$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer File: 77ACF18F5317E7A202E583C3C59C223234FA2D8B.cer (raw, json) Hash identifier: pMQZTeFe8qBLVbV3Uu9YV3jAqkE1Hub16CcIo76mZgM= Subject key identifier: 77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 74C0BA6BB6F3220BFEA0CF95AF1C6D7F29840680 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft caRepository: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Tue 24 Feb 2026 22:12:20 +0000 Certificate not after: Tue 23 Feb 2027 22:17:20 +0000 Subordinate resources: IP: 157.20.204.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c0:ba:6b:b6:f3:22:0b:fe:a0:cf:95:af:1c:6d:7f:29:84:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 24 22:12:20 2026 GMT Not After : Feb 23 22:17:20 2027 GMT Subject: CN=77ACF18F5317E7A202E583C3C59C223234FA2D8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6a:25:9a:c8:47:ff:99:dc:28:66:93:03:5f: d3:01:79:6f:15:d1:0a:06:62:89:27:48:25:1e:9f: 70:c5:06:57:26:36:4c:6e:93:59:e4:d7:ab:c6:3a: b4:b9:db:e4:4a:c0:08:4b:fc:85:54:5e:64:88:7b: a9:f9:ca:cb:60:d4:6e:91:98:c6:aa:ad:75:80:df: fd:c7:35:ab:c3:14:9e:1e:5a:f9:6e:80:2e:b2:a0: e4:d0:62:04:b9:ec:b4:09:00:8f:18:3d:da:e0:93: d9:66:03:25:79:db:e0:a7:e8:20:32:45:e0:cc:e9: 38:35:00:0b:49:31:d2:50:c3:0f:e3:e1:a2:5c:fb: c6:7c:a5:d1:d1:4c:bf:69:46:a0:6d:d8:6b:1a:9b: 3e:53:ac:e6:13:19:87:d7:0a:33:96:72:4b:98:36: 66:3f:15:c9:21:d5:f5:65:c3:86:0d:1b:55:a1:40: eb:d2:5b:63:32:07:43:ae:dd:1f:85:1c:bc:13:19: e4:8f:d4:da:b9:a0:22:04:d5:5b:67:10:f4:f1:ec: 92:7e:cf:39:1b:2a:16:b5:f0:d4:f6:e0:6e:0d:26: ef:ad:51:0b:fa:16:1c:56:84:3d:fb:73:a2:f2:88: 37:fe:b8:52:65:9d:8e:e7:c1:b7:0b:a8:b5:86:ad: 88:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 77:AC:F1:8F:53:17:E7:A2:02:E5:83:C3:C5:9C:22:32:34:FA:2D:8B X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/0/77ACF18F5317E7A202E583C3C59C223234FA2D8B.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.204.0/23 Signature Algorithm: sha256WithRSAEncryption 62:6d:71:90:8e:f0:9e:8f:ec:89:6c:d9:e1:ae:54:cd:36:07: e8:e5:39:a4:b5:8e:62:d1:2e:c3:62:34:a2:62:96:bd:d4:4d: ac:50:99:59:ee:be:4f:71:81:02:0a:58:83:9c:ee:30:a6:b3: 8d:c0:61:ed:3c:7e:62:86:64:44:af:3e:80:07:d4:9c:cf:83: c3:60:04:43:13:9c:22:ef:9a:01:c4:71:d2:09:70:be:e7:cc: a1:cc:e6:6a:69:e0:60:b8:fa:43:19:a3:3e:68:11:87:d4:dc: ea:df:31:0a:dc:38:e5:80:a3:60:53:9d:98:79:50:aa:ab:6a: 83:1b:93:49:19:6a:e4:23:a3:a9:56:ef:05:73:93:34:21:6f: 07:e8:c1:fd:be:0f:8b:c2:8b:b2:5e:d3:c0:ec:6a:c2:d4:03: 88:82:00:53:0f:bd:6c:1c:2f:12:ad:9e:a2:39:7d:c1:34:d6: 90:2f:17:e5:45:61:6b:1c:27:b1:31:a9:6c:be:98:5c:db:ea: 67:cd:43:22:34:fb:4b:75:fb:a8:1a:9b:0b:17:20:64:88:49: 70:bf:f7:a6:73:4e:fb:47:39:c4:99:75:a5:2d:f3:a1:d1:d0: 4b:84:df:a0:f1:76:90:bf:a0:5e:e2:10:69:de:61:8e:e5:98: 15:f1:c5:fc -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUdMC6a7bzIgv+oM+VrxxtfymEBoAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDIyNDIyMTIyMFoX DTI3MDIyMzIyMTcyMFowMzExMC8GA1UEAxMoNzdBQ0YxOEY1MzE3RTdBMjAyRTU4 M0MzQzU5QzIyMzIzNEZBMkQ4QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK9qJZrIR/+Z3ChmkwNf0wF5bxXRCgZiiSdIJR6fcMUGVyY2TG6TWeTXq8Y6 tLnb5ErACEv8hVReZIh7qfnKy2DUbpGYxqqtdYDf/cc1q8MUnh5a+W6ALrKg5NBi BLnstAkAjxg92uCT2WYDJXnb4KfoIDJF4MzpODUAC0kx0lDDD+Pholz7xnyl0dFM v2lGoG3YaxqbPlOs5hMZh9cKM5ZyS5g2Zj8VySHV9WXDhg0bVaFA69JbYzIHQ67d H4UcvBMZ5I/U2rmgIgTVW2cQ9PHskn7PORsqFrXw1Pbgbg0m761RC/oWHFaEPftz ovKIN/64UmWdjufBtwuotYatiI0CAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHes8Y9TF+eiAuWDw8WcIjI0+i2LMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by81ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkODIzYmIz LTVhMDEtNDY1OC1hNzgzLWY4ZTg5ZmFkY2Y0NS8wLzc3QUNGMThGNTMxN0U3QTIw MkU1ODNDM0M1OUMyMjMyMzRGQTJEOEIubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFMwwDQYJKoZIhvcNAQELBQADggEBAGJtcZCO8J6P7Ils2eGuVM02B+jlOaS1 jmLRLsNiNKJilr3UTaxQmVnuvk9xgQIKWIOc7jCms43AYe08fmKGZESvPoAH1JzP g8NgBEMTnCLvmgHEcdIJcL7nzKHM5mpp4GC4+kMZoz5oEYfU3OrfMQrcOOWAo2BT nZh5UKqraoMbk0kZauQjo6lW7wVzkzQhbwfowf2+D4vCi7Je08DsasLUA4iCAFMP vWwcLxKtnqI5fcE01pAvF+VFYWscJ7ExqWy+mFzb6mfNQyI0+0t1+6gamwsXIGSI SXC/96ZzTvtHOcSZdaUt86HR0EuE36DxdpC/oF7iEGneYY7lmBXxxfw= -----END CERTIFICATE-----Generated at Mon Mar 2 08:01:23 2026 by rpki-client