$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/62F71C75A752B45AE4B51A4E7010124979820A90.cer File: 62F71C75A752B45AE4B51A4E7010124979820A90.cer (raw, json) Hash identifier: cKkWtoDjtoFZKvwxXYW5qjaGw3hSWlVo8xz+yiLezak= Subject key identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 77FFE3DD442BCEF47733E07B3F9BDD7A7C6D7E1C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft caRepository: rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Mon 13 Apr 2026 04:52:33 +0000 Certificate not after: Mon 12 Apr 2027 04:57:33 +0000 Subordinate resources: IP: 157.66.192.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ff:e3:dd:44:2b:ce:f4:77:33:e0:7b:3f:9b:dd:7a:7c:6d:7e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 13 04:52:33 2026 GMT Not After : Apr 12 04:57:33 2027 GMT Subject: CN=62F71C75A752B45AE4B51A4E7010124979820A90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:f9:1d:41:c2:8b:ab:a2:a9:31:85:88:7c: 85:24:95:d3:23:76:e1:a8:53:0e:f7:cf:12:ab:2b: e5:38:ff:68:59:85:ce:a1:b7:01:96:f6:b5:df:05: ca:95:f4:ae:34:86:cf:db:4e:04:2f:3a:15:5c:17: ba:57:46:ee:87:32:52:79:73:49:03:c2:59:e6:45: 0d:8b:0d:13:8c:1d:32:66:53:8c:cf:c0:cf:8c:2f: 17:a8:a6:e9:9f:2c:a4:62:e7:19:3b:c8:1f:13:07: cd:36:4a:d2:33:db:44:d5:a4:a4:c5:1e:56:20:ed: 44:cc:fd:24:1c:ca:8a:c0:ee:0b:42:de:e7:08:fc: 1b:08:f8:81:7d:9f:28:07:3e:bf:1b:b6:02:ae:7d: 2f:4d:65:97:e3:c6:a5:77:7b:8a:28:82:d1:f4:0e: c1:bf:40:f8:9c:7d:08:b3:63:20:bd:ed:ec:5d:ae: fe:e8:57:97:c7:0e:47:27:ee:f9:f9:ec:4f:8b:d0: e3:50:75:b4:02:79:0a:fe:36:74:e7:0c:06:b6:20: b4:1b:b8:be:86:f3:9b:02:da:54:57:e7:69:5c:3f: d9:96:e1:f1:04:52:c3:a4:02:2e:0e:bf:70:48:d9: 1b:f6:1f:a6:b0:7c:bd:d3:19:a8:d0:c3:ab:52:2a: ec:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 62:F7:1C:75:A7:52:B4:5A:E4:B5:1A:4E:70:10:12:49:79:82:0A:90 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0de2d090-4766-475c-9cef-7beb585cf241/0/62F71C75A752B45AE4B51A4E7010124979820A90.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.192.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:d5:cd:f0:f3:17:f1:6d:52:f9:b6:44:82:aa:2c:17:67:7c: ef:3a:ff:78:f6:95:7a:75:b7:dc:5e:a9:55:6d:b7:2e:f3:f1: 5f:ad:4c:72:9e:1f:74:99:2e:5e:15:dd:25:a5:72:a1:4a:14: 20:6e:8c:64:11:87:fc:8c:71:1e:cd:7e:25:5e:05:fc:d4:4c: fc:dd:68:9f:8f:d2:62:b6:9a:70:67:91:65:99:28:93:28:46: 01:9d:43:0b:f2:89:4c:da:a1:63:9b:19:6b:a0:a6:0a:0f:ae: ec:71:48:47:da:22:76:d5:56:0b:02:e2:85:d0:18:58:03:38: 3f:de:88:d7:e7:ea:6c:b0:f1:1f:c6:00:d4:1a:95:4f:12:40: 39:d8:6b:13:67:60:15:9f:bf:5e:c9:d7:c7:7f:92:5c:43:37: ee:ed:d1:43:af:2b:80:77:7b:09:e8:7a:b5:6f:f0:08:eb:3c: d1:c1:f1:c9:cc:25:e5:45:a6:33:0d:42:45:f8:46:12:8c:f7: 68:5c:b3:90:2c:42:ac:51:a8:1e:48:37:28:84:69:68:3b:5f: 4a:26:c9:91:bc:77:29:87:0e:cf:10:33:88:ab:33:e8:8f:4c: 1a:88:73:cb:5c:35:ce:dd:f8:08:06:1f:6a:ed:f6:1c:ec:f0: 24:ca:e3:63 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUd//j3UQrzvR3M+B7P5vdenxtfhwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDQxMzA0NTIzM1oX DTI3MDQxMjA0NTczM1owMzExMC8GA1UEAxMoNjJGNzFDNzVBNzUyQjQ1QUU0QjUx QTRFNzAxMDEyNDk3OTgyMEE5MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALbf+R1BwouroqkxhYh8hSSV0yN24ahTDvfPEqsr5Tj/aFmFzqG3AZb2td8F ypX0rjSGz9tOBC86FVwXuldG7ocyUnlzSQPCWeZFDYsNE4wdMmZTjM/Az4wvF6im 6Z8spGLnGTvIHxMHzTZK0jPbRNWkpMUeViDtRMz9JBzKisDuC0Le5wj8Gwj4gX2f KAc+vxu2Aq59L01ll+PGpXd7iiiC0fQOwb9A+Jx9CLNjIL3t7F2u/uhXl8cORyfu +fnsT4vQ41B1tAJ5Cv42dOcMBrYgtBu4vobzmwLaVFfnaVw/2Zbh8QRSw6QCLg6/ cEjZG/YfprB8vdMZqNDDq1Iq7HECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFGL3HHWnUrRa5LUaTnAQEkl5ggqQMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZGUyZDA5MC00NzY2LTQ3NWMtOWNlZi03YmViNTg1Y2YyNDEvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBkZTJkMDkw LTQ3NjYtNDc1Yy05Y2VmLTdiZWI1ODVjZjI0MS8wLzYyRjcxQzc1QTc1MkI0NUFF NEI1MUE0RTcwMTAxMjQ5Nzk4MjBBOTAubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdQsAwDQYJKoZIhvcNAQELBQADggEBAEzVzfDzF/FtUvm2RIKqLBdnfO86/3j2 lXp1t9xeqVVtty7z8V+tTHKeH3SZLl4V3SWlcqFKFCBujGQRh/yMcR7NfiVeBfzU TPzdaJ+P0mK2mnBnkWWZKJMoRgGdQwvyiUzaoWObGWugpgoPruxxSEfaInbVVgsC 4oXQGFgDOD/eiNfn6myw8R/GANQalU8SQDnYaxNnYBWfv17J18d/klxDN+7t0UOv K4B3ewnoerVv8AjrPNHB8cnMJeVFpjMNQkX4RhKM92hcs5AsQqxRqB5INyiEaWg7 X0omyZG8dymHDs8QM4irM+iPTBqIc8tcNc7d+AgGH2rt9hzs8CTK42M= -----END CERTIFICATE-----Generated at Fri Apr 17 11:30:25 2026 by rpki-client