZmRm LWJjYmEtNDc1Ny1iMzY2LWUxYTBhZDJkMzc0YS8wLzRBMzc3NjRDQzgwRDFCOEE2 ODE5RTBGMEYxNDU0NjZFMEJFNTJDQkQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdCj8wDQYJKoZIhvcNAQELBQADggEBAE+/m+GE1C3ZWZKA8KLvo94Xh5nE/rU4 i3vJLXrwTue4Qi7aFcBHfHhXKhkJUNcuqRtT1tTWDaLaWn/vLZ5EXCwoObqvHvep S/GniGl6gL4cfDasLy2t4gZuo/7DT7x4rHydzfHwzy8cTXbJir5hlPwYA6dWglx/ k/xFdgBUBPVzWmAeQncfSa/E+W6wAbtd79E8n/sI0IRy5owEK5HYuH9fvQoMnYSU HbVJ7ubAijX/soFMqL1bDzT2gCp7kMrE/OgdRSBWswXkl8X2Non9Md+TSfKpxKmv PlpL6tdJYFqQQumTN+oJxfRLuldND+qha6Rntwhjk5RWLqMpk1NZvj0= -----END CERTIFICATE-----Generated at Mon Mar 2 09:48:12 2026 by rpki-client