$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer File: 4ED16B9231905A1C7A353DF749BF99487E69E313.cer (raw, json) Hash identifier: XCCVDNvWL1QUIyqMjGY5RZTMjlvmMAPgcY54QnZOfgE= Subject key identifier: 4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 19EF8D72E620076F7FCC74EA96DE81B02F07B7FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft caRepository: rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 03 Feb 2026 15:53:54 +0000 Certificate not after: Tue 02 Feb 2027 15:58:54 +0000 Subordinate resources: IP: 157.20.100.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ef:8d:72:e6:20:07:6f:7f:cc:74:ea:96:de:81:b0:2f:07:b7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 3 15:53:54 2026 GMT Not After : Feb 2 15:58:54 2027 GMT Subject: CN=4ED16B9231905A1C7A353DF749BF99487E69E313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ba:df:fd:d0:83:03:34:e7:f9:25:b6:05:6e: 71:c6:80:9f:ba:0a:31:e4:94:ba:01:ad:68:da:40: bd:5e:4a:0d:d8:c0:ef:14:0e:20:20:0c:94:ed:ff: 6a:4f:39:52:93:fd:46:eb:01:53:df:85:65:2c:b4: 41:64:7b:07:4b:e6:23:ed:7a:f5:97:67:49:44:26: c9:71:78:b5:c7:8a:17:52:48:06:4a:c2:79:15:dd: fd:e5:7d:9c:ca:67:02:1a:27:fc:be:db:59:96:c7: be:79:ba:3b:bc:24:8e:4c:d7:05:f5:b0:fd:77:39: cc:4f:07:a6:42:c9:18:72:3f:ce:fe:4c:a4:3a:cd: e0:15:9c:3f:44:a6:04:fe:76:32:a4:ca:aa:c7:b9: 17:0a:7d:37:06:84:94:0e:87:02:81:13:aa:fe:72: a4:a9:e6:2d:83:31:e8:de:64:5e:ee:b8:66:9d:33: 7c:e2:dd:6e:f7:68:9b:0e:64:8d:16:53:ba:53:13: 76:00:1b:09:80:c0:3e:77:46:cb:b2:2f:ab:c3:84: fe:38:f5:07:e6:52:81:55:8e:0a:67:fc:aa:92:cf: 40:bf:5d:6a:57:a8:a3:a2:52:9e:ec:e9:71:2f:3f: f8:f3:57:a6:90:8c:f3:cc:05:79:81:55:8c:a1:5c: 9c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.100.0/24 Signature Algorithm: sha256WithRSAEncryption 86:4d:50:f4:5e:f0:a9:b2:26:6d:77:6e:b5:3c:01:76:38:f5: 84:f3:23:33:b0:0f:13:11:2c:bd:c5:ef:92:f8:c8:5c:1d:ec: 8e:d9:5c:19:ee:c4:c2:90:ae:c5:55:0d:04:a7:88:02:eb:fc: 4e:52:e7:c5:f0:65:e5:ea:11:ec:73:8e:60:2b:f2:ae:7a:34: 3d:88:c1:4b:55:13:f4:ce:77:85:e4:db:45:7e:fb:88:a8:51: 58:7f:ec:1e:bc:8f:cf:18:7b:fb:30:2c:e1:65:b8:58:be:f1: a8:c4:5d:50:9b:8e:29:cc:b6:8f:5f:45:14:69:2d:97:76:f4: 05:5d:d3:4c:53:a1:ca:31:81:9b:ba:ad:d9:a7:11:63:56:f6: 2d:80:f5:1e:ca:f2:46:ab:c6:8f:14:67:a4:ed:2a:ac:f1:02: ee:a5:58:0d:ce:89:d3:2e:e1:9e:53:98:87:28:83:7c:07:73: 4f:b3:9c:78:48:08:92:eb:5c:62:52:68:1f:7e:59:e5:82:86: b2:0e:1c:5e:3b:cb:b1:39:1e:8b:af:43:73:e5:50:f1:00:ea: 7e:7f:e8:e7:ae:35:02:b9:8b:83:6f:d7:99:e8:fb:cd:ab:5b: ef:af:42:46:53:7e:cc:73:2e:75:5f:f4:73:63:e2:23:ea:9a: 3e:bd:fd:e6 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUGe+NcuYgB29/zHTqlt6BsC8Ht/0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDIwMzE1NTM1NFoX DTI3MDIwMjE1NTg1NFowMzExMC8GA1UEAxMoNEVEMTZCOTIzMTkwNUExQzdBMzUz REY3NDlCRjk5NDg3RTY5RTMxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKe63/3QgwM05/kltgVuccaAn7oKMeSUugGtaNpAvV5KDdjA7xQOICAMlO3/ ak85UpP9RusBU9+FZSy0QWR7B0vmI+169ZdnSUQmyXF4tceKF1JIBkrCeRXd/eV9 nMpnAhon/L7bWZbHvnm6O7wkjkzXBfWw/Xc5zE8HpkLJGHI/zv5MpDrN4BWcP0Sm BP52MqTKqse5Fwp9NwaElA6HAoETqv5ypKnmLYMx6N5kXu64Zp0zfOLdbvdomw5k jRZTulMTdgAbCYDAPndGy7Ivq8OE/jj1B+ZSgVWOCmf8qpLPQL9daleoo6JSnuzp cS8/+PNXppCM88wFeYFVjKFcnC8CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFE7Ra5IxkFocejU990m/mUh+aeMTMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9hYjg4ZDJjYS0yMjliLTRhYWMtOWI1Yy00MmMxNTEwNWJiODIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FiODhkMmNh LTIyOWItNGFhYy05YjVjLTQyYzE1MTA1YmI4Mi8wLzRFRDE2QjkyMzE5MDVBMUM3 QTM1M0RGNzQ5QkY5OTQ4N0U2OUUzMTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdFGQwDQYJKoZIhvcNAQELBQADggEBAIZNUPRe8KmyJm13brU8AXY49YTzIzOw DxMRLL3F75L4yFwd7I7ZXBnuxMKQrsVVDQSniALr/E5S58XwZeXqEexzjmAr8q56 ND2IwUtVE/TOd4Xk20V++4ioUVh/7B68j88Ye/swLOFluFi+8ajEXVCbjinMto9f RRRpLZd29AVd00xTocoxgZu6rdmnEWNW9i2A9R7K8karxo8UZ6TtKqzxAu6lWA3O idMu4Z5TmIcog3wHc0+znHhICJLrXGJSaB9+WeWChrIOHF47y7E5HouvQ3PlUPEA 6n5/6OeuNQK5i4Nv15no+82rW++vQkZTfsxzLnVf9HNj4iPqmj69/eY= -----END CERTIFICATE-----Generated at Mon Mar 2 09:46:02 2026 by rpki-client