$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer File: 84D5328962D0ADCA772ECA2A427E097F281CCEB4.cer (raw, json) Hash identifier: Y0yogMsZxXlz41V6oB3lV/BITLEYU0ZB4w2ry+z5Ze8= Subject key identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 2B903819A84C772BEC9FB1986ED2223372A6D0B1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft caRepository: rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Thu 16 Apr 2026 00:00:41 +0000 Certificate not after: Thu 15 Apr 2027 00:05:41 +0000 Subordinate resources: IP: 157.66.131.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:90:38:19:a8:4c:77:2b:ec:9f:b1:98:6e:d2:22:33:72:a6:d0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 16 00:00:41 2026 GMT Not After : Apr 15 00:05:41 2027 GMT Subject: CN=84D5328962D0ADCA772ECA2A427E097F281CCEB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:68:bf:09:50:3b:3c:cf:83:22:dd:3b:40:bd: 57:02:03:79:ae:66:ba:cf:70:e2:46:34:b0:3e:39: 1c:69:06:16:7e:ac:99:0f:71:1d:27:fd:86:e2:9a: 01:64:6b:19:a6:25:27:69:d3:1d:ec:14:8c:61:f9: 5d:a7:9b:14:b5:8a:26:76:19:55:60:b8:bf:16:7b: e5:6a:ed:d3:f8:5f:7e:27:c3:4a:4d:c2:c9:6a:b4: 4a:14:ad:f7:f3:f0:01:3a:d6:4d:c4:eb:f4:35:3a: 6b:2f:0b:b0:56:ca:35:a1:62:2c:17:4e:56:48:6f: f0:a4:56:39:b3:51:1d:76:32:ad:e6:a3:45:e4:ed: cb:63:5d:37:8a:39:03:6c:07:a6:88:49:93:8e:92: 37:60:df:7a:3b:74:73:92:ce:e9:ea:cf:b7:f0:70: 61:5a:53:cc:69:89:2f:5b:ec:6f:08:c4:9b:69:bb: 5c:de:dd:85:0a:87:f9:a0:d7:b7:79:f4:e7:10:4c: dc:54:cd:fa:74:13:0a:6b:4d:8f:bb:37:53:56:a4: f8:05:f2:e8:22:a1:b3:b6:93:0d:d9:1b:db:4d:de: 41:6e:3b:6b:a9:fa:93:99:1c:97:bd:ac:a3:99:23: 83:b2:0c:8d:6d:76:7d:88:59:c8:72:0e:51:9e:1c: ed:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 84:D5:32:89:62:D0:AD:CA:77:2E:CA:2A:42:7E:09:7F:28:1C:CE:B4 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/0f8d824d-d6a1-4543-9cf0-d9926832f29f/0/84D5328962D0ADCA772ECA2A427E097F281CCEB4.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.66.131.0/24 Signature Algorithm: sha256WithRSAEncryption 59:b5:38:ad:03:ff:3f:71:dc:a0:e4:d1:f0:05:c7:4c:23:11: 98:f8:9a:94:c9:b5:52:bc:89:e4:a7:45:70:ff:b2:18:50:16: af:90:32:87:5c:28:12:50:de:1f:60:dd:71:f1:05:37:0c:6b: 9f:10:fb:2a:1f:b1:3d:df:f2:9c:17:40:1d:a3:8c:9c:88:ef: 0b:cc:2e:bc:d5:31:0b:23:7b:d6:dc:f4:ce:d5:24:9b:44:ad: 48:ef:7c:eb:45:95:ac:b4:0c:07:da:bd:75:ae:a1:78:c4:02: 00:27:f7:00:a0:2d:6a:a0:d8:a2:21:9e:0c:73:51:11:23:1e: 36:8b:51:d3:be:66:e0:35:d2:80:58:0f:02:59:cf:cb:a9:36: d3:1c:b5:10:cc:51:85:a8:1a:3f:64:28:a3:8d:5b:c5:8c:3d: 15:d7:e3:a1:ff:68:69:5d:4d:30:79:3d:d2:d5:3b:44:8f:a5: f3:34:89:a2:1d:d3:8e:e1:f4:bf:64:7f:0a:92:b5:05:22:b4: 1c:f2:85:6b:51:5e:58:f6:b4:e6:47:18:ab:4a:cf:08:4e:e6: 7b:72:b4:3a:f2:ac:70:f0:22:c3:5a:76:0a:40:80:00:40:85: 2d:25:3d:0e:a6:ec:35:b3:10:7a:31:22:f4:40:9c:55:6e:ad: eb:7e:ef:ac -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUK5A4GahMdyvsn7GYbtIiM3Km0LEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDQxNjAwMDA0MVoX DTI3MDQxNTAwMDU0MVowMzExMC8GA1UEAxMoODRENTMyODk2MkQwQURDQTc3MkVD QTJBNDI3RTA5N0YyODFDQ0VCNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALpovwlQOzzPgyLdO0C9VwIDea5mus9w4kY0sD45HGkGFn6smQ9xHSf9huKa AWRrGaYlJ2nTHewUjGH5XaebFLWKJnYZVWC4vxZ75Wrt0/hffifDSk3CyWq0ShSt 9/PwATrWTcTr9DU6ay8LsFbKNaFiLBdOVkhv8KRWObNRHXYyreajReTty2NdN4o5 A2wHpohJk46SN2Dfejt0c5LO6erPt/BwYVpTzGmJL1vsbwjEm2m7XN7dhQqH+aDX t3n05xBM3FTN+nQTCmtNj7s3U1ak+AXy6CKhs7aTDdkb203eQW47a6n6k5kcl72s o5kjg7IMjW12fYhZyHIOUZ4c7UMCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFITVMoli0K3Kdy7KKkJ+CX8oHM60MB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by8wZjhkODI0ZC1kNmExLTQ1NDMtOWNmMC1kOTkyNjgzMmYyOWYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBmOGQ4MjRk LWQ2YTEtNDU0My05Y2YwLWQ5OTI2ODMyZjI5Zi8wLzg0RDUzMjg5NjJEMEFEQ0E3 NzJFQ0EyQTQyN0UwOTdGMjgxQ0NFQjQubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACdQoMwDQYJKoZIhvcNAQELBQADggEBAFm1OK0D/z9x3KDk0fAFx0wjEZj4mpTJ tVK8ieSnRXD/shhQFq+QModcKBJQ3h9g3XHxBTcMa58Q+yofsT3f8pwXQB2jjJyI 7wvMLrzVMQsje9bc9M7VJJtErUjvfOtFlay0DAfavXWuoXjEAgAn9wCgLWqg2KIh ngxzUREjHjaLUdO+ZuA10oBYDwJZz8upNtMctRDMUYWoGj9kKKONW8WMPRXX46H/ aGldTTB5PdLVO0SPpfM0iaId047h9L9kfwqStQUitBzyhWtRXlj2tOZHGKtKzwhO 5ntytDryrHDwIsNadgpAgABAhS0lPQ6m7DWzEHoxIvRAnFVuret+76w= -----END CERTIFICATE-----Generated at Fri Apr 17 10:57:23 2026 by rpki-client