$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/1/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer File: 95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.cer (raw, json) Hash identifier: V3w5OVez+X8n4E5/U+zpffvkTIiHCxJ0v3UAiWMJMPk= Subject key identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 Authority key identifier: 60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 Certificate issuer: /CN=A91862140000/serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Certificate serial: 1C404DA0A268B468C1034F356367ACCFD749D7E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Manifest: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft caRepository: rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/ Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml Certificate not before: Fri 10 Apr 2026 01:40:01 +0000 Certificate not after: Fri 09 Apr 2027 01:45:01 +0000 Subordinate resources: IP: 160.19.88.0/24 Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:40:4d:a0:a2:68:b4:68:c1:03:4f:35:63:67:ac:cf:d7:49:d7:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862140000, serialNumber=60F8BE9C16625C424B269EE06C64A83BAB8506D4 Validity Not Before: Apr 10 01:40:01 2026 GMT Not After : Apr 9 01:45:01 2027 GMT Subject: CN=95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2e:de:d8:d6:a3:fd:6b:2a:24:1f:76:15:f4: c7:a3:0f:d8:6a:8b:44:d3:af:cd:c6:75:78:1f:7b: 17:f9:7c:4f:12:cd:ff:4d:55:3f:72:68:fa:6c:aa: e3:e5:83:49:a0:65:f8:df:41:61:a8:89:c8:30:c6: c6:4b:22:43:08:27:aa:f9:be:19:b9:c1:86:18:75: b3:3c:18:5e:c8:4c:a0:0d:b7:ba:4a:90:2d:aa:e0: 94:57:dd:01:4d:31:ba:0e:57:d6:a8:29:48:0e:27: 22:2e:96:b0:9d:8e:be:70:c7:0d:fe:27:da:8c:ba: 41:f3:1e:b1:39:ff:ae:55:d5:69:88:40:b1:83:f0: 9e:78:18:96:90:82:ce:c9:34:13:16:26:a2:bf:3f: cf:8c:0d:32:bb:78:dd:e6:b4:d5:64:b9:0e:9b:1d: e1:70:82:f3:9c:70:69:66:b2:fa:7c:1c:30:f5:d8: 5a:2f:10:79:d4:2c:5e:62:8f:0a:e8:50:88:94:63: 26:40:82:de:fe:d5:9f:77:33:88:66:45:6d:b6:90: 5f:0c:32:f5:bc:39:31:02:94:45:f6:e6:43:ca:3d: 10:f3:0c:81:1d:50:48:c5:bd:f5:03:28:13:21:b3: 18:06:82:47:1d:1c:5e:cc:bf:9e:6f:24:cf:05:97: 7d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 95:FA:C3:8A:5C:B2:CE:A3:E5:FF:E2:49:56:26:A7:BE:A3:28:D6:89 X509v3 Authority Key Identifier: keyid:60:F8:BE:9C:16:62:5C:42:4B:26:9E:E0:6C:64:A8:3B:AB:85:06:D4 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer Subject Information Access: CA Repository - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0 RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/84da415b-5f17-4602-9bd9-fd84ac2cae86/0/95FAC38A5CB2CEA3E5FFE2495626A7BEA328D689.mft RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.19.88.0/24 Signature Algorithm: sha256WithRSAEncryption 87:0a:cf:1a:2a:2c:a1:46:d1:79:cc:8f:0c:9e:89:57:3f:02: 97:b5:03:b1:60:c3:59:fe:4a:63:f4:3c:eb:b0:d7:33:c6:ac: 3d:d1:dd:b4:e5:39:50:ab:c1:6b:e9:e7:3a:3d:c0:36:49:9e: e9:db:b5:4e:a2:dd:0f:ab:1c:79:a5:b6:a0:8d:11:b0:2a:94: d0:4a:50:7d:fb:0c:05:d2:4f:3f:7e:15:09:75:3c:50:3d:a9: a7:91:4b:9c:d7:c7:44:8a:c1:5c:84:5e:83:d9:5a:30:0d:f4: 0a:3d:26:72:c6:ba:44:09:97:87:0b:a4:9b:f1:b7:3b:a0:61: c4:1d:2e:53:58:c1:64:ac:b9:c2:e9:64:77:bb:c9:b8:e2:96: 44:75:67:04:2f:13:91:d7:4d:fa:fe:a2:b0:b0:0e:e7:6e:ab: 88:fb:9b:b8:ad:33:21:bb:05:ec:8a:1c:2b:34:06:bd:b3:5b: 8b:7a:36:36:4c:90:26:80:b8:26:95:05:36:b7:39:a4:a9:ed: ad:3a:d2:f2:09:5b:02:5b:0a:10:c8:b0:32:df:b7:f0:fc:b5: 78:23:50:0c:ea:3f:06:dd:97:c3:ea:b5:8d:c4:73:59:36:88: 91:b5:23:b2:93:ec:fb:a4:9c:36:d5:2f:bb:34:88:0d:d1:be: 40:9d:b8:19 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIUHEBNoKJotGjBA081Y2esz9dJ1+YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyg2MEY4QkU5QzE2 NjI1QzQyNEIyNjlFRTA2QzY0QTgzQkFCODUwNkQ0MB4XDTI2MDQxMDAxNDAwMVoX DTI3MDQwOTAxNDUwMVowMzExMC8GA1UEAxMoOTVGQUMzOEE1Q0IyQ0VBM0U1RkZF MjQ5NTYyNkE3QkVBMzI4RDY4OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJwu3tjWo/1rKiQfdhX0x6MP2GqLRNOvzcZ1eB97F/l8TxLN/01VP3Jo+myq 4+WDSaBl+N9BYaiJyDDGxksiQwgnqvm+GbnBhhh1szwYXshMoA23ukqQLarglFfd AU0xug5X1qgpSA4nIi6WsJ2OvnDHDf4n2oy6QfMesTn/rlXVaYhAsYPwnngYlpCC zsk0ExYmor8/z4wNMrt43ea01WS5Dpsd4XCC85xwaWay+nwcMPXYWi8QedQsXmKP CuhQiJRjJkCC3v7Vn3cziGZFbbaQXwwy9bw5MQKURfbmQ8o9EPMMgR1QSMW99QMo EyGzGAaCRx0cXsy/nm8kzwWXfRsCAwEAAaOCArgwggK0MA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJX6w4pcss6j5f/iSVYmp76jKNaJMB8GA1UdIwQYMBaAFGD4 vpwWYlxCSyae4GxkqDurhQbUMA4GA1UdDwEB/wQEAwIBBjBpBgNVHR8EYjBgMF6g XKBahlhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8x LzYwRjhCRTlDMTY2MjVDNDI0QjI2OUVFMDZDNjRBODNCQUI4NTA2RDQuY3JsMH4G CCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5l dC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3QzcyRkQxRkYyL1lQ aS1uQlppWEVKTEpwN2diR1NvTzZ1RkJ0US5jZXIwggEpBggrBgEFBQcBCwSCARsw ggEXMFMGCCsGAQUFBzAFhkdyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVw by84NGRhNDE1Yi01ZjE3LTQ2MDItOWJkOS1mZDg0YWMyY2FlODYvMDCBgAYIKwYB BQUHMAqGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg0ZGE0MTVi LTVmMTctNDYwMi05YmQ5LWZkODRhYzJjYWU4Ni8wLzk1RkFDMzhBNUNCMkNFQTNF NUZGRTI0OTU2MjZBN0JFQTMyOEQ2ODkubWZ0MD0GCCsGAQUFBzANhjFodHRwczov L3JlcG8tcnBraS5pZG5pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACgE1gwDQYJKoZIhvcNAQELBQADggEBAIcKzxoqLKFG0XnMjwyeiVc/Ape1A7Fg w1n+SmP0POuw1zPGrD3R3bTlOVCrwWvp5zo9wDZJnunbtU6i3Q+rHHmltqCNEbAq lNBKUH37DAXSTz9+FQl1PFA9qaeRS5zXx0SKwVyEXoPZWjAN9Ao9JnLGukQJl4cL pJvxtzugYcQdLlNYwWSsucLpZHe7ybjilkR1ZwQvE5HXTfr+orCwDuduq4j7m7it MyG7BeyKHCs0Br2zW4t6NjZMkCaAuCaVBTa3OaSp7a060vIJWwJbChDIsDLft/D8 tXgjUAzqPwbdl8PqtY3Ec1k2iJG1I7KT7PuknDbVL7s0iA3RvkCduBk= -----END CERTIFICATE-----Generated at Fri Apr 17 10:11:31 2026 by rpki-client