$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer File: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer (raw, json) Hash identifier: 73y9LGvD+TtzJCChOPccaKbwJ3P/pgGuKbOWtMG61RI= Subject key identifier: 7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1CBF7ABBCAB187566381B07477340818D5C1B039 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft caRepository: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 05 Feb 2026 13:02:53 +0000 Certificate not after: Thu 04 Feb 2027 13:07:53 +0000 Subordinate resources: IP: 157.20.212.0/23 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:bf:7a:bb:ca:b1:87:56:63:81:b0:74:77:34:08:18:d5:c1:b0:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Feb 5 13:02:53 2026 GMT Not After : Feb 4 13:07:53 2027 GMT Subject: CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:dc:00:cd:cb:f9:15:95:5a:84:02:aa:99: 6b:67:f7:45:84:26:7f:3a:b8:ec:d3:bc:8d:bb:7d: 4f:32:ec:39:ec:75:08:3b:70:98:e5:a3:5f:b8:d5: 6e:50:8e:8a:ce:be:6c:cd:97:e3:02:eb:f0:d5:97: f0:30:c9:da:96:b3:13:e0:ac:72:6c:06:59:c1:30: ca:86:a4:d7:ae:62:fb:49:28:81:db:43:c6:7d:4a: 37:2b:ea:8d:eb:11:52:75:33:5e:15:a1:0a:5c:60: df:f8:41:80:7d:9d:65:c3:ee:54:62:57:ea:1a:3b: e1:a4:65:62:70:05:39:29:6c:e8:57:eb:dd:d3:58: e9:b8:56:7c:37:3e:98:d4:67:c8:f2:c8:66:e8:5c: 95:af:72:ec:8d:4f:a4:73:a0:0d:02:9b:af:12:4f: 1c:7f:1e:0b:6a:56:cc:0c:88:ad:d9:76:30:f4:be: 85:80:02:94:54:7a:be:80:80:44:25:72:f5:ee:d8: f1:75:8f:33:fa:2e:26:e1:48:35:df:19:c0:3c:cb: 1f:ef:ea:09:70:03:8f:43:c8:c5:19:36:98:9f:46: 4f:ea:86:fe:36:9b:b0:0d:c9:ad:73:5e:a9:ce:a4: d4:df:24:b5:a7:b1:5c:10:c6:5b:52:f0:af:dc:44: 28:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.20.212.0/23 Signature Algorithm: sha256WithRSAEncryption 56:e2:2c:03:6e:f7:15:08:4e:43:bc:3d:8b:5e:54:82:df:1a: 05:f2:24:4b:45:58:08:11:36:fa:a3:e5:bb:c3:53:5b:32:cc: 65:a4:a4:6e:6d:05:97:44:90:50:59:65:20:ce:d6:c9:5f:df: 15:61:42:a5:82:6f:59:6d:9c:6a:41:2e:8a:b4:2c:ab:65:7c: 81:a1:a4:82:d1:d5:f4:42:27:23:12:43:0e:24:10:d4:45:75: 1e:5d:95:e5:05:49:a5:cc:0c:cd:cd:7c:3e:39:4b:cb:85:93: 74:e4:bf:8f:45:8e:ca:fe:20:56:7b:9f:5f:88:0c:f4:51:a0: e7:85:e4:9a:fc:92:b7:9e:00:7d:bb:cd:5b:37:b8:f2:27:f7: 74:f2:a7:a3:2a:02:8d:a3:71:a2:54:d3:ed:73:87:dd:46:80: 59:87:f1:68:d0:da:32:3d:d0:12:e2:0e:59:50:4a:bf:fb:d0: 30:ac:18:e4:47:2b:3d:db:18:66:46:07:e6:73:6d:04:17:6b: 8f:60:e8:56:ca:42:ce:1f:b5:a3:b7:91:b4:7e:0c:39:4f:b3: 9d:0b:05:91:e1:b1:9e:84:88:e4:d8:4b:2f:6a:21:4e:ed:fc: 82:85:18:83:e5:af:f8:de:8f:64:fd:2f:a1:71:e3:88:ca:6c: 95:58:c5:96 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHL96u8qxh1ZjgbB0dzQIGNXBsDkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDIwNTEzMDI1M1oX DTI3MDIwNDEzMDc1M1owMzExMC8GA1UEAxMoN0M0RUFDQjZBOEM4QzcyNzZENENF Qjg2RENEQ0EzRTdGNDY4QTc5MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALx33ADNy/kVlVqEAqqZa2f3RYQmfzq47NO8jbt9TzLsOex1CDtwmOWjX7jV blCOis6+bM2X4wLr8NWX8DDJ2pazE+CscmwGWcEwyoak165i+0kogdtDxn1KNyvq jesRUnUzXhWhClxg3/hBgH2dZcPuVGJX6ho74aRlYnAFOSls6Ffr3dNY6bhWfDc+ mNRnyPLIZuhcla9y7I1PpHOgDQKbrxJPHH8eC2pWzAyIrdl2MPS+hYAClFR6voCA RCVy9e7Y8XWPM/ouJuFINd8ZwDzLH+/qCXADj0PIxRk2mJ9GT+qG/jabsA3JrXNe qc6k1N8ktaexXBDGW1Lwr9xEKJECAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFHxOrLaoyMcnbUzrhtzco+f0aKeTMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by9mM2I0N2FiNi1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzYjQ3YWI2 LWQxZjEtNGQyZS05Y2ZjLTgwODRhNGJhY2YwYi8wLzdDNEVBQ0I2QThDOEM3Mjc2 RDRDRUI4NkRDRENBM0U3RjQ2OEE3OTMubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGdFNQwDQYJKoZIhvcNAQELBQADggEBAFbiLANu9xUITkO8PYteVILfGgXyJEtF WAgRNvqj5bvDU1syzGWkpG5tBZdEkFBZZSDO1slf3xVhQqWCb1ltnGpBLoq0LKtl fIGhpILR1fRCJyMSQw4kENRFdR5dleUFSaXMDM3NfD45S8uFk3Tkv49Fjsr+IFZ7 n1+IDPRRoOeF5Jr8kreeAH27zVs3uPIn93Typ6MqAo2jcaJU0+1zh91GgFmH8WjQ 2jI90BLiDllQSr/70DCsGORHKz3bGGZGB+ZzbQQXa49g6FbKQs4ftaO3kbR+DDlP s50LBZHhsZ6EiOTYSy9qIU7t/IKFGIPlr/jej2T9L6Fx44jKbJVYxZY= -----END CERTIFICATE-----Generated at Mon Mar 2 08:02:05 2026 by rpki-client